Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/931f81-c409-4d3a-95df-49098897ee4a/1/6_dgwFdzwV1zZ2RQNEZo_vtyNEc.mft
File: 6_dgwFdzwV1zZ2RQNEZo_vtyNEc.mft (raw, json)
Hash identifier: O2LkEE4ylNJqOsC8sWPVL1VdGwmOlOClr6bdyqXplP8=
Subject key identifier: C1:47:39:85:C7:E8:B9:82:DB:9A:AD:36:92:22:75:B1:8A:84:0C:4C
Authority key identifier: EB:F7:60:C0:57:73:C1:5D:73:67:64:50:34:46:68:FE:FB:72:34:47
Certificate issuer: /CN=ebf760c05773c15d73676450344668fefb723447
Certificate serial: 019A4F2AEEE373F610AED35466D62348BD5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6_dgwFdzwV1zZ2RQNEZo_vtyNEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/931f81-c409-4d3a-95df-49098897ee4a/1/6_dgwFdzwV1zZ2RQNEZo_vtyNEc.mft
Manifest number: 1712
Signing time: Tue 04 Nov 2025 14:00:04 +0000
Manifest this update: Tue 04 Nov 2025 14:00:04 +0000
Manifest next update: Wed 05 Nov 2025 14:00:04 +0000
Files and hashes: 1: 6_dgwFdzwV1zZ2RQNEZo_vtyNEc.crl (hash: ApEjjt5tgzzvu9WtsTNcWTyQdBsdEIMQc/H/f79Uiwo=)
2: HSuDnzcAlue63_e4y4OYNpRzfOM.roa (hash: 2RMQVOMX9MWINnX100maYIWBBtnYRoQ7hW/UubkuFuk=)
3: dseWtJsRtgXWG8ryLs-7XWYSHjA.roa (hash: dzJOgY0aN/2fDxN/Ny4dZY7HYiCJ2uahfS7o6nx3vAk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/931f81-c409-4d3a-95df-49098897ee4a/1/6_dgwFdzwV1zZ2RQNEZo_vtyNEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/931f81-c409-4d3a-95df-49098897ee4a/1/6_dgwFdzwV1zZ2RQNEZo_vtyNEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/6_dgwFdzwV1zZ2RQNEZo_vtyNEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2a:ee:e3:73:f6:10:ae:d3:54:66:d6:23:48:bd:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebf760c05773c15d73676450344668fefb723447
Validity
Not Before: Nov 4 14:00:04 2025 GMT
Not After : Nov 5 14:00:04 2025 GMT
Subject: CN=c1473985c7e8b982db9aad36922275b18a840c4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ff:db:6f:06:cc:7d:17:ab:ea:32:5e:36:6f:
ab:0e:12:90:96:43:23:3b:55:33:37:2c:72:4a:67:
fa:52:67:fd:c2:2a:7d:3b:43:86:fe:59:fd:3e:e6:
d5:a6:51:bc:5a:de:bb:08:58:9a:ca:84:90:ac:09:
4d:27:ad:bf:ac:6d:f2:c3:db:a5:ec:fd:15:0d:ed:
4e:ed:03:79:c9:cb:28:81:f3:fa:6b:1b:aa:70:d4:
31:44:77:d2:ba:f9:e6:37:34:f0:23:67:a5:64:67:
4c:66:19:46:f0:b5:cf:33:8c:a4:a8:b3:9e:6b:e0:
02:c0:d2:bd:bb:f5:29:44:a9:a9:7c:ca:1d:e9:a1:
4d:74:9c:45:51:df:8a:25:5b:f5:8f:7a:64:63:94:
35:52:f3:7d:dd:f3:0d:a8:ad:4b:43:66:69:2a:83:
8d:cb:ae:4c:6e:7f:32:f8:0b:1b:71:c1:54:07:bf:
30:31:65:52:6d:23:70:0d:dd:a0:92:3d:c8:91:46:
89:a8:d8:c1:6f:12:95:eb:50:56:22:0a:06:17:ba:
86:e8:3a:ae:bd:b0:12:fd:ec:f8:ae:35:da:bb:e8:
06:52:87:57:c8:5b:ea:9e:0b:21:54:76:c7:51:bf:
32:47:98:8a:cd:78:7a:d8:56:5b:3c:2d:f9:cf:22:
e7:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:47:39:85:C7:E8:B9:82:DB:9A:AD:36:92:22:75:B1:8A:84:0C:4C
X509v3 Authority Key Identifier:
keyid:EB:F7:60:C0:57:73:C1:5D:73:67:64:50:34:46:68:FE:FB:72:34:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6_dgwFdzwV1zZ2RQNEZo_vtyNEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/931f81-c409-4d3a-95df-49098897ee4a/1/6_dgwFdzwV1zZ2RQNEZo_vtyNEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/931f81-c409-4d3a-95df-49098897ee4a/1/6_dgwFdzwV1zZ2RQNEZo_vtyNEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:c1:e9:0a:b3:f7:3e:45:22:81:f2:90:97:9e:29:eb:56:de:
96:46:37:65:1c:a0:56:34:ea:e4:1d:e0:48:01:99:2f:75:22:
cf:12:fa:cb:09:d1:83:ed:82:4a:6a:f8:52:f3:a8:73:62:6b:
25:dc:76:34:b1:41:5e:89:b1:37:84:68:b5:bc:c4:23:05:df:
20:70:0f:4d:d3:47:d0:b9:b6:34:f6:58:1b:7c:72:b3:ec:c5:
a0:0c:42:ea:8c:f8:0c:1b:ac:db:a3:79:a9:78:4c:39:8c:80:
ba:dc:93:67:dc:21:30:28:a6:d3:4d:c2:87:0f:05:d0:a9:0f:
ab:ea:ec:2c:72:d1:35:86:5d:0f:d1:af:f2:43:9f:09:3f:48:
05:31:da:1a:6a:43:c2:29:06:2a:11:3b:4e:24:75:ee:34:f4:
6f:fc:cc:80:72:b3:ea:e7:ed:bf:52:a3:a1:60:03:b4:d4:e5:
74:eb:73:25:1e:44:d1:f4:b5:29:bc:f1:f0:29:1d:72:1d:48:
18:f7:72:33:87:e9:6c:3a:be:b0:1a:f9:a4:22:e2:9a:e7:aa:
54:56:cb:33:5c:a9:fd:9f:eb:eb:c4:f6:54:6c:a0:8b:cf:06:
ad:f4:5b:2a:2f:53:27:1c:7e:4d:0b:4c:e6:7d:99:99:8d:bb:
87:40:f1:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 19:57:54 2025 by rpki-client