Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/6f433b-dc32-45a2-979e-ff143368753f/1/6lXf0TAh1YVf8ZRTSTPNfWys1s8.mft
File: 6lXf0TAh1YVf8ZRTSTPNfWys1s8.mft (raw, json)
Hash identifier: c2MC7PeEDdYXPxOvWWSpudB+MAe4SoGDJqug1/cXzOM=
Subject key identifier: 9A:B8:1A:40:5E:FD:36:89:12:1B:85:71:EF:26:1E:CC:F5:ED:CA:71
Authority key identifier: EA:55:DF:D1:30:21:D5:85:5F:F1:94:53:49:33:CD:7D:6C:AC:D6:CF
Certificate issuer: /CN=ea55dfd13021d5855ff194534933cd7d6cacd6cf
Certificate serial: 019A4EF543CF042C93B65CD8563C5B1C33A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6lXf0TAh1YVf8ZRTSTPNfWys1s8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/6f433b-dc32-45a2-979e-ff143368753f/1/6lXf0TAh1YVf8ZRTSTPNfWys1s8.mft
Manifest number: 1710
Signing time: Tue 04 Nov 2025 13:01:27 +0000
Manifest this update: Tue 04 Nov 2025 13:01:27 +0000
Manifest next update: Wed 05 Nov 2025 13:01:27 +0000
Files and hashes: 1: 6lXf0TAh1YVf8ZRTSTPNfWys1s8.crl (hash: N7BWQUzqoYoabSdtxV1L18qtsG8VTyPYM9GghEcF0HA=)
2: DIYTcQL0kTTU2q4HEzGujm0gUwo.roa (hash: RDp4zi/HUT9tIKN8ofgNKdiyOgNtG9lWPQ4C3eVO32Y=)
3: uL0oA5oOVHGz1EKQthaeZ4nofOI.roa (hash: Ukj6KTn0iYnjxnepezeV1ye/hQ4gCPQyF7UCJwJgWx0=)
4: xEVUwNoistpr086p8wiZOj3lAS0.roa (hash: jssBpk2I1njjei0F0mwFNz5A15Y3I0c8WhHM6GhLppA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/6f433b-dc32-45a2-979e-ff143368753f/1/6lXf0TAh1YVf8ZRTSTPNfWys1s8.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/6f433b-dc32-45a2-979e-ff143368753f/1/6lXf0TAh1YVf8ZRTSTPNfWys1s8.mft
rsync://rpki.ripe.net/repository/DEFAULT/6lXf0TAh1YVf8ZRTSTPNfWys1s8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:43:cf:04:2c:93:b6:5c:d8:56:3c:5b:1c:33:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea55dfd13021d5855ff194534933cd7d6cacd6cf
Validity
Not Before: Nov 4 13:01:27 2025 GMT
Not After : Nov 5 13:01:27 2025 GMT
Subject: CN=9ab81a405efd3689121b8571ef261eccf5edca71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e6:00:51:66:f2:26:eb:2f:cb:ce:e7:b0:29:
14:65:db:00:11:fc:7a:5f:ff:c9:cd:4b:ec:a1:99:
60:9f:8d:1b:00:de:0d:7b:04:93:eb:03:17:ec:e3:
90:40:90:e6:3f:9b:9e:6d:3c:d7:e4:cd:1e:4e:36:
70:2d:d9:f7:06:e5:5b:b7:5b:dc:13:1d:39:b3:dc:
b4:44:1b:eb:61:93:88:73:d5:01:66:c1:4d:3e:b2:
26:25:b1:52:80:91:5a:f8:8f:a7:f7:94:15:06:84:
36:2e:fa:1b:0b:17:91:b2:65:37:64:f6:de:a7:36:
0c:cf:29:5c:58:e1:b6:7e:6f:9c:3c:30:6e:64:c3:
d3:e8:89:c4:e6:f9:b7:08:ac:53:f5:45:9b:b2:b7:
b6:bc:b0:62:de:e0:a4:42:7b:f1:1a:31:f4:38:e5:
a0:6e:f6:b9:b4:7c:f2:45:2c:59:09:cc:da:cd:c1:
73:a1:fe:1b:50:18:79:5f:39:25:db:d7:df:e0:d9:
8c:4e:6a:a7:34:9a:3a:bb:1b:5c:a5:94:39:f9:e9:
89:46:61:11:98:cc:fd:0d:4a:fe:a5:a0:18:69:7d:
b0:a1:29:6f:b1:4f:3f:bd:f8:96:19:a5:40:49:87:
9c:0d:e8:49:53:9a:3b:9a:cc:89:76:be:0b:58:27:
af:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:B8:1A:40:5E:FD:36:89:12:1B:85:71:EF:26:1E:CC:F5:ED:CA:71
X509v3 Authority Key Identifier:
keyid:EA:55:DF:D1:30:21:D5:85:5F:F1:94:53:49:33:CD:7D:6C:AC:D6:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6lXf0TAh1YVf8ZRTSTPNfWys1s8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/6f433b-dc32-45a2-979e-ff143368753f/1/6lXf0TAh1YVf8ZRTSTPNfWys1s8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/6f433b-dc32-45a2-979e-ff143368753f/1/6lXf0TAh1YVf8ZRTSTPNfWys1s8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:6c:79:82:bb:ad:d2:7e:41:05:b3:6b:47:a1:28:12:15:7b:
3a:4a:6b:38:1a:15:85:c8:1f:fc:54:9c:c3:47:2e:af:7b:32:
95:26:b5:cd:40:6f:3d:34:34:67:65:41:9c:1e:59:77:8d:f5:
6d:25:bb:02:0e:9a:02:80:d3:d5:15:22:5d:90:4c:92:5d:32:
69:7d:59:b0:29:7a:3f:23:f8:2e:c9:cb:68:88:1c:9d:ce:4c:
93:7d:47:e6:bc:b5:52:5d:56:4d:8f:26:46:e3:3a:f5:50:63:
7b:d3:d6:98:9b:88:73:26:73:9f:e3:5b:67:c4:29:65:a8:a9:
b7:25:f6:1d:9f:59:d2:df:a2:98:d5:73:62:9d:cf:34:7d:4c:
a7:ee:a4:da:3f:a5:a6:ad:89:83:bb:ab:b6:fd:7c:60:0b:87:
b7:2b:ab:84:c9:e6:c9:24:db:fa:e0:00:33:9c:0a:42:2d:ec:
81:db:d1:f8:ae:4a:d1:c8:d8:a0:7e:a3:01:60:58:ce:52:d3:
09:08:dc:e9:ca:cc:c7:7b:46:45:25:63:f6:5a:92:c8:88:1d:
16:05:05:b2:85:3b:ef:44:59:f9:10:c3:80:d8:ab:4f:a1:57:
d9:11:cf:e0:c4:d8:3f:10:11:05:90:ad:2b:d9:41:69:9d:51:
d4:62:95:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:00:58 2025 by rpki-client