Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.mft
File: 6rR29nfNDDKY0oEeYPSOGymzr-8.mft (raw, json)
Hash identifier: /0rVx/bZILXbvZrngf+zNQ/V8HqJ/ERaL/xI0Me6Prc=
Subject key identifier: 11:7C:69:BD:69:E3:A2:CB:F9:7D:31:EF:D1:EF:43:96:A3:47:66:0D
Authority key identifier: EA:B4:76:F6:77:CD:0C:32:98:D2:81:1E:60:F4:8E:1B:29:B3:AF:EF
Certificate issuer: /CN=eab476f677cd0c3298d2811e60f48e1b29b3afef
Certificate serial: 019A4D3CF69D11F45FCD465A35B9CA5D2342
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6rR29nfNDDKY0oEeYPSOGymzr-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.mft
Manifest number: 1550
Signing time: Tue 04 Nov 2025 05:00:32 +0000
Manifest this update: Tue 04 Nov 2025 05:00:32 +0000
Manifest next update: Wed 05 Nov 2025 05:00:32 +0000
Files and hashes: 1: 0UzsGme_k2nP3xmC23x_NIyPI4I.roa (hash: 9GCcsHrAPMsxEip94efAnxBNP67TuW3l3gu24kwBziA=)
2: 6rR29nfNDDKY0oEeYPSOGymzr-8.crl (hash: rg34M0YxSgZLbQMZG2FPd4t8lFsIvJUfEjCONTMDGeg=)
3: QhX-bY8Pyu0IVpXlU-objdMMYgU.roa (hash: AtV/TPeQmqPYNR6TwwiivnQLG1K0ZguaxSrJsKzoymM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/6rR29nfNDDKY0oEeYPSOGymzr-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3c:f6:9d:11:f4:5f:cd:46:5a:35:b9:ca:5d:23:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eab476f677cd0c3298d2811e60f48e1b29b3afef
Validity
Not Before: Nov 4 05:00:32 2025 GMT
Not After : Nov 5 05:00:32 2025 GMT
Subject: CN=117c69bd69e3a2cbf97d31efd1ef4396a347660d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:0c:f2:da:da:71:13:22:0a:4e:8a:8d:95:e3:
53:28:90:79:df:ac:6b:4e:f4:d4:a1:45:65:5d:86:
93:04:09:cb:ee:55:38:68:ed:59:43:57:66:ba:8c:
77:92:fc:ed:30:bf:49:a1:e1:5a:ee:f9:f9:0d:12:
fc:08:03:95:ba:ab:e1:2a:43:fe:cf:0f:1c:fd:86:
83:1b:f4:ea:fa:34:fc:cf:f0:15:de:43:9c:2d:97:
fe:1f:54:7e:6e:36:63:f6:ab:ab:43:6c:ad:d5:2d:
fc:4a:7c:62:1e:96:c6:9c:2c:40:87:e2:29:b1:13:
66:be:6d:e8:83:52:48:df:e7:0c:56:06:76:48:dd:
ef:99:ce:6e:18:e7:f5:fa:e5:ef:9a:64:55:53:08:
6c:63:d7:42:9a:7a:b9:52:56:96:9c:0b:f1:ae:45:
d0:c1:c7:32:3b:8f:ef:cb:b1:ab:e6:f7:eb:5c:40:
d8:55:8d:1e:e9:c6:61:ca:0d:ae:ad:ef:d2:85:40:
16:8d:e7:a4:ed:37:3d:94:f2:16:9c:75:43:7a:e0:
67:b2:b3:cb:39:eb:c2:a2:9a:4e:06:0d:b1:bf:ff:
d3:50:f1:64:69:a4:41:05:34:5b:f5:83:b1:31:8c:
bd:92:23:45:51:cf:f4:8c:ba:88:e8:45:45:75:b4:
3c:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:7C:69:BD:69:E3:A2:CB:F9:7D:31:EF:D1:EF:43:96:A3:47:66:0D
X509v3 Authority Key Identifier:
keyid:EA:B4:76:F6:77:CD:0C:32:98:D2:81:1E:60:F4:8E:1B:29:B3:AF:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6rR29nfNDDKY0oEeYPSOGymzr-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:4b:f8:52:84:77:e2:42:07:82:f6:cf:26:97:0c:96:9e:06:
2e:f7:dc:67:1a:ff:65:ca:54:d9:11:22:9a:2a:fb:c3:88:6f:
d5:54:4c:0e:18:e9:8d:5d:50:01:4c:27:99:75:ad:11:a0:07:
a0:c8:20:16:b9:6a:c8:de:1f:ca:40:70:f5:89:52:ea:1e:e6:
63:ce:5d:5e:36:5f:74:11:b7:9c:89:93:87:ee:27:d9:7c:2d:
d5:9d:7d:8e:a7:8c:1e:9d:49:d7:b2:99:ed:af:ec:21:81:29:
40:c8:8b:82:37:23:06:49:88:d5:49:21:38:58:da:60:75:b5:
af:b7:ea:79:4f:f7:a6:b1:14:af:7b:23:ad:ba:54:5d:56:28:
3f:d6:f0:57:79:21:b7:52:bd:1a:df:98:fe:bc:79:ac:d2:39:
65:b0:e2:a3:fc:d5:f4:56:60:fd:b3:42:39:7f:3a:68:73:06:
a5:13:39:38:bb:33:b5:04:98:19:3f:dd:d7:34:26:8a:10:e5:
ef:8f:f9:35:73:2b:c7:06:6a:d3:2b:fa:b7:9b:7a:fc:fb:4a:
cc:1c:9c:eb:8a:16:02:bd:49:a4:2a:77:a3:23:6c:79:42:e4:
08:11:45:63:d6:50:a4:fa:44:9a:56:c9:77:99:a7:a7:38:4e:
ac:bc:20:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:12:20 2025 by rpki-client