
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/ea9402-be4d-49f3-81fb-4df728c58d17/1/6Tj5GCt9pEADWR7q4lYPhFGzOTo.mft
File: 6Tj5GCt9pEADWR7q4lYPhFGzOTo.mft (raw, json)
Hash identifier: sNqsq3wV5xGy8pE2n6tM/fik4uBYL/8uoF3Hye5yK/4=
Subject key identifier: D4:F0:4A:C4:5A:4B:4A:44:C4:3A:D3:04:68:BB:E7:58:9D:CC:64:8E
Authority key identifier: E9:38:F9:18:2B:7D:A4:40:03:59:1E:EA:E2:56:0F:84:51:B3:39:3A
Certificate issuer: /CN=e938f9182b7da44003591eeae2560f8451b3393a
Certificate serial: 019A50E2622030D5338BFD33E794EDEE5288
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Tj5GCt9pEADWR7q4lYPhFGzOTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/ea9402-be4d-49f3-81fb-4df728c58d17/1/6Tj5GCt9pEADWR7q4lYPhFGzOTo.mft
Manifest number: 10B9
Signing time: Tue 04 Nov 2025 22:00:04 +0000
Manifest this update: Tue 04 Nov 2025 22:00:04 +0000
Manifest next update: Wed 05 Nov 2025 22:00:04 +0000
Files and hashes: 1: 1o1EO_QQPmnZ8plF5uOUWfPej3I.roa (hash: ih+zsElPgdS9pl3aJWT5y3rEqtTRMgUDV5NvhBE9Nxk=)
2: 6Tj5GCt9pEADWR7q4lYPhFGzOTo.crl (hash: qSGpGbDY5cKdiGuqTZRoOxuimIbW28jisgZynLgUSIE=)
3: KwwH1tV59uIMDd5TAGspH19uR4o.roa (hash: x1yYHpItXbsfzuH9Uo0WPpObfj69kidI+dgaDxqjw94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/ea9402-be4d-49f3-81fb-4df728c58d17/1/6Tj5GCt9pEADWR7q4lYPhFGzOTo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/ea9402-be4d-49f3-81fb-4df728c58d17/1/6Tj5GCt9pEADWR7q4lYPhFGzOTo.mft
rsync://rpki.ripe.net/repository/DEFAULT/6Tj5GCt9pEADWR7q4lYPhFGzOTo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e2:62:20:30:d5:33:8b:fd:33:e7:94:ed:ee:52:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e938f9182b7da44003591eeae2560f8451b3393a
Validity
Not Before: Nov 4 22:00:04 2025 GMT
Not After : Nov 5 22:00:04 2025 GMT
Subject: CN=d4f04ac45a4b4a44c43ad30468bbe7589dcc648e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:44:17:27:7a:8e:ff:10:64:a2:fd:cf:fb:b7:
17:f9:68:8e:d4:67:eb:0d:15:39:21:fc:59:a8:69:
25:b1:f2:7b:ba:10:46:70:b9:35:0f:a9:09:a8:d7:
ad:20:f8:1f:76:68:04:23:2b:63:2a:f8:9d:7e:62:
d9:a4:f4:67:13:85:6b:7f:db:e2:ca:77:d3:a1:2b:
65:79:f8:1c:21:41:08:17:6f:41:3a:05:cb:b1:4f:
29:99:89:c7:8a:7f:97:07:b7:49:58:7e:f0:fd:b4:
db:bc:a4:a5:a9:18:5d:62:06:c7:08:29:82:33:13:
83:59:f3:44:0d:42:64:1f:12:f0:5a:73:2a:80:02:
f9:44:7c:a8:10:be:a9:f5:52:35:68:ab:eb:4b:73:
a6:d7:12:c9:48:2a:8f:a6:93:80:8a:a7:f7:45:36:
eb:0d:91:98:ce:08:d7:85:92:99:b7:f2:2c:1f:fa:
c1:a3:5c:f2:d6:81:46:98:45:e7:f2:08:48:a4:d2:
96:7d:60:65:f3:1c:e8:18:e2:95:cc:16:81:42:83:
e2:a4:d5:d2:e8:11:c5:27:c3:a6:5a:58:1e:61:21:
a1:69:1b:01:1d:bb:fa:35:9d:c2:dc:d4:30:b1:2e:
9d:f1:a1:5a:47:9e:e7:91:c9:d7:01:e9:a0:ea:12:
f0:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:F0:4A:C4:5A:4B:4A:44:C4:3A:D3:04:68:BB:E7:58:9D:CC:64:8E
X509v3 Authority Key Identifier:
keyid:E9:38:F9:18:2B:7D:A4:40:03:59:1E:EA:E2:56:0F:84:51:B3:39:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Tj5GCt9pEADWR7q4lYPhFGzOTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ea9402-be4d-49f3-81fb-4df728c58d17/1/6Tj5GCt9pEADWR7q4lYPhFGzOTo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ea9402-be4d-49f3-81fb-4df728c58d17/1/6Tj5GCt9pEADWR7q4lYPhFGzOTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:bb:e0:6b:0c:ff:37:7f:4c:3f:b8:f6:0c:bd:cb:7c:05:92:
27:a1:62:d8:93:e4:e3:b2:89:b3:0e:46:78:d3:67:8f:fe:3d:
e0:d1:e3:d0:df:80:4e:ea:56:49:d8:e3:79:8a:cc:e9:25:6f:
cb:56:3f:53:cd:c9:c7:57:39:16:64:1f:74:6e:f9:3f:af:d7:
b5:b8:de:10:61:11:be:76:b3:f0:c6:00:09:7f:a3:6b:f1:03:
d4:22:29:1d:6d:f3:61:c2:eb:83:04:7d:7b:1b:83:3a:4e:40:
79:63:96:8b:fc:21:0d:42:39:80:42:0d:af:73:e5:11:02:e6:
33:40:20:57:36:12:84:1c:e0:a5:1b:42:e0:78:08:fa:25:5c:
62:fa:42:14:8b:bd:2d:87:d4:2d:f5:c5:61:9c:0d:e2:59:71:
65:b4:24:0f:a7:9a:83:04:e0:e2:d2:ec:de:4f:8a:86:b6:f7:
20:24:64:26:19:59:9f:ae:92:f3:f2:83:49:02:f4:49:ab:63:
b5:46:75:0f:1a:64:33:f3:36:4c:b4:9c:ff:53:bb:4f:8f:46:
42:2e:c9:db:cb:3d:79:98:8e:bb:51:7b:6a:9c:32:44:4a:e6:
a5:89:f2:ab:a5:ad:a9:4b:c5:ef:10:6c:ee:fb:0e:0f:d0:c1:
63:bd:0c:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:26:48 2025 by rpki-client