Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/42217e-ead0-46be-8ad0-05f90ad24f3e/1/6XWS8etB1siTzQ3XK2P8NO5VNTM.mft
File: 6XWS8etB1siTzQ3XK2P8NO5VNTM.mft (raw, json)
Hash identifier: GAmx3jVnjE+Nat9TgU1l3LSaOBbaguHzk8Akk4PPFS4=
Subject key identifier: 06:99:75:FD:FC:DC:16:EF:41:C2:61:C4:E5:64:16:A7:9F:B9:F2:0E
Authority key identifier: E9:75:92:F1:EB:41:D6:C8:93:CD:0D:D7:2B:63:FC:34:EE:55:35:33
Certificate issuer: /CN=e97592f1eb41d6c893cd0dd72b63fc34ee553533
Certificate serial: 019A54BF741056F29C483E997607A55646F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XWS8etB1siTzQ3XK2P8NO5VNTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/42217e-ead0-46be-8ad0-05f90ad24f3e/1/6XWS8etB1siTzQ3XK2P8NO5VNTM.mft
Manifest number: 1712
Signing time: Wed 05 Nov 2025 16:00:24 +0000
Manifest this update: Wed 05 Nov 2025 16:00:24 +0000
Manifest next update: Thu 06 Nov 2025 16:00:24 +0000
Files and hashes: 1: 6XWS8etB1siTzQ3XK2P8NO5VNTM.crl (hash: 3H/irREqW7gINR9M0fLsMP7wfb7DY2PuT4Dh1h4Dl6s=)
2: r6T3XlH0NydhUiVntY08YEEt0HY.roa (hash: j+28xx5Rq8KrtlCf807KmCTOzzUVWhkp01bXOIcVWSo=)
3: wPTagVR3pNusa3J3LbaZykmYrdM.roa (hash: k0uAisbBEgTj7/x2tEyMYhIzPLODPGtJvKxV+pOGuVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/42217e-ead0-46be-8ad0-05f90ad24f3e/1/6XWS8etB1siTzQ3XK2P8NO5VNTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/42217e-ead0-46be-8ad0-05f90ad24f3e/1/6XWS8etB1siTzQ3XK2P8NO5VNTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/6XWS8etB1siTzQ3XK2P8NO5VNTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 16:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:bf:74:10:56:f2:9c:48:3e:99:76:07:a5:56:46:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e97592f1eb41d6c893cd0dd72b63fc34ee553533
Validity
Not Before: Nov 5 16:00:24 2025 GMT
Not After : Nov 6 16:00:24 2025 GMT
Subject: CN=069975fdfcdc16ef41c261c4e56416a79fb9f20e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:96:0c:d5:bc:9d:a3:e1:b5:b6:f4:c5:08:2a:
ab:d1:a0:dc:4e:fa:42:a4:57:af:76:94:ef:f9:72:
f6:9e:52:ff:ec:09:d3:72:18:dc:f0:b3:8d:8e:45:
b8:61:d5:ef:64:ca:4c:d9:07:ee:e0:65:d8:69:e6:
49:68:1c:e7:f7:e1:ba:2d:35:94:bf:56:57:54:11:
2d:9d:cc:b2:59:50:d5:78:d3:4a:15:30:e2:41:19:
b3:4e:a4:7e:33:c3:b4:6e:76:7b:69:2e:b4:d5:c3:
97:3b:eb:77:8e:fa:cc:db:6d:c3:f3:e3:71:e9:ae:
5c:a3:44:79:4b:1d:36:0d:c8:8a:ec:3e:d4:66:22:
34:16:ba:d6:00:3a:91:9c:9a:28:81:cb:ea:c1:ea:
40:fa:fe:35:25:7b:7b:ae:09:8c:b8:ad:1a:be:c3:
79:db:0d:d1:6f:5b:2a:53:ff:fa:f7:3a:e1:a9:aa:
66:3d:c9:75:fe:7c:e5:de:58:32:18:04:43:14:86:
73:21:16:31:31:ca:3c:78:9e:51:64:3f:be:78:8f:
7e:8c:bd:75:c4:07:3f:5b:4d:36:9b:bf:36:ff:66:
a8:eb:ab:5c:fb:44:c5:f1:b7:bf:6b:54:10:05:b0:
3f:27:49:8a:a4:78:96:f7:2b:34:9e:4c:30:03:8c:
93:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:99:75:FD:FC:DC:16:EF:41:C2:61:C4:E5:64:16:A7:9F:B9:F2:0E
X509v3 Authority Key Identifier:
keyid:E9:75:92:F1:EB:41:D6:C8:93:CD:0D:D7:2B:63:FC:34:EE:55:35:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XWS8etB1siTzQ3XK2P8NO5VNTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/42217e-ead0-46be-8ad0-05f90ad24f3e/1/6XWS8etB1siTzQ3XK2P8NO5VNTM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/42217e-ead0-46be-8ad0-05f90ad24f3e/1/6XWS8etB1siTzQ3XK2P8NO5VNTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:7f:54:98:ad:d8:d8:ab:2b:01:bc:c1:fa:84:41:4a:7e:c3:
9e:df:31:54:40:09:63:f0:38:45:62:de:94:2c:f7:58:42:ec:
6f:bc:e8:09:01:cf:6a:d2:df:ea:24:96:10:e8:8f:a1:e8:4f:
d9:11:c0:27:7e:72:c0:e9:ee:a9:8d:0c:63:f2:39:f1:ec:16:
b3:12:88:e4:98:8f:81:b0:01:63:8b:db:68:f6:2a:00:e8:8a:
75:d5:77:b9:75:4d:60:1d:26:23:8f:78:01:ea:65:46:ad:4f:
5d:61:d1:ea:d6:a6:eb:77:79:50:24:55:33:a4:8c:74:5e:ac:
21:1e:aa:1c:48:08:79:00:29:49:76:b5:24:72:9a:1a:7f:59:
23:a5:77:75:cf:e5:1f:5f:4a:34:cd:97:3f:cc:ef:72:94:a2:
4b:62:61:6d:a6:75:e9:fd:57:24:77:c8:74:fa:ef:f2:74:bd:
df:4c:cd:42:57:af:8f:b6:d2:ca:0f:5f:fd:6d:0a:da:15:f8:
8f:94:f1:44:93:ea:84:7a:d2:97:fd:c3:b1:d5:29:d3:b5:9e:
f8:ea:0f:4f:3b:14:c3:80:b9:46:55:35:f6:7c:50:2b:39:2a:
b0:82:a5:d0:9a:40:16:09:2e:44:4e:b4:dd:1f:67:27:fe:62:
67:76:cf:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 22:31:27 2025 by rpki-client