Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/29af59-0b7b-4d80-8f9f-14d02e30d227/1/6HzGgMhZg-e_dEmNDmvoAPhkUcM.mft
File: 6HzGgMhZg-e_dEmNDmvoAPhkUcM.mft (raw, json)
Hash identifier: GBTKYisG2K3Cv/+NrT4LVwaJKkmrnMx5qT6XWY6/AoY=
Subject key identifier: 94:B1:15:78:6C:4B:39:0B:C4:BF:30:48:03:D4:FB:27:ED:86:94:E7
Authority key identifier: E8:7C:C6:80:C8:59:83:E7:BF:74:49:8D:0E:6B:E8:00:F8:64:51:C3
Certificate issuer: /CN=e87cc680c85983e7bf74498d0e6be800f86451c3
Certificate serial: 019A52D25FB630F9E193B2B26CB8DBFC925E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6HzGgMhZg-e_dEmNDmvoAPhkUcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/29af59-0b7b-4d80-8f9f-14d02e30d227/1/6HzGgMhZg-e_dEmNDmvoAPhkUcM.mft
Manifest number: 123B
Signing time: Wed 05 Nov 2025 07:01:50 +0000
Manifest this update: Wed 05 Nov 2025 07:01:50 +0000
Manifest next update: Thu 06 Nov 2025 07:01:50 +0000
Files and hashes: 1: 6HzGgMhZg-e_dEmNDmvoAPhkUcM.crl (hash: nxHSW//b2WAaRwxyEJJDkWxTd0pf4rHahAdt66UFQHg=)
2: RV1OCO6rVYRRtTkZ3woaRdBKO6E.roa (hash: SuF4hxdu7ICIMIbu+gsmbKlo3zzUrtsEXjzwrCv9yIk=)
3: fbyo7xw7OVQjt-Z_risAcNBtcH8.roa (hash: QFqUQxFJMJ/HRIgpyInlcTMTKwfoUJaISjB36SzyexU=)
4: lxoRTf-wo4YOlgiYkmNsq_STsOo.roa (hash: TqDSPnCDTrr4iXHUBYL0fqJjIVOuIkCFrz5kt7VpmEQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/29af59-0b7b-4d80-8f9f-14d02e30d227/1/6HzGgMhZg-e_dEmNDmvoAPhkUcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/29af59-0b7b-4d80-8f9f-14d02e30d227/1/6HzGgMhZg-e_dEmNDmvoAPhkUcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/6HzGgMhZg-e_dEmNDmvoAPhkUcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d2:5f:b6:30:f9:e1:93:b2:b2:6c:b8:db:fc:92:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e87cc680c85983e7bf74498d0e6be800f86451c3
Validity
Not Before: Nov 5 07:01:50 2025 GMT
Not After : Nov 6 07:01:50 2025 GMT
Subject: CN=94b115786c4b390bc4bf304803d4fb27ed8694e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f7:c1:b4:a9:5e:17:b8:7b:09:e1:f3:7d:9e:
aa:ad:04:ed:5e:d4:d0:74:f5:1d:4f:d1:74:6d:0e:
fa:45:ff:c4:6a:6f:c4:ec:71:40:0e:54:cb:fc:b0:
b9:69:f0:da:c6:a5:80:43:57:e6:fc:f0:30:a0:05:
68:0f:30:03:66:44:76:5d:34:67:9f:50:ea:ae:10:
42:30:db:96:aa:f2:65:96:37:c3:13:b2:29:08:ea:
2a:08:39:48:96:6f:bb:8f:33:b7:cc:ea:d8:95:75:
e8:7a:9c:43:f6:68:7f:fa:3f:64:e9:aa:40:67:1e:
85:8e:2e:c0:d7:d0:7c:5b:f7:f5:3a:b3:9b:7a:6d:
3c:87:96:0b:b3:78:89:af:21:ee:92:b6:80:05:3e:
f7:6a:cd:27:9f:e5:8e:8e:1d:c5:d0:d5:11:30:59:
77:3d:f3:26:3e:57:3c:47:be:07:64:f5:43:9f:76:
c2:24:2f:76:0a:64:37:db:5b:2a:b7:23:45:9b:07:
2e:7d:37:83:80:c4:6d:da:65:12:18:21:1d:8e:77:
30:2e:b7:81:bd:6b:60:a3:ce:55:ca:a9:c7:b6:2f:
4c:de:e8:7f:09:04:8b:7d:39:84:2e:9d:7c:a9:5f:
cd:da:17:06:2d:c1:df:13:fe:2e:61:ee:89:b9:39:
17:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:B1:15:78:6C:4B:39:0B:C4:BF:30:48:03:D4:FB:27:ED:86:94:E7
X509v3 Authority Key Identifier:
keyid:E8:7C:C6:80:C8:59:83:E7:BF:74:49:8D:0E:6B:E8:00:F8:64:51:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6HzGgMhZg-e_dEmNDmvoAPhkUcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/29af59-0b7b-4d80-8f9f-14d02e30d227/1/6HzGgMhZg-e_dEmNDmvoAPhkUcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/29af59-0b7b-4d80-8f9f-14d02e30d227/1/6HzGgMhZg-e_dEmNDmvoAPhkUcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:98:7d:d1:5a:75:16:41:3f:49:87:af:31:a5:79:c0:9c:85:
96:38:a4:cf:ef:37:66:26:8c:86:ff:59:60:29:46:a4:bf:cb:
0c:0d:81:35:3f:3e:fb:87:6d:a5:6d:8d:d9:ec:e2:63:5f:19:
82:fa:98:01:c2:f3:be:2f:18:3d:df:a0:5c:d4:53:08:f4:94:
d5:e0:a0:bb:42:46:5b:81:a5:38:54:ab:cf:8c:6b:8a:c6:49:
f2:2c:ae:b4:f1:25:11:5b:16:4a:d5:90:1d:66:75:ce:d7:b9:
85:fb:52:7d:04:cb:85:4a:31:21:4a:4f:36:0f:a2:b1:f8:57:
0e:a9:34:57:49:2b:87:6c:ee:f4:6e:ad:ce:13:c4:de:96:9c:
05:fb:d3:87:16:fa:a5:93:3b:4b:b2:06:41:b0:bb:a3:47:1b:
2d:85:f3:1a:bc:92:de:51:05:1d:5e:71:81:81:96:f7:ee:ea:
d4:72:31:ff:85:ab:fc:1b:72:20:8f:e3:25:8b:ab:7b:09:f2:
81:28:fb:9a:20:56:6e:db:95:89:e3:7b:03:3c:57:1a:3a:50:
49:1a:d7:a7:8e:0f:d0:f3:82:6c:cd:66:eb:8a:b9:82:f7:3a:
49:76:ce:41:41:69:d1:4f:bd:74:7d:aa:4b:08:55:94:b9:24:
cd:03:cf:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:11:47 2025 by rpki-client