Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/c4bfd4-a0a1-4334-860a-4fa537dbe2e9/1/6KMuimrG9uw3hg7nwH6435MUd3k.mft
File: 6KMuimrG9uw3hg7nwH6435MUd3k.mft (raw, json)
Hash identifier: rvl+/w587tnuL+rasJd0EXGQt2b6/Ezz4LXy5A2qxwc=
Subject key identifier: 92:29:D2:27:75:7E:DA:D7:3F:65:35:0F:C3:DA:F9:62:A2:99:0D:33
Authority key identifier: E8:A3:2E:8A:6A:C6:F6:EC:37:86:0E:E7:C0:7E:B8:DF:93:14:77:79
Certificate issuer: /CN=e8a32e8a6ac6f6ec37860ee7c07eb8df93147779
Certificate serial: 019A5308545338CB47F7C89AB928779AAD9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6KMuimrG9uw3hg7nwH6435MUd3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/c4bfd4-a0a1-4334-860a-4fa537dbe2e9/1/6KMuimrG9uw3hg7nwH6435MUd3k.mft
Manifest number: 1710
Signing time: Wed 05 Nov 2025 08:00:46 +0000
Manifest this update: Wed 05 Nov 2025 08:00:46 +0000
Manifest next update: Thu 06 Nov 2025 08:00:46 +0000
Files and hashes: 1: 6KMuimrG9uw3hg7nwH6435MUd3k.crl (hash: EzqiGTqtb62+CKy2NWfaJt2L8EomNycbD3Qon+/khwY=)
2: IW2vrK3HcpopB_Br4A5_Kcu1YHA.roa (hash: jn7q3prF672ojCYbhHkipYPT+tMJuwcHdRX7fdgmul8=)
3: KQJWQNZZhN5fJ7Q5oCVgh_VAhjU.roa (hash: mRpx0bB3khjj82sXTsxVr+jlKn5E5ho7kq4lYObPEBI=)
4: oT8ZqtyuPG2bCnSuAma5RHBNbQM.roa (hash: JchFsffJ7J9U8adfMeuKKlBlUfa5a5FcVwQr7lJU+UI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/c4bfd4-a0a1-4334-860a-4fa537dbe2e9/1/6KMuimrG9uw3hg7nwH6435MUd3k.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/c4bfd4-a0a1-4334-860a-4fa537dbe2e9/1/6KMuimrG9uw3hg7nwH6435MUd3k.mft
rsync://rpki.ripe.net/repository/DEFAULT/6KMuimrG9uw3hg7nwH6435MUd3k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:08:54:53:38:cb:47:f7:c8:9a:b9:28:77:9a:ad:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8a32e8a6ac6f6ec37860ee7c07eb8df93147779
Validity
Not Before: Nov 5 08:00:46 2025 GMT
Not After : Nov 6 08:00:46 2025 GMT
Subject: CN=9229d227757edad73f65350fc3daf962a2990d33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:b1:43:72:df:7c:42:51:7a:9e:ac:1a:73:5d:
ad:75:19:3a:1b:df:54:12:14:16:b3:61:63:f4:72:
7e:30:37:13:d7:b6:24:07:de:0f:d7:14:21:50:8f:
34:8e:0f:5a:a0:fe:14:02:de:42:03:33:6f:2b:d7:
f4:8c:1c:89:1c:a0:6b:de:61:91:c1:9e:91:31:1f:
d8:fa:1f:ab:c7:43:b7:3c:95:64:5a:a0:72:9e:5d:
b0:47:14:ea:7e:b7:9f:1a:94:80:0b:ed:41:90:e8:
2c:45:07:78:2a:3a:3f:e9:c1:c7:63:f6:eb:e7:a2:
83:dc:e1:b1:e1:aa:b6:66:d0:9f:ed:ef:ad:0e:58:
0e:ef:7a:23:e6:19:e2:a0:88:1d:83:80:e0:4a:2b:
64:f5:c5:a1:7d:fd:0a:2e:ad:cf:64:e1:b4:2f:15:
5f:b9:07:ae:f6:07:2f:15:f3:5f:9a:04:73:a1:bb:
bd:ce:50:ec:c4:16:76:1a:fe:e7:b7:b9:57:0b:2c:
e9:8f:b3:60:f4:0c:02:d8:39:78:f5:6e:cf:86:06:
62:21:b2:8d:a1:cc:06:16:6b:a3:b2:c6:e1:c0:d4:
bb:cd:86:7f:61:b3:38:7e:04:b4:f5:d6:b8:a4:67:
ed:fa:17:55:57:94:21:6d:95:fb:f9:95:d4:d4:5d:
75:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:29:D2:27:75:7E:DA:D7:3F:65:35:0F:C3:DA:F9:62:A2:99:0D:33
X509v3 Authority Key Identifier:
keyid:E8:A3:2E:8A:6A:C6:F6:EC:37:86:0E:E7:C0:7E:B8:DF:93:14:77:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6KMuimrG9uw3hg7nwH6435MUd3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/c4bfd4-a0a1-4334-860a-4fa537dbe2e9/1/6KMuimrG9uw3hg7nwH6435MUd3k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/c4bfd4-a0a1-4334-860a-4fa537dbe2e9/1/6KMuimrG9uw3hg7nwH6435MUd3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:7d:3b:07:19:3c:69:f2:75:45:74:07:f9:0b:7f:92:25:da:
66:51:75:90:1b:08:b6:d6:46:10:e6:32:94:94:4f:bd:51:40:
31:4c:ab:d8:e9:ba:04:f2:b7:b6:87:68:04:5d:c6:49:2e:17:
28:d3:13:e8:c0:d1:f4:62:ba:b4:af:fa:d6:3a:0a:d7:be:bf:
92:d4:38:e0:12:94:30:61:80:62:23:1a:ad:52:a9:b5:c0:52:
f2:49:f6:10:33:d4:91:45:13:95:52:49:3f:32:f7:f9:70:b7:
e0:6e:98:99:c7:f0:d7:ff:64:54:c4:21:87:5a:30:e5:46:d8:
83:96:e2:4e:4d:42:58:4d:6c:91:61:e3:a7:e6:a9:6c:c4:8e:
57:f7:2c:4f:98:1c:06:1d:82:9f:86:68:a6:19:94:a0:e0:8b:
bb:ef:2a:37:56:87:10:aa:f0:4e:2a:6b:44:92:cd:49:74:21:
c5:2c:06:e2:d3:26:af:2b:73:b4:1c:26:56:89:e1:ed:0e:1f:
40:2b:ad:39:10:4a:b1:85:86:d3:ae:da:37:ea:0f:5a:50:76:
ab:2c:8d:78:e0:66:60:69:6c:11:09:af:7a:84:f8:9f:61:80:
30:22:cf:fb:b6:5d:4d:27:20:6c:96:e9:af:dc:e7:f4:bd:a7:
aa:de:3b:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:36:43 2025 by rpki-client