Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/46c20c-f166-4041-a01b-0efec6ea77c6/1/06zSt7dHOvQ1DqGrqD0XdYXO7a0.mft
File: 06zSt7dHOvQ1DqGrqD0XdYXO7a0.mft (raw, json)
Hash identifier: GQbZ8bKw2Vhdivdzpl6tqcdbCSsnP6dpfCxlIZG+V8Y=
Subject key identifier: 2F:69:49:F8:17:CE:D9:04:06:1E:35:CE:7A:F1:25:F1:4B:8B:C0:8F
Authority key identifier: D3:AC:D2:B7:B7:47:3A:F4:35:0E:A1:AB:A8:3D:17:75:85:CE:ED:AD
Certificate issuer: /CN=d3acd2b7b7473af4350ea1aba83d177585ceedad
Certificate serial: 019A4EF57F610C965BF8E88D83E25F267376
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/06zSt7dHOvQ1DqGrqD0XdYXO7a0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/46c20c-f166-4041-a01b-0efec6ea77c6/1/06zSt7dHOvQ1DqGrqD0XdYXO7a0.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 13:01:43 +0000
Manifest this update: Tue 04 Nov 2025 13:01:43 +0000
Manifest next update: Wed 05 Nov 2025 13:01:43 +0000
Files and hashes: 1: 06zSt7dHOvQ1DqGrqD0XdYXO7a0.crl (hash: i9CzQbWo/4WqBrP5EM4THsj6kqcY+jSFaFmi8kUnA2g=)
2: ruzowO5hkwvsrCMVqncyR6RC2cM.roa (hash: 3UI+kEeYIksu5ENYxWY/kKHH2Zgvkj1CId+2uWMcQI0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/46c20c-f166-4041-a01b-0efec6ea77c6/1/06zSt7dHOvQ1DqGrqD0XdYXO7a0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/46c20c-f166-4041-a01b-0efec6ea77c6/1/06zSt7dHOvQ1DqGrqD0XdYXO7a0.mft
rsync://rpki.ripe.net/repository/DEFAULT/06zSt7dHOvQ1DqGrqD0XdYXO7a0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:7f:61:0c:96:5b:f8:e8:8d:83:e2:5f:26:73:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3acd2b7b7473af4350ea1aba83d177585ceedad
Validity
Not Before: Nov 4 13:01:43 2025 GMT
Not After : Nov 5 13:01:43 2025 GMT
Subject: CN=2f6949f817ced904061e35ce7af125f14b8bc08f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f4:1b:32:40:df:ce:40:8e:97:0d:94:22:76:
d9:13:7b:b5:4b:4f:05:e7:5d:9f:39:b2:fc:8d:e5:
f0:68:14:71:ca:ed:29:d7:84:52:1a:07:3a:80:a1:
f7:bf:c1:2c:5e:4a:ba:6e:ca:68:2e:76:73:ef:33:
af:3c:49:82:09:02:85:6a:50:8d:71:6c:a4:88:3e:
a4:4b:55:06:9e:70:43:5e:91:58:9a:43:5d:64:64:
a0:19:28:2c:e4:b2:a4:31:5f:bf:ac:95:c5:04:fc:
e5:50:21:ac:78:e8:63:a2:04:7f:55:8c:51:f2:df:
85:2c:e0:d8:88:f1:41:d8:ab:89:a9:d0:ba:5d:4c:
e6:47:d6:9d:f5:f3:48:6f:b7:4f:2f:01:b6:5b:63:
38:49:fb:5e:b2:fa:c6:78:82:78:53:d8:5d:b8:02:
83:51:c5:41:58:21:a0:e9:62:bf:bb:5d:86:8a:9c:
5b:92:fe:66:68:47:97:ed:6f:86:e9:0a:54:43:12:
41:34:68:77:bb:65:93:c7:75:42:80:86:a8:47:dc:
11:68:61:41:02:c8:b9:92:a1:72:b7:cc:7a:0a:10:
f9:46:08:d9:f4:a3:d1:7f:ca:d2:e6:df:14:d0:87:
7a:26:42:f7:ad:89:75:cc:d0:78:e1:14:07:c7:dc:
80:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:69:49:F8:17:CE:D9:04:06:1E:35:CE:7A:F1:25:F1:4B:8B:C0:8F
X509v3 Authority Key Identifier:
keyid:D3:AC:D2:B7:B7:47:3A:F4:35:0E:A1:AB:A8:3D:17:75:85:CE:ED:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/06zSt7dHOvQ1DqGrqD0XdYXO7a0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/46c20c-f166-4041-a01b-0efec6ea77c6/1/06zSt7dHOvQ1DqGrqD0XdYXO7a0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/46c20c-f166-4041-a01b-0efec6ea77c6/1/06zSt7dHOvQ1DqGrqD0XdYXO7a0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:a2:0c:d6:e6:cd:20:99:9b:d9:70:ab:d7:d9:33:1f:e3:a1:
07:1c:0a:df:a4:f6:60:9b:e3:2b:19:d5:9e:68:5a:0d:05:67:
2b:98:2e:50:02:6b:75:21:dc:02:2c:b1:e6:16:2e:81:be:1d:
3f:53:02:38:e6:08:d9:6a:c6:c3:6e:fc:4e:e6:9e:d0:37:9d:
8c:ed:0c:de:7d:88:69:21:a1:dd:bd:2e:36:57:26:c2:ae:ae:
1b:cb:72:83:03:c7:7a:42:c1:b3:4f:fe:91:25:23:0a:e5:6d:
86:74:af:83:0e:a6:d7:b8:74:47:ac:94:72:6d:54:77:71:73:
d5:13:62:cb:8f:e4:61:ad:3f:ca:1d:54:ce:74:db:4a:44:0a:
6e:3b:94:09:3f:2b:ce:a2:f8:c7:45:06:c0:c3:01:51:62:a3:
3d:0a:db:59:6f:df:f1:1e:98:de:bb:44:6f:77:ae:79:91:5e:
03:8a:25:19:4a:07:b1:43:74:d9:91:14:90:4b:2b:7e:db:a1:
c1:44:28:1f:50:bd:98:be:47:b4:39:6f:d1:df:8e:53:74:c7:
cb:57:ed:aa:20:ae:20:ef:be:cc:c4:b2:a9:da:ad:22:26:d7:
0c:c6:06:2c:93:4c:93:a7:9d:a9:20:10:ff:c1:1d:28:2a:74:
74:8f:e8:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:05:15 2025 by rpki-client