Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.mft
File: 6KhR3a5aZMw4glOVvppQfalat88.mft (raw, json)
Hash identifier: 6IlVi6zVJwmXZOESRoa/w9RkgCPB3rx+PakJmeXMS4o=
Subject key identifier: B9:99:21:28:AF:2F:AF:18:1F:DB:6A:F8:F4:8F:49:3F:81:33:7B:4B
Authority key identifier: E8:A8:51:DD:AE:5A:64:CC:38:82:53:95:BE:9A:50:7D:A9:5A:B7:CF
Certificate issuer: /CN=e8a851ddae5a64cc38825395be9a507da95ab7cf
Certificate serial: 019A503E0621D7E0A892D229CF3D344FE803
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6KhR3a5aZMw4glOVvppQfalat88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.mft
Manifest number: 1728
Signing time: Tue 04 Nov 2025 19:00:33 +0000
Manifest this update: Tue 04 Nov 2025 19:00:33 +0000
Manifest next update: Wed 05 Nov 2025 19:00:33 +0000
Files and hashes: 1: 6KhR3a5aZMw4glOVvppQfalat88.crl (hash: RABm8XO2qUOvXaVCXTviwSf/buY91XLYmYJVawvp85E=)
2: CgTYr4EhLa24IM21Hqih4Qqwlhs.roa (hash: L3KclJobQeVHsKxlYqzQz1I9Nwx/XkKtDyzqL3uEzCQ=)
3: JeUrUwbFpGu8iDqDZmLLtLX07Uo.roa (hash: AF4y3k0K4M29JKvnm3WAi9rM2wiDZSTI7KiQY/+WwGQ=)
4: LMOHIG2uLaY6GZHZHZ2LuvxqzKM.roa (hash: 4NroWDI/8Q2pwsJ7z2O+ja04jrPKvPKyJQ0j1cEhZ+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.mft
rsync://rpki.ripe.net/repository/DEFAULT/6KhR3a5aZMw4glOVvppQfalat88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3e:06:21:d7:e0:a8:92:d2:29:cf:3d:34:4f:e8:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8a851ddae5a64cc38825395be9a507da95ab7cf
Validity
Not Before: Nov 4 19:00:33 2025 GMT
Not After : Nov 5 19:00:33 2025 GMT
Subject: CN=b9992128af2faf181fdb6af8f48f493f81337b4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c3:0c:c9:2e:a3:42:a7:d9:7b:98:6a:c4:95:
9d:f8:40:0f:99:7f:20:09:3d:df:85:d2:91:ed:eb:
08:42:1d:6c:07:5b:3b:10:e6:fa:04:c0:19:37:85:
a4:57:3a:3c:a5:3c:c4:91:76:d3:00:69:b0:19:9b:
f6:5d:b0:3a:f6:6b:1b:46:e1:bf:6f:e9:9b:c7:b6:
7b:29:71:de:58:6b:08:6d:c1:9d:42:da:6a:80:0d:
9f:aa:1d:54:cd:96:81:29:05:02:00:90:ba:c7:2e:
eb:50:65:0c:da:31:11:39:dd:54:8a:55:e4:22:2c:
98:d6:d2:f4:e5:58:e1:03:ab:1f:80:00:ab:f7:3e:
ba:52:f8:d4:47:20:22:2b:6e:25:61:38:be:21:3e:
fa:af:cd:f6:04:a0:68:ac:68:b7:9c:56:98:28:cb:
43:ed:42:ec:a9:0e:f1:46:1d:4c:20:68:26:49:0a:
13:00:9d:00:f6:ac:4b:48:77:25:7a:fd:66:0b:5b:
2d:9a:cf:7a:4b:31:88:9c:4b:8b:b6:91:fe:40:f1:
7f:05:3d:ec:c0:5e:26:2d:68:43:c9:da:11:69:3c:
ac:3a:89:d1:f3:44:8c:97:19:ab:9f:dc:94:2d:71:
49:1b:90:1e:5d:2e:74:1e:6b:86:75:e4:fa:e3:ee:
bf:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:99:21:28:AF:2F:AF:18:1F:DB:6A:F8:F4:8F:49:3F:81:33:7B:4B
X509v3 Authority Key Identifier:
keyid:E8:A8:51:DD:AE:5A:64:CC:38:82:53:95:BE:9A:50:7D:A9:5A:B7:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6KhR3a5aZMw4glOVvppQfalat88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:cf:e9:01:13:c0:d7:d6:be:ec:44:c0:02:e1:51:22:80:87:
da:f2:a6:59:9f:fd:a8:2f:3d:6d:50:a7:db:98:7c:bb:72:e6:
6c:35:98:b5:fc:b0:64:b0:7d:4f:57:df:4f:46:bf:45:72:b2:
e7:c2:ff:78:bf:c3:77:82:1e:90:3d:61:e1:55:4a:74:6c:0c:
30:d8:c7:9a:22:89:a5:99:8c:f8:1e:23:bf:d5:c5:84:0b:ed:
b8:47:22:b3:2c:7a:ee:6f:ad:3c:48:96:45:ce:b0:08:4c:fa:
7f:76:d5:7c:b0:40:4e:01:fb:23:04:d5:11:a4:78:6b:eb:ae:
27:f0:1b:44:35:0c:bc:fb:f7:57:62:3d:df:f5:04:18:92:d1:
aa:3f:38:92:7d:24:12:6e:3b:e8:d7:c9:63:84:12:05:bb:8e:
3e:14:4c:b0:5f:c7:ef:70:9e:87:58:68:27:2b:8f:9d:c5:b3:
4e:f2:fb:da:66:8c:ad:55:50:ff:b8:37:2d:fd:34:3f:69:65:
df:d6:02:3e:24:15:52:ef:14:b1:e6:0e:8b:7c:0b:5e:0d:d1:
ca:e0:a6:78:8f:d7:b9:7c:77:7f:65:08:28:bd:fb:05:96:df:
5d:ba:ef:69:7d:fd:60:a6:e4:ea:61:f1:cc:4b:bb:c5:7c:c8:
20:01:c1:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:14:38 2025 by rpki-client