Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6f5128-7cba-49c5-9b25-99c1b0cfc3a8/1/6lg9YfLlemsW6ksanKJ7slDXSO8.mft
File: 6lg9YfLlemsW6ksanKJ7slDXSO8.mft (raw, json)
Hash identifier: srWj+mZAnqTYSFtxScdouheXNijdhII77f4W31JRg1c=
Subject key identifier: 88:96:1B:09:0C:3E:6B:F2:62:5C:76:79:56:08:0E:9F:63:31:4A:E4
Authority key identifier: EA:58:3D:61:F2:E5:7A:6B:16:EA:4B:1A:9C:A2:7B:B2:50:D7:48:EF
Certificate issuer: /CN=ea583d61f2e57a6b16ea4b1a9ca27bb250d748ef
Certificate serial: 019A4F2B0ACF6479DBD3BD94B12AD26237C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6lg9YfLlemsW6ksanKJ7slDXSO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6f5128-7cba-49c5-9b25-99c1b0cfc3a8/1/6lg9YfLlemsW6ksanKJ7slDXSO8.mft
Manifest number: 1710
Signing time: Tue 04 Nov 2025 14:00:12 +0000
Manifest this update: Tue 04 Nov 2025 14:00:12 +0000
Manifest next update: Wed 05 Nov 2025 14:00:12 +0000
Files and hashes: 1: 6lg9YfLlemsW6ksanKJ7slDXSO8.crl (hash: JLao59FvClzoXR/h4X7P1K3L9ucBdhcFXb/ILWDTd7s=)
2: BDcWEX2jsziWI3BwAdwXDgVlUUs.roa (hash: ohMsIfsvhMfjPWnDhvdOtdCZBCwqZ7Awj2tCgJhUEaE=)
3: YZeqBXKQFmXRNEkSHxYTd5FtBG8.roa (hash: H2qTKciVzX2Iz/NfWeOKudVbBEab6voHC2+59WhtYSU=)
4: eIUbhEvS312QdpTsSOJbOfKRhjg.roa (hash: TDTdEPNKnFdTs1u7Iy6p2CE/KWnf5yhsocLiaVIOsqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/6f5128-7cba-49c5-9b25-99c1b0cfc3a8/1/6lg9YfLlemsW6ksanKJ7slDXSO8.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/6f5128-7cba-49c5-9b25-99c1b0cfc3a8/1/6lg9YfLlemsW6ksanKJ7slDXSO8.mft
rsync://rpki.ripe.net/repository/DEFAULT/6lg9YfLlemsW6ksanKJ7slDXSO8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 14:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:0a:cf:64:79:db:d3:bd:94:b1:2a:d2:62:37:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea583d61f2e57a6b16ea4b1a9ca27bb250d748ef
Validity
Not Before: Nov 4 14:00:12 2025 GMT
Not After : Nov 5 14:00:12 2025 GMT
Subject: CN=88961b090c3e6bf2625c767956080e9f63314ae4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:24:0b:bd:eb:e0:10:72:d7:79:9c:b1:dc:cd:
6f:37:bd:02:1f:d5:e4:b2:fe:18:63:ad:ee:13:ba:
e4:54:79:41:34:3c:b4:30:b4:dd:ac:a8:5c:ec:6a:
bc:6e:b0:6f:d4:58:52:de:38:0d:e8:9e:12:1d:23:
5b:9f:be:2d:e8:7b:bb:9b:26:de:2a:6b:9b:a0:63:
f8:b1:c3:f1:4b:19:bd:dc:69:4a:5a:9a:88:d0:fc:
6b:e2:60:f4:5a:c4:9a:85:9c:4a:c4:aa:9f:8d:00:
f4:25:d7:6e:e0:94:01:62:94:21:ea:d2:f7:df:5e:
68:b7:f7:1d:0e:4b:8f:91:85:ee:df:32:53:03:d8:
a4:39:0a:34:9f:76:ff:7c:02:11:8e:95:0f:14:16:
6b:4b:eb:30:64:ff:ca:09:7d:93:ec:40:12:e9:73:
62:a9:8e:7d:ed:8f:02:c3:1f:92:e4:5b:c6:b5:26:
55:55:9f:9a:1b:e9:66:c4:09:00:5f:19:74:35:cd:
3d:23:8e:f4:92:e1:82:ac:de:a5:d7:ba:7d:30:83:
61:be:fa:db:4b:c9:25:a6:51:ef:98:a0:b9:74:03:
b9:ad:59:e6:ee:65:19:92:9f:03:ca:49:73:6c:7f:
ce:41:60:6a:32:2f:bd:f4:69:b3:7f:8f:58:08:f1:
f8:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:96:1B:09:0C:3E:6B:F2:62:5C:76:79:56:08:0E:9F:63:31:4A:E4
X509v3 Authority Key Identifier:
keyid:EA:58:3D:61:F2:E5:7A:6B:16:EA:4B:1A:9C:A2:7B:B2:50:D7:48:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6lg9YfLlemsW6ksanKJ7slDXSO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6f5128-7cba-49c5-9b25-99c1b0cfc3a8/1/6lg9YfLlemsW6ksanKJ7slDXSO8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6f5128-7cba-49c5-9b25-99c1b0cfc3a8/1/6lg9YfLlemsW6ksanKJ7slDXSO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
df:81:d8:28:f2:d7:ff:8d:81:46:b5:82:cf:cb:32:66:fe:45:
1b:9a:23:76:44:46:ee:c3:c5:7f:bc:6f:93:e3:02:81:e3:dc:
fc:18:40:4e:e9:8c:5d:a6:dc:b7:76:da:11:8d:44:3c:97:f4:
7b:86:78:87:25:a9:b9:51:83:35:ac:95:0e:33:29:fc:29:cc:
fc:8b:34:78:82:f4:93:c1:02:47:be:57:66:19:54:1f:b7:43:
2d:07:79:68:1a:24:24:41:9e:4e:36:5b:10:2f:41:e2:77:e6:
24:a5:af:a8:8c:79:5e:62:80:c4:f4:27:d5:b0:7d:b3:28:30:
bd:b4:bd:91:5c:53:f4:02:97:0d:25:47:3d:db:c9:37:ea:54:
0b:ea:d7:3f:3f:e2:42:ea:91:17:f5:b4:15:c4:61:c3:31:44:
01:6c:8f:11:b3:b3:31:58:70:ed:1c:b0:5e:a1:0b:28:6a:98:
78:bc:85:89:b3:0c:69:88:6a:cf:b8:3e:c9:20:3d:2a:3c:d2:
79:93:d5:45:39:f4:c5:be:7a:d9:a7:46:bb:de:26:fa:27:7a:
84:66:51:d8:34:85:80:b2:5a:85:d6:a0:7f:4b:cd:1b:00:43:
2c:52:2c:37:2c:7d:6e:86:b3:4e:f9:c1:11:de:0b:b0:98:cb:
8f:2f:a3:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:42:54 2025 by rpki-client