Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/d4f2e8-d619-4869-98e3-f5e93646698e/1/6T3OhQyyYnpSvfS5k0oRKIy20nc.mft
File: 6T3OhQyyYnpSvfS5k0oRKIy20nc.mft (raw, json)
Hash identifier: 1KlBy0lQcyosFL76EztiR2iFRlmtVcCFnYcA0zQSx2E=
Subject key identifier: 4F:BB:9C:28:4C:2D:AB:14:F5:42:F8:56:57:2F:DB:A4:8A:D9:3F:FF
Authority key identifier: E9:3D:CE:85:0C:B2:62:7A:52:BD:F4:B9:93:4A:11:28:8C:B6:D2:77
Certificate issuer: /CN=e93dce850cb2627a52bdf4b9934a11288cb6d277
Certificate serial: 019A54BFAFB0CC331CC13A5EB5A82A00F459
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6T3OhQyyYnpSvfS5k0oRKIy20nc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/d4f2e8-d619-4869-98e3-f5e93646698e/1/6T3OhQyyYnpSvfS5k0oRKIy20nc.mft
Manifest number: 0A42
Signing time: Wed 05 Nov 2025 16:00:39 +0000
Manifest this update: Wed 05 Nov 2025 16:00:39 +0000
Manifest next update: Thu 06 Nov 2025 16:00:39 +0000
Files and hashes: 1: 6T3OhQyyYnpSvfS5k0oRKIy20nc.crl (hash: mEpdWy+6HEAHspp+JQCZGVlQ83E0aWqCZTzG3yihIBI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/d4f2e8-d619-4869-98e3-f5e93646698e/1/6T3OhQyyYnpSvfS5k0oRKIy20nc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/d4f2e8-d619-4869-98e3-f5e93646698e/1/6T3OhQyyYnpSvfS5k0oRKIy20nc.mft
rsync://rpki.ripe.net/repository/DEFAULT/6T3OhQyyYnpSvfS5k0oRKIy20nc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:bf:af:b0:cc:33:1c:c1:3a:5e:b5:a8:2a:00:f4:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e93dce850cb2627a52bdf4b9934a11288cb6d277
Validity
Not Before: Nov 5 16:00:39 2025 GMT
Not After : Nov 6 16:00:39 2025 GMT
Subject: CN=4fbb9c284c2dab14f542f856572fdba48ad93fff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a7:ef:48:5f:92:99:15:90:52:ce:b9:21:5c:
44:95:91:f9:ef:d9:6a:57:cc:fe:1c:d3:7c:57:df:
ca:5d:c3:2a:91:ea:b7:90:a7:90:6c:e5:ae:d4:69:
e7:5b:79:a1:c3:41:65:9b:48:2e:b8:26:5b:04:b3:
59:cb:c5:df:40:95:37:17:49:5e:55:c3:13:96:db:
70:89:76:c8:18:3a:84:1d:f1:bf:d6:ec:26:4d:9d:
5f:85:01:57:f4:b9:a8:71:31:c8:13:a4:85:e6:59:
ce:4c:64:07:1c:a8:34:5e:71:37:d8:4b:17:bd:65:
bd:52:e3:62:e8:f8:8a:93:52:f9:a9:6c:b6:bb:6f:
b9:65:84:28:a0:4a:26:d2:98:4e:46:33:8f:43:84:
5a:c2:2b:42:25:77:c8:e0:76:7c:7e:fe:45:11:b6:
68:84:89:a4:ab:74:cf:d5:78:79:11:05:2b:f4:a4:
5b:89:25:5f:9e:26:05:54:20:a8:d8:58:9e:09:fb:
6b:10:1d:42:b6:32:3c:ec:d5:69:00:44:a8:47:b2:
2f:a0:e5:cf:64:c5:01:cf:e0:c5:32:be:ce:92:53:
9f:3f:af:7a:c4:97:5f:ef:85:a6:3e:b2:b2:a5:06:
60:28:d5:f2:7b:79:d7:8c:12:99:98:fa:67:50:2a:
b8:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:BB:9C:28:4C:2D:AB:14:F5:42:F8:56:57:2F:DB:A4:8A:D9:3F:FF
X509v3 Authority Key Identifier:
keyid:E9:3D:CE:85:0C:B2:62:7A:52:BD:F4:B9:93:4A:11:28:8C:B6:D2:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6T3OhQyyYnpSvfS5k0oRKIy20nc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/d4f2e8-d619-4869-98e3-f5e93646698e/1/6T3OhQyyYnpSvfS5k0oRKIy20nc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/d4f2e8-d619-4869-98e3-f5e93646698e/1/6T3OhQyyYnpSvfS5k0oRKIy20nc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:37:d5:9e:cc:5c:12:67:27:3b:51:58:62:e5:14:4f:fa:26:
47:d1:80:34:e7:03:94:06:df:c4:e8:c7:d4:74:cf:e5:47:03:
d2:9b:a7:77:16:1c:a4:42:bd:c5:12:c2:c9:d1:f8:01:78:65:
f6:47:ad:d6:1d:8c:66:a5:a7:73:49:ce:02:b4:96:9f:17:c7:
2e:bc:ac:fb:4e:c0:b5:91:79:31:b0:e6:77:10:25:fe:93:07:
82:b9:67:d7:b3:a2:bb:6b:25:54:94:f7:d8:18:21:3f:ef:99:
e9:7e:a4:ae:6d:33:c1:1a:11:87:54:5f:ec:65:bb:01:39:29:
46:0b:04:36:df:3d:22:07:d2:59:bf:41:63:e2:79:80:75:e2:
e3:05:20:83:9a:54:d6:77:2c:b3:ef:d9:23:90:09:41:4a:73:
e3:73:9f:eb:44:96:78:54:11:b3:49:68:44:4c:4a:c9:af:73:
37:c7:86:4b:ca:df:01:74:48:2b:b2:14:88:ba:2f:f6:ab:75:
30:2e:58:16:26:cd:b2:07:c9:28:ad:1d:27:13:1b:e5:8c:9e:
22:9d:61:99:08:c9:4a:c1:af:62:79:1e:63:77:b1:0a:e0:96:
6b:96:ba:c4:86:b0:30:3d:f6:8d:ca:92:9f:1b:60:87:ac:41:
b0:27:b7:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 22:13:13 2025 by rpki-client