Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/4b8cc4-5fc2-4f26-8045-50ef726a9136/1/6fxsgWY89vzpLoPl1mKLwOtqlNI.mft
File: 6fxsgWY89vzpLoPl1mKLwOtqlNI.mft (raw, json)
Hash identifier: 5euivveBEgeZo85+Yfuw07f4kSccnA9m+QgcouD7sOk=
Subject key identifier: 3F:3E:91:FD:6C:74:60:F2:4A:57:FA:CE:8C:6D:0E:CF:9C:EE:BB:A7
Authority key identifier: E9:FC:6C:81:66:3C:F6:FC:E9:2E:83:E5:D6:62:8B:C0:EB:6A:94:D2
Certificate issuer: /CN=e9fc6c81663cf6fce92e83e5d6628bc0eb6a94d2
Certificate serial: 019A4E86A8D08291E1F7FA77CA0FB7394001
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6fxsgWY89vzpLoPl1mKLwOtqlNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/4b8cc4-5fc2-4f26-8045-50ef726a9136/1/6fxsgWY89vzpLoPl1mKLwOtqlNI.mft
Manifest number: 0498
Signing time: Tue 04 Nov 2025 11:00:39 +0000
Manifest this update: Tue 04 Nov 2025 11:00:39 +0000
Manifest next update: Wed 05 Nov 2025 11:00:39 +0000
Files and hashes: 1: 6fxsgWY89vzpLoPl1mKLwOtqlNI.crl (hash: 0VZ/NEXLznbj96uGcFTh0mCKfwFKWCzCBncWzrv1OMg=)
2: hiFOlTDCg2a8NEVG384am3Bu0NI.roa (hash: QsAcrNKEK47Yz8Letal9hjURM1pVKMmWpzSetDZsOkE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/4b8cc4-5fc2-4f26-8045-50ef726a9136/1/6fxsgWY89vzpLoPl1mKLwOtqlNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/4b8cc4-5fc2-4f26-8045-50ef726a9136/1/6fxsgWY89vzpLoPl1mKLwOtqlNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/6fxsgWY89vzpLoPl1mKLwOtqlNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:a8:d0:82:91:e1:f7:fa:77:ca:0f:b7:39:40:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9fc6c81663cf6fce92e83e5d6628bc0eb6a94d2
Validity
Not Before: Nov 4 11:00:39 2025 GMT
Not After : Nov 5 11:00:39 2025 GMT
Subject: CN=3f3e91fd6c7460f24a57face8c6d0ecf9ceebba7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f3:ec:c1:f9:f7:93:14:ac:83:1d:d0:db:f4:
cc:13:6f:a1:6a:6e:8c:84:b0:ea:3b:fa:64:44:9d:
46:4c:1d:0a:22:d4:d1:e0:44:89:77:cb:94:f3:f0:
f0:38:4d:51:45:ac:0e:dc:05:64:a8:84:e7:3d:9d:
37:d7:e9:db:5c:20:4b:a3:9e:a3:17:35:44:0d:d0:
c9:9a:c7:37:c5:92:67:fb:1c:87:8a:29:db:ed:94:
4f:e8:61:32:a9:6a:d1:3b:96:4c:a3:c2:93:e8:a8:
53:fa:92:16:29:81:98:d3:ad:e3:a3:d0:e6:5f:a9:
3d:6b:28:38:2c:0d:e5:4b:85:ba:c3:ef:17:30:14:
c7:9b:81:75:2d:ee:e5:7c:af:be:2f:bb:21:17:af:
c5:81:a1:86:e0:de:af:57:2c:07:42:2d:08:c9:da:
87:6d:fe:83:d6:1f:81:4b:9a:83:d6:3c:eb:6d:65:
33:92:27:71:5e:a3:ed:2f:68:45:9e:14:17:a6:ac:
74:e9:65:12:b1:5c:08:9a:74:03:65:63:f0:24:7a:
55:8f:12:ac:01:66:92:dd:5b:91:c2:ee:b6:3d:18:
fa:c8:bb:00:7a:ef:57:64:67:d9:d3:fd:5e:b7:51:
b3:41:a7:91:ea:d7:5f:99:bb:42:a4:41:2c:07:97:
10:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:3E:91:FD:6C:74:60:F2:4A:57:FA:CE:8C:6D:0E:CF:9C:EE:BB:A7
X509v3 Authority Key Identifier:
keyid:E9:FC:6C:81:66:3C:F6:FC:E9:2E:83:E5:D6:62:8B:C0:EB:6A:94:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6fxsgWY89vzpLoPl1mKLwOtqlNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/4b8cc4-5fc2-4f26-8045-50ef726a9136/1/6fxsgWY89vzpLoPl1mKLwOtqlNI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/4b8cc4-5fc2-4f26-8045-50ef726a9136/1/6fxsgWY89vzpLoPl1mKLwOtqlNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:7f:0d:13:5a:ae:11:9e:51:7a:eb:cb:63:78:e3:82:f3:81:
04:c7:0c:88:c4:f0:a5:34:89:fa:e8:9e:9f:77:57:aa:68:80:
00:31:8b:bd:df:e8:7c:59:4a:87:69:bc:c9:59:32:56:de:61:
5a:6d:c9:11:03:74:1d:84:82:2b:02:1d:5d:4d:90:1f:8f:e6:
75:01:91:f7:6a:af:74:9d:58:2a:e7:0d:fb:d9:36:fa:61:7b:
ea:aa:cd:63:fb:a6:d5:eb:c8:14:fa:8c:5d:b5:cb:ca:34:ba:
9f:c8:71:42:b2:e9:46:c9:a7:d3:7d:4b:f6:31:46:0d:30:87:
5b:cd:89:94:5a:f8:2c:9c:fa:bc:c6:ca:25:cd:3d:a2:f3:df:
8a:d0:4c:de:15:bd:8d:50:fd:46:11:da:37:f0:43:ea:9a:7e:
fa:ea:a3:0b:2c:9f:c8:f7:11:2e:a6:73:d3:a1:c5:19:18:53:
c0:72:25:ca:0f:d4:58:ae:c8:82:5d:b2:1c:6f:7a:d4:7c:e7:
d3:d7:86:05:6b:33:c8:a6:ad:0c:4f:83:2e:46:83:93:bb:5e:
5e:b4:6f:7f:e5:86:50:26:16:be:5e:de:77:27:db:3c:e7:6f:
96:97:9d:08:12:0c:38:d0:83:02:6f:c6:02:13:e1:65:8d:8c:
56:ae:19:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:58:50 2025 by rpki-client