Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/632463-c2dc-4cb8-bc4f-2df99d8123b7/1/6VzBeM31rZJ5k55XaK6Ig_-_Nes.mft
File: 6VzBeM31rZJ5k55XaK6Ig_-_Nes.mft (raw, json)
Hash identifier: HDYDvL9auk7Ds/kzPjWr94Krzh/btfzPA+zj3rH9Lr4=
Subject key identifier: 3E:8C:18:00:47:51:7D:97:0E:F2:DF:F6:D0:3B:02:06:C8:7B:ED:98
Authority key identifier: E9:5C:C1:78:CD:F5:AD:92:79:93:9E:57:68:AE:88:83:FF:BF:35:EB
Certificate issuer: /CN=e95cc178cdf5ad9279939e5768ae8883ffbf35eb
Certificate serial: 019A4EF439146B07D57380C80B266F7093A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6VzBeM31rZJ5k55XaK6Ig_-_Nes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/632463-c2dc-4cb8-bc4f-2df99d8123b7/1/6VzBeM31rZJ5k55XaK6Ig_-_Nes.mft
Manifest number: 05B6
Signing time: Tue 04 Nov 2025 13:00:19 +0000
Manifest this update: Tue 04 Nov 2025 13:00:19 +0000
Manifest next update: Wed 05 Nov 2025 13:00:19 +0000
Files and hashes: 1: 6VzBeM31rZJ5k55XaK6Ig_-_Nes.crl (hash: 4AsfjqS3Pa2DTsCe66/3ZCztekuoU6y21kkhwAu6dq4=)
2: h4IDWh5GVC7RbE5zSCDWjjHj0_w.roa (hash: mtJ3QHHj/MXmx1AqDIJUZFeqCYJYqfmAn/WwFLDw0/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/632463-c2dc-4cb8-bc4f-2df99d8123b7/1/6VzBeM31rZJ5k55XaK6Ig_-_Nes.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/632463-c2dc-4cb8-bc4f-2df99d8123b7/1/6VzBeM31rZJ5k55XaK6Ig_-_Nes.mft
rsync://rpki.ripe.net/repository/DEFAULT/6VzBeM31rZJ5k55XaK6Ig_-_Nes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:39:14:6b:07:d5:73:80:c8:0b:26:6f:70:93:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e95cc178cdf5ad9279939e5768ae8883ffbf35eb
Validity
Not Before: Nov 4 13:00:19 2025 GMT
Not After : Nov 5 13:00:19 2025 GMT
Subject: CN=3e8c180047517d970ef2dff6d03b0206c87bed98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:03:19:5a:93:3b:ad:99:2f:bb:55:32:1b:8f:
53:48:31:8b:98:5a:6a:f2:88:83:5a:57:4e:6c:e3:
87:ca:1e:35:d4:7a:69:bf:3c:47:3d:94:99:cc:0b:
44:7a:de:3e:56:e8:69:81:0a:c1:3c:d4:fa:5d:dd:
8f:80:31:49:02:8a:2d:42:1d:ce:0b:4d:33:b0:ce:
36:35:89:c8:39:d8:f1:b4:d7:40:50:f3:42:b0:93:
6b:96:2b:0d:02:df:d3:52:a2:01:01:87:6b:8e:d9:
c7:ab:0e:87:2a:e4:8f:e4:5f:9f:47:d5:c1:0a:ca:
39:32:33:f7:13:cb:39:9e:d5:59:80:31:af:d2:ff:
65:a1:56:b2:bd:8b:58:38:f3:33:a8:f0:88:08:f2:
e2:5c:dc:61:67:27:f6:bf:cd:b0:d1:08:8e:59:45:
f1:7f:50:0b:32:32:31:c3:36:83:da:b2:33:98:1e:
a7:06:be:56:58:cb:12:67:c8:90:26:9d:2e:56:d9:
c2:75:29:3b:61:88:4c:ff:9d:81:f3:48:2d:0a:f9:
62:d5:67:20:ad:f8:d7:95:8f:3c:ab:17:b0:a5:78:
45:41:da:35:24:41:50:87:b9:86:a1:f6:a7:6b:a2:
5e:c3:88:79:47:4d:8d:06:45:5c:39:de:7e:74:0d:
1f:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:8C:18:00:47:51:7D:97:0E:F2:DF:F6:D0:3B:02:06:C8:7B:ED:98
X509v3 Authority Key Identifier:
keyid:E9:5C:C1:78:CD:F5:AD:92:79:93:9E:57:68:AE:88:83:FF:BF:35:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6VzBeM31rZJ5k55XaK6Ig_-_Nes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/632463-c2dc-4cb8-bc4f-2df99d8123b7/1/6VzBeM31rZJ5k55XaK6Ig_-_Nes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/632463-c2dc-4cb8-bc4f-2df99d8123b7/1/6VzBeM31rZJ5k55XaK6Ig_-_Nes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:98:19:6c:65:17:20:22:58:78:db:bc:38:8d:5b:f8:d2:b9:
40:65:a0:33:a7:82:2e:a7:a5:59:10:48:1f:17:30:00:ee:8e:
93:02:27:28:ab:c7:b0:31:72:71:32:33:23:2d:78:79:5a:20:
1b:78:71:e1:49:79:82:50:f8:bc:6d:2f:c4:df:57:fb:ce:41:
cf:68:c7:33:df:92:cd:ee:e6:b2:ce:32:ef:42:22:87:ea:e9:
5c:97:bd:ac:75:47:6b:55:6c:3b:f8:0d:ee:07:ae:d6:67:d8:
87:77:b6:de:37:13:0c:d3:5a:32:0a:9f:5a:27:2e:1d:15:e0:
59:0d:d6:ec:0f:8b:7e:4d:d3:73:e6:3c:41:fe:8a:88:a0:f1:
7b:7c:37:43:8b:b0:2e:97:08:de:17:11:ff:ff:5f:10:fc:55:
0c:13:18:a2:a6:6e:09:3b:bd:d6:7c:6d:8c:ff:3f:c3:61:57:
55:bc:64:de:19:e2:a8:3e:dd:bb:74:7b:a8:33:d7:9b:5c:c9:
63:e0:db:52:84:9b:34:d6:20:28:4b:fd:2b:0c:a1:13:c9:b6:
24:85:c2:c3:34:e7:01:4a:0c:b8:c4:a5:fc:0e:6b:df:5c:79:
35:1b:95:13:a5:b6:31:02:8c:43:33:35:ed:80:26:33:8e:fa:
09:9e:2a:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:01:31 2025 by rpki-client