Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/5fb9fe-ddc7-4432-a4a3-16d9f7d074f3/1/6MpwwfyVubHp3Hd1RVutuSFPkdA.mft
File: 6MpwwfyVubHp3Hd1RVutuSFPkdA.mft (raw, json)
Hash identifier: 5vW4qxlUuzHX4r9h8HIKyh3UlzRemat3975HHqcAkyU=
Subject key identifier: 72:07:61:79:F8:55:F6:27:59:14:0C:5C:47:88:BD:CF:06:FB:29:35
Authority key identifier: E8:CA:70:C1:FC:95:B9:B1:E9:DC:77:75:45:5B:AD:B9:21:4F:91:D0
Certificate issuer: /CN=e8ca70c1fc95b9b1e9dc7775455badb9214f91d0
Certificate serial: 019A4E86303A34DBF881CDE4AD1DECC27369
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6MpwwfyVubHp3Hd1RVutuSFPkdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/5fb9fe-ddc7-4432-a4a3-16d9f7d074f3/1/6MpwwfyVubHp3Hd1RVutuSFPkdA.mft
Manifest number: 1613
Signing time: Tue 04 Nov 2025 11:00:08 +0000
Manifest this update: Tue 04 Nov 2025 11:00:08 +0000
Manifest next update: Wed 05 Nov 2025 11:00:08 +0000
Files and hashes: 1: 6MpwwfyVubHp3Hd1RVutuSFPkdA.crl (hash: YFaLO4ujz2lHrL5cCYfqTgbxerKO1RMphH4popsfyCI=)
2: h3MBCKUGhHfeEGJEjBUvFcZingY.roa (hash: Kf87fhJV7eWi54ATVvDhv4SnGp1TZLheM1w//OwPipM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/5fb9fe-ddc7-4432-a4a3-16d9f7d074f3/1/6MpwwfyVubHp3Hd1RVutuSFPkdA.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/5fb9fe-ddc7-4432-a4a3-16d9f7d074f3/1/6MpwwfyVubHp3Hd1RVutuSFPkdA.mft
rsync://rpki.ripe.net/repository/DEFAULT/6MpwwfyVubHp3Hd1RVutuSFPkdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 11:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:30:3a:34:db:f8:81:cd:e4:ad:1d:ec:c2:73:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8ca70c1fc95b9b1e9dc7775455badb9214f91d0
Validity
Not Before: Nov 4 11:00:08 2025 GMT
Not After : Nov 5 11:00:08 2025 GMT
Subject: CN=72076179f855f62759140c5c4788bdcf06fb2935
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:f8:f2:53:9f:45:cc:d9:e6:ea:30:95:24:01:
11:87:46:1b:ad:c9:34:74:f0:a1:20:77:e3:22:98:
75:3a:86:70:85:62:7b:30:3f:c1:93:d5:db:f7:e7:
51:d1:b2:dc:72:fb:0e:29:06:46:e5:5a:6d:d5:9b:
ec:09:f4:aa:b7:42:86:aa:09:3a:e4:00:42:59:00:
10:b6:39:77:0a:82:25:5e:f3:bb:4f:41:cd:83:5d:
8b:da:72:41:81:c4:9c:5a:9d:b5:1a:aa:40:b5:9c:
ca:bd:ab:52:51:07:a4:cd:0c:c5:9b:37:d9:30:12:
9a:aa:b4:03:78:4b:76:ea:1a:39:ad:86:b5:01:22:
d6:66:8c:ed:ab:11:99:5d:3f:c4:70:fe:52:72:48:
19:39:e1:4c:6f:c1:25:a0:29:3a:14:21:fb:9e:54:
16:ed:5e:38:b4:9c:e0:0e:d3:10:37:54:53:5b:c3:
60:7e:d6:31:9e:1f:a6:af:b6:55:5b:c2:50:38:81:
17:d8:4b:56:a5:ee:71:80:73:a1:01:fd:aa:e1:0b:
91:83:15:31:b3:14:60:6b:55:06:5d:8f:91:f9:3d:
64:c3:15:c2:5c:9d:74:4d:b0:ec:d5:f1:a7:21:d8:
8b:60:60:7f:d7:e7:b7:04:66:2a:17:31:44:d4:b1:
31:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:07:61:79:F8:55:F6:27:59:14:0C:5C:47:88:BD:CF:06:FB:29:35
X509v3 Authority Key Identifier:
keyid:E8:CA:70:C1:FC:95:B9:B1:E9:DC:77:75:45:5B:AD:B9:21:4F:91:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6MpwwfyVubHp3Hd1RVutuSFPkdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5fb9fe-ddc7-4432-a4a3-16d9f7d074f3/1/6MpwwfyVubHp3Hd1RVutuSFPkdA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5fb9fe-ddc7-4432-a4a3-16d9f7d074f3/1/6MpwwfyVubHp3Hd1RVutuSFPkdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:00:e9:ae:26:30:75:f8:b2:9c:70:07:bd:39:b8:8d:9d:04:
df:cb:76:3e:c1:9b:a7:2e:ac:06:65:fe:73:e5:60:1e:13:bd:
a5:4d:06:21:9f:5b:57:0d:34:49:3c:93:dd:15:fe:90:d5:f5:
ff:ef:92:07:ac:ee:0d:71:65:8a:3a:a5:74:25:9b:01:f1:66:
41:1a:00:22:1c:54:d9:09:00:19:0c:f5:f6:16:e8:90:d8:58:
e2:c1:33:79:d6:b6:7c:10:1b:6a:79:8e:d8:aa:40:98:08:d3:
80:86:a0:21:90:c2:7d:6f:d3:1a:bd:ff:69:2e:64:8c:e4:4d:
0c:cd:fc:e4:fb:22:c1:f7:ee:7d:03:8b:0f:c3:55:cd:b1:69:
b0:9c:d8:ad:7a:94:ac:c7:33:d2:a3:a2:14:e5:8d:a9:0c:46:
9d:d9:6c:d0:38:7a:09:94:55:cc:88:f8:f5:b8:ff:e7:2b:5b:
4c:f2:87:43:ec:70:b4:70:4a:66:89:53:98:4b:83:fb:8d:83:
e3:81:5f:7e:9b:f1:e2:4b:fb:86:1c:3a:57:5b:3e:a5:55:45:
5c:f5:af:61:6d:f6:a6:bb:bb:c2:03:4c:8b:a9:d2:76:0a:19:
34:46:55:80:70:b4:b0:96:78:12:e1:d0:17:d7:9c:fb:4d:f7:
f0:f6:1e:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:44:02 2025 by rpki-client