Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/1af4a5-0d6c-4776-be5c-be852f644201/1/6RbcnbTknecbL9CBna6FOusFOwY.mft
File: 6RbcnbTknecbL9CBna6FOusFOwY.mft (raw, json)
Hash identifier: hOgapLNSZm0WsxXRY8VROdW6fWhiXQ4sez34Z4U+55E=
Subject key identifier: 9D:D9:16:4A:1B:AE:F3:09:81:B0:D6:B4:33:42:14:27:80:A7:AF:26
Authority key identifier: E9:16:DC:9D:B4:E4:9D:E7:1B:2F:D0:81:9D:AE:85:3A:EB:05:3B:06
Certificate issuer: /CN=e916dc9db4e49de71b2fd0819dae853aeb053b06
Certificate serial: 019A4F2B1D308B4FC123C7451D72A245ECBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6RbcnbTknecbL9CBna6FOusFOwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/1af4a5-0d6c-4776-be5c-be852f644201/1/6RbcnbTknecbL9CBna6FOusFOwY.mft
Manifest number: 0A03
Signing time: Tue 04 Nov 2025 14:00:16 +0000
Manifest this update: Tue 04 Nov 2025 14:00:16 +0000
Manifest next update: Wed 05 Nov 2025 14:00:16 +0000
Files and hashes: 1: 6RbcnbTknecbL9CBna6FOusFOwY.crl (hash: 6e+NCo5F7NCQ9mHo9oo0aJAJtxXmel5a2GO2huZ0g7E=)
2: KcWyo6HDH_f-Oalgo-AMzFyAZhU.roa (hash: lf0GIwDADpEwI5JyEJwH/aQKBfcwZ4TLIhoTMR/zw40=)
3: th7EIeqoBKrwZJJeDzKMKUXwuxc.roa (hash: ALjgBdMNXEgXhwMxQ4HYp3b8XrLy/GtDIe9aOPg2/3k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/1af4a5-0d6c-4776-be5c-be852f644201/1/6RbcnbTknecbL9CBna6FOusFOwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/1af4a5-0d6c-4776-be5c-be852f644201/1/6RbcnbTknecbL9CBna6FOusFOwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6RbcnbTknecbL9CBna6FOusFOwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:1d:30:8b:4f:c1:23:c7:45:1d:72:a2:45:ec:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e916dc9db4e49de71b2fd0819dae853aeb053b06
Validity
Not Before: Nov 4 14:00:16 2025 GMT
Not After : Nov 5 14:00:16 2025 GMT
Subject: CN=9dd9164a1baef30981b0d6b43342142780a7af26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:70:35:68:77:57:a5:f5:db:5b:b8:4f:65:b7:
fc:b3:9d:78:16:1b:1f:db:b0:a4:e7:8f:33:29:98:
5c:a7:f9:09:28:3a:a2:44:63:4f:36:24:a5:72:da:
6a:c0:47:8e:7c:f3:52:e6:1f:bb:e6:04:4b:89:ee:
e4:3f:82:81:31:93:e7:1c:a8:17:50:3e:83:43:4e:
a7:b8:aa:ea:28:23:9f:54:c1:aa:9f:96:1c:ba:e7:
75:81:51:ad:50:d9:8e:28:bf:ac:b4:ca:39:7f:7a:
af:24:80:9f:f0:e3:ce:db:f2:11:89:3a:1c:72:f6:
2c:f5:65:aa:8d:32:31:2c:57:07:7e:39:b3:bb:39:
33:56:8b:f7:2c:3a:af:bd:70:be:bd:a6:7b:59:98:
c7:a0:15:f3:3f:e2:92:5f:09:24:4d:e3:63:bd:d4:
21:fe:ad:46:fd:03:b7:99:45:b0:f1:78:49:71:0f:
31:ec:49:08:83:2b:52:bb:a2:19:cd:79:a4:6a:c5:
79:b8:d4:de:06:b5:44:b4:d3:f1:ff:22:94:38:dc:
28:26:52:b1:a4:5c:c8:89:5a:a6:95:8f:26:6b:64:
24:f4:bc:fe:c7:cb:85:18:61:25:5f:91:39:b5:dc:
cf:b5:da:d0:13:8e:95:54:bb:3d:5e:df:cc:57:03:
71:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:D9:16:4A:1B:AE:F3:09:81:B0:D6:B4:33:42:14:27:80:A7:AF:26
X509v3 Authority Key Identifier:
keyid:E9:16:DC:9D:B4:E4:9D:E7:1B:2F:D0:81:9D:AE:85:3A:EB:05:3B:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6RbcnbTknecbL9CBna6FOusFOwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/1af4a5-0d6c-4776-be5c-be852f644201/1/6RbcnbTknecbL9CBna6FOusFOwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/1af4a5-0d6c-4776-be5c-be852f644201/1/6RbcnbTknecbL9CBna6FOusFOwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:d2:fa:d4:7d:70:89:44:92:bf:fd:75:ea:6b:57:b3:5f:52:
87:bf:25:0b:9e:44:99:fc:52:2d:ce:02:ff:a0:e5:f7:12:66:
ef:cf:54:7f:a4:19:d3:f2:2d:68:2b:46:bd:b1:c6:37:a6:21:
3f:33:dc:db:56:46:e3:d4:b4:9d:5f:bf:62:b8:d1:c7:0a:c3:
31:07:fc:34:20:80:3e:64:9e:4b:f9:1c:d1:b9:7e:aa:a9:f8:
33:ed:94:8e:a1:ae:1d:54:f1:d9:22:b2:c5:89:85:5e:34:7c:
8f:85:0b:02:7c:e3:ec:62:69:eb:3f:7e:a9:19:8c:58:d9:5b:
86:a1:48:79:26:22:dc:6d:77:dd:17:ad:b9:cc:59:0f:4b:71:
4d:b6:a8:ab:6c:70:64:99:2d:66:8c:f7:37:f1:2b:52:12:9c:
65:1f:eb:50:62:3e:81:13:b2:e2:ae:5d:76:0e:c8:d9:42:79:
75:1b:c4:f2:7b:dd:d5:6c:01:8e:e3:ad:0a:2d:7d:29:9e:3a:
ab:ea:fe:44:d4:66:55:b5:54:e8:d1:4c:4a:8d:c7:9d:3e:55:
cb:ad:10:57:88:62:8b:2a:35:97:c5:3e:fd:d4:1a:63:ca:19:
4c:18:a4:75:3e:3f:7e:b6:fe:e8:13:1e:b8:cc:e3:9b:7e:13:
b7:88:f1:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:20:51 2025 by rpki-client