Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/13072f-178d-4f0c-9ffb-4dbe10c3a71f/1/6A7DFjX02RuxExK6CjRlwY8jP2g.mft
File: 6A7DFjX02RuxExK6CjRlwY8jP2g.mft (raw, json)
Hash identifier: f6AMa4ef5nEIcZldqJoksLWVPUJ5NONi/3XTf6Hf0KU=
Subject key identifier: 9A:6F:5F:D7:F7:6F:C7:C5:99:5A:90:51:3D:03:46:1D:83:2A:0F:19
Authority key identifier: E8:0E:C3:16:35:F4:D9:1B:B1:13:12:BA:0A:34:65:C1:8F:23:3F:68
Certificate issuer: /CN=e80ec31635f4d91bb11312ba0a3465c18f233f68
Certificate serial: 019A4E188EB1A5E2D9A36BCA9599CC40260B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6A7DFjX02RuxExK6CjRlwY8jP2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/13072f-178d-4f0c-9ffb-4dbe10c3a71f/1/6A7DFjX02RuxExK6CjRlwY8jP2g.mft
Manifest number: 068F
Signing time: Tue 04 Nov 2025 09:00:23 +0000
Manifest this update: Tue 04 Nov 2025 09:00:23 +0000
Manifest next update: Wed 05 Nov 2025 09:00:23 +0000
Files and hashes: 1: 6A7DFjX02RuxExK6CjRlwY8jP2g.crl (hash: N1c0jvu9WWKRRD14wxLnfib2lJ+RZfILOj6x2gOD4fc=)
2: P_YrqrFp8qFACBOuK-Z6Qw7eZq0.roa (hash: Hcdm4ocRxMkNA/bbdADoMEzvZvEEy+9TR0wc9RV/RHs=)
3: XVvqkubcjpXUYCIxbNhycnQ01pE.roa (hash: rZf6JadzlMziKvvRnlTt78J5GO4AeM0Q9BFM/dim7dI=)
4: tJ3XiLuUDAM3_2vr_bejczODR68.roa (hash: NrXcw6at8G0qg9c5a5tjN4wif0eNk3CNDAZCjm9jqh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/13072f-178d-4f0c-9ffb-4dbe10c3a71f/1/6A7DFjX02RuxExK6CjRlwY8jP2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/13072f-178d-4f0c-9ffb-4dbe10c3a71f/1/6A7DFjX02RuxExK6CjRlwY8jP2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/6A7DFjX02RuxExK6CjRlwY8jP2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:8e:b1:a5:e2:d9:a3:6b:ca:95:99:cc:40:26:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e80ec31635f4d91bb11312ba0a3465c18f233f68
Validity
Not Before: Nov 4 09:00:23 2025 GMT
Not After : Nov 5 09:00:23 2025 GMT
Subject: CN=9a6f5fd7f76fc7c5995a90513d03461d832a0f19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a4:bb:5d:10:7f:d6:d6:49:76:13:bc:30:86:
47:66:c5:f5:a0:f3:b8:f0:bb:6e:e4:17:55:af:62:
ac:91:e5:b7:1a:b0:91:28:c0:b4:f4:46:9d:61:2c:
33:1e:7d:e2:03:d5:5d:f2:dc:a7:c5:61:a5:0d:6d:
38:ac:d2:64:d3:75:a5:0e:ac:8f:1b:84:14:62:9c:
8d:7b:1d:46:6c:e9:ad:23:36:45:56:f5:6c:a2:52:
b5:f7:cf:d4:3b:94:5a:23:6a:3c:70:9a:c1:b5:63:
b0:dd:30:5b:b1:ec:83:56:87:97:aa:03:d1:fb:8d:
4d:22:cd:59:5f:44:91:24:26:1e:91:90:20:a7:df:
2f:09:98:9c:eb:24:b1:a2:22:61:2c:16:c9:6a:39:
db:de:50:8e:ce:3e:ae:b5:03:a2:aa:08:bb:2c:7e:
47:aa:6e:76:07:f6:af:3b:55:7e:73:56:cf:42:c6:
3a:ed:78:9f:f5:c4:16:1d:17:16:27:62:ff:b9:0b:
97:51:2b:df:1b:c5:db:81:5f:07:ab:80:8c:76:3b:
05:37:01:75:c6:49:3e:cf:80:b8:ab:78:6e:d0:2d:
ac:19:ca:13:34:0b:d3:55:2a:26:42:8a:f7:df:d2:
a6:e4:11:ac:32:f2:3e:1d:fe:a7:96:2b:df:7b:8b:
33:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:6F:5F:D7:F7:6F:C7:C5:99:5A:90:51:3D:03:46:1D:83:2A:0F:19
X509v3 Authority Key Identifier:
keyid:E8:0E:C3:16:35:F4:D9:1B:B1:13:12:BA:0A:34:65:C1:8F:23:3F:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6A7DFjX02RuxExK6CjRlwY8jP2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/13072f-178d-4f0c-9ffb-4dbe10c3a71f/1/6A7DFjX02RuxExK6CjRlwY8jP2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/13072f-178d-4f0c-9ffb-4dbe10c3a71f/1/6A7DFjX02RuxExK6CjRlwY8jP2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:16:a2:8c:d9:56:a9:f4:fe:11:5b:55:7e:7b:d9:ba:d2:00:
74:1d:d2:d5:f1:f5:bd:85:75:b2:7d:b8:67:a5:23:28:6b:ef:
ba:39:4b:53:36:41:13:bc:6c:95:3d:5a:e7:91:71:cf:7f:14:
46:4f:fe:6a:a9:57:e9:73:18:a4:d6:ae:b8:59:70:1a:b4:0d:
7b:ec:e5:54:e9:03:61:e7:61:e6:72:0b:c5:e3:09:23:94:d1:
a9:f0:af:70:af:fa:09:f5:b9:e4:2f:12:b5:f7:ae:92:0a:61:
7f:95:25:18:29:b8:ce:3c:ee:65:c0:cd:65:44:bd:c9:57:c5:
9d:a9:3a:b4:ec:1e:56:58:3d:1e:30:fb:95:e9:7b:ab:6a:13:
12:bb:f2:92:e2:73:d3:6c:93:32:89:ed:50:4c:e3:5d:20:51:
b4:9c:0b:fc:7e:05:43:df:f5:6b:e9:95:fa:c3:8a:e4:07:12:
5e:ec:19:cd:4b:2c:0c:a3:db:91:c3:e6:f5:70:45:8f:3a:58:
4e:7d:71:ed:4a:3d:bb:2a:a8:23:99:29:3f:d1:9d:65:5b:52:
a5:48:b2:d7:b9:2c:c5:85:7d:e0:5b:e8:c3:45:3a:e0:06:62:
8c:72:41:f8:0a:8c:d2:b4:f4:ab:41:fa:28:14:2b:5b:24:22:
d1:b1:74:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:15:04 2025 by rpki-client