Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/2b729f-08a7-4c93-8bc9-815c5f2765d0/1/6ogLzDAqXbosNRpv054KizkipTU.mft
File: 6ogLzDAqXbosNRpv054KizkipTU.mft (raw, json)
Hash identifier: RlD8KxuqInE0YxLN7Sh7FeQnAMZym2nUMC0zWuxVQH4=
Subject key identifier: 66:E0:AB:7E:91:DA:94:05:9D:AB:0F:33:DF:7C:AD:FC:59:CE:12:44
Authority key identifier: EA:88:0B:CC:30:2A:5D:BA:2C:35:1A:6F:D3:9E:0A:8B:39:22:A5:35
Certificate issuer: /CN=ea880bcc302a5dba2c351a6fd39e0a8b3922a535
Certificate serial: 019A4F61F81447CC2D3E4A82BB31B44252F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6ogLzDAqXbosNRpv054KizkipTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/2b729f-08a7-4c93-8bc9-815c5f2765d0/1/6ogLzDAqXbosNRpv054KizkipTU.mft
Manifest number: 0778
Signing time: Tue 04 Nov 2025 15:00:11 +0000
Manifest this update: Tue 04 Nov 2025 15:00:11 +0000
Manifest next update: Wed 05 Nov 2025 15:00:11 +0000
Files and hashes: 1: 6ogLzDAqXbosNRpv054KizkipTU.crl (hash: aAeyjJFsrIpH5GACDLFIcOQBFoS9t61sr6cZBuWSSlY=)
2: eG6hHlrMZ5LIXTfGfgot4IiG4ek.roa (hash: yIhVuzNldSheNj9t68+efRcjN+q//cUeoESSltGdZEM=)
3: v_xrcu_njaocN3K-X9oPxCjEg6k.roa (hash: 9gD6GNup8/leD5HSb02l/wSBrP9d9vIusha+3wIJKAA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/2b729f-08a7-4c93-8bc9-815c5f2765d0/1/6ogLzDAqXbosNRpv054KizkipTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/2b729f-08a7-4c93-8bc9-815c5f2765d0/1/6ogLzDAqXbosNRpv054KizkipTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/6ogLzDAqXbosNRpv054KizkipTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:61:f8:14:47:cc:2d:3e:4a:82:bb:31:b4:42:52:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea880bcc302a5dba2c351a6fd39e0a8b3922a535
Validity
Not Before: Nov 4 15:00:11 2025 GMT
Not After : Nov 5 15:00:11 2025 GMT
Subject: CN=66e0ab7e91da94059dab0f33df7cadfc59ce1244
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d4:e3:0e:bf:6f:2c:0b:b5:ad:04:d2:53:12:
de:66:0f:3a:c3:c5:7b:87:71:b6:d2:7e:ce:e0:cb:
ba:92:2f:16:c0:a3:09:6c:e8:29:21:35:8c:96:95:
9d:31:b5:c7:a3:19:27:0f:16:02:ce:77:e5:f7:7f:
e7:bb:8c:fe:17:97:41:c7:4a:f7:2f:52:65:a1:d8:
32:0a:31:4e:02:f6:28:dd:31:61:27:f6:b5:a3:67:
70:63:f4:b9:48:f4:7d:19:9c:a7:a4:2a:74:c6:08:
bc:07:07:2c:25:a7:0b:0b:b6:69:35:c5:6e:41:e9:
1a:f8:d2:81:05:86:be:6c:5b:7a:91:97:0c:59:f0:
31:33:d3:67:51:d1:06:a9:bc:75:6c:c0:c5:9b:b5:
a7:ef:70:0d:3a:6c:9e:7e:56:6b:87:63:9f:6b:fe:
2f:30:de:d0:63:8b:5a:8c:36:cb:9b:ad:b6:f8:14:
8f:94:3d:e3:6e:db:11:f1:f0:8d:eb:eb:20:55:49:
09:0d:7a:e0:fd:e9:f2:4f:09:9f:35:bf:51:02:29:
47:0b:a4:e5:36:6b:b8:22:c1:f3:9f:6e:50:17:7b:
ae:8f:82:bf:ad:b7:50:f9:ba:fc:ad:62:90:d2:d7:
26:1d:66:3b:f9:5f:83:10:02:53:0d:32:e2:6b:be:
c5:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:E0:AB:7E:91:DA:94:05:9D:AB:0F:33:DF:7C:AD:FC:59:CE:12:44
X509v3 Authority Key Identifier:
keyid:EA:88:0B:CC:30:2A:5D:BA:2C:35:1A:6F:D3:9E:0A:8B:39:22:A5:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ogLzDAqXbosNRpv054KizkipTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/2b729f-08a7-4c93-8bc9-815c5f2765d0/1/6ogLzDAqXbosNRpv054KizkipTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/2b729f-08a7-4c93-8bc9-815c5f2765d0/1/6ogLzDAqXbosNRpv054KizkipTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:02:64:c3:6e:e0:12:23:5a:79:eb:d5:fb:4f:8f:e0:42:46:
30:83:e9:a6:39:53:61:22:5b:00:2d:94:9d:8f:66:b3:4a:07:
7b:76:ad:3a:94:1f:b6:0a:0a:54:8c:41:4a:84:e6:24:88:3d:
5f:dd:d2:27:f8:09:42:44:3b:1f:7c:cc:a5:40:81:7a:44:a4:
3e:30:ba:55:c0:52:5a:25:30:b5:5c:9e:c0:a0:11:b1:d0:38:
24:2e:5b:c7:47:60:9b:f3:35:4a:da:06:71:2a:35:0d:0c:68:
40:0d:b5:7f:0f:d5:05:53:7c:bc:51:31:67:77:9c:01:2f:55:
1a:d8:c6:b6:31:3c:5e:ef:2a:60:3a:a9:e5:cf:64:4f:77:e1:
01:26:10:c6:af:a5:08:66:8c:3c:3a:27:dd:c2:2c:99:45:ac:
a4:11:4b:9f:2e:ef:10:3d:00:1e:f7:b9:22:79:10:65:db:fe:
95:8a:c6:06:f4:20:43:ad:cf:f4:16:f9:09:9f:6b:18:bd:b5:
ab:64:31:7f:c9:37:47:b7:33:63:27:3a:57:a2:a1:47:72:fd:
38:ae:e2:5e:6b:a5:90:79:c3:df:53:d0:23:36:23:0d:d9:67:
e6:29:f6:39:a0:57:13:1f:66:24:f8:35:0a:5a:6a:96:d2:11:
11:25:f7:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:18:57 2025 by rpki-client