Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/5af4ce-0eee-4182-9094-9f52c730acdf/1/6TlUD9FrYzUB-_dEGnRvxW-fWb8.mft
File: 6TlUD9FrYzUB-_dEGnRvxW-fWb8.mft (raw, json)
Hash identifier: 1Od8+mGPIpxbNJSWhincEdbx9IGQLGEs5IsVHmVvAAc=
Subject key identifier: 24:05:CA:B9:1F:17:E5:6C:BA:00:DC:31:46:ED:08:FB:38:AB:0E:27
Authority key identifier: E9:39:54:0F:D1:6B:63:35:01:FB:F7:44:1A:74:6F:C5:6F:9F:59:BF
Certificate issuer: /CN=e939540fd16b633501fbf7441a746fc56f9f59bf
Certificate serial: 019A52D17935348772784373C29F12659295
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6TlUD9FrYzUB-_dEGnRvxW-fWb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/5af4ce-0eee-4182-9094-9f52c730acdf/1/6TlUD9FrYzUB-_dEGnRvxW-fWb8.mft
Manifest number: 04A8
Signing time: Wed 05 Nov 2025 07:00:50 +0000
Manifest this update: Wed 05 Nov 2025 07:00:50 +0000
Manifest next update: Thu 06 Nov 2025 07:00:50 +0000
Files and hashes: 1: 4hrax96C0YsCzZ7N3cD-vhrr54E.roa (hash: p2Xi036U7l5VIBvQc3SfD5E2iNcExLoqMhnCDdE1HDs=)
2: 6TlUD9FrYzUB-_dEGnRvxW-fWb8.crl (hash: vHF9IgI/zxwgwNeOHFMrbpCfy/f86mIxfhCYJ4dtBZE=)
3: aMF2nWqBHIhjk25aiuwSzN7-HfE.roa (hash: IMpF5s/0j570fq7XGWlyuKmW+Kc6O3oORXvCBLA1GSM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/5af4ce-0eee-4182-9094-9f52c730acdf/1/6TlUD9FrYzUB-_dEGnRvxW-fWb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/5af4ce-0eee-4182-9094-9f52c730acdf/1/6TlUD9FrYzUB-_dEGnRvxW-fWb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/6TlUD9FrYzUB-_dEGnRvxW-fWb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d1:79:35:34:87:72:78:43:73:c2:9f:12:65:92:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e939540fd16b633501fbf7441a746fc56f9f59bf
Validity
Not Before: Nov 5 07:00:50 2025 GMT
Not After : Nov 6 07:00:50 2025 GMT
Subject: CN=2405cab91f17e56cba00dc3146ed08fb38ab0e27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:7e:c3:b0:34:67:24:eb:f8:31:51:b3:e5:5c:
cf:d0:b2:b6:c7:46:1d:76:2e:f5:ba:d3:16:65:07:
68:a3:18:a1:4c:32:5b:a5:92:fd:d2:8d:26:e1:b6:
32:f5:30:a5:5d:39:e7:fa:60:c8:1b:74:0d:18:85:
99:3a:7c:c0:fd:aa:04:c6:33:e8:b8:de:1c:b4:fd:
21:cb:6e:a1:c2:e9:5e:41:51:d8:b2:29:04:a0:58:
d3:0f:30:0c:16:0d:04:11:29:f1:dc:4c:4e:5f:d4:
b0:1f:6a:a1:d9:19:54:05:31:13:85:ef:7d:58:0e:
1c:97:35:89:b0:30:e3:c9:5a:6b:2e:81:10:8d:8d:
61:61:0a:af:1c:82:cd:b5:1a:be:1f:c2:43:4c:0c:
89:d9:d6:c9:9a:a7:87:75:73:7b:50:03:b2:eb:3f:
4a:c2:1f:e6:cd:3d:49:2c:99:d2:66:85:64:31:eb:
71:c3:0a:b1:1a:7d:d7:3a:6c:d7:f0:3d:1d:47:ca:
60:d6:e0:9c:84:b9:19:2b:95:58:5b:b4:94:01:6a:
bf:aa:50:9c:3c:d8:cb:1b:fc:b1:68:5c:78:2e:31:
7e:2f:09:ca:e0:d8:a5:66:d1:0a:c8:7a:5a:14:37:
91:65:ae:9e:22:e7:34:a3:67:61:a9:07:a3:70:5b:
61:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:05:CA:B9:1F:17:E5:6C:BA:00:DC:31:46:ED:08:FB:38:AB:0E:27
X509v3 Authority Key Identifier:
keyid:E9:39:54:0F:D1:6B:63:35:01:FB:F7:44:1A:74:6F:C5:6F:9F:59:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6TlUD9FrYzUB-_dEGnRvxW-fWb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5af4ce-0eee-4182-9094-9f52c730acdf/1/6TlUD9FrYzUB-_dEGnRvxW-fWb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5af4ce-0eee-4182-9094-9f52c730acdf/1/6TlUD9FrYzUB-_dEGnRvxW-fWb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:34:03:db:60:77:dd:98:d8:14:d0:54:6b:83:30:0f:27:30:
f0:86:45:e9:54:44:be:fb:b2:5e:0a:f1:42:e3:8e:7c:c1:b5:
8c:ed:6a:be:d6:91:56:38:a0:74:02:70:57:32:16:01:de:4f:
1b:e0:35:52:8a:ed:8c:5f:cd:40:30:42:bb:3c:35:5d:f8:7d:
45:10:a3:8b:36:2b:fe:5f:c3:dc:ad:b3:fd:24:fe:52:5e:32:
9a:a9:61:6f:30:0e:ae:1b:a2:1a:86:e4:c2:d1:7d:28:b7:40:
6b:b0:23:75:9a:ec:39:17:32:06:13:a9:70:1d:48:3f:38:68:
2e:a6:2c:11:8b:fc:56:23:f9:da:25:33:16:22:db:a7:b5:2f:
5c:ee:3d:4b:44:dd:71:e4:04:3c:d2:70:9f:4c:b4:9c:9f:07:
12:21:90:30:fc:14:3b:5c:8e:f8:dc:2d:74:b8:b6:6c:fd:a1:
f0:1b:4b:ef:c0:d4:b9:b5:f1:6b:24:54:5f:85:43:0b:d6:7b:
b2:20:23:63:15:1c:71:6c:62:4c:62:7f:98:6b:63:68:86:f5:
5b:4c:df:d5:87:f4:1f:1d:42:d7:6d:e0:53:39:df:f2:a6:b4:
64:a6:a8:36:38:45:2a:a6:d3:f1:04:6d:97:ae:53:71:d8:ba:
3e:7b:82:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:12:28 2025 by rpki-client