Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/c7dbdf-1e2c-4fba-8411-c67d713cdabc/1/6vauX7W-PpqblzGcevhQK76JOjc.mft
File: 6vauX7W-PpqblzGcevhQK76JOjc.mft (raw, json)
Hash identifier: lB5C2UsKT+HWqT7JGvgcPUiZIIxWxjzQpjDE/3xdvAo=
Subject key identifier: 9A:AD:68:0A:2F:1C:75:6D:AB:66:34:E8:E9:23:A4:60:9D:F6:3B:C8
Authority key identifier: EA:F6:AE:5F:B5:BE:3E:9A:9B:97:31:9C:7A:F8:50:2B:BE:89:3A:37
Certificate issuer: /CN=eaf6ae5fb5be3e9a9b97319c7af8502bbe893a37
Certificate serial: 019A51874A2F16623F1D1241D411C392F049
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6vauX7W-PpqblzGcevhQK76JOjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/c7dbdf-1e2c-4fba-8411-c67d713cdabc/1/6vauX7W-PpqblzGcevhQK76JOjc.mft
Manifest number: 16AE
Signing time: Wed 05 Nov 2025 01:00:12 +0000
Manifest this update: Wed 05 Nov 2025 01:00:12 +0000
Manifest next update: Thu 06 Nov 2025 01:00:12 +0000
Files and hashes: 1: 6vauX7W-PpqblzGcevhQK76JOjc.crl (hash: iGcrZypgKuQrFJu+qxA5D1fKE8WjmUX562840RSgepo=)
2: Ahvmv48ngf-KjVDLWWBDTBDASd0.roa (hash: 7ZyR7Sl5BjMwCkDy0XgoHIL8hy/aGuAql4BiOWVa8/E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/c7dbdf-1e2c-4fba-8411-c67d713cdabc/1/6vauX7W-PpqblzGcevhQK76JOjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/c7dbdf-1e2c-4fba-8411-c67d713cdabc/1/6vauX7W-PpqblzGcevhQK76JOjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/6vauX7W-PpqblzGcevhQK76JOjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:87:4a:2f:16:62:3f:1d:12:41:d4:11:c3:92:f0:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaf6ae5fb5be3e9a9b97319c7af8502bbe893a37
Validity
Not Before: Nov 5 01:00:12 2025 GMT
Not After : Nov 6 01:00:12 2025 GMT
Subject: CN=9aad680a2f1c756dab6634e8e923a4609df63bc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:66:52:af:35:b9:e4:9d:6f:f6:f0:43:1a:8f:
bb:f7:9d:85:d8:10:96:6b:37:9a:f3:76:1f:29:db:
29:c7:4b:9c:ab:d8:95:93:f8:93:53:3a:9b:38:af:
50:13:34:66:37:8b:12:fe:0f:e8:41:a1:21:37:2e:
2c:f0:d6:fd:21:2a:1c:0b:2a:93:3b:6c:6a:ce:d1:
83:70:77:be:10:d6:5a:8f:d0:8a:7f:39:97:81:bd:
02:10:af:1e:57:e5:22:32:0e:34:2f:ce:5f:79:f7:
bb:8c:98:bd:7a:66:29:34:b9:6d:25:35:7a:d8:ac:
4d:93:fd:d4:63:ce:a3:60:02:d6:a1:3e:bc:d6:44:
08:d8:90:9e:ae:29:26:22:87:b9:99:0d:5a:a9:03:
62:65:77:4b:9d:1c:b0:50:8d:05:25:be:77:ae:ed:
8d:e4:9f:7f:8c:44:50:d1:86:fd:8b:c9:7c:b4:0a:
05:50:b8:32:ee:1b:a7:c7:48:57:1c:f5:9c:53:6f:
0a:ed:43:f1:8c:5a:17:88:7a:bb:e6:56:f8:fd:08:
e8:ef:51:d4:4c:a2:2e:b4:4f:30:17:0d:be:71:3e:
07:86:66:f1:58:e4:7d:18:0b:5f:8e:fd:d8:c6:91:
fb:57:f1:5f:ae:85:8a:1a:1d:5e:14:4b:d3:2b:c2:
46:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:AD:68:0A:2F:1C:75:6D:AB:66:34:E8:E9:23:A4:60:9D:F6:3B:C8
X509v3 Authority Key Identifier:
keyid:EA:F6:AE:5F:B5:BE:3E:9A:9B:97:31:9C:7A:F8:50:2B:BE:89:3A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6vauX7W-PpqblzGcevhQK76JOjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/c7dbdf-1e2c-4fba-8411-c67d713cdabc/1/6vauX7W-PpqblzGcevhQK76JOjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/c7dbdf-1e2c-4fba-8411-c67d713cdabc/1/6vauX7W-PpqblzGcevhQK76JOjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:ea:8d:73:30:94:89:04:e5:75:ce:d8:39:b9:57:44:30:c8:
1a:1e:11:bb:b9:72:ab:3d:b7:51:cd:48:42:65:39:1f:a9:31:
78:7b:f4:b1:97:42:f7:b2:7c:28:f1:c1:a4:c0:3f:a3:b9:3d:
01:31:50:87:09:5b:74:b6:c9:bf:3b:59:3f:e6:c4:5b:f9:55:
a4:e4:02:41:16:ae:be:e4:9e:0a:71:42:0a:ba:f3:57:b1:d8:
09:b4:60:34:58:33:2e:94:bb:18:a0:0b:bb:a1:af:ce:ef:93:
06:c8:43:8d:8a:f2:f8:a1:39:79:b0:36:fe:3b:a0:fa:79:b4:
2a:94:84:61:e7:8f:55:3e:d9:ed:72:f5:96:74:d6:92:68:76:
8b:c5:f4:3d:ec:ba:9a:14:2b:aa:e7:4c:08:cd:d4:8c:d7:4b:
f3:a6:e7:21:86:cf:a6:1f:1e:b5:ab:d0:88:2e:33:36:e4:d5:
f4:a0:de:2c:a2:fb:1a:6a:0b:62:68:0c:5a:01:9e:44:c0:b9:
35:11:ba:bf:f8:0c:b9:27:6c:39:f2:85:fb:ae:52:99:dc:bf:
03:71:94:d4:84:75:37:17:e0:c9:52:31:0c:3e:eb:74:e6:5f:
89:5d:6f:d8:fd:42:0d:6e:06:b7:eb:5d:eb:ff:9a:c9:57:67:
8f:f6:01:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:34:26 2025 by rpki-client