Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/cae91b-9e0e-4d5c-afc4-55118f8bd5f2/1/6Wp2m-yjsZMpVRWBNVljZcQ8g7E.mft
File: 6Wp2m-yjsZMpVRWBNVljZcQ8g7E.mft (raw, json)
Hash identifier: bMZUyxQterBXQpNB1AU8yg25Q7S8ucKNp20s92fV60A=
Subject key identifier: 81:C1:69:21:BB:08:78:EB:E7:A0:EB:77:F8:1F:AB:D7:AE:AC:71:00
Authority key identifier: E9:6A:76:9B:EC:A3:B1:93:29:55:15:81:35:59:63:65:C4:3C:83:B1
Certificate issuer: /CN=e96a769beca3b1932955158135596365c43c83b1
Certificate serial: 019A52631D93F765B78DF22983F2298D971A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Wp2m-yjsZMpVRWBNVljZcQ8g7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/cae91b-9e0e-4d5c-afc4-55118f8bd5f2/1/6Wp2m-yjsZMpVRWBNVljZcQ8g7E.mft
Manifest number: 0E89
Signing time: Wed 05 Nov 2025 05:00:18 +0000
Manifest this update: Wed 05 Nov 2025 05:00:18 +0000
Manifest next update: Thu 06 Nov 2025 05:00:18 +0000
Files and hashes: 1: 6Wp2m-yjsZMpVRWBNVljZcQ8g7E.crl (hash: OXXnw+Imwo8R6u09iGHB7/Aas48MsBmAzPWz14+ntzw=)
2: Qt-NHTWPG9Blnlp9KwVRBT4_TNs.roa (hash: iMKB/O68vIbAIcl8B86g//4tQCSnWahP5EtY42n7PM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/cae91b-9e0e-4d5c-afc4-55118f8bd5f2/1/6Wp2m-yjsZMpVRWBNVljZcQ8g7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/cae91b-9e0e-4d5c-afc4-55118f8bd5f2/1/6Wp2m-yjsZMpVRWBNVljZcQ8g7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/6Wp2m-yjsZMpVRWBNVljZcQ8g7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:63:1d:93:f7:65:b7:8d:f2:29:83:f2:29:8d:97:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e96a769beca3b1932955158135596365c43c83b1
Validity
Not Before: Nov 5 05:00:18 2025 GMT
Not After : Nov 6 05:00:18 2025 GMT
Subject: CN=81c16921bb0878ebe7a0eb77f81fabd7aeac7100
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:43:f3:76:4d:cc:1a:8e:83:13:05:a2:6f:8b:
32:85:16:df:52:6a:f1:d2:2c:64:da:08:5b:95:29:
c5:c5:3b:2a:01:5c:af:bc:b8:34:ad:92:b4:94:e7:
a3:9d:e0:d2:7d:8e:07:a5:45:e6:f2:c1:26:c8:b6:
c7:66:44:a0:8d:18:d9:09:87:7f:ed:a4:a3:83:72:
c8:f2:1b:fb:65:a4:9d:a1:5b:22:52:ac:8b:28:27:
77:46:22:47:a8:dd:aa:80:76:8d:cc:fc:e5:5f:98:
3e:15:e6:07:6d:96:cd:f0:f2:40:eb:46:54:19:f7:
1a:e8:b9:9e:43:d6:a8:cf:04:ab:e1:d9:a0:cd:37:
3d:9d:db:ae:49:94:e4:b1:d3:e3:37:f8:6f:b2:6d:
dd:22:48:66:bf:36:8b:9b:0c:00:b2:4b:8a:e5:b8:
70:8f:8b:6c:24:ce:1f:43:b0:3b:88:28:a8:aa:7c:
39:bb:82:87:1f:0b:16:25:af:fb:0f:d7:92:f5:10:
5a:e9:b8:a4:63:16:1c:bc:63:70:47:4e:6d:f2:18:
ec:f5:ce:f1:fc:31:3e:1a:4b:33:0a:f7:28:86:ed:
03:e0:e8:b6:48:1d:15:2e:ee:7e:17:57:73:30:c1:
1c:ed:62:63:cb:98:5d:1d:67:bd:29:0f:a6:8d:b6:
b3:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:C1:69:21:BB:08:78:EB:E7:A0:EB:77:F8:1F:AB:D7:AE:AC:71:00
X509v3 Authority Key Identifier:
keyid:E9:6A:76:9B:EC:A3:B1:93:29:55:15:81:35:59:63:65:C4:3C:83:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Wp2m-yjsZMpVRWBNVljZcQ8g7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/cae91b-9e0e-4d5c-afc4-55118f8bd5f2/1/6Wp2m-yjsZMpVRWBNVljZcQ8g7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/cae91b-9e0e-4d5c-afc4-55118f8bd5f2/1/6Wp2m-yjsZMpVRWBNVljZcQ8g7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:76:8f:86:e0:ba:ad:4a:97:93:0f:75:c3:6c:57:32:25:b8:
07:e7:7a:8d:a3:24:57:0c:73:85:3b:7d:e5:73:59:1f:b7:01:
82:01:ac:32:18:20:b7:7b:6d:d1:90:d4:3f:b7:49:e3:e8:53:
cf:74:3b:3d:61:cc:4d:8e:c6:aa:3c:9a:ec:9a:fa:c4:68:f7:
c9:ce:7f:31:f6:b7:6f:01:19:02:14:5a:45:7c:dc:d1:37:70:
8c:9c:d5:68:62:34:4d:3e:9e:60:0a:01:90:bb:fe:cb:ec:2c:
26:ca:b4:0c:f1:a0:13:87:97:f7:9b:46:bb:42:b5:a4:2c:ae:
68:6d:3a:ef:93:0b:32:ff:1e:e4:3a:81:c5:27:7c:10:b3:dd:
21:f5:d0:1d:40:ab:eb:8f:25:12:a4:b6:8a:b4:f9:d6:1f:0a:
85:86:5c:66:29:d9:b3:89:61:ad:fb:4c:77:c9:2a:85:d5:02:
5c:0e:1b:b9:a0:e8:08:88:ec:7e:7e:61:fc:5d:03:d4:86:ed:
6b:56:03:94:95:f5:e1:05:10:85:0d:4f:78:64:a5:45:5a:02:
6f:92:70:dc:8e:d6:f5:80:40:60:f9:bb:41:02:a4:d8:7d:4f:
0b:ef:f3:ce:c2:3e:7d:16:28:14:d1:d4:1f:e8:b4:dd:c1:dc:
1e:63:1c:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:17:04 2025 by rpki-client