Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/45a04c-cb0d-4c0c-8bf1-48f39fde0eea/1/6YD7lTCjb_e3Qw1Q1EuPttbcqTc.mft
File: 6YD7lTCjb_e3Qw1Q1EuPttbcqTc.mft (raw, json)
Hash identifier: QeiEer6xFcUH8hGk56FHRhQ/t8HXtsvYYLbS27bVKOQ=
Subject key identifier: E9:B5:B2:BB:A6:60:1E:D8:C6:11:10:E2:40:CD:0A:C5:66:26:FB:3C
Authority key identifier: E9:80:FB:95:30:A3:6F:F7:B7:43:0D:50:D4:4B:8F:B6:D6:DC:A9:37
Certificate issuer: /CN=e980fb9530a36ff7b7430d50d44b8fb6d6dca937
Certificate serial: 019A503D96BA9723A63EB14FDDD397587494
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6YD7lTCjb_e3Qw1Q1EuPttbcqTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/45a04c-cb0d-4c0c-8bf1-48f39fde0eea/1/6YD7lTCjb_e3Qw1Q1EuPttbcqTc.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 19:00:04 +0000
Manifest this update: Tue 04 Nov 2025 19:00:04 +0000
Manifest next update: Wed 05 Nov 2025 19:00:04 +0000
Files and hashes: 1: 6YD7lTCjb_e3Qw1Q1EuPttbcqTc.crl (hash: IcytspOBKO+cGiEou1z40BAqSDRkRQVQHlltFHQzvD0=)
2: hOUxeyZ4GUGm-ViSGta_EVCSneY.roa (hash: qqJoiI/uI9+nuUNJ0WHcG5fxVsdVi3S2HfiMZR4B1Xg=)
3: vhuqt87dQlwpLm6mImrsEtoMnS0.roa (hash: OYcjE2mSIdir4/5GLlaTPE0qszgr/jJDU6iPw1A8rm0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/45a04c-cb0d-4c0c-8bf1-48f39fde0eea/1/6YD7lTCjb_e3Qw1Q1EuPttbcqTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/45a04c-cb0d-4c0c-8bf1-48f39fde0eea/1/6YD7lTCjb_e3Qw1Q1EuPttbcqTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/6YD7lTCjb_e3Qw1Q1EuPttbcqTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3d:96:ba:97:23:a6:3e:b1:4f:dd:d3:97:58:74:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e980fb9530a36ff7b7430d50d44b8fb6d6dca937
Validity
Not Before: Nov 4 19:00:04 2025 GMT
Not After : Nov 5 19:00:04 2025 GMT
Subject: CN=e9b5b2bba6601ed8c61110e240cd0ac56626fb3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:bd:60:2f:ad:37:09:72:2c:e3:88:ad:35:2b:
02:74:3b:29:a3:d2:2c:6e:1b:26:b8:0d:a0:26:5f:
8f:01:1a:47:90:3a:de:33:e5:0c:42:20:c0:35:89:
09:bf:c0:62:7b:3e:e7:da:a7:2e:79:0b:ce:82:80:
4b:94:05:78:c9:2d:e1:86:5d:4f:00:27:d1:4a:05:
3a:1b:80:69:af:57:7c:a4:c0:4b:92:bb:2d:ec:ef:
de:46:08:0a:77:c1:92:6c:a1:96:10:fd:2b:c0:c5:
ce:ec:67:11:7b:83:a4:96:3a:85:89:ce:22:c0:8b:
9a:f6:b3:fb:15:3c:07:5e:82:67:01:bd:54:ed:0a:
25:e2:5b:84:8a:79:1a:b2:fb:78:8a:99:91:89:cd:
9a:47:38:5d:1e:56:e6:60:1e:37:82:d4:96:86:82:
4d:a9:45:d4:3a:9c:c0:ad:c5:56:0a:a7:67:b0:c8:
a3:32:1c:8e:d6:b1:ae:f0:ff:1c:20:4d:4f:bb:d7:
e8:18:39:e9:07:dd:61:bd:ce:eb:e0:39:ff:1f:9e:
d5:25:b4:52:b0:b6:8b:2f:80:5f:df:97:96:97:9a:
2f:13:ce:da:57:78:51:02:70:38:76:48:f5:30:09:
f6:70:07:4a:ae:b4:a7:8b:6e:65:8c:e4:a3:a2:84:
69:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:B5:B2:BB:A6:60:1E:D8:C6:11:10:E2:40:CD:0A:C5:66:26:FB:3C
X509v3 Authority Key Identifier:
keyid:E9:80:FB:95:30:A3:6F:F7:B7:43:0D:50:D4:4B:8F:B6:D6:DC:A9:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6YD7lTCjb_e3Qw1Q1EuPttbcqTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/45a04c-cb0d-4c0c-8bf1-48f39fde0eea/1/6YD7lTCjb_e3Qw1Q1EuPttbcqTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/45a04c-cb0d-4c0c-8bf1-48f39fde0eea/1/6YD7lTCjb_e3Qw1Q1EuPttbcqTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:24:77:53:f2:bc:b6:9a:4a:f1:fd:4c:4e:e1:c5:b7:cf:21:
9b:11:12:7e:e6:dc:f8:9e:27:19:95:82:50:d0:a1:4b:43:96:
17:f0:56:7e:ab:de:4e:6c:b5:d1:8d:4a:55:ed:d7:ae:0a:a7:
be:6b:e0:9e:6b:22:ed:d2:d0:39:f8:4c:16:9c:ca:79:a2:4e:
b7:4d:24:06:8c:44:22:58:79:1c:39:2f:7c:dc:c6:45:4c:83:
3d:66:fd:61:aa:9f:48:b4:35:46:b9:79:5b:11:16:ed:35:a3:
3e:cd:8b:8c:f3:89:4c:a0:9e:63:76:4a:d9:18:c4:29:72:44:
dd:d3:df:91:67:cc:7f:79:13:ca:d7:06:9a:48:b6:8d:2e:d3:
80:00:46:25:c6:0e:f6:aa:bf:77:78:fc:0d:ef:98:e1:8b:a7:
70:d2:2c:de:68:92:a6:a3:09:f0:60:15:2e:f3:33:a7:79:32:
7a:09:b9:9f:84:e8:a6:0c:b6:c2:7d:69:f7:a3:2f:1f:c6:6b:
53:7f:1a:54:d1:2b:cd:1e:e3:87:3e:95:8e:e1:31:8a:d9:7e:
5e:85:55:9d:76:2b:7f:c8:b7:1c:81:b8:8e:16:fb:62:e8:11:
78:49:9a:c0:78:ee:47:87:8c:53:ea:a7:13:35:02:ef:14:f3:
30:ef:70:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:12:45 2025 by rpki-client