Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/1a134f-030a-43e7-b041-6c7856ef7b31/1/6eTclo7VKTWgTe47Ipwhypv9vX4.mft
File: 6eTclo7VKTWgTe47Ipwhypv9vX4.mft (raw, json)
Hash identifier: h/NzpXpJ7TqU7lTCpbp8HWfIoS/d8EH3+8XQhCO8DEk=
Subject key identifier: 69:44:83:DA:E2:B8:9C:A8:E4:B3:C7:B5:3F:63:4C:02:9E:81:C9:DA
Authority key identifier: E9:E4:DC:96:8E:D5:29:35:A0:4D:EE:3B:22:9C:21:CA:9B:FD:BD:7E
Certificate issuer: /CN=e9e4dc968ed52935a04dee3b229c21ca9bfdbd7e
Certificate serial: 019A4E18DB53854F4C9FEE5038C1C057EFC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6eTclo7VKTWgTe47Ipwhypv9vX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/1a134f-030a-43e7-b041-6c7856ef7b31/1/6eTclo7VKTWgTe47Ipwhypv9vX4.mft
Manifest number: 1717
Signing time: Tue 04 Nov 2025 09:00:43 +0000
Manifest this update: Tue 04 Nov 2025 09:00:43 +0000
Manifest next update: Wed 05 Nov 2025 09:00:43 +0000
Files and hashes: 1: 6eTclo7VKTWgTe47Ipwhypv9vX4.crl (hash: kvZkVrWcSUskU6jeAOCe2Zb6xvAt0Q0OVjPUor5/A3A=)
2: ALsU0GmL8xBEdnC3KhGcFcVEzLI.roa (hash: kjJSdr3ASA1w2olBsUagT4Dg4lrINRn84aknrRD9LYQ=)
3: dLKTEkbiLuMxJ2yOUJIoZEwUrdY.roa (hash: RRTb9hjGX5e3eDXQaXOf0UYAPlQTcjlQylghvEN9gn4=)
4: lc03wXBALXEPocpcfjm6P-yAsN0.roa (hash: hU68bUabKrfbjp5BXZ3aDNdEQaqOiciUFeryRAbO9Qw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/1a134f-030a-43e7-b041-6c7856ef7b31/1/6eTclo7VKTWgTe47Ipwhypv9vX4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/1a134f-030a-43e7-b041-6c7856ef7b31/1/6eTclo7VKTWgTe47Ipwhypv9vX4.mft
rsync://rpki.ripe.net/repository/DEFAULT/6eTclo7VKTWgTe47Ipwhypv9vX4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:db:53:85:4f:4c:9f:ee:50:38:c1:c0:57:ef:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9e4dc968ed52935a04dee3b229c21ca9bfdbd7e
Validity
Not Before: Nov 4 09:00:43 2025 GMT
Not After : Nov 5 09:00:43 2025 GMT
Subject: CN=694483dae2b89ca8e4b3c7b53f634c029e81c9da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:2e:10:48:e5:ef:9c:a5:a1:76:27:be:38:de:
1e:49:2e:01:a3:ea:ec:c5:2e:a8:f3:ac:33:91:3b:
78:e9:12:9b:3f:07:b3:44:4c:a5:de:2e:c9:b5:00:
aa:4c:40:e1:3e:9e:ce:dc:88:6f:50:f4:7f:cb:53:
95:44:19:14:98:ac:3c:67:34:28:f5:4f:ed:64:4a:
1c:2f:6b:97:1c:13:ba:eb:8c:ac:f1:54:0f:36:88:
79:c5:35:c6:48:19:f2:d4:3d:b9:9b:7a:a7:e5:87:
67:fe:5c:9d:a2:9f:5e:e5:8c:92:79:b0:a4:0c:5a:
2c:0e:f3:8d:9f:7e:1b:05:6b:97:85:3d:d7:9e:ad:
5c:79:33:d3:0a:52:4a:23:27:27:e4:b7:27:63:f9:
3a:82:bb:d7:6d:da:8d:d8:00:c0:5f:9d:9c:da:e3:
25:22:84:09:ec:e4:c5:38:d1:5f:75:f4:7f:d1:2a:
34:f9:8a:44:76:1d:d6:f0:58:4b:40:a6:44:fd:7c:
d8:76:26:d1:a8:9e:e3:fe:37:de:6c:9c:8d:ab:94:
74:57:c2:5a:4a:4a:53:32:56:53:c5:8c:fc:dd:b4:
47:24:cc:c5:04:02:d3:99:8e:b8:9e:84:ad:9d:42:
a3:4d:7c:25:b9:d7:cb:e5:f2:92:29:19:ff:ed:8f:
11:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:44:83:DA:E2:B8:9C:A8:E4:B3:C7:B5:3F:63:4C:02:9E:81:C9:DA
X509v3 Authority Key Identifier:
keyid:E9:E4:DC:96:8E:D5:29:35:A0:4D:EE:3B:22:9C:21:CA:9B:FD:BD:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6eTclo7VKTWgTe47Ipwhypv9vX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/1a134f-030a-43e7-b041-6c7856ef7b31/1/6eTclo7VKTWgTe47Ipwhypv9vX4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/1a134f-030a-43e7-b041-6c7856ef7b31/1/6eTclo7VKTWgTe47Ipwhypv9vX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:c6:dc:a9:28:85:b3:2d:12:df:93:cb:03:d9:46:41:2b:bc:
19:93:7d:25:2b:69:96:0d:7b:1f:05:1d:7c:98:cd:8e:95:85:
88:b9:af:86:fd:5a:81:3a:8a:cb:61:f6:06:93:b1:84:7b:87:
10:02:dc:b2:51:d2:dd:1c:e5:25:38:dc:63:f5:fd:27:10:9b:
73:f5:45:60:ec:06:b3:75:9b:ce:86:7f:ff:52:60:bf:41:37:
b3:80:4e:73:09:98:07:a9:f4:69:b9:72:c0:2c:ff:7a:3f:2c:
d0:31:73:ea:3f:73:7c:10:52:58:72:f9:de:b2:a2:77:1a:37:
a0:80:8a:0e:be:e4:5f:42:57:b2:d1:e2:6a:f5:a0:9f:41:85:
2d:1a:09:37:3d:3e:77:82:4c:28:48:33:63:d8:69:14:69:b8:
08:30:d4:dc:5e:0a:9b:78:95:52:43:a8:78:c5:75:86:5b:5f:
1d:f3:85:17:d2:34:30:3f:50:4b:54:27:84:13:3f:67:dc:7d:
6b:fa:2b:91:82:4f:1e:63:0c:b9:61:fa:1b:cb:4b:41:78:fb:
84:18:3e:b6:23:19:68:ed:4a:2a:1b:7b:c0:64:73:7c:02:2a:
63:8b:c5:c1:10:8b:4a:49:87:16:34:31:a7:b9:d1:82:bf:42:
5d:66:f8:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:42:03 2025 by rpki-client