Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/68f637-3121-40f7-b78f-9c9f2090329a/1/6lUOVOR2bVdl0PPQYd8ddNpViXM.mft
File: 6lUOVOR2bVdl0PPQYd8ddNpViXM.mft (raw, json)
Hash identifier: ViXPet3DUZ9B3PYpJHBeqFu+ZfuU7WVPS6QdP3BhrXY=
Subject key identifier: A1:61:E4:D8:38:19:19:3E:93:01:CF:3B:28:83:9B:38:5C:7C:B7:47
Authority key identifier: EA:55:0E:54:E4:76:6D:57:65:D0:F3:D0:61:DF:1D:74:DA:55:89:73
Certificate issuer: /CN=ea550e54e4766d5765d0f3d061df1d74da558973
Certificate serial: 019A4DE1F755857F0A351BEBC74B49D2F822
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6lUOVOR2bVdl0PPQYd8ddNpViXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/68f637-3121-40f7-b78f-9c9f2090329a/1/6lUOVOR2bVdl0PPQYd8ddNpViXM.mft
Manifest number: 0E5D
Signing time: Tue 04 Nov 2025 08:00:45 +0000
Manifest this update: Tue 04 Nov 2025 08:00:45 +0000
Manifest next update: Wed 05 Nov 2025 08:00:45 +0000
Files and hashes: 1: 6lUOVOR2bVdl0PPQYd8ddNpViXM.crl (hash: IoO6pCgnx6bwpfg4XHGlGBHh6WFPPod9Hpfhv62vYT8=)
2: SOLF2PkE720JgjOdf1KwRyDMoVU.roa (hash: xFpd4K6CQn8K2Nx3S7ipIBzbB30czEVkqtv2sS8du2A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/68f637-3121-40f7-b78f-9c9f2090329a/1/6lUOVOR2bVdl0PPQYd8ddNpViXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/68f637-3121-40f7-b78f-9c9f2090329a/1/6lUOVOR2bVdl0PPQYd8ddNpViXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/6lUOVOR2bVdl0PPQYd8ddNpViXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:f7:55:85:7f:0a:35:1b:eb:c7:4b:49:d2:f8:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea550e54e4766d5765d0f3d061df1d74da558973
Validity
Not Before: Nov 4 08:00:45 2025 GMT
Not After : Nov 5 08:00:45 2025 GMT
Subject: CN=a161e4d83819193e9301cf3b28839b385c7cb747
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:62:cb:35:5b:6f:f8:25:e3:ab:2d:56:7e:a0:
85:4f:2a:95:c4:ab:be:49:81:be:db:7b:30:f0:3a:
d4:16:e6:3b:64:3d:11:71:09:08:65:fc:c5:53:ac:
a5:63:aa:82:f6:af:8e:88:73:b9:04:23:aa:82:b3:
b3:11:b6:1b:58:5a:46:b2:56:36:0e:30:6f:74:54:
f4:cf:dd:a9:3e:a2:14:a9:f2:d7:31:02:5d:18:cc:
eb:94:96:e5:ca:2d:ff:c3:66:5d:fb:b3:b6:9e:fa:
1d:89:ba:d7:85:2b:30:e0:2f:b6:d7:f0:c0:f7:95:
07:e2:d5:ad:8f:54:35:6c:ad:50:1a:a9:c2:5a:d7:
4f:6b:94:93:d9:00:a6:9c:6b:94:57:96:ed:ed:65:
6a:14:15:c3:ad:d3:97:28:6d:94:77:13:d7:cf:12:
47:56:fc:66:0c:91:05:70:f0:64:4a:ee:64:37:1e:
e1:2f:10:23:d3:ce:a5:89:c7:c2:d6:23:a9:07:9a:
a2:6b:fb:cd:aa:a0:7a:8f:f9:53:7d:95:b6:ae:0d:
4e:63:5a:b6:36:88:80:ea:d3:c9:d7:aa:48:6e:c9:
44:7a:10:68:07:26:d9:a2:a3:07:87:f0:ac:ba:7b:
f0:fd:2b:69:98:51:dc:5d:ca:ff:11:66:fa:3d:76:
cf:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:61:E4:D8:38:19:19:3E:93:01:CF:3B:28:83:9B:38:5C:7C:B7:47
X509v3 Authority Key Identifier:
keyid:EA:55:0E:54:E4:76:6D:57:65:D0:F3:D0:61:DF:1D:74:DA:55:89:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6lUOVOR2bVdl0PPQYd8ddNpViXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/68f637-3121-40f7-b78f-9c9f2090329a/1/6lUOVOR2bVdl0PPQYd8ddNpViXM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/68f637-3121-40f7-b78f-9c9f2090329a/1/6lUOVOR2bVdl0PPQYd8ddNpViXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:51:93:a6:7e:73:cc:5a:01:85:96:29:b9:b9:06:cb:28:46:
8d:75:86:0f:13:ac:96:d2:8f:1e:5c:05:68:9d:49:16:c4:1a:
9f:53:c5:6a:99:79:67:0d:5d:15:45:5c:16:3a:64:36:af:cd:
85:5d:e5:06:98:da:cf:a3:ea:0d:3e:08:06:72:1d:df:f1:6f:
25:0f:6a:4d:48:16:33:49:2d:5a:61:fb:b6:e6:1a:38:67:90:
f2:d6:61:12:2c:a2:8e:cb:2a:cd:0b:ff:2b:f1:4d:d5:04:50:
f2:45:ac:5c:c4:b9:ee:5e:bc:f1:1e:47:6e:89:c6:05:88:fe:
9b:df:e8:2b:7c:a4:b3:79:0f:11:68:0f:d5:80:92:f9:35:1e:
c5:2a:b8:12:f2:75:df:80:92:e9:f2:a6:77:20:d5:5c:ab:dd:
a5:0a:22:8c:78:25:df:b7:cd:b3:a3:05:6e:59:37:36:05:6c:
0f:59:7f:f5:48:f0:d3:a0:b9:55:85:16:af:b3:31:a5:0e:ba:
71:5f:82:09:97:f7:9e:ed:b1:00:26:1b:95:ce:f7:74:c2:ad:
01:40:5a:c8:b9:5c:58:89:e9:b3:54:8b:29:7e:a5:84:da:46:
c5:39:16:15:80:de:ae:cc:51:e1:01:3a:d0:74:92:61:c9:59:
da:82:6a:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:59:41 2025 by rpki-client