Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/6czfaVmJN585hMGGQek367aCJZs.mft
File: 6czfaVmJN585hMGGQek367aCJZs.mft (raw, json)
Hash identifier: THJK8ijtf9aBHcyVCoYBHZ2PMWPI74IUzPgh2ffrh4Q=
Subject key identifier: 63:75:A3:6D:2E:0D:F5:A2:BE:3C:7F:EB:C2:87:93:C8:9B:CE:DB:D8
Authority key identifier: E9:CC:DF:69:59:89:37:9F:39:84:C1:86:41:E9:37:EB:B6:82:25:9B
Certificate issuer: /CN=e9ccdf695989379f3984c18641e937ebb682259b
Certificate serial: 019A53082145189C072FD41F0812B112D3F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6czfaVmJN585hMGGQek367aCJZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/6czfaVmJN585hMGGQek367aCJZs.mft
Manifest number: 0660
Signing time: Wed 05 Nov 2025 08:00:32 +0000
Manifest this update: Wed 05 Nov 2025 08:00:32 +0000
Manifest next update: Thu 06 Nov 2025 08:00:32 +0000
Files and hashes: 1: 6czfaVmJN585hMGGQek367aCJZs.crl (hash: C9HeWF9m+Xw7CV3ibyetGxTQWb0tA/q/LZlO5Viq/6w=)
2: UonFdVxRB-HOOyUD446SJsVcabg.roa (hash: 11kZuTKWQH6OP3cuxM8FLHDKW4RaMfeFdGuijw+tO1s=)
3: e2Jeqb9Uzg6EG4YHbxV47PgTWzk.roa (hash: j8o4Nte6arS2S28o9H96r23GZrhvfGEjib56R7pWjcA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/6czfaVmJN585hMGGQek367aCJZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/6czfaVmJN585hMGGQek367aCJZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/6czfaVmJN585hMGGQek367aCJZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 08:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:08:21:45:18:9c:07:2f:d4:1f:08:12:b1:12:d3:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9ccdf695989379f3984c18641e937ebb682259b
Validity
Not Before: Nov 5 08:00:32 2025 GMT
Not After : Nov 6 08:00:32 2025 GMT
Subject: CN=6375a36d2e0df5a2be3c7febc28793c89bcedbd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3e:7c:15:6e:3b:7e:32:07:09:78:8b:1b:94:
2b:e2:88:5c:4c:a0:4d:53:f3:2b:79:36:2c:fe:5f:
bb:06:a2:ae:3a:4c:41:e7:e7:bf:fa:33:ed:fb:11:
c3:f0:4c:cc:7a:39:d8:91:0a:8c:21:7f:2c:40:c5:
d4:68:d5:c3:2a:3c:36:57:9c:c3:9a:e9:fd:b0:e9:
17:b0:eb:1b:b7:ae:f6:92:56:1c:3b:f3:06:ba:c9:
d4:eb:24:b2:dc:44:53:67:e7:9d:02:f3:84:9a:f2:
99:a3:71:dc:81:0c:ec:dc:4f:2b:d1:d6:f6:8e:48:
68:bb:8c:7f:97:3f:57:93:60:32:74:4f:27:c5:89:
c2:89:2b:a3:4a:95:f4:61:62:be:2f:07:24:41:41:
18:e3:a0:3d:90:fa:73:47:3c:ec:a3:9d:b8:f6:96:
0b:79:33:06:bd:11:3e:26:cb:04:2a:8a:cc:76:8d:
a5:35:31:52:6e:cc:02:83:89:60:51:f0:2f:63:91:
af:ad:42:13:a3:26:93:88:ba:79:93:a0:57:46:1f:
3e:2c:09:94:ab:a4:aa:93:d4:5c:5e:97:1f:c1:c5:
71:b6:a3:98:d4:27:e1:fd:13:1c:cd:a7:0d:94:80:
63:82:db:aa:2f:a7:08:75:00:39:fb:47:40:83:15:
01:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:75:A3:6D:2E:0D:F5:A2:BE:3C:7F:EB:C2:87:93:C8:9B:CE:DB:D8
X509v3 Authority Key Identifier:
keyid:E9:CC:DF:69:59:89:37:9F:39:84:C1:86:41:E9:37:EB:B6:82:25:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6czfaVmJN585hMGGQek367aCJZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/6czfaVmJN585hMGGQek367aCJZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/6czfaVmJN585hMGGQek367aCJZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:a1:93:07:8e:e5:a1:fe:aa:0a:be:35:25:d2:9f:98:ab:33:
c7:a7:bf:58:ce:2a:a5:74:f4:6c:98:a1:0e:c1:fc:ea:a6:19:
66:45:6f:81:0d:37:90:b7:ae:40:e4:4b:8e:86:1c:cb:9a:29:
79:bf:dd:e9:b2:a2:74:dc:76:46:28:30:ad:7a:5e:14:1d:2d:
3d:70:67:e7:ed:5b:a1:5a:a3:43:20:43:74:c9:83:34:e3:cc:
50:ac:45:34:bc:ef:d1:e2:9f:00:42:b8:56:35:5b:fc:71:3a:
1b:b6:82:66:69:6f:c4:64:09:ac:03:6a:c4:c4:6b:2c:f9:cb:
d7:4b:65:ee:2a:d2:5f:a3:75:ca:ea:82:ad:9a:c0:54:fb:ad:
aa:fd:8d:94:6c:85:4e:ce:de:d5:41:8d:40:5c:d6:7f:7a:a6:
44:bc:17:6a:2f:40:a0:53:62:b1:9b:f9:05:90:66:05:d6:e3:
18:0b:63:dc:76:b9:0f:24:b3:25:b7:ce:fb:91:35:b4:20:a8:
74:5e:fc:30:db:9f:3f:15:d9:50:14:be:c3:54:a0:16:5e:4a:
ae:75:3d:a3:45:38:e3:3a:3b:d8:7b:28:ae:36:26:6b:7e:ba:
8c:72:bf:35:a5:82:92:7d:31:97:00:b1:e8:1d:df:05:50:44:
1e:bc:4d:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:17:32 2025 by rpki-client