Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/bbfe48-f14d-40d1-9f1a-cb9e45bb0c63/1/F6b6gLLRxD7J6oJOfoOV95KU44o.mft
File: F6b6gLLRxD7J6oJOfoOV95KU44o.mft (raw, json)
Hash identifier: xodPUC5WcwlS5JsJXjPBC4MiQD709ks+hTQTaU+/TZc=
Subject key identifier: 4B:AB:06:D5:06:C6:14:0B:90:E7:46:59:7B:09:BB:15:FC:40:34:8B
Authority key identifier: 17:A6:FA:80:B2:D1:C4:3E:C9:EA:82:4E:7E:83:95:F7:92:94:E3:8A
Certificate issuer: /CN=17a6fa80b2d1c43ec9ea824e7e8395f79294e38a
Certificate serial: 019A4F6292845623BAD76D53662A0D9CAEA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F6b6gLLRxD7J6oJOfoOV95KU44o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/bbfe48-f14d-40d1-9f1a-cb9e45bb0c63/1/F6b6gLLRxD7J6oJOfoOV95KU44o.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 15:00:51 +0000
Manifest this update: Tue 04 Nov 2025 15:00:51 +0000
Manifest next update: Wed 05 Nov 2025 15:00:51 +0000
Files and hashes: 1: F6b6gLLRxD7J6oJOfoOV95KU44o.crl (hash: b9laKG/o/wIAEzi72rgXkRv7hG9b2O2egsvp5Gqfc78=)
2: NgR9E--L8OGtLWDYEisSSXDhdo0.roa (hash: 2D+QLTfpb+BXrHtU/zI2nDkh1Piz6nOMwxdV8hz+smg=)
3: ouBji2SgP5WP-tAVvBIOpWh6QHU.roa (hash: tjTYINhRmm1QHUqB8THsImRJUSYCerOiGq+34MjJwz0=)
4: sf0sGyYsdo6jCF2Onf3P164cdrU.roa (hash: GoOEVs4mVq7L9vye2gyb1R3/Fn8szYG5AVhTHRjEmnI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/bbfe48-f14d-40d1-9f1a-cb9e45bb0c63/1/F6b6gLLRxD7J6oJOfoOV95KU44o.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/bbfe48-f14d-40d1-9f1a-cb9e45bb0c63/1/F6b6gLLRxD7J6oJOfoOV95KU44o.mft
rsync://rpki.ripe.net/repository/DEFAULT/F6b6gLLRxD7J6oJOfoOV95KU44o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:92:84:56:23:ba:d7:6d:53:66:2a:0d:9c:ae:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17a6fa80b2d1c43ec9ea824e7e8395f79294e38a
Validity
Not Before: Nov 4 15:00:51 2025 GMT
Not After : Nov 5 15:00:51 2025 GMT
Subject: CN=4bab06d506c6140b90e746597b09bb15fc40348b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:88:a6:0a:96:10:8c:0b:cb:76:1c:d9:d3:2b:
9f:43:91:e3:ff:73:b3:82:04:a2:be:ff:ad:13:03:
8b:33:1d:58:3b:95:41:c2:74:25:20:32:24:60:fa:
1a:8c:51:e1:5d:ac:54:31:c2:8f:21:51:31:e2:3d:
07:64:5a:92:ab:4c:09:2e:cc:1e:50:41:fa:f9:76:
de:92:33:a1:09:23:40:86:31:4b:09:ed:d1:c0:8e:
00:68:e2:e7:aa:7d:d9:e9:61:eb:00:68:68:7f:fd:
2c:f7:37:57:f1:1c:95:76:1f:3d:1c:c7:1b:b0:28:
17:eb:99:fd:80:e9:c1:32:9a:e9:34:29:60:02:70:
23:06:2f:c4:69:e8:0e:fe:bc:56:37:22:64:ca:49:
25:6f:35:e7:0b:85:76:b5:2f:7c:72:3a:03:50:5e:
63:54:62:3c:24:d9:e8:71:91:93:7b:65:70:9f:32:
c7:84:95:dc:9c:39:41:09:f7:7d:ff:0c:0e:11:dc:
d7:49:f5:11:d8:56:d9:65:41:c3:f8:a2:53:96:01:
43:c0:b0:b6:e2:1b:97:12:73:c3:ec:6f:f0:33:05:
57:d8:94:a4:4d:20:6b:d2:c3:09:42:97:55:a6:0d:
4b:43:1b:86:d1:ea:cf:4f:35:0a:64:37:e9:5e:39:
d5:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:AB:06:D5:06:C6:14:0B:90:E7:46:59:7B:09:BB:15:FC:40:34:8B
X509v3 Authority Key Identifier:
keyid:17:A6:FA:80:B2:D1:C4:3E:C9:EA:82:4E:7E:83:95:F7:92:94:E3:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F6b6gLLRxD7J6oJOfoOV95KU44o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/bbfe48-f14d-40d1-9f1a-cb9e45bb0c63/1/F6b6gLLRxD7J6oJOfoOV95KU44o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/bbfe48-f14d-40d1-9f1a-cb9e45bb0c63/1/F6b6gLLRxD7J6oJOfoOV95KU44o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:5d:f9:a2:74:d1:e2:18:41:de:2b:f2:1f:c9:51:e8:f0:db:
1a:4a:5f:6f:31:3e:bd:a0:ea:cc:4d:07:81:57:a4:c9:76:e8:
d6:2a:a6:d0:45:0b:94:ef:79:fe:8e:94:f3:f6:75:2a:7c:1e:
a1:d2:80:4c:5d:b9:da:39:87:7f:3a:f5:26:99:9d:4c:0e:b6:
3d:cb:81:60:38:52:e3:fc:b4:37:0d:07:58:c6:b8:26:0b:62:
f4:b2:af:c4:25:2a:50:95:28:43:9e:f4:51:aa:f6:42:7d:f1:
cc:46:98:b0:f7:de:13:fe:3a:a9:74:32:13:bf:1b:65:16:e2:
40:0d:83:40:1e:6f:32:70:2e:87:4c:99:98:3f:93:b2:37:bf:
38:fd:c7:a4:c7:4b:ae:c5:ce:22:69:74:ba:f6:b6:ab:03:18:
e4:b9:32:2a:32:5d:0c:ef:a1:c5:db:64:8a:93:e0:e5:05:84:
c2:74:7d:cf:2c:8b:9d:68:2e:48:f5:0c:9c:cc:93:e5:b2:53:
2e:be:13:96:1c:23:c1:68:0f:5b:3c:34:0e:e9:67:56:c0:53:
c3:79:5b:7d:b1:db:34:1b:a6:e7:f8:72:43:d5:b8:65:92:1d:
0e:ac:e2:9c:0f:58:ab:70:3b:f3:a2:d9:ff:6b:24:a4:96:ef:
6f:60:b1:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:50:44 2025 by rpki-client