Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/8e7e1d-158f-4c6e-aba3-39f13e76afa3/1/6ixOp53bewA94B8dBfbb9xaxEzY.mft
File: 6ixOp53bewA94B8dBfbb9xaxEzY.mft (raw, json)
Hash identifier: OOkL8GfuzYUj0npsudRjy6X35sHwp+mNJZZlCoD7wfU=
Subject key identifier: C0:CD:51:8C:25:6C:6D:75:C6:56:4B:8F:89:87:FF:66:84:68:68:72
Authority key identifier: EA:2C:4E:A7:9D:DB:7B:00:3D:E0:1F:1D:05:F6:DB:F7:16:B1:13:36
Certificate issuer: /CN=ea2c4ea79ddb7b003de01f1d05f6dbf716b11336
Certificate serial: 019A4EF455DC03C0939C51CFC6CBF84985B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6ixOp53bewA94B8dBfbb9xaxEzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/8e7e1d-158f-4c6e-aba3-39f13e76afa3/1/6ixOp53bewA94B8dBfbb9xaxEzY.mft
Manifest number: 169F
Signing time: Tue 04 Nov 2025 13:00:26 +0000
Manifest this update: Tue 04 Nov 2025 13:00:26 +0000
Manifest next update: Wed 05 Nov 2025 13:00:26 +0000
Files and hashes: 1: 6ixOp53bewA94B8dBfbb9xaxEzY.crl (hash: 0SbqxbQUo2B0kpCOQsNLqtdTKSpCsv4HIVrw82BkFW0=)
2: UBg5H2PYYwmFwtuuB5TxJD258zc.roa (hash: mETMUQGm3Ge4vPrABQSGfrYWzYlfLqVqloDe3yUr+lM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/8e7e1d-158f-4c6e-aba3-39f13e76afa3/1/6ixOp53bewA94B8dBfbb9xaxEzY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/8e7e1d-158f-4c6e-aba3-39f13e76afa3/1/6ixOp53bewA94B8dBfbb9xaxEzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6ixOp53bewA94B8dBfbb9xaxEzY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:55:dc:03:c0:93:9c:51:cf:c6:cb:f8:49:85:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea2c4ea79ddb7b003de01f1d05f6dbf716b11336
Validity
Not Before: Nov 4 13:00:26 2025 GMT
Not After : Nov 5 13:00:26 2025 GMT
Subject: CN=c0cd518c256c6d75c6564b8f8987ff6684686872
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:59:2f:4a:50:42:4a:b9:f2:b4:e9:5a:db:c4:
c7:f6:5c:7c:36:f2:71:4d:85:92:cf:12:5a:f0:7f:
86:fb:58:12:16:b5:68:61:1e:6a:f6:86:b0:f9:a0:
4d:65:b7:fc:cf:02:0f:d3:38:e9:88:01:6a:eb:d0:
23:21:50:e5:8e:26:c8:f9:36:79:6a:c0:89:1f:b5:
ac:c6:88:ef:ea:f1:d9:c0:26:50:57:b1:01:a1:8b:
42:a2:60:d8:df:e2:c2:e7:8d:45:6f:29:f2:4b:4d:
11:5e:b4:e7:69:85:ba:dc:e4:99:29:7c:9a:3b:81:
7e:ee:ca:05:7b:2f:94:79:3e:47:bd:a4:60:20:4c:
12:90:ed:37:29:ee:29:7c:36:d1:43:22:af:cc:e8:
5f:ca:b0:9d:83:16:c4:20:8b:fb:d5:49:ee:5f:0c:
04:f9:2b:0c:81:63:79:35:3b:f7:f1:5c:79:23:6e:
b5:3f:5d:9d:c9:39:2c:bd:d1:da:d4:e6:6f:c4:dd:
a1:d9:83:a4:42:c8:85:5b:20:09:dd:0d:f6:78:e3:
39:b1:a8:b6:d2:d1:b5:b0:12:05:bd:ba:5e:34:01:
1d:02:80:a0:de:d4:27:2a:19:72:78:30:6b:bd:9c:
4d:0b:d4:08:56:05:1a:82:25:f7:7f:5b:f4:e0:5a:
74:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:CD:51:8C:25:6C:6D:75:C6:56:4B:8F:89:87:FF:66:84:68:68:72
X509v3 Authority Key Identifier:
keyid:EA:2C:4E:A7:9D:DB:7B:00:3D:E0:1F:1D:05:F6:DB:F7:16:B1:13:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ixOp53bewA94B8dBfbb9xaxEzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/8e7e1d-158f-4c6e-aba3-39f13e76afa3/1/6ixOp53bewA94B8dBfbb9xaxEzY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/8e7e1d-158f-4c6e-aba3-39f13e76afa3/1/6ixOp53bewA94B8dBfbb9xaxEzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:af:15:c7:64:32:26:7d:cf:5a:1e:96:e7:84:34:7d:61:99:
f1:b9:b0:fb:f2:b8:91:f8:04:c5:a9:70:5e:17:c6:b3:47:57:
5c:f5:90:93:6b:71:47:d8:89:39:01:f0:51:1a:3b:1d:49:20:
b5:f9:60:f9:4a:43:89:4a:77:55:17:d4:aa:77:fc:03:97:6d:
cc:7b:47:f5:bb:8c:87:2d:03:7c:6d:88:2d:22:59:6d:68:d3:
e3:b9:f1:ab:f3:51:33:fa:97:41:a9:d4:21:81:67:5e:5b:39:
1f:92:d2:23:da:f4:a4:93:ba:11:7b:45:b8:a5:7f:a1:78:00:
9e:e1:2f:dc:30:f1:b7:7b:c7:94:92:fe:3c:4d:a9:46:2d:32:
b4:b5:34:81:a7:bb:8b:00:40:41:72:02:dd:1a:59:b9:f7:b9:
17:b0:b3:4c:58:6f:91:3d:a6:4e:fa:3f:5d:52:4f:25:d2:81:
c1:80:03:5a:2f:28:b4:40:a0:ff:fd:45:73:c7:bd:8b:83:61:
04:f0:bb:de:db:2f:8e:80:fc:ee:e6:c9:0f:36:7a:df:2a:bc:
2a:40:a8:ef:80:0f:72:3d:3f:1d:50:59:4e:50:41:23:91:02:
d4:c5:22:8b:a6:55:09:d0:9b:0d:3b:45:dc:5d:42:39:65:d0:
fb:6c:2e:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:06:07 2025 by rpki-client