Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/73764d-f250-4e3d-bb6f-21c4c6d6b6cb/1/6mQereGVXdS5B5FrmeAhA57MM-g.mft
File: 6mQereGVXdS5B5FrmeAhA57MM-g.mft (raw, json)
Hash identifier: PhJsxHaQVuDYl7rIU8Ma6xT0SxvT8tLH6n+3yGPmzaM=
Subject key identifier: D2:28:64:E7:A2:D2:1C:C0:51:7C:D1:E3:5D:4C:83:08:EA:9F:90:8A
Authority key identifier: EA:64:1E:AD:E1:95:5D:D4:B9:07:91:6B:99:E0:21:03:9E:CC:33:E8
Certificate issuer: /CN=ea641eade1955dd4b907916b99e021039ecc33e8
Certificate serial: 019A4E4FEB66331D0D05AD945B252AC7FDF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6mQereGVXdS5B5FrmeAhA57MM-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/73764d-f250-4e3d-bb6f-21c4c6d6b6cb/1/6mQereGVXdS5B5FrmeAhA57MM-g.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 10:00:51 +0000
Manifest this update: Tue 04 Nov 2025 10:00:51 +0000
Manifest next update: Wed 05 Nov 2025 10:00:51 +0000
Files and hashes: 1: 6mQereGVXdS5B5FrmeAhA57MM-g.crl (hash: kPuNcXGciBm9d2tElB6/mKhAU+DWLVVDK7YVXtnahqc=)
2: yMsvkbq8K0IM2cns7HVpjbtpaM8.roa (hash: TJjLQAcsYRitHc7okesLeLJv1CF6d2BgyzzxAXCqX+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/73764d-f250-4e3d-bb6f-21c4c6d6b6cb/1/6mQereGVXdS5B5FrmeAhA57MM-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/73764d-f250-4e3d-bb6f-21c4c6d6b6cb/1/6mQereGVXdS5B5FrmeAhA57MM-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/6mQereGVXdS5B5FrmeAhA57MM-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:eb:66:33:1d:0d:05:ad:94:5b:25:2a:c7:fd:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea641eade1955dd4b907916b99e021039ecc33e8
Validity
Not Before: Nov 4 10:00:51 2025 GMT
Not After : Nov 5 10:00:51 2025 GMT
Subject: CN=d22864e7a2d21cc0517cd1e35d4c8308ea9f908a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:7f:48:74:e8:84:22:e3:7f:ec:b2:37:f3:6b:
39:15:03:a4:82:e9:4e:16:cd:df:ae:b5:b8:5b:26:
7d:ae:68:21:d3:6b:1b:7f:bc:be:ed:19:b2:4d:fc:
26:bc:84:8d:77:34:7f:1d:7a:f6:b9:c9:7a:9a:31:
5c:32:db:0b:88:d2:b8:23:97:71:1d:31:4a:74:67:
78:47:a9:de:e2:ea:38:49:f8:73:c6:1e:d9:61:4b:
40:00:4f:3b:f1:4a:c7:7f:6c:4a:64:44:1b:1a:38:
ef:75:82:09:73:48:46:8b:26:b8:47:16:44:0f:18:
b0:f3:dd:ac:6b:e2:12:60:08:80:cf:60:76:6e:8c:
36:b8:bc:e0:15:7a:45:75:06:94:5c:83:3c:8d:7f:
b3:9b:13:05:6d:9a:8d:e8:c0:04:bd:9b:25:dd:c6:
8f:e3:45:3b:b3:b6:fc:aa:e1:53:e3:2b:3e:80:a9:
83:2c:aa:18:05:74:86:b2:bc:3f:54:ab:0f:7c:0e:
2d:f7:68:56:e7:e1:b3:b4:a4:c0:8b:46:cf:97:91:
d2:63:3d:f3:10:89:ff:e5:50:5c:d5:12:4e:78:2f:
4f:10:0e:c8:ed:39:83:57:e8:7a:a2:9b:4b:39:52:
2d:10:b1:f0:52:b5:52:94:96:38:0f:94:8e:78:a3:
98:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:28:64:E7:A2:D2:1C:C0:51:7C:D1:E3:5D:4C:83:08:EA:9F:90:8A
X509v3 Authority Key Identifier:
keyid:EA:64:1E:AD:E1:95:5D:D4:B9:07:91:6B:99:E0:21:03:9E:CC:33:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6mQereGVXdS5B5FrmeAhA57MM-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/73764d-f250-4e3d-bb6f-21c4c6d6b6cb/1/6mQereGVXdS5B5FrmeAhA57MM-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/73764d-f250-4e3d-bb6f-21c4c6d6b6cb/1/6mQereGVXdS5B5FrmeAhA57MM-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:c7:b5:2e:c9:19:bf:6d:2b:7c:3b:11:7c:a3:b1:a0:5a:fa:
e8:0a:79:eb:de:65:73:3a:e0:8d:d4:cc:4d:0d:88:22:48:27:
f4:95:11:54:a1:fb:99:78:06:c1:7e:dc:64:4f:4c:ea:16:fa:
cd:a2:39:cc:d5:1d:cf:d1:8a:f1:38:fe:e2:4e:e9:0b:95:37:
72:3a:e5:1a:64:df:4d:9f:8e:3a:44:f8:2a:99:23:77:92:98:
e0:0b:77:d4:46:46:f0:23:14:24:cd:ec:d4:83:56:9e:e9:bd:
11:8a:fe:3b:e6:47:ca:8a:32:ac:ed:77:7d:af:fa:de:f0:71:
c8:58:c9:02:e3:8b:0d:86:3a:c1:9c:6a:e8:b7:34:e2:04:f4:
48:4f:1f:84:82:75:c4:7c:e6:28:d2:ab:f5:ba:fb:8e:19:2a:
2f:c9:3c:07:6c:07:10:a9:28:56:98:3f:67:64:0f:54:49:92:
c1:6f:a0:c6:5d:26:ba:00:79:0e:77:f6:92:79:65:46:5d:c3:
cf:23:aa:75:cb:c9:69:16:d2:8a:22:23:9e:27:88:bc:b6:dd:
b3:d1:80:b0:00:38:3e:21:51:2c:01:87:09:95:55:3e:3c:ba:
cd:fe:4f:e4:4f:44:c6:f8:f0:a2:94:d4:6a:44:d7:5d:61:22:
10:f9:f8:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:31:14 2025 by rpki-client