Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/4bb067-c365-452e-a93e-39da1ae8b731/1/6xU9o8JM4SNuIMRoYWNdyO-1apI.mft
File: 6xU9o8JM4SNuIMRoYWNdyO-1apI.mft (raw, json)
Hash identifier: 2t06/vKw59K8POWpneNEZl6wOmuJkmsbAtZalcdg+5g=
Subject key identifier: BE:D3:6C:55:10:D4:CC:8F:86:7C:EE:E6:FE:64:7D:4D:BA:ED:07:B3
Authority key identifier: EB:15:3D:A3:C2:4C:E1:23:6E:20:C4:68:61:63:5D:C8:EF:B5:6A:92
Certificate issuer: /CN=eb153da3c24ce1236e20c46861635dc8efb56a92
Certificate serial: 019A4C985C980FAF4FE5D85E910CBDB212B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6xU9o8JM4SNuIMRoYWNdyO-1apI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/4bb067-c365-452e-a93e-39da1ae8b731/1/6xU9o8JM4SNuIMRoYWNdyO-1apI.mft
Manifest number: 0DF2
Signing time: Tue 04 Nov 2025 02:00:44 +0000
Manifest this update: Tue 04 Nov 2025 02:00:44 +0000
Manifest next update: Wed 05 Nov 2025 02:00:44 +0000
Files and hashes: 1: 6xU9o8JM4SNuIMRoYWNdyO-1apI.crl (hash: eLBE/aQGXm4qdbbn+xLKlG9fNSWJBekB1MLzqIZz3lI=)
2: ipmJ5LQmK4ddp63lgFVAIAYopkE.roa (hash: YVYb+vZufn7OkrWKbNACiC73zlWWGlO/lMGiNA3e8zY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/4bb067-c365-452e-a93e-39da1ae8b731/1/6xU9o8JM4SNuIMRoYWNdyO-1apI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/4bb067-c365-452e-a93e-39da1ae8b731/1/6xU9o8JM4SNuIMRoYWNdyO-1apI.mft
rsync://rpki.ripe.net/repository/DEFAULT/6xU9o8JM4SNuIMRoYWNdyO-1apI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 02:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:98:5c:98:0f:af:4f:e5:d8:5e:91:0c:bd:b2:12:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb153da3c24ce1236e20c46861635dc8efb56a92
Validity
Not Before: Nov 4 02:00:44 2025 GMT
Not After : Nov 5 02:00:44 2025 GMT
Subject: CN=bed36c5510d4cc8f867ceee6fe647d4dbaed07b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:6f:11:ec:96:a0:d4:c4:7d:c2:24:9f:b7:24:
d6:3b:85:b7:18:d2:17:8b:d1:c3:de:d3:e9:b4:86:
8f:3d:91:f2:68:71:60:a9:e4:c5:df:4c:65:1c:7f:
f5:a7:dd:b8:30:fb:2e:c7:c4:68:60:08:94:b9:7d:
88:8c:24:3c:65:34:f1:d7:13:8b:5e:bc:55:e5:15:
33:ed:11:0a:b9:fd:0e:37:cd:1a:9e:76:c5:1b:10:
cc:ff:60:d0:21:51:3e:7c:5a:5f:8c:79:fb:aa:0f:
4c:ce:7f:c3:00:79:e5:ce:94:81:e6:48:87:50:9c:
65:32:9f:54:33:1f:77:02:94:94:1a:99:53:39:e6:
b6:75:31:6d:2a:dd:13:95:63:68:2e:a6:f7:ef:0a:
03:a4:af:8b:44:8d:96:fb:f2:38:7d:9f:f5:da:cd:
3f:71:a8:45:8d:74:5a:a0:de:df:7a:d3:4f:52:5a:
a3:9b:96:6a:f4:db:b2:99:43:d3:34:b4:e8:83:68:
14:1a:c6:cc:84:ea:88:58:45:18:40:00:af:2f:b2:
4b:65:8b:2a:ef:80:a4:2b:25:ac:12:ad:23:7b:72:
11:86:0b:c4:5e:34:03:e5:f8:55:eb:84:4b:42:7c:
6c:d4:ce:8e:91:40:5c:69:f9:7f:fc:91:20:d3:5d:
bf:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:D3:6C:55:10:D4:CC:8F:86:7C:EE:E6:FE:64:7D:4D:BA:ED:07:B3
X509v3 Authority Key Identifier:
keyid:EB:15:3D:A3:C2:4C:E1:23:6E:20:C4:68:61:63:5D:C8:EF:B5:6A:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6xU9o8JM4SNuIMRoYWNdyO-1apI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4bb067-c365-452e-a93e-39da1ae8b731/1/6xU9o8JM4SNuIMRoYWNdyO-1apI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4bb067-c365-452e-a93e-39da1ae8b731/1/6xU9o8JM4SNuIMRoYWNdyO-1apI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:77:ac:40:a3:54:cb:8e:09:8b:85:36:47:85:19:3f:90:93:
f3:fc:3b:1b:f7:35:33:a5:2b:37:48:68:b7:50:20:d5:e1:70:
32:04:4a:6f:aa:e6:59:6e:61:e8:74:08:e3:ec:bb:02:63:08:
87:b8:15:8d:df:8d:7d:c3:5a:6c:d9:90:4f:0b:2b:aa:80:2a:
a7:c8:12:34:f5:13:c1:b8:5b:0c:cb:7c:6b:62:e2:f0:47:18:
29:0f:0c:30:c0:e0:38:fd:7d:4b:63:52:46:10:0b:e7:c3:dc:
5c:0a:19:31:96:a8:5f:fe:66:ca:65:fb:d9:81:6e:da:06:d6:
ea:df:4a:ff:38:49:07:07:88:15:7e:07:8e:75:1e:9f:4d:2e:
f6:cb:60:a1:fd:cc:39:e0:cf:96:61:f3:46:50:af:e7:ae:6f:
fa:8e:f6:f9:37:04:74:23:95:29:bd:7a:22:e3:02:7f:67:0d:
7b:70:fb:fd:22:f8:d2:6a:f2:7b:6b:81:4c:70:5b:88:7d:52:
99:f4:08:ab:9f:09:26:c5:f6:89:f9:a3:95:79:72:16:7c:86:
2d:e2:5c:d7:1d:18:1d:ac:f8:3d:fe:03:ee:39:1e:67:63:46:
97:61:01:12:df:0b:61:ec:95:8d:a2:93:a8:3f:73:85:e0:40:
ff:bd:f7:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:47:24 2025 by rpki-client