Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/b8c30c-82d9-46bb-bb07-9ca100428f10/1/6zN-rWubk90NdYq_nXswMHKpnrk.mft
File: 6zN-rWubk90NdYq_nXswMHKpnrk.mft (raw, json)
Hash identifier: qCs7+fcAkXDoJwnKhhaP/L+wcpxkwkBvT8leu+vJ5I0=
Subject key identifier: AA:F3:9D:89:DE:80:EB:30:25:ED:51:4E:43:B0:D6:1E:51:72:B7:04
Authority key identifier: EB:33:7E:AD:6B:9B:93:DD:0D:75:8A:BF:9D:7B:30:30:72:A9:9E:B9
Certificate issuer: /CN=eb337ead6b9b93dd0d758abf9d7b303072a99eb9
Certificate serial: 019A4E86AD45A6B17BB39AE4CECA2FCB14BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6zN-rWubk90NdYq_nXswMHKpnrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/b8c30c-82d9-46bb-bb07-9ca100428f10/1/6zN-rWubk90NdYq_nXswMHKpnrk.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 11:00:40 +0000
Manifest this update: Tue 04 Nov 2025 11:00:40 +0000
Manifest next update: Wed 05 Nov 2025 11:00:40 +0000
Files and hashes: 1: 6zN-rWubk90NdYq_nXswMHKpnrk.crl (hash: J7Tlo5J1H/h7/Qm+HfbO9HPuyBb05k3v6ui5uhtJHEY=)
2: qKIz6NW658QiWYOFcDWwBberXPk.roa (hash: XrH4aIQQINYqHfRuibGZ0Zr0PYKUQ4mNWHvnArdnsa0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/b8c30c-82d9-46bb-bb07-9ca100428f10/1/6zN-rWubk90NdYq_nXswMHKpnrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/b8c30c-82d9-46bb-bb07-9ca100428f10/1/6zN-rWubk90NdYq_nXswMHKpnrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/6zN-rWubk90NdYq_nXswMHKpnrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:ad:45:a6:b1:7b:b3:9a:e4:ce:ca:2f:cb:14:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb337ead6b9b93dd0d758abf9d7b303072a99eb9
Validity
Not Before: Nov 4 11:00:40 2025 GMT
Not After : Nov 5 11:00:40 2025 GMT
Subject: CN=aaf39d89de80eb3025ed514e43b0d61e5172b704
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:32:28:db:b8:99:b4:56:3d:21:f4:8a:7a:7a:
b8:9a:7a:0f:e0:42:d1:e4:0d:3d:4f:2d:48:7e:23:
1a:2a:7a:6c:c4:2b:55:19:4e:1c:fd:94:06:13:ea:
d6:8b:3b:e7:36:0d:09:39:03:44:ba:db:00:66:48:
dd:c9:fc:4e:52:e6:83:fb:81:26:b2:6c:99:77:ed:
f3:46:0c:48:ef:fb:a9:19:ab:af:18:f6:e5:25:29:
4a:99:69:bd:56:8d:57:d9:a4:e4:d6:d6:0b:a5:59:
17:d7:58:aa:a5:08:65:c6:9b:97:08:28:bb:8c:d6:
ad:e4:8c:82:37:55:d3:d5:19:ad:ba:f4:f9:72:a0:
0e:8e:bc:0d:31:27:64:2b:72:00:5e:b3:ba:cb:aa:
52:ed:b1:17:e5:97:b4:8c:44:4d:53:8c:7c:4f:f1:
fa:7f:b7:aa:31:4c:76:0d:7e:fd:be:06:52:a3:40:
87:04:cd:16:55:98:50:c4:22:5d:42:1a:aa:57:0b:
00:ed:5f:13:e9:8d:f8:98:fe:62:3f:af:e1:c2:a2:
81:ce:e3:38:c6:d8:fb:72:8e:d6:79:09:d1:17:1e:
c5:5d:6c:b8:4e:c4:33:81:42:da:37:09:60:cf:cf:
2b:2f:60:2f:ee:60:cd:b5:66:6d:a6:3e:a1:a6:95:
17:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:F3:9D:89:DE:80:EB:30:25:ED:51:4E:43:B0:D6:1E:51:72:B7:04
X509v3 Authority Key Identifier:
keyid:EB:33:7E:AD:6B:9B:93:DD:0D:75:8A:BF:9D:7B:30:30:72:A9:9E:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zN-rWubk90NdYq_nXswMHKpnrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b8c30c-82d9-46bb-bb07-9ca100428f10/1/6zN-rWubk90NdYq_nXswMHKpnrk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b8c30c-82d9-46bb-bb07-9ca100428f10/1/6zN-rWubk90NdYq_nXswMHKpnrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:e0:52:6e:4e:7e:33:6c:75:e9:24:af:09:65:6e:be:0f:18:
e5:65:6f:68:39:05:ec:8e:a0:49:1f:72:fb:3c:f2:b6:17:1d:
7c:e4:f1:7e:bc:f1:f2:e1:21:e3:24:da:75:d3:e5:39:c6:10:
78:6d:23:3e:f4:e4:7d:5d:26:ed:8f:d5:37:bc:b5:1a:41:f7:
9d:4f:bc:d1:72:8c:c7:12:15:c3:a6:a3:a2:8d:74:b3:76:ea:
93:94:57:45:87:ae:b8:00:e7:8c:8b:e9:a9:df:f6:b9:9c:9c:
9b:cd:d4:97:80:da:67:43:dd:f1:dc:ac:47:93:ab:a5:f2:4b:
fe:14:ec:72:28:c9:7f:e4:05:bf:f7:a3:da:5d:00:b2:34:49:
f0:2a:75:8e:6e:57:59:bd:46:8d:fa:e5:06:f6:df:da:fb:4d:
3e:f5:3b:ca:5a:19:0f:ab:64:28:1f:70:9e:40:14:41:3d:b0:
09:86:53:e7:a0:3c:4a:ed:6b:dd:16:c7:01:ca:63:35:22:ae:
70:30:be:2d:53:bd:5f:b9:81:5f:6e:c4:7a:d3:72:75:d4:40:
b8:ab:ba:8c:f3:7e:0f:14:81:a3:9d:06:b4:58:5a:88:c0:da:
a2:65:57:35:92:f3:dc:68:ab:bc:97:64:51:c7:d3:61:e4:ba:
3e:50:b1:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:42:00 2025 by rpki-client