Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/d2ff0f-e24a-4313-98c1-22e5547316b5/1/6B0tzytpq9vWCUNkQBFank6hmgU.mft
File: 6B0tzytpq9vWCUNkQBFank6hmgU.mft (raw, json)
Hash identifier: pa3XakcRuCFH+xkvFiAVS9vyA3ygxMrwbRkB0DxlPj4=
Subject key identifier: 36:ED:7A:78:97:8E:1B:82:E7:14:AA:C3:8B:EA:4B:31:03:8D:BF:79
Authority key identifier: E8:1D:2D:CF:2B:69:AB:DB:D6:09:43:64:40:11:5A:9E:4E:A1:9A:05
Certificate issuer: /CN=e81d2dcf2b69abdbd609436440115a9e4ea19a05
Certificate serial: 019A4E4FFCA7966F454D27C29B18D9D8A4F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6B0tzytpq9vWCUNkQBFank6hmgU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/d2ff0f-e24a-4313-98c1-22e5547316b5/1/6B0tzytpq9vWCUNkQBFank6hmgU.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 10:00:56 +0000
Manifest this update: Tue 04 Nov 2025 10:00:56 +0000
Manifest next update: Wed 05 Nov 2025 10:00:56 +0000
Files and hashes: 1: 6B0tzytpq9vWCUNkQBFank6hmgU.crl (hash: g0G+EwHBh9n6TkG3hyYRY+aT7SmWFkMsOOpaFlf4tgw=)
2: rqSMK05KYSg_B0GzBcqvNHZV8BM.roa (hash: 7UiFO6ZTlzbJGR5qeW9I8KOwaVtEW4c742Prj97IAno=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/d2ff0f-e24a-4313-98c1-22e5547316b5/1/6B0tzytpq9vWCUNkQBFank6hmgU.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/d2ff0f-e24a-4313-98c1-22e5547316b5/1/6B0tzytpq9vWCUNkQBFank6hmgU.mft
rsync://rpki.ripe.net/repository/DEFAULT/6B0tzytpq9vWCUNkQBFank6hmgU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:fc:a7:96:6f:45:4d:27:c2:9b:18:d9:d8:a4:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e81d2dcf2b69abdbd609436440115a9e4ea19a05
Validity
Not Before: Nov 4 10:00:56 2025 GMT
Not After : Nov 5 10:00:56 2025 GMT
Subject: CN=36ed7a78978e1b82e714aac38bea4b31038dbf79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:68:e2:ae:6e:78:8a:ec:f4:c8:c2:e6:25:49:
c1:ac:b4:13:20:5f:c6:e5:97:aa:01:f0:27:b5:77:
05:cc:ac:28:c5:0b:4b:af:84:be:93:f2:92:8f:37:
aa:fb:9c:43:14:40:63:61:d1:9b:98:a5:6b:8e:96:
31:80:77:e1:07:6c:70:d8:c4:f0:ef:f5:ae:82:b2:
08:15:55:e1:bb:a8:19:99:bb:b7:2c:79:71:39:1d:
8e:03:56:10:14:64:da:f9:7c:b8:3b:de:54:63:45:
f7:07:5a:90:18:e0:a2:e6:91:48:40:09:d0:f7:a4:
a0:ec:9f:63:7c:ef:3c:ce:4a:68:6a:0e:f5:df:ac:
45:8c:86:6a:97:7c:52:af:79:fc:de:53:0d:34:d6:
98:64:2e:6f:9f:e9:50:11:7d:0f:81:3f:4d:64:6d:
c5:67:fa:df:06:f1:53:ee:42:06:8d:47:ad:e1:0c:
50:cc:36:1d:e3:87:58:20:79:c4:15:fb:a4:51:8c:
2e:0e:30:bc:f6:c6:dd:bb:a4:c7:84:84:ef:ab:3e:
87:24:86:27:ab:dc:5e:22:42:fb:33:b5:89:9b:ea:
3b:85:6c:de:1b:ea:22:0d:b6:4e:23:f5:74:07:2e:
e9:81:e7:4a:4f:7a:56:3c:7f:96:0b:4d:7f:9f:cf:
00:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:ED:7A:78:97:8E:1B:82:E7:14:AA:C3:8B:EA:4B:31:03:8D:BF:79
X509v3 Authority Key Identifier:
keyid:E8:1D:2D:CF:2B:69:AB:DB:D6:09:43:64:40:11:5A:9E:4E:A1:9A:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6B0tzytpq9vWCUNkQBFank6hmgU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/d2ff0f-e24a-4313-98c1-22e5547316b5/1/6B0tzytpq9vWCUNkQBFank6hmgU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/d2ff0f-e24a-4313-98c1-22e5547316b5/1/6B0tzytpq9vWCUNkQBFank6hmgU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:7b:35:07:97:be:fc:fb:42:09:3e:bf:84:69:98:a7:62:17:
db:f3:fc:72:55:9c:b5:f6:8c:89:61:07:a5:79:17:c6:81:8c:
a6:42:62:3c:25:b8:b9:6d:2e:a7:0a:cb:b6:ce:a1:e0:26:1d:
48:a0:07:df:37:9d:98:5d:0c:fe:26:1e:7a:2d:2a:1a:65:ce:
0a:85:2b:d8:5f:e8:34:68:99:0a:a5:23:e5:09:a6:c8:29:6e:
97:e1:1b:e1:1b:98:32:d0:4c:79:3b:0d:8d:47:e4:b1:d2:29:
c5:2a:4f:ba:bf:b8:7a:9c:b5:4f:58:30:99:6a:2f:b5:9d:b4:
89:ea:98:2d:7c:53:2a:d3:44:01:31:83:98:14:2f:56:13:69:
49:4c:24:1d:01:be:c3:5e:f3:32:ce:14:1e:59:4c:d9:de:3e:
0f:47:42:0c:bf:66:2f:d9:81:f8:2a:2f:5e:48:ac:21:c0:a9:
3c:ce:5b:7c:67:a2:cc:ab:51:d1:7e:f2:53:6b:14:86:50:39:
ec:99:6d:c9:45:9a:6b:0b:9a:ed:68:45:aa:23:28:f1:45:a5:
18:59:74:82:f9:35:28:bb:a9:cb:53:7d:4d:2a:26:ea:a8:5c:
6f:24:82:00:13:dc:a0:7c:ed:62:15:af:5f:9b:e8:0d:06:b3:
e4:a4:62:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:07:42 2025 by rpki-client