Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/a34b68-5dcf-4a81-bc08-d1c3f288799c/1/6RvExCxQPaC3-K8W9-5LVHH_DgE.mft
File: 6RvExCxQPaC3-K8W9-5LVHH_DgE.mft (raw, json)
Hash identifier: R3HRKJ2VRmwQrsLrL6LIvPI/HNAuxo5LmNYnFYAPXmo=
Subject key identifier: CF:BA:24:4E:F6:EF:AA:42:C4:E3:46:4F:9B:85:8F:52:BE:57:40:38
Authority key identifier: E9:1B:C4:C4:2C:50:3D:A0:B7:F8:AF:16:F7:EE:4B:54:71:FF:0E:01
Certificate issuer: /CN=e91bc4c42c503da0b7f8af16f7ee4b5471ff0e01
Certificate serial: 019A545200F95E9729D3CFF018B15E984518
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6RvExCxQPaC3-K8W9-5LVHH_DgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/a34b68-5dcf-4a81-bc08-d1c3f288799c/1/6RvExCxQPaC3-K8W9-5LVHH_DgE.mft
Manifest number: 018E
Signing time: Wed 05 Nov 2025 14:00:51 +0000
Manifest this update: Wed 05 Nov 2025 14:00:51 +0000
Manifest next update: Thu 06 Nov 2025 14:00:51 +0000
Files and hashes: 1: 0eASUYw5buzWADKhJAPCD_thD4s.roa (hash: Uq52mQ0d5aOs+tiyr9sazFI/NXMlXJdBfmeH08G5ncI=)
2: 6RvExCxQPaC3-K8W9-5LVHH_DgE.crl (hash: HhxIUeR5tOEpeQ1iBh0qfS0t+ufIzabAC1f1VQPj4K8=)
3: mWHZWvt3p5MCg5LBUwow2A8Kk6M.roa (hash: rbpJ3fLj4o2mcv3jMC9K4zfYj/SC5m2zNP1X60zbbmc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/a34b68-5dcf-4a81-bc08-d1c3f288799c/1/6RvExCxQPaC3-K8W9-5LVHH_DgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/a34b68-5dcf-4a81-bc08-d1c3f288799c/1/6RvExCxQPaC3-K8W9-5LVHH_DgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/6RvExCxQPaC3-K8W9-5LVHH_DgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:52:00:f9:5e:97:29:d3:cf:f0:18:b1:5e:98:45:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e91bc4c42c503da0b7f8af16f7ee4b5471ff0e01
Validity
Not Before: Nov 5 14:00:51 2025 GMT
Not After : Nov 6 14:00:51 2025 GMT
Subject: CN=cfba244ef6efaa42c4e3464f9b858f52be574038
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:a0:7d:f7:de:14:6d:16:92:f9:5b:bf:8a:db:
b7:4f:d3:65:3e:9b:13:96:a6:48:a7:b6:59:a2:e0:
7b:f0:95:e8:8d:ce:c0:70:a9:8e:67:f1:19:2e:d0:
82:83:99:a4:54:dc:f5:4d:0f:64:04:95:f7:48:39:
6e:1d:9a:ee:a4:8c:b0:38:22:92:90:89:8e:b2:20:
f7:fb:74:5a:7d:69:cc:bd:de:a6:1d:84:09:85:5b:
e2:29:44:7a:41:4e:f9:97:8f:95:29:96:f7:83:00:
79:90:06:b1:e5:85:f7:6f:25:55:ca:4b:72:7f:d2:
2b:51:eb:80:9f:bd:14:9e:a4:ef:de:e8:a1:9a:78:
c7:76:aa:f9:b4:fe:2e:31:82:23:e5:bd:0f:08:27:
e0:61:44:be:10:4a:a3:4e:cd:3b:d4:84:cc:c9:ee:
44:ac:90:46:fa:d2:52:d9:5c:e2:b9:e8:a2:d7:d5:
6c:12:13:00:2a:0a:8f:1b:3b:95:6c:85:cd:ee:06:
86:15:41:a5:d8:80:d1:8e:2c:64:d6:9c:d7:2f:f4:
7c:ed:d1:3c:34:0c:b5:2c:d0:a6:32:80:ef:d4:5d:
c3:63:10:c2:36:56:11:08:1a:c7:7b:1e:d2:eb:fa:
3e:e4:a1:6d:8f:58:d1:ca:c8:06:78:ae:d4:dd:e0:
49:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:BA:24:4E:F6:EF:AA:42:C4:E3:46:4F:9B:85:8F:52:BE:57:40:38
X509v3 Authority Key Identifier:
keyid:E9:1B:C4:C4:2C:50:3D:A0:B7:F8:AF:16:F7:EE:4B:54:71:FF:0E:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6RvExCxQPaC3-K8W9-5LVHH_DgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a34b68-5dcf-4a81-bc08-d1c3f288799c/1/6RvExCxQPaC3-K8W9-5LVHH_DgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a34b68-5dcf-4a81-bc08-d1c3f288799c/1/6RvExCxQPaC3-K8W9-5LVHH_DgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:5d:1d:c6:67:51:36:ec:f9:ff:df:a0:98:61:c0:db:c9:87:
d7:42:32:f1:61:89:e3:85:4f:99:4d:c5:f9:5d:1f:8b:29:0f:
ab:b2:69:fb:09:3e:fd:c7:f8:9e:04:94:11:07:06:7c:3e:50:
0d:c9:90:23:d0:b6:ae:6e:4a:ee:b5:4e:80:9c:e9:2e:12:e0:
8c:9f:d5:04:94:f6:12:9e:8a:ad:30:c7:27:f9:10:ec:77:04:
de:a8:88:11:c1:a1:13:f3:c7:4d:b8:b2:8b:9c:43:79:9c:a3:
cb:e5:fb:49:8c:de:85:29:25:b3:f5:9f:f8:09:a4:72:2c:f1:
c9:d8:83:68:4b:0d:9f:d5:48:7f:e8:67:4d:62:53:a1:f5:36:
ab:33:0e:7f:e3:1c:6b:f5:41:1e:55:86:b6:01:f2:6d:7a:dd:
c3:9c:62:71:3d:23:b5:b4:57:bc:37:11:2e:13:57:27:cb:3e:
3c:d8:54:10:de:d1:0d:9e:e1:20:d6:34:57:42:46:69:52:24:
91:73:19:78:51:e4:43:75:78:5a:12:27:ed:be:a3:e7:11:e8:
ce:cd:e6:58:ae:71:45:09:e9:d1:ca:69:53:3e:97:75:c5:12:
5e:03:de:b6:1c:05:52:92:25:34:9d:26:f4:6e:db:7d:52:21:
3d:af:22:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:18:53 2025 by rpki-client