
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/9639b2-a9da-4373-b651-8637abf731f3/1/6JZQV_SqCZsKkZ8_C9SmSI4ww0g.mft
File: 6JZQV_SqCZsKkZ8_C9SmSI4ww0g.mft (raw, json)
Hash identifier: 1J1hGCoHnwfjWxnCRy2qG5KyaZIQF8MfSsNW/piIcIU=
Subject key identifier: F0:62:6B:08:F6:25:D9:CA:A9:15:50:A7:30:B8:4E:C4:7A:13:B3:09
Authority key identifier: E8:96:50:57:F4:AA:09:9B:0A:91:9F:3F:0B:D4:A6:48:8E:30:C3:48
Certificate issuer: /CN=e8965057f4aa099b0a919f3f0bd4a6488e30c348
Certificate serial: 019A4E86CD5F381306FB46A9D103FF42FC0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6JZQV_SqCZsKkZ8_C9SmSI4ww0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/9639b2-a9da-4373-b651-8637abf731f3/1/6JZQV_SqCZsKkZ8_C9SmSI4ww0g.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 11:00:48 +0000
Manifest this update: Tue 04 Nov 2025 11:00:48 +0000
Manifest next update: Wed 05 Nov 2025 11:00:48 +0000
Files and hashes: 1: 6JZQV_SqCZsKkZ8_C9SmSI4ww0g.crl (hash: KsYVxiReBqyq1aajbd11UlHGBHVlEYN3e22llP8/m9Q=)
2: VgS-u0ELxQR2AwhETKCUa6iULQU.roa (hash: 7YXeyW9OYhf7wVeeaMa0yi4RPICzvGAFTAe8JBcfnZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/9639b2-a9da-4373-b651-8637abf731f3/1/6JZQV_SqCZsKkZ8_C9SmSI4ww0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/9639b2-a9da-4373-b651-8637abf731f3/1/6JZQV_SqCZsKkZ8_C9SmSI4ww0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/6JZQV_SqCZsKkZ8_C9SmSI4ww0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:cd:5f:38:13:06:fb:46:a9:d1:03:ff:42:fc:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8965057f4aa099b0a919f3f0bd4a6488e30c348
Validity
Not Before: Nov 4 11:00:48 2025 GMT
Not After : Nov 5 11:00:48 2025 GMT
Subject: CN=f0626b08f625d9caa91550a730b84ec47a13b309
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:74:c8:37:59:46:43:ac:52:ad:cc:1c:1d:1b:
cd:d2:b9:91:47:1b:46:0e:99:2d:6a:58:24:21:91:
96:c8:4b:41:bf:b7:0b:4b:03:6c:64:59:82:92:3f:
04:e1:0d:6c:f6:4c:e1:1f:4d:d1:00:1f:68:88:d9:
c7:ea:f7:23:1b:aa:e3:f9:fe:3a:88:18:1e:4f:dd:
00:80:8a:25:17:1a:2a:af:95:eb:31:49:8b:10:78:
6b:1d:17:86:fc:4c:ca:05:01:af:e7:39:c5:e3:a2:
1d:ab:ae:36:e1:98:a6:66:7a:07:19:7d:1c:61:6f:
37:42:5b:d0:40:c2:f5:bc:76:fb:8b:87:65:0e:0a:
45:3c:62:2b:56:39:fc:2e:ae:d2:b5:35:85:3d:44:
0f:3e:6b:aa:34:d3:41:8b:f8:80:4c:1a:66:27:61:
5c:33:e5:15:cc:72:65:8f:18:03:db:3e:d3:f3:3a:
c4:2e:f2:73:34:ce:32:18:e9:df:af:e4:61:f2:cb:
07:41:aa:12:1f:cd:03:8e:99:8d:1d:d2:3a:fc:cb:
d8:39:68:65:ce:94:ee:d5:ac:42:d5:d6:ad:1f:5a:
77:59:96:04:5a:b3:7d:95:80:69:3e:f9:99:4c:10:
41:24:e3:e5:f2:70:23:94:0b:6c:1d:26:85:7a:ec:
f0:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:62:6B:08:F6:25:D9:CA:A9:15:50:A7:30:B8:4E:C4:7A:13:B3:09
X509v3 Authority Key Identifier:
keyid:E8:96:50:57:F4:AA:09:9B:0A:91:9F:3F:0B:D4:A6:48:8E:30:C3:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6JZQV_SqCZsKkZ8_C9SmSI4ww0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/9639b2-a9da-4373-b651-8637abf731f3/1/6JZQV_SqCZsKkZ8_C9SmSI4ww0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/9639b2-a9da-4373-b651-8637abf731f3/1/6JZQV_SqCZsKkZ8_C9SmSI4ww0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:d1:33:66:35:30:06:34:9a:0a:a2:60:73:91:f8:31:a3:c4:
19:d3:a4:19:31:da:af:2e:d8:dd:f2:01:99:e8:ab:ad:3e:5a:
7c:39:7d:ea:d9:92:f8:dd:1a:87:20:8a:a9:ac:fe:69:aa:8a:
63:b5:6b:b6:92:f3:bd:7e:25:d0:f8:77:93:ad:b6:cf:ef:d1:
4c:98:59:79:78:0b:db:1c:df:84:81:67:fb:dc:d7:fe:72:d3:
7b:88:e5:a3:39:51:37:50:09:13:2f:d6:08:ba:cd:0d:76:47:
4d:b5:04:1d:7e:22:2d:18:f9:dd:67:b4:52:20:61:62:ac:a1:
5b:2c:ff:95:a5:e9:c8:83:fb:da:41:de:20:2f:48:7e:1c:6e:
39:71:64:40:6f:d9:d3:15:41:2e:70:38:fa:41:b0:a1:f7:28:
0a:81:a7:48:55:03:37:16:18:3d:0f:96:9a:3d:80:c0:b2:0b:
ae:8b:0c:a9:2e:68:e6:ea:a8:8c:f4:93:7a:98:7f:5a:26:dc:
e0:4e:13:c2:94:b4:d2:11:a9:8f:ce:ff:e2:2c:12:bc:31:39:
78:01:ff:3d:03:a1:a5:4e:12:4d:39:04:57:aa:12:15:ed:94:
35:1b:a7:7c:de:4f:a1:d4:12:a9:2e:28:bf:ab:70:c7:be:1f:
0b:08:c3:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:00:36 2025 by rpki-client