Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/7729e4-6a6d-4bc5-88e1-66f8b6e16b8a/1/6NHRX1kR1I0cWe7zdPezf3HU678.mft
File: 6NHRX1kR1I0cWe7zdPezf3HU678.mft (raw, json)
Hash identifier: +U9AxXg23+DBsA+gVYCoNWq6+4g0gwJ0pWMs9KYYg+E=
Subject key identifier: 06:8B:37:DD:66:B7:43:1F:DB:BF:86:0C:A8:A6:2B:24:99:02:88:AC
Authority key identifier: E8:D1:D1:5F:59:11:D4:8D:1C:59:EE:F3:74:F7:B3:7F:71:D4:EB:BF
Certificate issuer: /CN=e8d1d15f5911d48d1c59eef374f7b37f71d4ebbf
Certificate serial: 019A4D3CF55CA0D6EDA296E96DE5D801A9DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6NHRX1kR1I0cWe7zdPezf3HU678.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/7729e4-6a6d-4bc5-88e1-66f8b6e16b8a/1/6NHRX1kR1I0cWe7zdPezf3HU678.mft
Manifest number: 0EAA
Signing time: Tue 04 Nov 2025 05:00:31 +0000
Manifest this update: Tue 04 Nov 2025 05:00:31 +0000
Manifest next update: Wed 05 Nov 2025 05:00:31 +0000
Files and hashes: 1: 6NHRX1kR1I0cWe7zdPezf3HU678.crl (hash: N0AE4TzAFqKaQxOtxaP9R0SrGvhzpQelcH5oFP0LMXE=)
2: mqack1zg1aDbcOyT4cRxSwy3UDQ.roa (hash: ZwWlDd1N6JTl2qCwygwMAx3Ukou4tkcRR0CWTPfDGaw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/7729e4-6a6d-4bc5-88e1-66f8b6e16b8a/1/6NHRX1kR1I0cWe7zdPezf3HU678.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/7729e4-6a6d-4bc5-88e1-66f8b6e16b8a/1/6NHRX1kR1I0cWe7zdPezf3HU678.mft
rsync://rpki.ripe.net/repository/DEFAULT/6NHRX1kR1I0cWe7zdPezf3HU678.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3c:f5:5c:a0:d6:ed:a2:96:e9:6d:e5:d8:01:a9:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8d1d15f5911d48d1c59eef374f7b37f71d4ebbf
Validity
Not Before: Nov 4 05:00:31 2025 GMT
Not After : Nov 5 05:00:31 2025 GMT
Subject: CN=068b37dd66b7431fdbbf860ca8a62b24990288ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9b:e1:7f:f8:d1:40:a5:63:20:9a:d5:8f:0f:
b7:9d:bb:30:5d:36:da:6b:a5:b7:fe:59:ff:fc:26:
64:29:43:bf:ee:b3:8d:39:d2:41:2f:57:74:29:73:
ec:37:7b:21:25:e2:4c:fc:33:c7:5f:88:39:fc:35:
df:96:8e:49:bb:e6:9d:a0:64:15:95:fc:ab:30:04:
e0:cd:47:d0:42:e4:19:c2:72:aa:96:bd:13:23:51:
67:fc:8b:cd:4e:83:d6:90:82:69:26:b2:9c:2b:e8:
b7:ff:aa:f2:ba:cb:6d:41:2b:04:68:6a:c4:0c:00:
bc:06:8c:41:4a:14:df:35:d6:d7:1e:4d:8f:cd:96:
19:b2:94:bf:72:00:7b:9f:12:dd:30:e0:ba:47:6d:
dc:cf:83:2b:3f:6c:8c:ee:fe:eb:9b:09:64:54:86:
e1:15:25:8d:47:cf:0f:02:35:b4:54:e0:d5:e6:43:
9d:7d:b8:01:23:52:3d:3f:4b:9e:32:99:14:09:6e:
2f:47:ae:a9:30:45:8b:bc:75:bf:db:a5:7c:a8:a1:
f7:21:fa:d4:dc:99:d4:ac:b5:69:48:93:68:aa:60:
ae:cd:d2:a8:2a:96:30:d3:7e:b9:36:70:03:58:dd:
5c:8a:85:ef:9f:ee:9f:d5:69:0e:83:88:80:45:82:
2c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:8B:37:DD:66:B7:43:1F:DB:BF:86:0C:A8:A6:2B:24:99:02:88:AC
X509v3 Authority Key Identifier:
keyid:E8:D1:D1:5F:59:11:D4:8D:1C:59:EE:F3:74:F7:B3:7F:71:D4:EB:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6NHRX1kR1I0cWe7zdPezf3HU678.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7729e4-6a6d-4bc5-88e1-66f8b6e16b8a/1/6NHRX1kR1I0cWe7zdPezf3HU678.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7729e4-6a6d-4bc5-88e1-66f8b6e16b8a/1/6NHRX1kR1I0cWe7zdPezf3HU678.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:97:d6:db:eb:59:6a:1e:ed:a9:51:97:bb:75:92:4d:86:6c:
90:22:9d:6c:98:72:dc:6d:4c:e8:fe:b4:5a:d4:35:59:74:72:
49:02:f2:6c:16:33:34:76:bd:c8:47:12:16:d5:32:73:74:87:
99:80:a1:74:32:79:39:21:60:bc:57:85:1d:0c:40:84:a5:78:
e1:db:50:c7:e6:e5:b1:6a:8e:10:b4:06:e2:91:63:70:21:b9:
a2:6e:5b:06:03:2b:41:11:a5:3e:40:03:f3:a7:92:e7:07:e3:
2b:90:54:72:f7:ae:04:d9:83:13:f8:1e:19:36:44:73:9f:de:
99:b1:a6:7b:c0:96:8e:90:ce:cc:36:44:e0:26:cf:8f:d3:57:
c4:b2:5e:2d:4d:81:68:a0:76:0b:b1:06:ce:a3:ec:3a:16:6e:
7e:04:69:b5:b7:f5:d6:cb:2e:3e:c3:d6:ac:fb:82:28:17:ac:
5e:ac:63:e0:7e:9f:5c:28:e2:63:41:a6:d1:80:c3:d4:fc:d2:
4c:f1:8e:a0:aa:79:3b:7a:6a:fc:8d:3a:26:e1:2a:1a:05:80:
41:cd:9b:39:f1:6e:98:c7:e1:6f:dc:fb:7c:73:05:36:c2:ab:
0b:57:85:9b:60:cd:8f:d5:b7:8d:f4:5d:f0:7d:ad:81:6f:65:
6c:6d:63:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:06:32 2025 by rpki-client