Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/742a04-17af-4f40-a140-604584895925/1/6Ed60hy3iRQzE8QLGfjMACPeiKY.mft
File: 6Ed60hy3iRQzE8QLGfjMACPeiKY.mft (raw, json)
Hash identifier: tHxf6WL6WKGqicEOkdgI3S1eOoD0AmWhwJs7Y3UWWDQ=
Subject key identifier: C1:5C:88:1A:B7:DB:8A:AB:9E:DD:5B:B4:43:38:3B:48:EE:17:0D:4C
Authority key identifier: E8:47:7A:D2:1C:B7:89:14:33:13:C4:0B:19:F8:CC:00:23:DE:88:A6
Certificate issuer: /CN=e8477ad21cb789143313c40b19f8cc0023de88a6
Certificate serial: 019A53E4035CA0989F84A6E5F1D8EAC104DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Ed60hy3iRQzE8QLGfjMACPeiKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/742a04-17af-4f40-a140-604584895925/1/6Ed60hy3iRQzE8QLGfjMACPeiKY.mft
Manifest number: 01D5
Signing time: Wed 05 Nov 2025 12:00:43 +0000
Manifest this update: Wed 05 Nov 2025 12:00:43 +0000
Manifest next update: Thu 06 Nov 2025 12:00:43 +0000
Files and hashes: 1: 2M47-6eKALJ6FmiVAowRa7gLSUI.roa (hash: sTE5YWztn/a2MX2OSX/0Yz9OgI3CBWwdi/QI1zYZYUk=)
2: 6Ed60hy3iRQzE8QLGfjMACPeiKY.crl (hash: iBL0UoHsv20OrVZKgwZ+4q4kbOoFx14UglprotjfP2Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/742a04-17af-4f40-a140-604584895925/1/6Ed60hy3iRQzE8QLGfjMACPeiKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/742a04-17af-4f40-a140-604584895925/1/6Ed60hy3iRQzE8QLGfjMACPeiKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6Ed60hy3iRQzE8QLGfjMACPeiKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:e4:03:5c:a0:98:9f:84:a6:e5:f1:d8:ea:c1:04:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8477ad21cb789143313c40b19f8cc0023de88a6
Validity
Not Before: Nov 5 12:00:43 2025 GMT
Not After : Nov 6 12:00:43 2025 GMT
Subject: CN=c15c881ab7db8aab9edd5bb443383b48ee170d4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:43:b6:ec:c3:93:f2:44:6b:e4:0b:e7:59:06:
28:19:a8:6d:c8:af:e1:d1:e0:f4:0a:6a:cd:29:2c:
2d:aa:89:e9:5c:94:dc:4d:81:48:0c:62:d8:06:05:
af:1f:a2:1f:51:78:49:0a:e8:64:76:53:6d:18:1a:
a1:97:60:3c:70:90:b6:a9:29:ed:77:a8:35:96:e9:
fe:bd:73:44:15:71:3b:d1:05:55:5f:12:60:6a:b9:
fd:ad:49:65:bd:cf:26:18:bf:5d:b9:c3:0e:9d:2e:
60:c4:20:f5:c9:8e:53:df:08:31:f7:c7:de:77:1b:
e6:81:f3:ff:e4:18:81:d5:3b:c0:00:a1:fe:9a:f2:
ec:e1:f8:29:38:0b:db:ba:f7:8b:74:28:d8:ba:46:
48:60:79:d2:4f:c0:4a:27:5b:2a:f5:69:74:aa:2a:
c4:44:eb:d3:9e:28:64:ae:18:d5:30:97:2b:c0:53:
0a:b6:66:81:4a:4c:0c:17:e1:a1:be:c6:6a:42:ab:
8b:21:f9:99:26:42:b4:ae:2f:9e:ae:b8:62:c1:d0:
15:2e:ed:77:d1:1f:27:fd:85:2f:ac:e1:1a:ad:88:
0d:bb:03:74:4c:09:c7:f3:84:bd:18:80:db:be:1b:
bd:aa:54:4f:ba:e1:9f:b6:82:1e:d4:ab:c0:b8:65:
8e:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:5C:88:1A:B7:DB:8A:AB:9E:DD:5B:B4:43:38:3B:48:EE:17:0D:4C
X509v3 Authority Key Identifier:
keyid:E8:47:7A:D2:1C:B7:89:14:33:13:C4:0B:19:F8:CC:00:23:DE:88:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Ed60hy3iRQzE8QLGfjMACPeiKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/742a04-17af-4f40-a140-604584895925/1/6Ed60hy3iRQzE8QLGfjMACPeiKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/742a04-17af-4f40-a140-604584895925/1/6Ed60hy3iRQzE8QLGfjMACPeiKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:de:fa:1c:a9:5d:2d:40:4d:5e:48:33:b4:f3:35:73:35:3e:
34:87:f2:b5:5e:0e:5b:af:1a:9a:09:09:a4:89:d2:a8:17:be:
33:ca:8a:95:7d:68:ba:f9:51:9d:03:44:00:b5:6b:90:cb:a2:
f4:56:af:56:e8:16:fd:84:10:6a:bc:8e:fc:3f:05:3b:0c:a3:
29:28:4c:96:b7:d4:ae:3d:43:52:12:97:aa:5d:50:ce:b8:bd:
df:84:ee:07:98:99:c0:ec:30:2c:7b:b3:96:2f:f1:c4:72:f5:
c3:61:1b:30:e2:6d:de:93:51:6f:bd:5b:2f:b6:4d:48:da:0d:
c3:1d:4a:98:e5:7e:d6:2f:83:49:f1:b4:c5:5b:07:ce:27:7e:
19:75:18:d8:75:ee:17:1d:c3:60:b1:47:8f:2d:96:fc:0f:ef:
5e:44:d9:0c:9f:75:6e:61:99:e1:4a:7f:b8:ef:dd:d5:39:77:
b5:71:36:35:a0:7d:7a:23:58:70:13:bc:4b:35:a7:86:62:a1:
60:0c:3c:b9:11:0a:c6:46:92:12:16:74:57:03:67:a0:4c:b8:
09:1e:d5:2d:2d:d0:34:62:1e:30:f3:16:6c:90:c1:b9:c4:69:
93:c5:27:88:82:e6:1a:c7:ec:ff:e1:fc:6e:40:0c:eb:eb:cd:
73:ab:08:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:32:30 2025 by rpki-client