Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/db1a47-b264-4d26-9e60-e726d0d98052/1/6TE2tEX7oczB9DxDWQ6b2aWqUYI.mft
File: 6TE2tEX7oczB9DxDWQ6b2aWqUYI.mft (raw, json)
Hash identifier: glXHP983Oa4gexJLiz+OUZQVOU7XYTKaOr3ZMbfBH/8=
Subject key identifier: 8A:1C:A8:C1:25:D0:A7:96:1A:F2:4F:FF:B2:3F:A9:D0:1C:8A:57:45
Authority key identifier: E9:31:36:B4:45:FB:A1:CC:C1:F4:3C:43:59:0E:9B:D9:A5:AA:51:82
Certificate issuer: /CN=e93136b445fba1ccc1f43c43590e9bd9a5aa5182
Certificate serial: 019A4EF4574F27D16F276A811BB165F56900
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6TE2tEX7oczB9DxDWQ6b2aWqUYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/db1a47-b264-4d26-9e60-e726d0d98052/1/6TE2tEX7oczB9DxDWQ6b2aWqUYI.mft
Manifest number: 045B
Signing time: Tue 04 Nov 2025 13:00:27 +0000
Manifest this update: Tue 04 Nov 2025 13:00:27 +0000
Manifest next update: Wed 05 Nov 2025 13:00:27 +0000
Files and hashes: 1: 6TE2tEX7oczB9DxDWQ6b2aWqUYI.crl (hash: POzI8bduPbXN/dmEHDbos/tT23LwrvXamLN8NSNhz44=)
2: gqtW-HTwNuaNzij_O-fG_WDDmgI.roa (hash: 64HgUSoh+cIdBaNAyauCdgl6p5QawtedcJQPBNkM8qg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/db1a47-b264-4d26-9e60-e726d0d98052/1/6TE2tEX7oczB9DxDWQ6b2aWqUYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/db1a47-b264-4d26-9e60-e726d0d98052/1/6TE2tEX7oczB9DxDWQ6b2aWqUYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/6TE2tEX7oczB9DxDWQ6b2aWqUYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:57:4f:27:d1:6f:27:6a:81:1b:b1:65:f5:69:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e93136b445fba1ccc1f43c43590e9bd9a5aa5182
Validity
Not Before: Nov 4 13:00:27 2025 GMT
Not After : Nov 5 13:00:27 2025 GMT
Subject: CN=8a1ca8c125d0a7961af24fffb23fa9d01c8a5745
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:75:69:95:0e:d2:a9:41:66:07:aa:4e:68:1c:
35:f1:e1:6c:04:0d:31:6a:ce:af:9e:11:ff:82:ab:
5a:b0:9c:19:23:a1:cd:df:61:85:3b:5c:1a:60:d3:
bb:a5:a1:a9:cb:1d:72:04:a6:d4:b0:85:bb:01:b1:
77:d6:58:e7:10:cd:13:a4:c1:d9:ff:6c:39:60:11:
87:08:51:35:8b:c8:45:1c:ba:cb:d0:7f:a7:2f:d8:
52:5a:29:1e:95:59:2a:3d:0c:ea:c4:eb:38:e3:b7:
c7:66:b4:77:e8:69:73:3e:6c:11:69:1c:6a:e7:3f:
a3:ed:26:1d:c1:16:58:27:31:bc:56:9f:35:2f:72:
11:40:f0:8d:5d:5d:ec:96:57:24:c0:4c:83:c8:a1:
98:d7:c3:8d:3a:2e:bb:58:c3:97:0f:46:71:08:31:
c7:27:ae:16:b3:f8:f8:8c:ad:59:b3:01:5f:e3:5f:
6f:38:32:98:76:e7:3f:a4:6a:0e:f7:bd:97:9d:ff:
cf:71:0a:12:98:3c:e5:ac:1a:87:63:37:e3:c3:58:
59:07:30:3d:04:32:d5:60:72:a1:00:79:97:19:c0:
76:b3:e1:3f:65:3b:da:c8:13:e7:21:8f:3c:18:16:
a1:61:7c:6f:41:0a:80:97:48:9a:3d:48:62:01:af:
f3:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:1C:A8:C1:25:D0:A7:96:1A:F2:4F:FF:B2:3F:A9:D0:1C:8A:57:45
X509v3 Authority Key Identifier:
keyid:E9:31:36:B4:45:FB:A1:CC:C1:F4:3C:43:59:0E:9B:D9:A5:AA:51:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6TE2tEX7oczB9DxDWQ6b2aWqUYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/db1a47-b264-4d26-9e60-e726d0d98052/1/6TE2tEX7oczB9DxDWQ6b2aWqUYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/db1a47-b264-4d26-9e60-e726d0d98052/1/6TE2tEX7oczB9DxDWQ6b2aWqUYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:b9:38:17:15:06:85:f4:3e:cc:78:48:d4:16:10:5d:18:e8:
8b:fd:42:ee:d5:ff:3c:3c:2a:22:db:26:9f:8d:02:03:bf:d7:
5d:4e:98:9d:27:e6:c8:e9:6d:02:d1:46:e6:e7:1d:f1:9d:c4:
fc:f7:a6:9e:7d:f7:b3:33:64:f8:7a:aa:00:58:0f:20:b0:77:
26:2f:44:b5:4e:a3:65:05:6e:dc:cc:eb:3d:7a:6e:8d:77:7c:
0b:e2:db:80:f1:f6:07:2e:df:44:91:1e:95:d5:98:e3:57:7c:
7a:9b:ae:40:82:62:a1:b2:07:30:2e:4e:22:01:6c:85:05:e4:
97:20:9f:2c:57:45:fe:fe:3d:5c:73:06:f7:1d:10:bb:b8:79:
f6:58:d5:f6:5b:7e:f8:95:67:36:80:cc:e0:0e:b7:6b:0a:23:
9d:91:12:5c:87:da:19:76:90:18:c7:a7:a3:aa:46:af:e2:56:
15:7e:ff:82:aa:53:79:76:e3:04:ee:7a:d5:dc:00:d9:76:1d:
e8:8d:99:67:f1:c4:ae:49:71:b9:b9:58:b6:09:36:6d:2f:11:
d6:42:32:0e:c9:dc:9f:41:7e:d0:ae:c9:be:ba:23:d2:e0:27:
79:83:58:17:78:f8:d8:b5:f1:a3:80:b3:5b:51:25:66:04:74:
3d:4f:d4:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:51:12 2025 by rpki-client