Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/5ab585-b29b-4e71-8038-90e21df01e91/1/6x3AD9LB4-qvzszBtLofj9CkqYw.mft
File: 6x3AD9LB4-qvzszBtLofj9CkqYw.mft (raw, json)
Hash identifier: 7ZMes4vlPjSFGeswNZc5wucYj/FsmFX3q0xUXOjm1kU=
Subject key identifier: 96:59:92:7C:EF:02:EB:A2:18:D5:5C:ED:0B:2E:63:35:D8:5D:3F:FF
Authority key identifier: EB:1D:C0:0F:D2:C1:E3:EA:AF:CE:CC:C1:B4:BA:1F:8F:D0:A4:A9:8C
Certificate issuer: /CN=eb1dc00fd2c1e3eaafceccc1b4ba1f8fd0a4a98c
Certificate serial: 019A5375A509229A3B20FF60A833C4E473E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6x3AD9LB4-qvzszBtLofj9CkqYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/5ab585-b29b-4e71-8038-90e21df01e91/1/6x3AD9LB4-qvzszBtLofj9CkqYw.mft
Manifest number: 1712
Signing time: Wed 05 Nov 2025 10:00:10 +0000
Manifest this update: Wed 05 Nov 2025 10:00:10 +0000
Manifest next update: Thu 06 Nov 2025 10:00:10 +0000
Files and hashes: 1: 6x3AD9LB4-qvzszBtLofj9CkqYw.crl (hash: jg80q3L7Qr7Cjcbu0ZNrDSVUupjR3qKMCWnN0og3BEk=)
2: Om5FJ2saBdYhhGOS3f3FISumZqg.roa (hash: Fu3JRt/JCmRX1P55XNbPmEdky96U0142N0aVN3A+m0w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/5ab585-b29b-4e71-8038-90e21df01e91/1/6x3AD9LB4-qvzszBtLofj9CkqYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/5ab585-b29b-4e71-8038-90e21df01e91/1/6x3AD9LB4-qvzszBtLofj9CkqYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/6x3AD9LB4-qvzszBtLofj9CkqYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:75:a5:09:22:9a:3b:20:ff:60:a8:33:c4:e4:73:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb1dc00fd2c1e3eaafceccc1b4ba1f8fd0a4a98c
Validity
Not Before: Nov 5 10:00:10 2025 GMT
Not After : Nov 6 10:00:10 2025 GMT
Subject: CN=9659927cef02eba218d55ced0b2e6335d85d3fff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:dc:aa:b7:1d:fd:db:bb:44:f8:00:7b:77:80:
9c:df:8f:01:a8:94:7b:86:ec:33:8b:04:41:10:42:
29:d5:a2:6b:0a:15:c4:57:c4:0c:68:c1:f9:c0:0c:
01:97:26:0c:ba:74:29:0b:92:4c:ea:46:66:11:d1:
75:d5:4a:fd:af:60:75:75:6c:d1:24:45:89:fb:b3:
79:3f:51:a7:79:97:5e:dc:a1:df:e3:0e:dd:23:23:
24:49:ba:da:44:e2:55:cd:d1:d1:63:9e:80:61:57:
cf:e6:86:a6:6e:3c:20:38:d2:55:b5:8f:f1:6e:4d:
4b:a0:6a:ec:29:e4:09:84:20:5b:8a:e2:2b:37:53:
c2:41:80:9c:2e:e6:a5:11:71:d0:40:b7:c8:cb:f7:
99:ad:76:eb:15:c1:1b:79:42:d6:b9:65:92:e7:3e:
0b:9d:e9:26:18:f4:9d:2e:01:4b:1d:37:2d:39:9f:
87:62:e8:8e:32:ed:28:97:a6:d3:6c:d9:d7:de:0d:
7f:c1:4a:d9:d4:06:17:e8:1c:2c:ec:a6:9a:d1:fd:
b4:6b:93:30:9c:9b:2c:28:0f:3c:8d:ce:69:2c:16:
26:b9:a2:93:36:64:05:1e:43:90:59:48:04:a6:a7:
ef:8c:60:49:2a:8f:6b:bb:d3:8b:22:1e:a2:bd:0e:
f0:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:59:92:7C:EF:02:EB:A2:18:D5:5C:ED:0B:2E:63:35:D8:5D:3F:FF
X509v3 Authority Key Identifier:
keyid:EB:1D:C0:0F:D2:C1:E3:EA:AF:CE:CC:C1:B4:BA:1F:8F:D0:A4:A9:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6x3AD9LB4-qvzszBtLofj9CkqYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5ab585-b29b-4e71-8038-90e21df01e91/1/6x3AD9LB4-qvzszBtLofj9CkqYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5ab585-b29b-4e71-8038-90e21df01e91/1/6x3AD9LB4-qvzszBtLofj9CkqYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:36:98:99:d0:e8:30:60:36:ee:42:e6:97:e1:c4:49:32:31:
9b:20:39:83:07:63:29:7f:5a:a1:f6:98:e3:99:e8:d5:33:9e:
d2:2d:eb:12:ac:7c:d9:d7:c5:c9:ef:89:59:66:88:df:aa:f8:
60:3b:79:97:e6:38:16:32:5b:b9:e8:de:96:72:27:29:53:99:
8d:9c:68:21:49:47:23:4a:5e:f3:62:67:27:4d:f8:4f:f5:d4:
ab:68:71:4c:7d:b3:27:01:ad:d9:ac:6c:e0:9a:bd:35:65:3b:
4d:23:d8:d4:0d:33:de:8e:63:5e:45:d7:58:42:77:29:08:d2:
b4:54:57:6f:e0:94:27:a6:2a:07:f9:ff:9a:9c:15:7d:cd:a4:
b0:f0:6d:9c:cd:a2:52:99:3c:e2:0a:42:8b:60:81:a5:7e:e8:
f2:59:56:4e:4b:07:1a:b4:ef:ca:94:9b:48:c7:f5:ec:43:b8:
dc:fa:68:4d:65:d9:18:cd:0d:45:ff:d3:67:e9:ca:42:09:41:
d6:94:01:76:ef:b6:be:a6:d0:aa:cc:3b:b6:dd:e8:12:c3:44:
69:4b:5d:15:a3:f8:61:bc:c2:ca:76:97:45:7d:e5:13:1e:b1:
fd:2b:5f:f5:c7:2e:61:e4:b5:17:c9:b6:2e:39:94:76:e8:4e:
55:3f:b0:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:06:08 2025 by rpki-client