Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/5ff199-daf0-4a7e-8e5d-66d3d8ba539f/1/6UWUa-c3BQO-r75A4REVudyVO8M.mft
File: 6UWUa-c3BQO-r75A4REVudyVO8M.mft (raw, json)
Hash identifier: X4MuEuwNoq4raOMDXjCu1jPYHT1VxALuooaC52XNOfY=
Subject key identifier: 73:B0:C2:37:65:AA:68:2C:9A:A3:F9:C3:AE:2A:78:56:6A:12:41:2F
Authority key identifier: E9:45:94:6B:E7:37:05:03:BE:AF:BE:40:E1:11:15:B9:DC:95:3B:C3
Certificate issuer: /CN=e945946be7370503beafbe40e11115b9dc953bc3
Certificate serial: 019A4E18E3572ED2524BD15BE7F5A692560A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6UWUa-c3BQO-r75A4REVudyVO8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/5ff199-daf0-4a7e-8e5d-66d3d8ba539f/1/6UWUa-c3BQO-r75A4REVudyVO8M.mft
Manifest number: 0F1B
Signing time: Tue 04 Nov 2025 09:00:45 +0000
Manifest this update: Tue 04 Nov 2025 09:00:45 +0000
Manifest next update: Wed 05 Nov 2025 09:00:45 +0000
Files and hashes: 1: 6UWUa-c3BQO-r75A4REVudyVO8M.crl (hash: MaRhN9+3YZpR9QLGFjuDO9Qk2JtpwMbYoDYCDGKajGI=)
2: QPTMBPa1R1iyVMpj2m0ksKZtNe4.roa (hash: zRiBFcC8k+QThl68UQZBhw2tExgPORwu8ZM6Z3ofO4Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/5ff199-daf0-4a7e-8e5d-66d3d8ba539f/1/6UWUa-c3BQO-r75A4REVudyVO8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/5ff199-daf0-4a7e-8e5d-66d3d8ba539f/1/6UWUa-c3BQO-r75A4REVudyVO8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/6UWUa-c3BQO-r75A4REVudyVO8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:e3:57:2e:d2:52:4b:d1:5b:e7:f5:a6:92:56:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e945946be7370503beafbe40e11115b9dc953bc3
Validity
Not Before: Nov 4 09:00:45 2025 GMT
Not After : Nov 5 09:00:45 2025 GMT
Subject: CN=73b0c23765aa682c9aa3f9c3ae2a78566a12412f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:3f:9d:09:f9:c9:92:e6:03:43:f7:8c:80:45:
eb:19:6d:3d:5b:13:a4:a0:d5:9f:58:f6:76:59:a9:
22:37:a6:77:60:7f:16:2f:c4:0d:b7:08:c9:93:a4:
59:6f:86:48:89:61:e3:af:f7:3c:6b:73:2e:63:08:
8f:0d:5b:20:21:0c:0c:eb:b7:f4:93:79:c4:bd:cb:
69:a4:4d:7d:7b:4c:5c:72:f7:39:2c:28:4d:d5:4f:
2e:89:62:d2:64:59:9e:db:17:d8:8d:c9:1b:82:45:
06:a7:ea:43:09:8c:0b:a1:ac:f9:e7:bb:d4:1f:e1:
d1:ec:b0:54:d8:f9:9b:54:87:0d:51:8c:f6:95:e2:
0a:ed:e2:09:3e:3e:bf:d3:82:33:4e:76:99:f3:c2:
5c:37:9d:cc:ab:04:d5:eb:c1:c5:8e:46:6b:4d:2e:
79:c9:b9:01:9b:f0:53:eb:14:f9:42:61:d9:b7:f7:
d5:69:42:ae:f3:de:82:3b:6f:68:2a:45:d4:7a:98:
01:bf:0f:b7:eb:25:ba:cb:d9:f7:96:22:29:e3:ad:
e1:fd:5b:0a:50:c8:94:77:97:67:7b:85:1d:f1:48:
3a:12:1e:5d:df:0d:3c:8f:b5:77:28:61:bd:b5:ca:
aa:c1:9d:c0:de:bc:31:7d:1f:ac:0f:d2:a6:44:87:
cc:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:B0:C2:37:65:AA:68:2C:9A:A3:F9:C3:AE:2A:78:56:6A:12:41:2F
X509v3 Authority Key Identifier:
keyid:E9:45:94:6B:E7:37:05:03:BE:AF:BE:40:E1:11:15:B9:DC:95:3B:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6UWUa-c3BQO-r75A4REVudyVO8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/5ff199-daf0-4a7e-8e5d-66d3d8ba539f/1/6UWUa-c3BQO-r75A4REVudyVO8M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/5ff199-daf0-4a7e-8e5d-66d3d8ba539f/1/6UWUa-c3BQO-r75A4REVudyVO8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:f4:a2:78:ca:0c:94:5c:da:c4:48:9d:65:54:39:57:81:09:
55:1a:3b:d9:f7:62:46:0c:28:01:5d:0e:72:ee:c4:b1:9b:c0:
4e:c3:50:60:16:37:13:ec:05:19:f0:28:cc:09:16:e0:7b:f2:
98:2b:2e:9b:21:f8:41:72:71:03:d2:4e:03:3b:3b:e2:4a:81:
13:de:9b:29:90:47:2e:83:de:26:69:75:89:68:82:09:9e:1e:
42:d1:76:0e:c5:45:a8:63:d7:7f:30:f6:02:a0:ef:d7:10:bf:
5c:75:e2:17:7b:71:24:17:02:02:5f:bb:65:a0:71:6c:a3:75:
43:71:f1:ab:93:c8:67:48:d9:7f:cd:1b:96:15:f4:a9:46:03:
e0:c4:62:d6:a6:02:b9:8c:5c:c2:f2:05:e2:72:7e:49:5b:8b:
20:72:db:93:05:1a:f3:15:bc:00:80:ae:b3:83:24:e0:64:6f:
a1:86:b9:47:11:56:a4:5b:86:61:5b:f3:2a:70:51:af:9c:33:
7b:02:64:76:ac:36:c1:bb:b4:da:ed:15:48:53:2f:e9:e8:ba:
47:13:f1:b0:1b:0f:f7:cb:9a:76:da:c1:0c:21:ac:92:45:b9:
cd:72:2f:76:ff:84:36:b6:cb:97:d5:83:b3:c0:ca:f7:8e:00:
f6:51:a6:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:38:11 2025 by rpki-client