Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/e853ab-f470-4928-bc68-57e90c56a0e2/1/6g9bIh9q8yCY8wZNaCUbYXiSrJI.mft
File: 6g9bIh9q8yCY8wZNaCUbYXiSrJI.mft (raw, json)
Hash identifier: x+zHPEtwMpBPSq34uyb6JbPEcGSDS1vmIK3ja2WzW1w=
Subject key identifier: 19:55:F5:17:4B:4E:51:3D:49:06:71:BD:FF:D4:F9:08:BE:F7:7A:92
Authority key identifier: EA:0F:5B:22:1F:6A:F3:20:98:F3:06:4D:68:25:1B:61:78:92:AC:92
Certificate issuer: /CN=ea0f5b221f6af32098f3064d68251b617892ac92
Certificate serial: 019A4EBD43D94D7573A9FFCA4E6DE18E273C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6g9bIh9q8yCY8wZNaCUbYXiSrJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/e853ab-f470-4928-bc68-57e90c56a0e2/1/6g9bIh9q8yCY8wZNaCUbYXiSrJI.mft
Manifest number: 0C5B
Signing time: Tue 04 Nov 2025 12:00:17 +0000
Manifest this update: Tue 04 Nov 2025 12:00:17 +0000
Manifest next update: Wed 05 Nov 2025 12:00:17 +0000
Files and hashes: 1: 0XabXlC7deISiRQU33Gmn1-hwRM.roa (hash: XChkodvgKF7pFZfRd54zjJi0OLTiUwtDb3v0CScHm/A=)
2: 6g9bIh9q8yCY8wZNaCUbYXiSrJI.crl (hash: BtpPEqJJH8dzRyNkSyqSmsKIJZqigD01cq5rakeS77E=)
3: Jkdiv5bBO_BKcgc0OerouNuGE1k.roa (hash: VbBTlFGzjAjrvA9wRAtB5k6JdTD926ZHlAXAShcRc2U=)
4: RG7fXecCgltP9RGkiJ-aVXS-wsM.roa (hash: qs5jUi+jVQdO/5VzCetY5ouvlERqA5awKhxjDrx/XnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/e853ab-f470-4928-bc68-57e90c56a0e2/1/6g9bIh9q8yCY8wZNaCUbYXiSrJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/e853ab-f470-4928-bc68-57e90c56a0e2/1/6g9bIh9q8yCY8wZNaCUbYXiSrJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/6g9bIh9q8yCY8wZNaCUbYXiSrJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:bd:43:d9:4d:75:73:a9:ff:ca:4e:6d:e1:8e:27:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea0f5b221f6af32098f3064d68251b617892ac92
Validity
Not Before: Nov 4 12:00:17 2025 GMT
Not After : Nov 5 12:00:17 2025 GMT
Subject: CN=1955f5174b4e513d490671bdffd4f908bef77a92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:e7:59:45:aa:01:b1:2c:b6:f2:dc:d7:ec:5a:
95:35:f9:03:08:d7:3e:00:0c:6d:64:91:af:28:fd:
8b:8e:12:4b:6a:8d:83:b8:ab:40:91:84:d0:8f:55:
79:2c:78:c9:09:82:5a:0d:af:8d:7e:71:e6:d6:90:
cb:0b:96:60:b9:a4:d0:c2:2b:dc:52:a3:0b:e8:6b:
f1:13:eb:73:d4:ac:9a:81:b6:46:ed:01:82:fc:02:
0b:ca:32:c7:84:8f:d7:3b:38:67:c7:72:92:e8:42:
d9:5c:b7:4c:f3:c6:e0:d8:b5:bc:0e:cd:64:02:c7:
0f:2a:ad:3c:0b:db:bc:fd:b4:9e:a8:71:ac:ce:19:
31:cb:2d:2b:aa:46:0a:56:9a:d5:5e:6b:aa:b0:c9:
c6:eb:b2:a3:7b:c3:33:88:a7:84:c2:13:5a:a5:b5:
f9:22:22:5f:0f:2c:aa:48:69:53:d7:65:ba:16:eb:
32:97:51:7d:eb:da:bd:a2:16:02:a9:95:11:c1:35:
aa:bc:11:4f:e9:af:6c:8d:2a:9a:88:fd:ee:fb:ff:
4f:64:61:24:da:e0:0a:35:e7:6e:ad:39:8a:98:64:
b4:24:bf:b9:ad:f1:de:b9:d1:8c:b5:d0:ed:06:1a:
9b:10:8b:4e:48:f6:cd:85:9c:b8:bf:ad:87:f5:12:
6d:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:55:F5:17:4B:4E:51:3D:49:06:71:BD:FF:D4:F9:08:BE:F7:7A:92
X509v3 Authority Key Identifier:
keyid:EA:0F:5B:22:1F:6A:F3:20:98:F3:06:4D:68:25:1B:61:78:92:AC:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6g9bIh9q8yCY8wZNaCUbYXiSrJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e853ab-f470-4928-bc68-57e90c56a0e2/1/6g9bIh9q8yCY8wZNaCUbYXiSrJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e853ab-f470-4928-bc68-57e90c56a0e2/1/6g9bIh9q8yCY8wZNaCUbYXiSrJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:1f:a4:f1:77:fe:9b:bd:77:c1:78:6d:f9:a9:f1:e7:f7:f1:
c5:86:4d:e9:a0:37:12:96:18:f6:ce:e9:fa:57:ca:0d:a1:d6:
d6:9d:79:e1:2c:1d:fa:93:ef:f2:b9:8a:3d:7a:59:a3:77:94:
5e:b7:93:d1:53:f7:95:7b:94:40:a2:27:93:19:52:98:cb:55:
28:f3:38:eb:97:a2:95:84:0e:a0:a5:1e:45:2e:33:37:0e:90:
cb:bb:8d:13:e0:a7:28:ac:0e:3c:b5:ed:71:b6:44:5a:37:cc:
5c:3c:f3:6d:5e:6c:8a:2c:de:bc:39:df:b5:fb:eb:67:f9:24:
9b:21:17:0b:a5:a4:02:a7:8b:8f:91:ea:83:a9:5b:bf:8c:0d:
bb:35:31:7e:6d:2c:32:73:94:2c:bb:e1:0d:14:59:79:76:a7:
d3:83:76:e0:48:2d:9f:b4:81:ca:a8:01:92:7d:f7:40:7b:01:
bc:ec:0a:89:ca:b5:f5:1f:6e:8d:55:74:7a:b0:90:ee:5d:8e:
0a:5d:1d:d1:da:5d:c9:0e:b4:a3:42:4a:50:d9:92:d3:29:cd:
7c:e6:62:c4:df:62:ca:29:46:66:36:52:25:38:2a:9d:8a:23:
eb:f8:8c:d3:be:83:ee:8d:b0:9d:97:6c:51:40:48:c9:ae:fa:
75:45:ba:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:54:54 2025 by rpki-client