Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/ad563e-5cbe-4e15-824d-e3d286d20e52/1/x6gkb3CuGOc25OU5gUgNWGFq8ug.mft
File: x6gkb3CuGOc25OU5gUgNWGFq8ug.mft (raw, json)
Hash identifier: AY4CHecAgXHPeeVG3S63cRQ1q7+OveNd7XX2iu9pyd4=
Subject key identifier: 9F:EB:2C:74:AB:7B:1C:81:97:9F:84:16:24:DA:56:22:F2:E2:A2:37
Authority key identifier: C7:A8:24:6F:70:AE:18:E7:36:E4:E5:39:81:48:0D:58:61:6A:F2:E8
Certificate issuer: /CN=c7a8246f70ae18e736e4e53981480d58616af2e8
Certificate serial: 019A4EF5E0FEC7B4F29D0D1FF8E2639898DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x6gkb3CuGOc25OU5gUgNWGFq8ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/ad563e-5cbe-4e15-824d-e3d286d20e52/1/x6gkb3CuGOc25OU5gUgNWGFq8ug.mft
Manifest number: 10C9
Signing time: Tue 04 Nov 2025 13:02:08 +0000
Manifest this update: Tue 04 Nov 2025 13:02:08 +0000
Manifest next update: Wed 05 Nov 2025 13:02:08 +0000
Files and hashes: 1: jtTgOvbCDl5pHHYwdtzWehbpOW4.roa (hash: JDaZtuKzg04dO4qGDBxTTkPz4qMFiZdAuP8puNSxSpM=)
2: x6gkb3CuGOc25OU5gUgNWGFq8ug.crl (hash: CbwFZjBseryBQcmIr3muq2/vN5PzlIx8QF1mrp4o8XU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/ad563e-5cbe-4e15-824d-e3d286d20e52/1/x6gkb3CuGOc25OU5gUgNWGFq8ug.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/ad563e-5cbe-4e15-824d-e3d286d20e52/1/x6gkb3CuGOc25OU5gUgNWGFq8ug.mft
rsync://rpki.ripe.net/repository/DEFAULT/x6gkb3CuGOc25OU5gUgNWGFq8ug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:02:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:e0:fe:c7:b4:f2:9d:0d:1f:f8:e2:63:98:98:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7a8246f70ae18e736e4e53981480d58616af2e8
Validity
Not Before: Nov 4 13:02:08 2025 GMT
Not After : Nov 5 13:02:08 2025 GMT
Subject: CN=9feb2c74ab7b1c81979f841624da5622f2e2a237
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f5:a8:52:70:38:6b:44:48:67:13:ef:58:b0:
67:f0:f8:d2:3f:78:28:d1:61:b4:4b:46:c0:3d:14:
ab:a2:9a:e6:1d:7f:30:f3:36:fc:97:e7:00:b4:9b:
62:09:8f:88:77:5d:55:36:6c:b0:f5:8d:d6:a2:6d:
c4:e1:9f:69:e4:d0:02:0f:95:8a:60:9e:86:a1:5c:
52:c6:f4:e7:cf:b0:16:34:8b:0f:27:15:88:b1:fa:
e1:11:f5:56:d8:eb:f6:a3:51:32:65:3d:9a:0d:e7:
2b:a2:5c:21:fd:31:ed:21:04:c4:5a:7f:67:23:63:
ef:0e:f4:06:9c:92:2d:e2:62:f6:b5:c3:88:e1:88:
72:3f:c1:77:23:c7:71:7e:98:2d:80:c9:1a:38:80:
e7:3c:38:4c:57:41:e9:ff:e1:d8:02:78:df:f4:f8:
6c:e4:f0:dc:6e:96:78:fb:6d:e8:33:97:89:bf:34:
bf:9c:10:b5:65:44:f3:5b:3b:81:6c:49:ca:96:09:
b2:c2:ba:9e:4e:80:81:7f:79:f0:c3:14:67:e4:e2:
fb:42:97:ae:52:f3:ef:67:cd:04:1d:af:79:de:3e:
92:58:b8:fe:5e:0d:f0:9a:98:f5:fd:93:e3:73:d8:
10:54:96:b7:37:57:99:5c:04:88:ac:e0:01:21:53:
28:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:EB:2C:74:AB:7B:1C:81:97:9F:84:16:24:DA:56:22:F2:E2:A2:37
X509v3 Authority Key Identifier:
keyid:C7:A8:24:6F:70:AE:18:E7:36:E4:E5:39:81:48:0D:58:61:6A:F2:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x6gkb3CuGOc25OU5gUgNWGFq8ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/ad563e-5cbe-4e15-824d-e3d286d20e52/1/x6gkb3CuGOc25OU5gUgNWGFq8ug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/ad563e-5cbe-4e15-824d-e3d286d20e52/1/x6gkb3CuGOc25OU5gUgNWGFq8ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:b1:b5:35:b3:3e:e6:91:41:75:0b:48:05:ce:5c:b5:a3:ae:
1b:84:23:8c:31:4a:43:f6:ae:f5:7a:fa:89:93:fe:07:06:e4:
ce:97:4a:3f:d9:e3:f6:0e:26:26:5b:32:14:32:1d:e0:3c:ec:
f3:0f:cd:0b:de:54:02:fb:5c:1e:ef:dc:ce:78:36:8e:29:06:
6f:54:ca:66:0e:ec:d5:d1:a4:67:91:a4:5a:e1:37:e9:28:12:
5e:a3:67:aa:26:d4:2e:ed:f1:ba:11:0b:4e:76:88:70:66:ee:
ff:a1:9d:65:12:65:9c:36:50:06:13:7c:ee:ae:6e:a1:37:24:
47:1b:2d:41:be:34:0b:eb:4b:92:27:21:cb:b6:0c:5a:89:73:
3c:da:2f:12:b9:2c:a6:4c:8b:11:c6:d2:21:c1:51:b5:85:c2:
ef:d4:b4:b8:ea:09:77:0d:46:40:0f:06:2b:aa:92:aa:0e:5f:
76:80:31:6d:2c:e5:aa:dc:da:61:02:60:90:1d:63:f0:21:4a:
4b:35:ff:42:6b:68:d0:1f:e6:a9:76:90:a8:f1:9b:04:4c:2e:
7a:7d:12:4b:ff:c6:01:c8:ae:5b:5a:50:b7:e0:7a:cf:da:0b:
7d:09:23:b4:d9:7c:cd:a4:b5:19:b3:85:14:03:b4:47:6e:26:
da:33:7b:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:48:29 2025 by rpki-client