Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/6czfaVmJN585hMGGQek367aCJZs.mft
File: 6czfaVmJN585hMGGQek367aCJZs.mft (raw, json)
Hash identifier: ihs+EBCYt7kJFS6seVTGWK6o2KczkBnutatsiztnB54=
Subject key identifier: BF:93:2E:5C:DD:D1:29:4E:91:2A:84:CE:97:BF:BA:F3:86:24:6B:96
Authority key identifier: E9:CC:DF:69:59:89:37:9F:39:84:C1:86:41:E9:37:EB:B6:82:25:9B
Certificate issuer: /CN=e9ccdf695989379f3984c18641e937ebb682259b
Certificate serial: 019A54F62B8D12EBF18E43ED84DF6055A0BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6czfaVmJN585hMGGQek367aCJZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/6czfaVmJN585hMGGQek367aCJZs.mft
Manifest number: 0661
Signing time: Wed 05 Nov 2025 17:00:10 +0000
Manifest this update: Wed 05 Nov 2025 17:00:10 +0000
Manifest next update: Thu 06 Nov 2025 17:00:10 +0000
Files and hashes: 1: 6czfaVmJN585hMGGQek367aCJZs.crl (hash: 1w4RZiTgbyn5lsnrqdf9CDxKIvRfhe+o8D28e5izvFg=)
2: UonFdVxRB-HOOyUD446SJsVcabg.roa (hash: 11kZuTKWQH6OP3cuxM8FLHDKW4RaMfeFdGuijw+tO1s=)
3: e2Jeqb9Uzg6EG4YHbxV47PgTWzk.roa (hash: j8o4Nte6arS2S28o9H96r23GZrhvfGEjib56R7pWjcA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/6czfaVmJN585hMGGQek367aCJZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/6czfaVmJN585hMGGQek367aCJZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/6czfaVmJN585hMGGQek367aCJZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:f6:2b:8d:12:eb:f1:8e:43:ed:84:df:60:55:a0:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9ccdf695989379f3984c18641e937ebb682259b
Validity
Not Before: Nov 5 17:00:10 2025 GMT
Not After : Nov 6 17:00:10 2025 GMT
Subject: CN=bf932e5cddd1294e912a84ce97bfbaf386246b96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:58:06:56:89:73:ab:0b:ae:9c:cb:15:52:93:
e5:5e:31:45:82:58:15:94:33:93:d7:22:e0:da:07:
56:f8:78:01:6c:70:2b:b2:76:3d:09:5f:67:48:36:
42:86:84:86:6e:ec:3b:dc:96:38:26:df:92:90:bf:
81:cc:5c:aa:97:c3:a6:a5:5f:b6:cc:6a:c7:00:f5:
40:8f:a5:d3:b6:75:9a:83:59:94:99:58:e5:1f:5c:
67:67:bc:b2:b4:0d:3c:4d:87:c0:54:fc:13:9c:42:
75:9d:c4:74:aa:ed:fd:53:67:36:c5:5e:16:ae:cd:
8e:3b:42:f2:7c:e1:ac:77:a4:36:8b:a6:eb:bd:d8:
2d:61:3f:b9:72:ae:83:b4:d5:6a:48:20:62:a6:33:
11:d8:ae:00:4f:be:ad:99:d5:64:97:d8:70:bb:76:
33:59:e9:d9:16:2f:eb:78:c2:d9:6d:bd:ca:29:4f:
68:65:06:b2:66:ea:af:2a:ff:96:f0:6a:87:51:02:
ad:f0:f4:9a:c9:b9:78:d5:54:35:05:21:d9:dd:92:
52:cc:3c:9e:9a:fd:78:c0:dc:54:e9:c2:c0:3e:dd:
a3:7f:ea:3f:75:cd:bf:79:55:a8:b8:9f:18:4b:f6:
f8:d8:a8:f9:fe:8a:86:30:1a:33:e6:2a:7d:54:e9:
ab:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:93:2E:5C:DD:D1:29:4E:91:2A:84:CE:97:BF:BA:F3:86:24:6B:96
X509v3 Authority Key Identifier:
keyid:E9:CC:DF:69:59:89:37:9F:39:84:C1:86:41:E9:37:EB:B6:82:25:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6czfaVmJN585hMGGQek367aCJZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/6czfaVmJN585hMGGQek367aCJZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/6czfaVmJN585hMGGQek367aCJZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:e1:04:f0:e7:15:87:70:db:fc:51:e7:20:63:f6:75:31:3c:
79:c0:2b:3e:fd:38:c7:5d:89:87:f5:46:9d:32:1d:e6:b3:d8:
b6:ff:af:d4:c4:30:e0:91:c1:f8:38:c0:99:6c:71:f3:bc:2b:
f3:31:8a:90:ad:6d:d6:bc:91:61:29:c8:27:e2:85:54:66:4e:
f2:f0:80:c2:f2:bc:f7:76:96:2b:bd:dc:80:98:4b:42:80:c6:
ad:7a:19:cf:34:e4:7d:7b:47:f5:b4:a2:93:da:c1:89:82:e5:
95:b8:ee:cb:72:ed:c3:8f:61:04:4f:9d:e2:6c:0c:1d:c5:99:
02:2b:06:f1:bd:5e:00:55:6a:bf:83:a0:07:b0:02:97:db:ac:
dc:22:6e:ff:59:1b:ce:25:d9:54:5f:bf:35:40:0c:e5:d1:6b:
1c:a9:5d:2f:20:db:65:f6:e8:8f:30:84:49:f3:75:d1:94:fe:
93:f3:97:1b:22:cc:97:e7:02:77:c3:b9:bd:34:27:07:b4:7f:
c6:ca:eb:0c:aa:2b:67:d6:ab:a6:b2:7d:9d:c2:a3:a5:a5:cd:
83:63:39:92:e8:26:e4:20:ca:a8:65:01:2f:6f:c6:6e:74:5f:
d4:cd:81:d4:68:52:41:10:25:2f:9b:c8:96:60:70:71:3d:b7:
1b:f4:c9:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:47:59 2025 by rpki-client