Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/9841ff-c886-4da0-957a-f2f0955da1ad/1/nG_8tbXi3kVRrPm0WvJC25RYTlo.mft
File: nG_8tbXi3kVRrPm0WvJC25RYTlo.mft (raw, json)
Hash identifier: Z4jsnn6p1jJHdYzSiPIoHsZb2daPGvEPAbBn6HUgEPY=
Subject key identifier: 6B:97:C8:D5:64:AC:1B:12:65:A2:65:87:31:46:05:22:4C:05:EA:25
Authority key identifier: 9C:6F:FC:B5:B5:E2:DE:45:51:AC:F9:B4:5A:F2:42:DB:94:58:4E:5A
Certificate issuer: /CN=9c6ffcb5b5e2de4551acf9b45af242db94584e5a
Certificate serial: 019A53AC9E9BA8339DB11CEBDD06949A3953
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nG_8tbXi3kVRrPm0WvJC25RYTlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/9841ff-c886-4da0-957a-f2f0955da1ad/1/nG_8tbXi3kVRrPm0WvJC25RYTlo.mft
Manifest number: 01C6
Signing time: Wed 05 Nov 2025 11:00:12 +0000
Manifest this update: Wed 05 Nov 2025 11:00:12 +0000
Manifest next update: Thu 06 Nov 2025 11:00:12 +0000
Files and hashes: 1: JwRtsxKsHclcBB-A4e8ZZ-jD4D0.roa (hash: qJiNznI8TYONtH5aWUgF2Zivyd6LUikgOFyMXC2FJUY=)
2: c1fGsP0bCEH6cCis_UoQKhD3CSY.roa (hash: tV98uAPL9NGHun4KK73liMuNDYczrIrsIhzMw0qt0ig=)
3: nG_8tbXi3kVRrPm0WvJC25RYTlo.crl (hash: M5KYB66DBNvg6jaqjlNCH8JUK1f1vcg65j0pkO9Fgcc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/9841ff-c886-4da0-957a-f2f0955da1ad/1/nG_8tbXi3kVRrPm0WvJC25RYTlo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/9841ff-c886-4da0-957a-f2f0955da1ad/1/nG_8tbXi3kVRrPm0WvJC25RYTlo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nG_8tbXi3kVRrPm0WvJC25RYTlo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:ac:9e:9b:a8:33:9d:b1:1c:eb:dd:06:94:9a:39:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c6ffcb5b5e2de4551acf9b45af242db94584e5a
Validity
Not Before: Nov 5 11:00:12 2025 GMT
Not After : Nov 6 11:00:12 2025 GMT
Subject: CN=6b97c8d564ac1b1265a26587314605224c05ea25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:1b:fe:3f:6b:3c:44:a8:18:63:6e:6e:28:be:
1a:b7:92:f5:17:ff:bb:98:3c:fc:c4:d9:73:1e:8f:
5e:d9:61:99:63:ae:8e:b0:b2:c4:b8:7c:84:f5:56:
cb:c4:cc:80:1c:e4:2d:3e:e7:0e:d4:0f:5a:31:68:
53:9b:0d:28:8d:18:2f:dc:ef:d1:ed:17:a1:f9:ed:
e9:35:b6:02:76:74:24:5f:91:24:ad:47:42:f1:f9:
7c:3b:58:0a:17:26:9c:fe:fe:e9:19:59:b2:65:44:
34:ae:13:aa:3c:4b:b6:6a:f0:3e:65:fc:0c:a9:0b:
9e:78:86:fc:48:ea:ab:62:88:10:88:51:0d:47:d1:
b9:95:62:eb:fc:f6:72:5e:e2:ca:a2:37:7c:f9:e5:
91:83:47:bc:0d:d4:10:10:94:bb:d3:a8:9c:f1:49:
98:9f:e8:87:8e:11:fe:d7:21:ed:5c:83:b2:b9:a7:
64:ca:d6:72:68:51:5d:22:db:96:80:7e:a7:a0:ca:
ea:4d:3b:9f:e5:ff:dd:1e:1f:31:10:4d:f7:c9:bc:
2f:b4:9f:3d:fd:70:95:16:98:c7:4d:3b:e1:88:c1:
c7:07:4a:fd:2e:99:a6:0c:14:34:24:34:4d:71:67:
96:53:13:06:48:dd:52:9b:2a:e6:75:05:97:cd:e1:
f5:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:97:C8:D5:64:AC:1B:12:65:A2:65:87:31:46:05:22:4C:05:EA:25
X509v3 Authority Key Identifier:
keyid:9C:6F:FC:B5:B5:E2:DE:45:51:AC:F9:B4:5A:F2:42:DB:94:58:4E:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nG_8tbXi3kVRrPm0WvJC25RYTlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9841ff-c886-4da0-957a-f2f0955da1ad/1/nG_8tbXi3kVRrPm0WvJC25RYTlo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9841ff-c886-4da0-957a-f2f0955da1ad/1/nG_8tbXi3kVRrPm0WvJC25RYTlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:17:86:b3:fd:ae:98:24:11:c7:78:a5:4a:1a:cf:53:78:73:
a6:e7:f7:da:3c:7a:30:aa:c6:dc:fe:7a:e3:e4:af:1d:43:bd:
ab:a7:5d:0c:c6:6c:99:02:f9:a9:2a:a0:ea:b0:07:1d:b2:16:
2f:bf:ba:dd:66:a1:0f:9e:6e:0b:54:5b:5c:09:66:b4:65:b8:
36:c3:ba:f5:9d:34:cf:b4:54:64:18:b7:27:ff:cd:48:f6:43:
3c:02:54:f3:8c:f2:8a:ec:6c:f4:fc:4a:e4:c3:a8:b7:eb:49:
78:34:bf:be:34:8e:44:32:a2:0f:ee:f5:d6:75:d1:d4:e7:46:
9f:2b:d0:ad:e1:ac:bf:56:c4:9d:37:7a:f5:66:24:2f:2f:af:
1e:f7:1c:84:2d:a1:d3:2e:b6:10:df:0b:b6:43:26:bb:e2:e7:
8d:83:0e:03:7e:9f:0d:31:56:d2:67:5e:1d:78:a4:c9:88:8d:
a6:19:10:56:e6:24:f5:4b:7f:42:36:a4:1b:1a:c6:cd:7f:84:
f8:1b:96:f8:ac:7b:9e:e0:e2:f9:6f:df:a7:ee:ac:7d:30:be:
c9:6e:6c:d9:2f:fc:dc:df:32:0f:1d:5f:a6:8f:fc:a1:80:51:
bf:8f:d5:73:05:de:3b:d3:25:34:d0:84:c2:a0:e0:c2:7a:a5:
e9:e0:e9:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:10:38 2025 by rpki-client