Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/c4160d-772b-4567-a54e-751ac6807b04/1/6NZy-mCu5MJzoRUH9JtYTcVSxHI.mft
File: 6NZy-mCu5MJzoRUH9JtYTcVSxHI.mft (raw, json)
Hash identifier: dmtKiYGKIU8q7xVHMKEvX9UIhQjmArAedG6Phmk5x1o=
Subject key identifier: 98:69:C6:04:20:E6:CB:80:58:EE:03:BA:B9:B0:40:08:98:97:BB:DB
Authority key identifier: E8:D6:72:FA:60:AE:E4:C2:73:A1:15:07:F4:9B:58:4D:C5:52:C4:72
Certificate issuer: /CN=e8d672fa60aee4c273a11507f49b584dc552c472
Certificate serial: 019A4FD08109EAF003C38894A4CCD7E012EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6NZy-mCu5MJzoRUH9JtYTcVSxHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/c4160d-772b-4567-a54e-751ac6807b04/1/6NZy-mCu5MJzoRUH9JtYTcVSxHI.mft
Manifest number: 0656
Signing time: Tue 04 Nov 2025 17:00:55 +0000
Manifest this update: Tue 04 Nov 2025 17:00:55 +0000
Manifest next update: Wed 05 Nov 2025 17:00:55 +0000
Files and hashes: 1: 6NZy-mCu5MJzoRUH9JtYTcVSxHI.crl (hash: FaHCtkYls3ZoM2Y74BY2noEvKkED3bVob5RP2jAhUoY=)
2: CRKNGf_xuZYF0kNapyVmFyPmlEw.roa (hash: No5hma8g70yPMrFd8Y5GeYsaZ5JGY9aPRg048GjHko8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/c4160d-772b-4567-a54e-751ac6807b04/1/6NZy-mCu5MJzoRUH9JtYTcVSxHI.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/c4160d-772b-4567-a54e-751ac6807b04/1/6NZy-mCu5MJzoRUH9JtYTcVSxHI.mft
rsync://rpki.ripe.net/repository/DEFAULT/6NZy-mCu5MJzoRUH9JtYTcVSxHI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:81:09:ea:f0:03:c3:88:94:a4:cc:d7:e0:12:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8d672fa60aee4c273a11507f49b584dc552c472
Validity
Not Before: Nov 4 17:00:55 2025 GMT
Not After : Nov 5 17:00:55 2025 GMT
Subject: CN=9869c60420e6cb8058ee03bab9b040089897bbdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:12:f4:1a:44:e1:58:17:ad:9f:50:09:26:0d:
c6:5c:a3:66:53:be:25:be:d2:76:71:83:18:21:f8:
32:da:b9:62:31:c0:fc:74:f9:de:ac:32:f0:f6:07:
83:1f:fd:94:57:b8:2d:60:59:f5:3f:6e:cf:9b:9d:
49:3a:65:22:08:4f:de:12:e7:87:ae:44:5f:87:f1:
46:ef:48:f6:79:1d:49:39:c1:ae:b6:eb:c2:fa:a4:
74:3f:0a:da:e4:3c:79:b3:33:7e:7b:8d:d9:f8:ed:
ea:c2:dc:b7:35:83:78:ac:4e:53:1b:f3:f3:ac:99:
1b:83:27:d7:2f:f8:e6:4f:15:11:45:24:57:bb:d3:
58:f6:aa:47:3f:55:05:59:22:a9:80:22:c0:95:a4:
40:19:af:56:6f:8e:b3:76:f2:f5:fd:2a:ac:3c:ae:
4d:28:9c:80:2b:9b:97:b8:4c:54:f6:7a:19:a8:06:
63:25:23:68:3c:d8:8d:9c:f4:17:c7:36:42:de:bf:
31:d8:7c:8f:12:bd:cb:bf:ac:c7:1a:03:f1:73:6e:
31:a1:7c:57:01:f5:03:31:9a:8a:c7:01:5c:7e:d0:
6b:c6:4b:e5:6b:70:f8:2a:11:e9:2f:e2:68:5d:95:
e9:07:24:a3:f8:35:07:86:2a:07:83:e8:c6:a6:8a:
f3:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:69:C6:04:20:E6:CB:80:58:EE:03:BA:B9:B0:40:08:98:97:BB:DB
X509v3 Authority Key Identifier:
keyid:E8:D6:72:FA:60:AE:E4:C2:73:A1:15:07:F4:9B:58:4D:C5:52:C4:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6NZy-mCu5MJzoRUH9JtYTcVSxHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c4160d-772b-4567-a54e-751ac6807b04/1/6NZy-mCu5MJzoRUH9JtYTcVSxHI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c4160d-772b-4567-a54e-751ac6807b04/1/6NZy-mCu5MJzoRUH9JtYTcVSxHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:44:b4:c4:f8:c4:ae:39:aa:c0:6a:63:24:80:41:63:f2:5e:
14:39:73:e9:1d:3b:e9:80:87:98:db:7a:f8:5b:45:ee:7d:a3:
96:38:ac:c6:74:07:a4:f7:71:16:4e:3f:39:00:af:d2:6e:a3:
89:97:01:42:98:3b:10:01:cc:f9:dd:77:e1:59:7a:e8:ab:bf:
1e:09:b3:19:97:fa:29:b4:8e:0c:3c:44:89:14:f8:fe:95:a0:
ed:fc:cc:ce:12:98:9f:90:d6:79:58:85:51:e6:a7:64:17:26:
c7:86:b8:ac:dd:f5:d7:00:25:b6:07:77:84:75:6a:d4:78:23:
3d:f6:f9:0e:49:d0:f6:9b:bd:ff:12:a4:38:34:74:7d:3d:80:
f8:fd:47:04:7d:eb:92:75:0d:4e:52:f9:29:c0:ef:24:d9:92:
ad:df:72:1b:6a:99:d9:fc:ae:a7:73:9d:da:40:62:f6:73:ed:
5e:00:f7:0a:ac:26:41:dc:c8:77:fe:66:f9:34:be:93:a5:70:
0e:1f:3b:3c:48:6c:e4:f2:a5:d8:64:c3:14:31:e2:60:cb:4d:
57:3b:61:da:58:cf:9c:8f:2a:c4:37:3b:84:38:0e:94:c9:87:
17:99:0a:b0:be:5a:89:e6:38:c2:f2:44:20:69:65:7b:da:8d:
91:e3:c6:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:22:33 2025 by rpki-client