Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/82d824-4e02-46d4-854a-bd0512ce4905/1/_6QdNBPdrMkf4PRCaoKGgc8w4Pw.mft
File: _6QdNBPdrMkf4PRCaoKGgc8w4Pw.mft (raw, json)
Hash identifier: 2HNkrBtYvhhQLlSwwYoWENayYoYZ/vQ42jIrUd6PBxc=
Subject key identifier: 45:6C:93:21:EB:81:86:30:FF:DB:61:56:77:FC:E2:7E:17:77:C9:A2
Authority key identifier: FF:A4:1D:34:13:DD:AC:C9:1F:E0:F4:42:6A:82:86:81:CF:30:E0:FC
Certificate issuer: /CN=ffa41d3413ddacc91fe0f4426a828681cf30e0fc
Certificate serial: 019A4D7443AFC8D44A4C184275AF9A1F99F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_6QdNBPdrMkf4PRCaoKGgc8w4Pw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/82d824-4e02-46d4-854a-bd0512ce4905/1/_6QdNBPdrMkf4PRCaoKGgc8w4Pw.mft
Manifest number: 0DF1
Signing time: Tue 04 Nov 2025 06:00:56 +0000
Manifest this update: Tue 04 Nov 2025 06:00:56 +0000
Manifest next update: Wed 05 Nov 2025 06:00:56 +0000
Files and hashes: 1: 8eIa-4UA2fnyQQyLs8y9bQIaWAM.roa (hash: SYGKUkvXI/obgdGVYKiFu2OylosInlCBmN7hXgRUyO8=)
2: _6QdNBPdrMkf4PRCaoKGgc8w4Pw.crl (hash: bIqSvErCvaluAYbCnh1A09LC+K560W62MujidZG363k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/82d824-4e02-46d4-854a-bd0512ce4905/1/_6QdNBPdrMkf4PRCaoKGgc8w4Pw.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/82d824-4e02-46d4-854a-bd0512ce4905/1/_6QdNBPdrMkf4PRCaoKGgc8w4Pw.mft
rsync://rpki.ripe.net/repository/DEFAULT/_6QdNBPdrMkf4PRCaoKGgc8w4Pw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:43:af:c8:d4:4a:4c:18:42:75:af:9a:1f:99:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffa41d3413ddacc91fe0f4426a828681cf30e0fc
Validity
Not Before: Nov 4 06:00:56 2025 GMT
Not After : Nov 5 06:00:56 2025 GMT
Subject: CN=456c9321eb818630ffdb615677fce27e1777c9a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:2c:a3:47:25:30:94:4c:3e:60:e6:c9:9c:0e:
77:87:cd:4d:66:99:09:73:e4:e3:69:1b:9c:50:90:
43:d8:bd:60:59:56:6a:43:d6:69:a6:d5:fd:1a:73:
6c:d8:23:61:5d:01:95:d3:39:29:39:b0:1e:7b:e4:
7a:ca:06:8a:a3:3e:2a:91:c5:95:9e:a3:9d:2e:46:
2f:ce:ad:cf:07:ab:3f:f7:d4:f5:e1:30:50:f3:53:
9e:b9:46:e7:15:1f:e3:97:ff:93:a5:d4:16:5e:44:
a7:5f:b9:9e:66:d5:ca:58:3e:4a:fd:93:0b:b4:4d:
a0:ca:03:77:68:a7:2c:06:71:b8:6f:79:23:93:6b:
9f:9b:25:cc:41:92:0c:f0:fe:9e:c2:61:cc:af:aa:
74:94:51:3e:d4:5d:e4:fb:c8:1e:10:6e:55:b2:79:
7c:a8:54:b2:98:9a:07:39:ce:f0:0a:eb:97:03:a7:
5a:cc:5d:40:26:01:9d:3e:0b:2d:61:48:b2:e0:58:
ee:28:08:34:68:e9:ac:57:c4:38:43:ee:e0:d8:d9:
6a:ca:1f:69:64:e2:35:8d:34:f0:53:75:e8:e3:ea:
97:5a:a0:33:e3:19:c9:b8:63:43:71:00:3f:bd:16:
59:74:30:53:39:aa:e7:e9:1b:d9:59:84:79:84:03:
a3:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:6C:93:21:EB:81:86:30:FF:DB:61:56:77:FC:E2:7E:17:77:C9:A2
X509v3 Authority Key Identifier:
keyid:FF:A4:1D:34:13:DD:AC:C9:1F:E0:F4:42:6A:82:86:81:CF:30:E0:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_6QdNBPdrMkf4PRCaoKGgc8w4Pw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/82d824-4e02-46d4-854a-bd0512ce4905/1/_6QdNBPdrMkf4PRCaoKGgc8w4Pw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/82d824-4e02-46d4-854a-bd0512ce4905/1/_6QdNBPdrMkf4PRCaoKGgc8w4Pw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:ff:f3:df:50:1d:44:97:37:0f:ed:b5:be:2d:b3:15:54:de:
18:29:75:55:4b:f0:79:e8:a3:da:9b:a0:f0:61:6f:19:5b:33:
2b:6f:45:0b:b6:1f:df:c9:ee:4c:6f:42:55:38:fd:f8:18:1f:
6f:4f:6c:9f:b7:38:a0:ad:3e:c1:96:3b:4d:49:a9:8e:66:5f:
ec:34:75:d7:4c:62:cd:9f:30:02:db:cf:fe:bb:42:19:c4:95:
a0:db:3f:cd:20:c0:13:60:36:44:c4:27:cc:dd:c0:d2:ed:b7:
a8:cb:00:5f:8a:1a:f2:46:83:4c:ba:6a:1b:ab:3f:80:75:89:
11:da:5c:54:44:e4:89:5b:a4:02:4d:06:8d:21:a1:cc:9d:53:
6a:82:71:5b:b4:29:ab:ca:72:d7:25:72:8a:2f:5f:14:48:e1:
53:ff:8c:f9:6a:e2:28:a3:b9:02:f8:5c:d1:0c:61:a6:89:3d:
8e:da:95:4e:55:25:47:2d:b2:05:2a:2b:5c:c0:36:41:29:dc:
39:fe:ea:52:89:c4:98:09:be:32:d3:69:9a:13:a7:01:5b:41:
2d:f1:22:a9:6d:b4:04:f9:11:9f:c5:86:b7:db:56:99:5d:20:
d4:87:50:98:55:40:0c:12:1c:f5:14:ea:35:95:b1:98:db:20:
9e:da:a9:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:45:09 2025 by rpki-client