Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/91d629-7d1f-45bd-a1e1-931cf798e412/1/6rBmxuGACj9b0uQG6aYg0qD29lM.mft
File: 6rBmxuGACj9b0uQG6aYg0qD29lM.mft (raw, json)
Hash identifier: QAMgjX5SQfqkEBGoFLOfo+/HthwZV7F6a947N2LCmHc=
Subject key identifier: F7:9A:B4:31:D1:F9:EA:2D:8C:C2:B3:56:01:96:44:67:D2:7C:08:D1
Authority key identifier: EA:B0:66:C6:E1:80:0A:3F:5B:D2:E4:06:E9:A6:20:D2:A0:F6:F6:53
Certificate issuer: /CN=eab066c6e1800a3f5bd2e406e9a620d2a0f6f653
Certificate serial: 019A4F6306C26BB07C22425742861C65E9D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6rBmxuGACj9b0uQG6aYg0qD29lM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/91d629-7d1f-45bd-a1e1-931cf798e412/1/6rBmxuGACj9b0uQG6aYg0qD29lM.mft
Manifest number: 0DA1
Signing time: Tue 04 Nov 2025 15:01:21 +0000
Manifest this update: Tue 04 Nov 2025 15:01:21 +0000
Manifest next update: Wed 05 Nov 2025 15:01:21 +0000
Files and hashes: 1: 6rBmxuGACj9b0uQG6aYg0qD29lM.crl (hash: 4GgfwhumTweDik2RuQwbm0pvCXeY+hlWpuFzCYsCMhc=)
2: 9uvjekcau3PbfLrEyZwNzBwQO7Q.roa (hash: mH0HAaOf2X0fWHcxqJaO7mLzzy3VZpb8eqMe7h725z0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/91d629-7d1f-45bd-a1e1-931cf798e412/1/6rBmxuGACj9b0uQG6aYg0qD29lM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/91d629-7d1f-45bd-a1e1-931cf798e412/1/6rBmxuGACj9b0uQG6aYg0qD29lM.mft
rsync://rpki.ripe.net/repository/DEFAULT/6rBmxuGACj9b0uQG6aYg0qD29lM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:63:06:c2:6b:b0:7c:22:42:57:42:86:1c:65:e9:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eab066c6e1800a3f5bd2e406e9a620d2a0f6f653
Validity
Not Before: Nov 4 15:01:21 2025 GMT
Not After : Nov 5 15:01:21 2025 GMT
Subject: CN=f79ab431d1f9ea2d8cc2b35601964467d27c08d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:d9:67:23:85:d2:c1:8f:1d:81:d2:40:a0:c9:
6b:12:db:ff:98:87:ba:b6:4a:13:ad:a7:7d:7d:26:
20:cd:52:44:2c:85:c4:34:59:5e:dc:8a:98:f5:f9:
ed:6f:38:f7:06:dd:ff:bb:05:fa:ff:02:c3:24:f9:
53:3e:c6:69:61:13:2d:2a:9a:43:8c:ab:b7:cf:ea:
6f:6b:b6:00:e8:e0:1e:13:50:ad:3a:1d:93:61:67:
2e:5f:9a:d4:9a:73:46:f5:05:ae:80:06:de:ce:ce:
5f:bb:31:15:e9:78:10:bd:43:96:28:40:22:81:81:
e5:84:31:6b:e2:6d:b7:c5:ec:5f:2a:1f:66:7e:cc:
25:96:d3:48:38:7e:d6:4c:5a:81:03:4c:22:c1:62:
ec:82:62:9c:75:8f:75:08:2b:ef:4b:a7:0c:ab:40:
b1:2c:e1:f3:6d:7e:09:d5:3f:4c:50:0b:97:17:f4:
30:e6:bb:1a:2f:f9:69:5e:37:f2:09:7a:ae:e4:f0:
92:56:f8:fb:53:54:7d:e3:92:79:40:0b:22:69:35:
cd:5e:9d:f4:fc:78:69:d3:df:03:79:e3:1e:82:56:
30:d2:9a:b3:cc:bf:3b:b3:f7:4c:3e:04:01:c2:8e:
69:a5:4e:77:0a:a6:bc:02:41:95:b4:dc:38:a4:67:
5a:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:9A:B4:31:D1:F9:EA:2D:8C:C2:B3:56:01:96:44:67:D2:7C:08:D1
X509v3 Authority Key Identifier:
keyid:EA:B0:66:C6:E1:80:0A:3F:5B:D2:E4:06:E9:A6:20:D2:A0:F6:F6:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6rBmxuGACj9b0uQG6aYg0qD29lM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/91d629-7d1f-45bd-a1e1-931cf798e412/1/6rBmxuGACj9b0uQG6aYg0qD29lM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/91d629-7d1f-45bd-a1e1-931cf798e412/1/6rBmxuGACj9b0uQG6aYg0qD29lM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:c1:94:00:f3:e0:0b:dd:ab:6a:2c:60:dc:44:e1:aa:01:f5:
43:6c:1b:88:71:ab:6c:7d:e2:08:6d:d6:cf:c6:5e:82:49:48:
19:5a:ae:5a:88:15:e8:26:72:56:7a:7f:ef:88:79:a2:ce:5e:
83:9c:c4:61:b2:8d:03:9f:55:22:07:25:46:97:e1:df:b1:25:
3c:b2:39:e5:a2:6a:dd:46:8b:05:9f:2d:10:35:07:92:43:64:
7e:96:d5:51:cb:15:6d:42:48:45:33:03:3e:61:10:00:c6:d8:
17:5b:90:fd:48:42:93:ed:eb:9e:d4:10:af:fd:91:96:52:11:
d3:9d:ed:c3:43:7c:36:ab:c4:fc:09:31:9e:94:85:b4:52:2e:
88:85:83:ad:6b:3e:a6:7c:1c:61:27:3a:c5:3c:8c:98:92:75:
22:7f:37:93:4e:0a:16:48:07:1b:82:07:41:57:fa:5d:e0:fd:
ad:cb:ee:1c:d1:2e:5d:c6:97:db:9c:fa:82:c9:e1:52:4c:bf:
da:25:78:cc:fa:8f:af:dd:5f:0d:c9:75:4e:74:6d:f2:60:c3:
13:8d:62:d2:16:ef:1f:12:ed:b4:21:d3:e6:8f:95:d1:73:74:
5b:9a:dd:91:45:72:22:98:22:2b:fa:6c:1a:d5:84:ba:d4:e1:
83:47:19:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:49:24 2025 by rpki-client