Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.mft
File: 6EA7XkXNWL5fbF0z-lZatJIj49s.mft (raw, json)
Hash identifier: 9oyKZFhBQBj4swODDbZf+vykx5mYrlrmkaoFHpYZMDs=
Subject key identifier: FA:47:81:8D:23:FE:F2:0D:84:08:16:47:97:56:12:BC:D6:31:2E:28
Authority key identifier: E8:40:3B:5E:45:CD:58:BE:5F:6C:5D:33:FA:56:5A:B4:92:23:E3:DB
Certificate issuer: /CN=e8403b5e45cd58be5f6c5d33fa565ab49223e3db
Certificate serial: 019A52D1E88B2CF189BE113A6DBEC871841B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6EA7XkXNWL5fbF0z-lZatJIj49s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.mft
Manifest number: 1724
Signing time: Wed 05 Nov 2025 07:01:19 +0000
Manifest this update: Wed 05 Nov 2025 07:01:19 +0000
Manifest next update: Thu 06 Nov 2025 07:01:19 +0000
Files and hashes: 1: 6EA7XkXNWL5fbF0z-lZatJIj49s.crl (hash: 2GuudajwPvcNEGLqWgaGksMmZrYgaa/NWnK32NgQPB0=)
2: 8ifx7KKJ18pryNHwF1j4-Fc64gM.roa (hash: VaIkHBJSp4yitHY1eixtkQXqBMvBgkd5WICUJNcd2K8=)
3: BO1ltB2867u60oaiDsy_-XsvL88.roa (hash: N3BRFXxAhwO4FPIhN2IGyHjmICRkpQTCZFJQ4I0pqRI=)
4: FoWNQ1gpwJC_vJTYQPjNq4EOPsk.roa (hash: y3YmRhUlwwI5SoZwTRIclzEsG8VBx6W5icxmsvJXHic=)
5: Q_XBBiAk4qHgl5xyRFCeUl8e3VE.roa (hash: sADh7knGI+0KPR0TD0XBdBdTNm9tN3/eGMw1gHZe2VI=)
6: cPczL7BSG5C-UOorLa44AbTPVd4.roa (hash: iC/fXBJJkXo1CbjOzv3JUUnSB7oUYt0rT8G7YWmNXm4=)
7: jIQE6oG-USVQsaVIsuMgVZrbPS8.roa (hash: tj3eChM7EThfXzNYj4xO6MKRf71fqyAWWs5gIA5ClkU=)
8: nCj-HurrM8I6ZuYeTftMdm0Nisw.roa (hash: f4dhcwMgx6vMMDpRWe3qOH6ZusltLaqZhMj8z/Gm8hQ=)
9: wPWSAuQLoLC84i_wxl8zAMN7M_I.roa (hash: AX93UGQS0hHBTCeSbLVGxtGmi8vpmUf8TykhODf8ipI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.mft
rsync://rpki.ripe.net/repository/DEFAULT/6EA7XkXNWL5fbF0z-lZatJIj49s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d1:e8:8b:2c:f1:89:be:11:3a:6d:be:c8:71:84:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8403b5e45cd58be5f6c5d33fa565ab49223e3db
Validity
Not Before: Nov 5 07:01:19 2025 GMT
Not After : Nov 6 07:01:19 2025 GMT
Subject: CN=fa47818d23fef20d84081647975612bcd6312e28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8c:65:4c:eb:e5:6a:4b:5b:69:a3:e7:d5:6f:
35:84:05:98:61:da:bf:e5:87:8c:17:9c:2d:ec:88:
1b:81:47:d7:45:aa:6b:65:7b:98:89:df:54:3f:1f:
7f:7e:6c:76:1c:1f:f9:96:28:fa:ef:e8:80:1d:db:
cb:5e:ce:11:43:bc:2e:70:e6:73:36:1d:8e:19:c7:
75:c1:53:fc:ed:f1:2f:2a:cc:17:68:77:80:bb:41:
04:50:c7:2e:79:31:1e:85:85:e6:f4:b1:62:c1:bd:
3b:be:d7:21:cc:1c:05:0b:ae:c1:d0:2c:2a:a4:fe:
78:1d:6a:b0:37:03:84:0d:ab:7e:57:8c:84:b7:d8:
d3:a2:f2:62:0e:19:6f:52:6e:8d:69:5f:51:91:6a:
1e:07:20:e7:d5:46:13:63:4d:58:d7:a3:3a:82:64:
ec:7e:cd:4c:b0:87:69:68:16:a3:29:00:d1:30:46:
ef:bd:e5:ed:32:08:eb:65:49:14:f3:76:95:d2:b8:
1a:e5:ab:09:bc:ad:3d:a1:b9:39:68:ef:29:9c:1c:
cf:b9:f5:74:87:c8:2c:82:39:c0:c7:84:a7:ae:77:
74:be:ca:c3:4e:31:82:0c:e7:f8:d2:45:7e:9b:ab:
ba:a5:ac:ba:76:01:04:05:4a:97:8f:1e:0b:6f:d5:
59:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:47:81:8D:23:FE:F2:0D:84:08:16:47:97:56:12:BC:D6:31:2E:28
X509v3 Authority Key Identifier:
keyid:E8:40:3B:5E:45:CD:58:BE:5F:6C:5D:33:FA:56:5A:B4:92:23:E3:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EA7XkXNWL5fbF0z-lZatJIj49s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:70:43:98:58:41:a2:81:37:74:66:af:03:0f:38:a6:9e:07:
c3:d9:9f:8e:5e:9e:73:19:b0:35:43:59:ec:10:34:fb:89:17:
85:b3:0c:75:c1:5b:ba:cd:ce:c1:d8:f4:0f:e9:4f:87:6f:72:
f2:a3:24:6f:96:fa:da:de:4d:f0:d8:d8:6e:32:e8:96:66:7d:
83:f1:e8:74:81:a6:19:9c:68:2a:95:b2:b5:88:6f:7d:ae:43:
86:91:7a:20:04:04:99:e4:27:56:d1:f0:c1:6d:42:33:87:41:
91:0e:26:87:19:57:27:1e:e1:e5:f8:66:08:3a:5e:3a:1e:ec:
00:59:b4:d4:a2:0f:19:50:dc:01:12:1d:32:8b:ab:61:89:bd:
36:1b:30:8b:15:d8:95:6f:43:a6:56:6d:73:55:f2:25:97:80:
88:71:96:94:91:f4:10:ad:fd:b1:0b:1c:47:f9:a0:83:bf:cd:
72:59:ce:6f:62:e4:aa:c2:95:95:9e:ea:7e:7b:8c:36:2f:b9:
f3:f5:a6:3b:71:59:df:68:41:04:bb:86:f2:08:81:4a:02:37:
0c:ea:06:da:56:30:24:53:09:f3:6a:c0:7c:19:99:e8:89:b5:
e0:f0:68:a0:0b:35:3e:1f:0d:35:91:cd:58:de:2a:76:4b:0d:
6f:85:c1:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:48:40 2025 by rpki-client