Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.mft
File: t6nDTT-EPNsDW3wws-hOIkElIsU.mft (raw, json)
Hash identifier: p/p+e5mSeTfy999cvb/5Yz5pUDRj0rXiXjCXYlx2/DI=
Subject key identifier: 6C:73:ED:0B:03:9A:29:2E:46:F9:92:CB:9E:85:69:47:33:D3:05:5D
Authority key identifier: B7:A9:C3:4D:3F:84:3C:DB:03:5B:7C:30:B3:E8:4E:22:41:25:22:C5
Certificate issuer: /CN=b7a9c34d3f843cdb035b7c30b3e84e22412522c5
Certificate serial: 019A4E4F52DB5CA020E158784206FF8AF459
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t6nDTT-EPNsDW3wws-hOIkElIsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.mft
Manifest number: 0F7D
Signing time: Tue 04 Nov 2025 10:00:12 +0000
Manifest this update: Tue 04 Nov 2025 10:00:12 +0000
Manifest next update: Wed 05 Nov 2025 10:00:12 +0000
Files and hashes: 1: StPgXcpmiy5JYaEeTseShVrOOPw.roa (hash: 2TP419yQVLSPbiDET0BATqZqoaVVJJbtbUq/1dj+vY4=)
2: t6nDTT-EPNsDW3wws-hOIkElIsU.crl (hash: GlZfaaADBIm+IrZ3hNfCy3rNqlnHQMEcZZxg6H8BoSc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/t6nDTT-EPNsDW3wws-hOIkElIsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:52:db:5c:a0:20:e1:58:78:42:06:ff:8a:f4:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7a9c34d3f843cdb035b7c30b3e84e22412522c5
Validity
Not Before: Nov 4 10:00:12 2025 GMT
Not After : Nov 5 10:00:12 2025 GMT
Subject: CN=6c73ed0b039a292e46f992cb9e85694733d3055d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d3:3f:bb:82:53:ab:17:08:87:ad:38:7b:6d:
11:1e:e5:0a:a1:5d:f9:3c:70:0f:79:a8:76:04:dd:
72:9e:6e:a2:ae:4f:37:37:4d:85:9d:af:f0:57:18:
a5:65:2e:7a:d5:43:16:65:2a:6a:66:fb:75:f1:08:
da:4a:4a:85:35:42:c2:2d:e6:4c:12:ae:39:ae:61:
e6:22:b2:98:bb:47:9a:8d:ad:1f:52:e7:71:23:a7:
fe:95:e3:21:57:ac:b9:d6:5e:6f:ae:8b:ce:b4:08:
fd:52:cb:19:b6:30:0d:11:5b:82:b8:93:fb:0d:12:
a6:93:dd:3a:7a:5d:69:3a:78:8a:75:b9:84:ee:10:
d8:cb:51:f4:49:d4:27:be:74:86:28:a4:91:00:12:
a7:da:62:04:ce:32:42:a1:7b:c0:e1:40:6f:8e:2c:
aa:d1:b0:2c:d3:b0:0d:50:14:bb:77:11:87:62:00:
62:b2:48:60:06:a4:7a:a4:db:89:31:06:bc:8f:d7:
67:71:7b:48:ae:ff:76:24:42:a3:63:13:6d:ca:6f:
dd:91:6a:bd:d9:72:ad:53:96:80:bc:5a:ef:54:6f:
ed:60:fa:90:4a:0a:68:4d:6a:d0:e9:b6:15:3e:07:
d4:e6:9a:8b:26:d1:50:ea:43:67:6e:a6:79:3b:d6:
e1:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:73:ED:0B:03:9A:29:2E:46:F9:92:CB:9E:85:69:47:33:D3:05:5D
X509v3 Authority Key Identifier:
keyid:B7:A9:C3:4D:3F:84:3C:DB:03:5B:7C:30:B3:E8:4E:22:41:25:22:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6nDTT-EPNsDW3wws-hOIkElIsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:35:3c:d0:15:c1:73:07:30:8f:49:64:29:3b:59:64:c4:d0:
18:df:92:0d:5a:d1:5a:1e:21:38:5b:04:a0:67:3b:79:bb:e9:
23:10:f0:8e:8a:0c:e5:5f:83:bc:b7:e4:64:91:81:aa:14:4d:
77:4e:80:cf:f3:cc:52:d4:45:03:7a:74:96:d1:3c:35:65:85:
18:45:c4:6e:a6:6c:ed:94:0b:8a:71:fc:f5:5f:41:a6:5c:a4:
8f:d9:b8:6c:a6:80:69:a3:49:4e:16:59:08:58:9b:e7:4d:53:
7c:9c:69:69:3e:f1:d8:9e:c5:88:5f:a4:88:95:38:88:b2:72:
9f:38:a8:8e:13:ba:b1:97:bb:29:49:c8:98:f2:b2:9d:6f:9c:
09:62:d7:ca:aa:88:e5:94:1a:83:c2:86:4c:76:1c:22:c4:d3:
51:f7:6c:74:11:c4:1e:40:bd:56:1e:5c:c3:ba:04:b5:5d:17:
f3:25:47:b0:d5:f1:94:51:f1:db:79:31:0a:eb:8f:9c:93:7f:
fa:f8:35:5c:d4:2c:a5:2a:9f:c1:3e:60:bb:09:3e:10:1d:19:
5a:c8:bc:d1:1c:61:d9:97:f6:f1:13:2e:e7:23:a1:25:0d:3c:
84:5d:28:80:ae:b5:f3:24:8d:ee:09:0f:09:b1:a3:8b:f7:77:
be:bb:f8:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:55:21 2025 by rpki-client