Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/4b4748-5af0-4513-aca9-0b41234cb0ce/1/6Fshr-GwkW9V7qbVvcHb8uc6PGg.mft
File: 6Fshr-GwkW9V7qbVvcHb8uc6PGg.mft (raw, json)
Hash identifier: XqeyOxxB8u9aWLOX8rqxIYMqCHlq2Rn6W/kGCO/1RAw=
Subject key identifier: 76:27:1A:FA:C8:EC:E0:45:36:0D:5E:F3:98:5F:34:0C:0B:65:27:D8
Authority key identifier: E8:5B:21:AF:E1:B0:91:6F:55:EE:A6:D5:BD:C1:DB:F2:E7:3A:3C:68
Certificate issuer: /CN=e85b21afe1b0916f55eea6d5bdc1dbf2e73a3c68
Certificate serial: 019A5451DA592A79B24AEBF934854BDF8EB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Fshr-GwkW9V7qbVvcHb8uc6PGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/4b4748-5af0-4513-aca9-0b41234cb0ce/1/6Fshr-GwkW9V7qbVvcHb8uc6PGg.mft
Manifest number: 065A
Signing time: Wed 05 Nov 2025 14:00:41 +0000
Manifest this update: Wed 05 Nov 2025 14:00:41 +0000
Manifest next update: Thu 06 Nov 2025 14:00:41 +0000
Files and hashes: 1: 6Fshr-GwkW9V7qbVvcHb8uc6PGg.crl (hash: i94cXiy9JKLH4q/NmkrHIaVMWL2cQmd4594gnVEmFBk=)
2: kRbJM0r9hkR1wq3RdsUFiL0HT7Q.roa (hash: TB8ehbBKofWhXL0zKQ3+dh6paWgo+N+m/aat6bTAmec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/4b4748-5af0-4513-aca9-0b41234cb0ce/1/6Fshr-GwkW9V7qbVvcHb8uc6PGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/4b4748-5af0-4513-aca9-0b41234cb0ce/1/6Fshr-GwkW9V7qbVvcHb8uc6PGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/6Fshr-GwkW9V7qbVvcHb8uc6PGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:51:da:59:2a:79:b2:4a:eb:f9:34:85:4b:df:8e:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e85b21afe1b0916f55eea6d5bdc1dbf2e73a3c68
Validity
Not Before: Nov 5 14:00:41 2025 GMT
Not After : Nov 6 14:00:41 2025 GMT
Subject: CN=76271afac8ece045360d5ef3985f340c0b6527d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:cd:16:34:23:a8:4a:d2:ba:4b:e5:b4:46:b0:
93:2d:46:6f:d5:f9:42:e0:35:39:02:b6:c9:1f:32:
6e:59:05:00:03:55:3b:13:52:f7:79:e2:8b:bf:cf:
53:05:6b:a4:cd:08:89:69:5a:01:19:99:db:48:31:
e2:f7:fb:ca:98:b5:63:a4:20:3f:70:ca:9f:1d:91:
00:ca:ae:35:14:21:a5:ad:65:88:54:34:19:67:c2:
b7:c5:5e:48:6a:3f:84:7b:2d:ef:27:d2:3c:ae:af:
e4:f5:ec:4a:43:66:5b:f7:20:78:4e:2a:8e:50:e8:
ff:0d:6c:27:83:e2:85:a3:ef:da:2b:6a:95:d3:3b:
aa:13:cc:5d:30:41:a6:b3:6f:25:1d:95:aa:08:c8:
f1:9e:de:8e:b3:0b:f3:02:fe:47:56:55:f9:b9:25:
97:71:16:b9:e7:df:ad:ca:b8:53:47:f6:12:52:b6:
33:80:65:bf:df:6b:0a:31:88:c3:82:98:01:2a:9d:
63:37:0d:4a:db:14:a8:5e:98:6f:da:f5:9e:9a:a0:
fc:be:be:84:0d:94:a0:e7:63:c5:d4:e1:04:fd:64:
1c:87:09:e2:b6:4e:7a:4a:fb:4c:41:89:4a:fa:f0:
e6:44:b5:a9:7c:62:4e:6a:ca:9b:13:a4:b5:6e:6f:
75:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:27:1A:FA:C8:EC:E0:45:36:0D:5E:F3:98:5F:34:0C:0B:65:27:D8
X509v3 Authority Key Identifier:
keyid:E8:5B:21:AF:E1:B0:91:6F:55:EE:A6:D5:BD:C1:DB:F2:E7:3A:3C:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Fshr-GwkW9V7qbVvcHb8uc6PGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/4b4748-5af0-4513-aca9-0b41234cb0ce/1/6Fshr-GwkW9V7qbVvcHb8uc6PGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/4b4748-5af0-4513-aca9-0b41234cb0ce/1/6Fshr-GwkW9V7qbVvcHb8uc6PGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:45:f4:f8:ac:36:db:d4:eb:65:df:f5:09:a6:d0:76:e7:8a:
6a:22:82:b5:0c:14:1d:61:fd:22:25:e3:98:15:e6:de:15:39:
31:71:01:7c:6d:54:71:2f:16:9c:bd:10:ad:29:19:2e:6e:b9:
de:fb:eb:5a:df:4c:1e:1e:c6:54:b1:87:a5:e2:ea:3a:c2:b5:
5d:3c:2f:f1:e2:a3:ec:c1:90:69:4a:3c:cc:67:10:05:13:b2:
6e:5d:46:ad:b8:a7:d9:5f:18:7f:e8:be:5d:fc:2a:d5:cc:4b:
48:c3:07:de:d8:d5:5b:39:7e:81:31:2c:99:ca:54:2d:40:e6:
46:8e:41:82:54:69:a7:d9:99:40:41:5c:d7:bc:33:8c:b7:a0:
fa:b1:11:fa:49:c0:c4:50:e0:08:ce:6e:5e:d7:0a:4d:ed:1d:
ca:0a:da:69:68:17:23:d4:29:1c:e6:40:aa:96:4a:25:62:00:
7b:84:cf:dc:b6:dd:0a:e0:2f:66:87:3e:9d:98:71:2e:36:cd:
b3:c6:ca:ca:c4:69:6c:f8:7f:d1:10:de:66:db:35:70:76:d4:
4e:2e:7d:fa:3d:d4:74:e7:a2:50:b5:88:80:0b:07:d4:e0:d4:
3d:56:2f:0c:ab:7a:49:82:0c:fb:93:86:66:49:86:9d:4e:0e:
fa:08:20:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:00:01 2025 by rpki-client