
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/c4bfd4-a0a1-4334-860a-4fa537dbe2e9/1/6KMuimrG9uw3hg7nwH6435MUd3k.mft
File: 6KMuimrG9uw3hg7nwH6435MUd3k.mft (raw, json)
Hash identifier: tubFq2svUPA8Vu0w34SdY9Y4bC50p4nNfzX6yiIzHGA=
Subject key identifier: AD:8C:4C:2D:B2:40:4E:EA:BF:80:E7:CB:10:8F:7B:36:7F:B9:D5:0B
Authority key identifier: E8:A3:2E:8A:6A:C6:F6:EC:37:86:0E:E7:C0:7E:B8:DF:93:14:77:79
Certificate issuer: /CN=e8a32e8a6ac6f6ec37860ee7c07eb8df93147779
Certificate serial: 019A5119EB1054666913C85317A6FD78FC1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6KMuimrG9uw3hg7nwH6435MUd3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/c4bfd4-a0a1-4334-860a-4fa537dbe2e9/1/6KMuimrG9uw3hg7nwH6435MUd3k.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 23:00:44 +0000
Manifest this update: Tue 04 Nov 2025 23:00:44 +0000
Manifest next update: Wed 05 Nov 2025 23:00:44 +0000
Files and hashes: 1: 6KMuimrG9uw3hg7nwH6435MUd3k.crl (hash: 0+7o/Nuxr/1RuoPoLOZcB+fCoH3S7Pm2OiX5h0JgKFk=)
2: IW2vrK3HcpopB_Br4A5_Kcu1YHA.roa (hash: jn7q3prF672ojCYbhHkipYPT+tMJuwcHdRX7fdgmul8=)
3: KQJWQNZZhN5fJ7Q5oCVgh_VAhjU.roa (hash: mRpx0bB3khjj82sXTsxVr+jlKn5E5ho7kq4lYObPEBI=)
4: oT8ZqtyuPG2bCnSuAma5RHBNbQM.roa (hash: JchFsffJ7J9U8adfMeuKKlBlUfa5a5FcVwQr7lJU+UI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/c4bfd4-a0a1-4334-860a-4fa537dbe2e9/1/6KMuimrG9uw3hg7nwH6435MUd3k.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/c4bfd4-a0a1-4334-860a-4fa537dbe2e9/1/6KMuimrG9uw3hg7nwH6435MUd3k.mft
rsync://rpki.ripe.net/repository/DEFAULT/6KMuimrG9uw3hg7nwH6435MUd3k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 23:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:19:eb:10:54:66:69:13:c8:53:17:a6:fd:78:fc:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8a32e8a6ac6f6ec37860ee7c07eb8df93147779
Validity
Not Before: Nov 4 23:00:44 2025 GMT
Not After : Nov 5 23:00:44 2025 GMT
Subject: CN=ad8c4c2db2404eeabf80e7cb108f7b367fb9d50b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:47:93:0a:46:07:0c:99:43:89:f0:03:53:a4:
62:e6:bd:0f:2d:c1:9f:6a:b6:7a:0a:50:e3:ef:bb:
79:dd:d1:ee:d4:b5:65:65:d0:5e:9d:f8:c8:75:91:
be:3e:72:53:2c:33:a2:15:52:c5:7f:eb:57:56:e1:
90:bf:14:73:33:d1:20:4f:f8:da:fb:4b:3c:ab:d1:
6b:22:db:92:05:07:c7:14:02:99:41:87:71:21:48:
1e:9e:6d:a9:32:95:70:c0:d1:f9:73:05:45:b6:ff:
69:57:09:91:b9:53:e0:8a:52:ad:74:a1:d4:e0:69:
9f:86:72:41:2f:14:ae:32:f8:d5:55:14:27:2b:fd:
08:f4:bf:35:e0:62:2f:41:0f:16:3d:8c:d9:4d:28:
c9:43:0f:e8:7b:94:55:70:0d:3d:de:20:fb:e7:87:
b0:af:d0:3b:14:c2:00:dd:74:b3:fc:38:d0:a6:62:
3e:a6:f0:e6:11:4e:3a:88:7f:2b:d0:11:f2:ab:b2:
90:ed:73:16:03:f1:a6:a7:0a:9c:db:b0:cd:4c:2a:
62:8f:79:0a:65:2e:aa:da:ce:21:be:61:8a:2f:e9:
16:c3:a6:02:68:74:6a:e6:13:b9:a2:3e:62:3c:07:
4f:e1:db:c8:e6:ba:ee:24:a6:c5:4f:d3:87:38:17:
61:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:8C:4C:2D:B2:40:4E:EA:BF:80:E7:CB:10:8F:7B:36:7F:B9:D5:0B
X509v3 Authority Key Identifier:
keyid:E8:A3:2E:8A:6A:C6:F6:EC:37:86:0E:E7:C0:7E:B8:DF:93:14:77:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6KMuimrG9uw3hg7nwH6435MUd3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/c4bfd4-a0a1-4334-860a-4fa537dbe2e9/1/6KMuimrG9uw3hg7nwH6435MUd3k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/c4bfd4-a0a1-4334-860a-4fa537dbe2e9/1/6KMuimrG9uw3hg7nwH6435MUd3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:e1:29:f3:dd:73:fb:3b:03:4a:c1:11:e4:2d:a5:e7:ee:53:
08:c1:e1:00:81:90:69:92:54:26:1e:7f:c1:e8:63:26:5b:73:
a2:3c:26:06:93:28:ae:c5:50:18:49:da:d8:b1:70:3b:1e:53:
a5:92:bf:59:60:0c:e1:db:c5:8f:e3:9a:06:f8:cc:b7:1b:f6:
5d:a3:66:85:6e:02:7d:bb:21:db:25:6c:0c:8e:ad:47:8d:b2:
43:0c:4a:cf:1b:cc:a0:ee:8b:7c:02:41:e8:99:43:18:7f:0e:
54:b7:5d:02:f3:14:5d:08:3d:ff:66:e1:20:c6:55:2b:20:f4:
d6:98:b7:42:71:1b:e4:19:c0:40:a6:d3:29:50:2c:79:57:8b:
f7:db:ed:24:55:c1:a5:67:f6:39:19:a5:ea:ec:8e:22:34:b3:
30:40:5f:c9:e3:a9:96:af:90:07:41:34:3e:fb:54:85:ee:5e:
af:81:e3:bd:37:3d:63:e9:0c:31:33:cf:be:d8:8e:9f:48:a8:
d2:16:5d:98:82:1a:ea:a6:f7:38:37:13:ff:4e:d7:b3:21:ad:
33:33:0a:7e:bb:d1:fc:c7:2c:50:29:b5:54:fa:30:8f:eb:4d:
81:df:49:8a:50:f9:e9:10:17:05:77:39:bd:13:ad:2f:78:01:
11:36:a9:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:38:09 2025 by rpki-client