Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/7e2ada-0dc1-4f3e-a58d-a29e814b9b29/1/F6yAsO71cIxkOQVF0acTkCRLbRs.mft
File: F6yAsO71cIxkOQVF0acTkCRLbRs.mft (raw, json)
Hash identifier: DuWPZzc2vhnkiSUZlV9DUoQ2lnB0a6/LVVYEGPafxSU=
Subject key identifier: 6D:C9:FB:4B:32:8A:04:8F:74:DC:CC:93:F3:B7:B1:C5:36:38:1E:A0
Authority key identifier: 17:AC:80:B0:EE:F5:70:8C:64:39:05:45:D1:A7:13:90:24:4B:6D:1B
Certificate issuer: /CN=17ac80b0eef5708c64390545d1a71390244b6d1b
Certificate serial: 019A522CD3AEF24BE3D27541DD4757285685
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F6yAsO71cIxkOQVF0acTkCRLbRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/7e2ada-0dc1-4f3e-a58d-a29e814b9b29/1/F6yAsO71cIxkOQVF0acTkCRLbRs.mft
Manifest number: 1437
Signing time: Wed 05 Nov 2025 04:01:00 +0000
Manifest this update: Wed 05 Nov 2025 04:01:00 +0000
Manifest next update: Thu 06 Nov 2025 04:01:00 +0000
Files and hashes: 1: F6yAsO71cIxkOQVF0acTkCRLbRs.crl (hash: MBmgz7rAmKJAZ4NNamtbR/IWkoZocf1kuxrE8G9KBIo=)
2: zSUjlVA_3mzAMpyrhKZAaPLaNJs.roa (hash: 72zL3nwgCvbu+myGvWOjXCnDMo56NxzjVOkIDgx8eQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/7e2ada-0dc1-4f3e-a58d-a29e814b9b29/1/F6yAsO71cIxkOQVF0acTkCRLbRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/7e2ada-0dc1-4f3e-a58d-a29e814b9b29/1/F6yAsO71cIxkOQVF0acTkCRLbRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/F6yAsO71cIxkOQVF0acTkCRLbRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:2c:d3:ae:f2:4b:e3:d2:75:41:dd:47:57:28:56:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17ac80b0eef5708c64390545d1a71390244b6d1b
Validity
Not Before: Nov 5 04:01:00 2025 GMT
Not After : Nov 6 04:01:00 2025 GMT
Subject: CN=6dc9fb4b328a048f74dccc93f3b7b1c536381ea0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:bc:c9:55:ea:df:4b:91:b3:c7:4c:23:d3:b1:
c3:2b:a4:45:74:72:48:d0:9a:5c:33:fa:38:4b:3e:
5e:27:db:70:7d:3a:40:05:30:b0:43:5c:f4:c8:fa:
19:a2:3a:03:77:c6:9a:47:be:c9:ca:c9:a7:b1:c7:
91:91:13:a3:e8:ef:5d:db:e5:1f:48:05:12:3c:7b:
bf:e1:40:a0:f7:55:b3:d3:a2:e9:2d:79:d8:ad:48:
39:a3:56:2b:0f:26:70:e4:c8:cd:ad:f5:c2:52:11:
5a:4c:4e:49:c4:69:9c:ec:1a:6d:3e:59:81:99:6b:
c6:09:26:5a:b6:6e:58:54:25:8e:6e:84:54:42:6d:
35:09:51:49:43:16:77:e1:a5:bf:10:a0:ba:98:2e:
98:19:44:4c:cc:8c:a6:91:2c:8f:57:18:8e:5e:20:
4f:a2:7a:b8:8a:36:60:25:5d:49:de:ab:1a:f1:2c:
08:72:75:41:a8:39:2e:f0:3f:86:7e:05:08:92:a8:
05:de:12:03:59:b2:1b:96:01:96:c7:38:81:90:48:
81:8a:36:45:1e:9c:35:30:3b:06:34:33:cd:ae:de:
c9:46:d8:cc:7c:02:4e:75:4e:b1:4f:62:9d:79:7f:
0a:70:8c:09:6b:54:df:29:e6:d8:ff:44:e4:ca:46:
1f:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:C9:FB:4B:32:8A:04:8F:74:DC:CC:93:F3:B7:B1:C5:36:38:1E:A0
X509v3 Authority Key Identifier:
keyid:17:AC:80:B0:EE:F5:70:8C:64:39:05:45:D1:A7:13:90:24:4B:6D:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F6yAsO71cIxkOQVF0acTkCRLbRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7e2ada-0dc1-4f3e-a58d-a29e814b9b29/1/F6yAsO71cIxkOQVF0acTkCRLbRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7e2ada-0dc1-4f3e-a58d-a29e814b9b29/1/F6yAsO71cIxkOQVF0acTkCRLbRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:df:64:9a:35:b7:27:60:5b:7f:7d:b3:91:a8:f1:86:2d:31:
1b:9d:63:07:b4:da:74:52:fb:7b:2c:e7:ce:a9:b1:c5:bf:32:
62:11:e9:d4:51:c0:31:57:b4:44:87:5f:5d:c2:63:2a:86:a2:
83:bc:0d:62:3c:a9:5f:46:c7:31:52:4b:87:ff:8c:d9:6f:87:
1c:25:99:f4:6b:a6:62:7b:d4:d1:ee:e9:40:56:18:f0:a3:4e:
24:96:4f:ed:bb:7a:0f:c8:54:b5:d9:8d:81:78:14:19:28:19:
63:13:54:78:de:9f:21:f2:69:cb:1c:05:9f:18:49:5d:dd:f4:
15:8c:84:a3:f1:72:85:0b:cd:b3:7b:2c:f0:3c:49:d6:c1:6b:
3c:31:ff:8c:bc:25:82:6c:bd:cb:a7:37:a2:ad:f6:49:25:a3:
82:01:b8:f5:4a:03:54:90:94:32:a2:3f:36:de:42:51:bf:92:
e2:c8:5e:08:8f:fc:aa:20:61:70:73:c8:1e:0d:84:e8:91:39:
be:7e:05:63:f3:89:72:b8:49:d8:31:6a:dc:9f:28:23:da:e7:
08:61:07:4f:bb:57:f2:9d:dd:8f:e2:78:fa:06:c6:99:c3:c2:
8a:87:d2:4c:94:54:f3:d2:c2:ac:db:e8:d2:05:13:14:f7:58:
84:32:bf:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:38:13 2025 by rpki-client