Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/46431e-4951-4e1a-9195-68a4551f68a8/1/6_Ngh8P87PsAb1GNeBGyVepXyQ0.mft
File: 6_Ngh8P87PsAb1GNeBGyVepXyQ0.mft (raw, json)
Hash identifier: HrT71ON/diJB90n7jC1uZUmzo54ePjJTima+uWZCxHc=
Subject key identifier: 3A:81:85:74:22:EE:EC:51:C3:8D:30:DC:57:5F:A2:3A:58:FB:8D:DB
Authority key identifier: EB:F3:60:87:C3:FC:EC:FB:00:6F:51:8D:78:11:B2:55:EA:57:C9:0D
Certificate issuer: /CN=ebf36087c3fcecfb006f518d7811b255ea57c90d
Certificate serial: 019A4DAAA38593D6825A4B80C866284AD9CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6_Ngh8P87PsAb1GNeBGyVepXyQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/46431e-4951-4e1a-9195-68a4551f68a8/1/6_Ngh8P87PsAb1GNeBGyVepXyQ0.mft
Manifest number: 12CE
Signing time: Tue 04 Nov 2025 07:00:19 +0000
Manifest this update: Tue 04 Nov 2025 07:00:19 +0000
Manifest next update: Wed 05 Nov 2025 07:00:19 +0000
Files and hashes: 1: 6_Ngh8P87PsAb1GNeBGyVepXyQ0.crl (hash: 16UxJiySI7P4GK2y1C6YNAdQmgasF335r811aKwEuIo=)
2: Cd-K1MEWA2ryKgiTfKMlpJrD0GQ.roa (hash: B7DPcOBfNaFm0TXa9BBHsfzUSprwVkey6QgyDWplAfY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/46431e-4951-4e1a-9195-68a4551f68a8/1/6_Ngh8P87PsAb1GNeBGyVepXyQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/46431e-4951-4e1a-9195-68a4551f68a8/1/6_Ngh8P87PsAb1GNeBGyVepXyQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/6_Ngh8P87PsAb1GNeBGyVepXyQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:a3:85:93:d6:82:5a:4b:80:c8:66:28:4a:d9:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebf36087c3fcecfb006f518d7811b255ea57c90d
Validity
Not Before: Nov 4 07:00:19 2025 GMT
Not After : Nov 5 07:00:19 2025 GMT
Subject: CN=3a81857422eeec51c38d30dc575fa23a58fb8ddb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:45:68:48:72:53:b7:5a:96:9c:55:09:c0:e6:
f8:6f:08:58:b3:d9:e9:7b:87:c4:ed:49:54:80:3c:
73:2b:c5:27:94:ee:63:b7:71:1c:aa:cc:07:99:8e:
3f:b5:d3:96:e8:1c:3b:59:98:13:c0:ea:48:46:2c:
2a:a0:35:ce:0a:08:68:6a:73:c6:ca:b2:28:7b:6f:
53:e5:fd:e7:1e:52:42:58:65:6b:26:e6:79:8f:64:
99:0d:81:c8:23:10:ec:c4:67:b4:1f:1d:de:05:b3:
58:54:a6:e4:12:43:2f:c6:d7:bb:e9:76:74:1b:ce:
38:d5:0e:bd:82:46:a6:ab:90:00:72:ae:e1:00:97:
bd:32:7d:82:f4:51:12:7e:95:88:e8:62:42:8a:34:
eb:3e:30:01:e0:64:37:3d:d5:51:f0:4d:f8:b7:21:
d2:8e:ab:1d:10:0d:ab:2e:bb:b4:41:fe:8a:84:02:
d1:3e:4e:fc:65:13:97:12:29:f3:d9:43:8b:63:0b:
36:3a:35:b7:3b:19:46:1a:0a:4a:bb:f4:1a:a1:74:
ca:4d:48:68:0e:09:77:63:ec:14:f5:43:fd:e8:a4:
5a:29:8b:d8:59:fc:3d:0c:e8:51:07:ef:12:22:3f:
25:b2:da:2c:51:c3:f0:65:7f:83:7b:74:54:6f:c9:
81:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:81:85:74:22:EE:EC:51:C3:8D:30:DC:57:5F:A2:3A:58:FB:8D:DB
X509v3 Authority Key Identifier:
keyid:EB:F3:60:87:C3:FC:EC:FB:00:6F:51:8D:78:11:B2:55:EA:57:C9:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6_Ngh8P87PsAb1GNeBGyVepXyQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/46431e-4951-4e1a-9195-68a4551f68a8/1/6_Ngh8P87PsAb1GNeBGyVepXyQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/46431e-4951-4e1a-9195-68a4551f68a8/1/6_Ngh8P87PsAb1GNeBGyVepXyQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:ec:f7:5a:80:a2:c0:c7:5f:93:04:70:a2:d6:90:3d:3c:df:
8c:c1:a7:05:21:0e:a5:ab:12:11:65:d1:0b:e8:00:ab:11:e5:
43:6d:33:9d:a0:e0:e5:9f:4a:b1:cd:7a:d9:f8:89:45:1b:04:
d9:6e:c3:da:b3:60:81:9a:29:cc:60:68:06:01:dc:05:99:02:
34:15:80:1d:79:1f:7a:33:da:aa:79:93:8e:ba:73:fc:27:77:
ee:bf:8d:a4:f7:72:26:ce:63:5b:fd:80:3a:2a:6b:08:43:b5:
a4:5c:42:60:65:42:af:6c:db:61:c5:6d:27:b5:8e:53:fd:4b:
8e:bc:eb:04:ed:ff:1f:3b:80:23:db:fc:fe:0e:2b:28:14:e3:
14:59:7c:0e:53:80:6c:f2:64:9e:6d:47:70:ab:0e:ec:92:2f:
23:e0:f9:f7:07:6f:57:cb:44:80:28:32:64:d2:88:27:03:19:
1e:3e:bc:e2:c1:c8:01:1e:61:a3:fa:b3:9e:20:58:a8:45:8d:
1b:a5:be:ec:59:19:02:bf:87:bb:37:33:34:1a:a5:e2:d5:c7:
20:55:35:b0:9c:44:62:57:87:2c:a5:b8:48:e0:aa:12:aa:d3:
57:ac:f7:5d:d1:bb:2d:1c:20:d5:06:59:c3:05:de:ed:d4:86:
3b:41:3e:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:24:14 2025 by rpki-client