Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/4508c4-332b-403c-9f56-db905913cb87/1/6T7pptFATGHrGbArAtdNqDpmM9o.mft
File: 6T7pptFATGHrGbArAtdNqDpmM9o.mft (raw, json)
Hash identifier: 1MWTbZukGJ2WKHvI5mVVxCFCxWtljPKdQoWBeNpc5lA=
Subject key identifier: EE:6B:5E:88:5E:D2:27:AF:E4:18:36:EF:99:37:14:15:B2:FF:D7:27
Authority key identifier: E9:3E:E9:A6:D1:40:4C:61:EB:19:B0:2B:02:D7:4D:A8:3A:66:33:DA
Certificate issuer: /CN=e93ee9a6d1404c61eb19b02b02d74da83a6633da
Certificate serial: 019A5451458E1C45436776B11560D9820921
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6T7pptFATGHrGbArAtdNqDpmM9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/4508c4-332b-403c-9f56-db905913cb87/1/6T7pptFATGHrGbArAtdNqDpmM9o.mft
Manifest number: 0215
Signing time: Wed 05 Nov 2025 14:00:03 +0000
Manifest this update: Wed 05 Nov 2025 14:00:03 +0000
Manifest next update: Thu 06 Nov 2025 14:00:03 +0000
Files and hashes: 1: 6T7pptFATGHrGbArAtdNqDpmM9o.crl (hash: kWsfN969ePiDuhtv5bpRacWRS8Nias++mGyqCDJamx4=)
2: nTzt_7yObYF91YEfJlGe8rhCQyE.roa (hash: UZJuy0N8FDFUyDPS/6Vsx+tptqpEF0jDlmMqyvXeZZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/4508c4-332b-403c-9f56-db905913cb87/1/6T7pptFATGHrGbArAtdNqDpmM9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/4508c4-332b-403c-9f56-db905913cb87/1/6T7pptFATGHrGbArAtdNqDpmM9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/6T7pptFATGHrGbArAtdNqDpmM9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:51:45:8e:1c:45:43:67:76:b1:15:60:d9:82:09:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e93ee9a6d1404c61eb19b02b02d74da83a6633da
Validity
Not Before: Nov 5 14:00:03 2025 GMT
Not After : Nov 6 14:00:03 2025 GMT
Subject: CN=ee6b5e885ed227afe41836ef99371415b2ffd727
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:58:af:e6:c6:e2:53:15:a0:dc:65:23:aa:36:
48:57:72:d3:87:fe:5a:80:e9:e9:14:f9:3c:71:72:
ec:d9:11:df:c7:a3:40:5e:c5:95:ae:21:ae:60:0c:
7e:23:db:ab:5d:d5:88:cf:04:d9:85:91:85:bd:11:
e4:2f:97:71:4d:9a:c0:2f:7e:29:95:8b:21:42:da:
ba:06:a0:f3:bc:23:c8:0c:0d:60:f3:d4:01:8c:f8:
6b:16:8c:93:70:a2:f6:1f:79:5c:b0:06:61:75:80:
4e:a6:f5:20:9b:63:71:d4:d7:2b:2c:1d:f2:12:5d:
bf:96:9a:6a:9d:9b:d1:60:4f:f0:ba:cc:e3:99:f8:
c0:d0:6d:2d:a1:20:97:f1:52:68:a6:87:94:f5:5d:
02:4d:26:8a:dc:9a:c9:31:9d:6e:ca:6e:18:98:ec:
4e:47:3f:b4:bb:e9:47:40:b4:7f:6c:8d:37:d2:04:
74:d6:c3:d7:ec:7b:20:24:ed:88:50:50:01:8f:a1:
58:78:d2:36:8f:ff:96:73:f2:d8:b5:19:1a:da:e1:
81:c3:87:c0:dc:a7:fc:8f:11:94:cc:01:c7:fa:4d:
65:a5:9f:23:8f:80:7c:19:cc:bf:dd:a7:1a:a4:d3:
9e:32:a4:cf:c4:74:d4:f8:31:a8:14:c8:c5:ab:0b:
84:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:6B:5E:88:5E:D2:27:AF:E4:18:36:EF:99:37:14:15:B2:FF:D7:27
X509v3 Authority Key Identifier:
keyid:E9:3E:E9:A6:D1:40:4C:61:EB:19:B0:2B:02:D7:4D:A8:3A:66:33:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6T7pptFATGHrGbArAtdNqDpmM9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/4508c4-332b-403c-9f56-db905913cb87/1/6T7pptFATGHrGbArAtdNqDpmM9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/4508c4-332b-403c-9f56-db905913cb87/1/6T7pptFATGHrGbArAtdNqDpmM9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:da:47:08:02:fe:22:41:b9:9b:b0:21:87:90:4e:90:2f:04:
df:27:2e:ac:a8:09:c8:cc:6e:71:43:04:0c:2d:b5:94:ea:39:
44:fd:bd:42:bc:dc:1b:92:4b:47:50:d2:71:3c:ec:04:59:69:
b9:f4:b5:71:7a:06:78:80:2f:51:a2:bb:48:35:ee:e4:0d:f7:
df:69:96:10:bf:24:5d:05:4d:80:4e:34:56:85:7d:6b:df:c4:
86:4a:8e:63:fc:b6:6d:b9:fc:16:1b:06:67:df:c7:2b:5d:8a:
96:c6:81:b5:02:67:65:10:96:c5:f9:23:64:27:bf:f0:39:4a:
4c:97:f7:a5:a1:d8:9b:89:9c:00:7c:02:34:b8:0b:83:a9:90:
a2:42:d0:a2:a4:60:ae:98:a9:ba:a9:a1:90:3f:de:99:ae:d3:
63:71:35:37:e7:ea:dd:c3:44:61:9f:61:be:0b:41:8b:e6:f3:
43:ef:88:e3:98:58:ba:11:b5:1c:50:07:3a:dc:9e:74:80:dc:
86:29:46:2b:c2:00:d6:25:7c:a7:28:df:ff:71:8b:e4:16:e4:
ca:2b:1d:85:c0:58:25:58:f1:56:89:a5:05:b9:5d:65:bf:c7:
67:9c:ea:bd:a6:7e:af:76:4f:89:8d:eb:4f:81:53:2e:a9:83:
a3:7f:8e:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:11:28 2025 by rpki-client