Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/db4658-4275-43ba-9da9-6d810b0ada0a/1/6MPmRSpj-OR6JX5Twaj_p1-R6kA.mft
File: 6MPmRSpj-OR6JX5Twaj_p1-R6kA.mft (raw, json)
Hash identifier: G8nhElm43R/vPL/i0SSEI8zktbdpidWrCqmoY8V35Go=
Subject key identifier: A8:14:12:FA:BA:5C:4F:C6:BF:DA:96:42:48:6E:C4:81:BA:F2:D2:7D
Authority key identifier: E8:C3:E6:45:2A:63:F8:E4:7A:25:7E:53:C1:A8:FF:A7:5F:91:EA:40
Certificate issuer: /CN=e8c3e6452a63f8e47a257e53c1a8ffa75f91ea40
Certificate serial: 019A4D7465390CF20D737038369A19E2ABF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6MPmRSpj-OR6JX5Twaj_p1-R6kA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/db4658-4275-43ba-9da9-6d810b0ada0a/1/6MPmRSpj-OR6JX5Twaj_p1-R6kA.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 06:01:04 +0000
Manifest this update: Tue 04 Nov 2025 06:01:04 +0000
Manifest next update: Wed 05 Nov 2025 06:01:04 +0000
Files and hashes: 1: 6MPmRSpj-OR6JX5Twaj_p1-R6kA.crl (hash: A3NC2Wz4izHwRe/00LBxI4TXk3Hw8rQpaXXIs7xu1mo=)
2: GK0Bp6TP9K4-qwdEgsDkQHad0Jw.roa (hash: vbPhg+vd0Vmphw6uDH8Qj3C//m4qsvwfSx93uUcGgb8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/db4658-4275-43ba-9da9-6d810b0ada0a/1/6MPmRSpj-OR6JX5Twaj_p1-R6kA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/db4658-4275-43ba-9da9-6d810b0ada0a/1/6MPmRSpj-OR6JX5Twaj_p1-R6kA.mft
rsync://rpki.ripe.net/repository/DEFAULT/6MPmRSpj-OR6JX5Twaj_p1-R6kA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:65:39:0c:f2:0d:73:70:38:36:9a:19:e2:ab:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8c3e6452a63f8e47a257e53c1a8ffa75f91ea40
Validity
Not Before: Nov 4 06:01:04 2025 GMT
Not After : Nov 5 06:01:04 2025 GMT
Subject: CN=a81412faba5c4fc6bfda9642486ec481baf2d27d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a8:57:3d:db:1a:96:63:cc:6a:7f:e1:7e:87:
b1:b8:37:c5:c2:b1:8b:3d:4b:8c:9d:99:74:2f:cd:
e3:9b:6c:7b:d9:30:02:d2:18:5b:ee:ca:c8:aa:1d:
99:6a:fc:14:79:7e:b5:5c:52:a7:70:59:9b:af:3a:
44:23:4c:08:0f:42:c6:20:47:13:ac:31:8f:af:8a:
49:ce:a1:d2:32:78:82:71:d2:56:bc:9c:4c:e4:5d:
78:b1:ec:44:a5:62:e0:38:1d:14:7e:03:0b:8e:e8:
d4:ea:ba:ce:df:8a:1b:5f:8e:5a:d6:4c:c0:35:b7:
3a:59:fa:6a:44:3e:6f:20:63:72:71:69:a7:14:d5:
4d:09:3e:0a:ab:74:63:97:88:07:52:23:c3:f2:4e:
2f:85:0e:a4:8d:b2:49:5e:94:dc:1e:d0:c9:77:05:
ca:ed:f1:30:60:b4:0b:be:47:ce:bf:c1:10:c0:46:
75:10:01:92:d4:61:3a:88:83:fd:c8:7e:1a:0e:74:
9d:d2:8f:2d:2e:ab:8b:07:aa:96:82:65:54:c1:03:
d0:58:f8:c5:dd:14:74:8f:a1:d5:f2:85:63:6b:12:
0f:86:2f:fb:11:21:31:e9:c2:5c:6a:d7:76:d9:bc:
0c:a4:85:55:86:f4:4f:fb:c8:36:8c:3a:ba:e4:cf:
b2:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:14:12:FA:BA:5C:4F:C6:BF:DA:96:42:48:6E:C4:81:BA:F2:D2:7D
X509v3 Authority Key Identifier:
keyid:E8:C3:E6:45:2A:63:F8:E4:7A:25:7E:53:C1:A8:FF:A7:5F:91:EA:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6MPmRSpj-OR6JX5Twaj_p1-R6kA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/db4658-4275-43ba-9da9-6d810b0ada0a/1/6MPmRSpj-OR6JX5Twaj_p1-R6kA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/db4658-4275-43ba-9da9-6d810b0ada0a/1/6MPmRSpj-OR6JX5Twaj_p1-R6kA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:ee:57:b8:ca:c8:b6:6f:78:31:62:7d:6b:c4:5b:1c:e2:22:
a0:53:dc:ba:4c:2e:49:df:52:fe:a7:65:01:73:8f:0e:a7:07:
11:27:55:63:ba:f7:63:c8:45:e2:0b:e0:47:e5:8a:37:3b:ae:
6c:a5:0c:d5:e2:3d:c6:49:5a:07:ce:07:78:3f:b1:6e:80:0f:
70:40:4a:7f:17:b5:61:88:eb:0f:35:d3:34:38:f0:e6:5b:89:
89:52:17:b9:3f:24:92:39:b8:b0:77:bd:81:0b:1a:1f:75:72:
aa:5f:7f:71:61:bd:70:c3:d0:3c:df:17:02:e9:42:f9:c2:4e:
f3:f4:65:28:90:3d:40:d2:66:1e:52:3d:83:7a:94:ad:98:76:
65:89:e9:b2:21:b6:a2:f3:a5:79:bd:5b:2a:48:41:63:b9:af:
5c:7c:ff:6d:be:f5:a3:8c:1c:41:fb:61:af:7a:7b:b0:8a:b4:
55:fd:5d:ef:41:ec:18:80:55:08:28:e2:dc:8c:4e:f2:ae:86:
ba:ef:0d:a6:b2:25:84:fb:00:32:1b:b3:a1:9a:6d:1b:54:63:
bc:ae:04:6b:08:01:67:c5:c6:ba:cb:3d:94:4c:53:93:6b:ec:
b8:5b:e5:20:b7:f4:03:99:65:10:f1:06:a4:ea:6b:c2:ef:17:
d9:aa:f5:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:48:22 2025 by rpki-client