Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/e7fa55-5925-4ba9-ad38-be7c81948324/1/6g92KC31MgmljAMC50-Kl8o6_wU.mft
File: 6g92KC31MgmljAMC50-Kl8o6_wU.mft (raw, json)
Hash identifier: 9SlNwnezTUnQMj/DpAB2ou1QgjhYTFTCqLkn5JqdLWY=
Subject key identifier: C2:0C:C9:CA:B6:31:3D:B7:BE:50:BC:86:B5:0E:0F:5D:38:AF:23:18
Authority key identifier: EA:0F:76:28:2D:F5:32:09:A5:8C:03:02:E7:4F:8A:97:CA:3A:FF:05
Certificate issuer: /CN=ea0f76282df53209a58c0302e74f8a97ca3aff05
Certificate serial: 019A4EF53FAA195E37C13958983D3128B412
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6g92KC31MgmljAMC50-Kl8o6_wU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/e7fa55-5925-4ba9-ad38-be7c81948324/1/6g92KC31MgmljAMC50-Kl8o6_wU.mft
Manifest number: 1411
Signing time: Tue 04 Nov 2025 13:01:26 +0000
Manifest this update: Tue 04 Nov 2025 13:01:26 +0000
Manifest next update: Wed 05 Nov 2025 13:01:26 +0000
Files and hashes: 1: 1-8bpJP4ldVymn01b0Lydy-jjhME.roa (hash: 0hHPnyQchhVyljrO2jyFNJVSYpCf6WjQrLOAi1ffRPU=)
2: 6g92KC31MgmljAMC50-Kl8o6_wU.crl (hash: jz5RTmMOMgX2ZH7G2QQu6fSzUUbDfc5QoZl+1EBH8mo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/e7fa55-5925-4ba9-ad38-be7c81948324/1/6g92KC31MgmljAMC50-Kl8o6_wU.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/e7fa55-5925-4ba9-ad38-be7c81948324/1/6g92KC31MgmljAMC50-Kl8o6_wU.mft
rsync://rpki.ripe.net/repository/DEFAULT/6g92KC31MgmljAMC50-Kl8o6_wU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:3f:aa:19:5e:37:c1:39:58:98:3d:31:28:b4:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea0f76282df53209a58c0302e74f8a97ca3aff05
Validity
Not Before: Nov 4 13:01:26 2025 GMT
Not After : Nov 5 13:01:26 2025 GMT
Subject: CN=c20cc9cab6313db7be50bc86b50e0f5d38af2318
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3d:f4:cd:bb:24:af:f7:70:f7:37:a1:65:38:
e5:bd:23:10:d3:19:e2:45:0d:b1:ac:6f:bd:0c:16:
d6:c8:62:c3:10:4a:7b:21:e1:20:78:56:b0:95:0a:
be:3f:60:78:82:9f:55:88:af:74:95:95:91:27:d5:
4a:91:f2:df:d3:cd:cd:5c:e9:59:a9:bc:55:27:ba:
76:8c:13:7a:37:74:c0:e8:35:23:87:4e:c6:64:52:
f9:e7:a2:bf:6c:06:0a:66:f5:1f:31:c8:70:88:60:
1b:72:79:84:23:a1:4a:17:b0:4d:f8:92:66:19:67:
9e:c3:18:82:52:63:9e:66:6c:46:18:b2:16:f2:4a:
fd:c1:ae:34:7c:ca:db:05:a9:ac:80:7c:d6:8a:11:
31:5c:65:73:bc:1d:44:c5:de:a6:20:64:35:a7:63:
a6:e8:59:eb:19:23:98:df:82:31:c5:92:44:2c:4f:
5f:92:a2:a9:67:4a:6a:6d:b3:d6:ef:10:ea:6d:23:
40:1b:dc:75:54:48:09:8a:56:7a:0d:79:b5:3e:8a:
16:f8:3d:5c:27:6c:a6:40:fc:7c:75:b4:a2:1a:fc:
7e:55:6b:ff:72:67:7a:a9:77:82:c8:93:07:d2:cc:
60:76:a7:6d:4d:9a:1e:82:1e:a3:4c:b8:87:5e:eb:
84:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:0C:C9:CA:B6:31:3D:B7:BE:50:BC:86:B5:0E:0F:5D:38:AF:23:18
X509v3 Authority Key Identifier:
keyid:EA:0F:76:28:2D:F5:32:09:A5:8C:03:02:E7:4F:8A:97:CA:3A:FF:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6g92KC31MgmljAMC50-Kl8o6_wU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e7fa55-5925-4ba9-ad38-be7c81948324/1/6g92KC31MgmljAMC50-Kl8o6_wU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e7fa55-5925-4ba9-ad38-be7c81948324/1/6g92KC31MgmljAMC50-Kl8o6_wU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:d3:c3:a3:ad:ad:fd:01:70:39:be:a3:cf:e6:c1:e3:23:38:
fd:57:39:f3:22:ab:42:f5:c6:cd:9f:64:de:fa:01:61:49:f3:
6f:e7:ce:01:f0:d4:7c:a7:1f:75:94:65:bb:c4:f3:be:81:fa:
8b:a6:8b:34:85:ad:88:4f:ce:1f:fa:a6:dc:e6:46:12:83:da:
e6:44:47:e7:49:9a:71:e2:ac:4c:01:44:90:6e:60:20:a1:87:
00:50:11:7e:05:13:6f:f5:ae:01:9c:d6:d5:08:de:b1:c7:e5:
76:d8:01:d7:ca:4e:57:36:a7:2c:9f:5b:32:1b:3f:93:4f:0e:
51:94:6d:aa:ca:16:fe:88:a6:a1:3b:29:7e:3e:63:d3:38:7c:
a5:ee:eb:a3:9c:67:f4:0e:88:9f:c5:b3:44:86:f5:c5:83:b4:
dd:1d:c3:c2:04:de:13:66:90:4e:0e:05:e6:c3:fe:35:e1:7f:
e9:4b:0e:06:b0:88:48:ff:85:84:19:db:e4:0e:41:35:b1:ce:
b2:ed:09:84:01:d5:ac:f2:6f:03:62:2d:83:19:bb:ab:c4:4f:
29:69:ec:c3:46:39:ee:d5:c0:80:60:49:c0:03:17:61:48:f6:
5b:fd:3c:8b:1c:ee:36:35:e2:cb:34:d1:32:82:24:99:7d:88:
ff:7e:d9:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:21:44 2025 by rpki-client