Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/57889a-50df-4abf-81e5-1b12641f493b/1/b6rlVhP8iVhve9beDtygl7hhWmo.mft
File: b6rlVhP8iVhve9beDtygl7hhWmo.mft (raw, json)
Hash identifier: 7EylL3mBBSiELHamgZjgajrGftrOwUV4Oe3ZI8NCvJ8=
Subject key identifier: B8:A3:FA:7D:C3:88:7E:CF:54:61:6F:92:43:38:B5:52:B1:1F:6D:06
Authority key identifier: 6F:AA:E5:56:13:FC:89:58:6F:7B:D6:DE:0E:DC:A0:97:B8:61:5A:6A
Certificate issuer: /CN=6faae55613fc89586f7bd6de0edca097b8615a6a
Certificate serial: 019A4E18CFFD9B9CF0C3834F449604A750FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b6rlVhP8iVhve9beDtygl7hhWmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/57889a-50df-4abf-81e5-1b12641f493b/1/b6rlVhP8iVhve9beDtygl7hhWmo.mft
Manifest number: 0A77
Signing time: Tue 04 Nov 2025 09:00:40 +0000
Manifest this update: Tue 04 Nov 2025 09:00:40 +0000
Manifest next update: Wed 05 Nov 2025 09:00:40 +0000
Files and hashes: 1: aOtm6U59mShACrUP4z50hrZCIxk.roa (hash: 8fQIVCesiryqBUIZoQ97a4j4i55DYNAa5i2DNRlMQ5M=)
2: b6rlVhP8iVhve9beDtygl7hhWmo.crl (hash: ECVNHoqyVHDfihznF4juXae005yv5msCndUBEaTcWv4=)
3: y4zgX7Lvz7a-J26BXsPiVoxb_IM.roa (hash: NtJpJ4/+lfRrM4AtabmrS2+ljg+xewyFLniZOgVUMdA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/57889a-50df-4abf-81e5-1b12641f493b/1/b6rlVhP8iVhve9beDtygl7hhWmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/57889a-50df-4abf-81e5-1b12641f493b/1/b6rlVhP8iVhve9beDtygl7hhWmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/b6rlVhP8iVhve9beDtygl7hhWmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:cf:fd:9b:9c:f0:c3:83:4f:44:96:04:a7:50:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6faae55613fc89586f7bd6de0edca097b8615a6a
Validity
Not Before: Nov 4 09:00:40 2025 GMT
Not After : Nov 5 09:00:40 2025 GMT
Subject: CN=b8a3fa7dc3887ecf54616f924338b552b11f6d06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:9e:f6:90:3b:77:ba:ea:cc:fb:2c:61:07:fb:
c1:16:ba:25:d2:17:a6:c7:7b:c9:59:10:01:e8:b5:
00:64:66:9a:17:a8:c2:4e:a6:0f:96:18:25:39:eb:
9c:1d:25:55:97:cb:97:cd:96:08:00:ba:80:d4:d6:
a8:85:89:31:f4:d4:87:fa:1a:3d:a0:50:26:c9:e6:
35:25:74:0b:98:00:17:37:98:42:e3:17:c8:3e:bf:
59:f5:cb:97:3c:51:01:29:d4:0b:53:5d:f4:ab:93:
2d:bf:2c:17:f4:ca:4c:e1:e4:48:1a:8e:a5:42:b2:
68:55:ed:94:88:08:85:b6:38:58:af:63:b7:e3:c9:
0e:75:75:9b:c1:0e:f9:e7:d6:e7:e0:34:a0:65:29:
b1:ae:d4:4d:10:86:4e:73:96:9c:32:09:77:de:74:
23:8a:af:b4:3e:e6:33:55:f1:f7:4f:58:fa:1b:e4:
e4:05:01:77:65:8e:3d:47:0b:8b:c8:27:1f:bf:7a:
cc:50:a7:56:40:ad:c1:dd:9e:5e:57:0b:e2:86:92:
8f:34:fa:e7:0a:56:8a:54:c7:9c:1e:b8:81:3d:35:
09:c1:f0:87:65:68:c4:61:52:44:d4:09:89:0c:27:
cc:44:ab:82:69:82:4e:a5:5b:e8:76:d0:5b:e5:16:
0e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:A3:FA:7D:C3:88:7E:CF:54:61:6F:92:43:38:B5:52:B1:1F:6D:06
X509v3 Authority Key Identifier:
keyid:6F:AA:E5:56:13:FC:89:58:6F:7B:D6:DE:0E:DC:A0:97:B8:61:5A:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6rlVhP8iVhve9beDtygl7hhWmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/57889a-50df-4abf-81e5-1b12641f493b/1/b6rlVhP8iVhve9beDtygl7hhWmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/57889a-50df-4abf-81e5-1b12641f493b/1/b6rlVhP8iVhve9beDtygl7hhWmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:bd:a7:61:8c:46:e4:96:b8:61:78:3f:95:5c:b0:8e:dc:73:
8f:9a:7e:36:b5:a3:65:59:cc:44:ba:32:28:9e:4d:10:c8:f8:
ae:4d:10:9d:c0:0a:02:93:e3:0a:b2:8b:31:ed:33:d5:4e:0f:
6e:60:9d:1c:a1:2f:14:9f:31:3f:76:a3:ce:90:36:98:ff:05:
f7:21:1d:0b:58:8a:22:0e:25:76:74:eb:6f:28:89:a5:cf:d9:
06:d5:db:7f:48:aa:de:76:68:68:da:d6:e5:31:81:7e:c4:e0:
a7:82:d3:fe:52:3a:df:e7:12:2f:f7:0a:f0:bd:bb:ef:a2:ff:
02:45:da:57:43:d7:fe:b2:ca:91:1c:f9:43:f7:f2:9f:34:ef:
92:ed:bf:05:fe:44:fc:99:b0:55:3e:38:03:7b:cf:da:4e:9b:
ba:f9:56:23:d3:20:b3:db:74:81:17:be:08:90:ae:81:0e:f9:
ea:b7:49:d9:94:36:69:86:b5:0c:bd:65:cf:e6:d1:db:ca:4b:
37:d1:8f:66:49:b2:86:eb:01:29:54:73:27:27:90:e6:b7:f4:
b7:bc:fe:3a:08:a9:c1:7a:36:22:8b:60:b3:24:2a:ca:05:dd:
f4:bf:cf:ca:b6:76:b7:37:50:01:70:dd:6d:ff:28:75:17:f8:
3a:17:6a:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:01:54 2025 by rpki-client