Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/b4597f-ee1c-462b-ab84-ebe59e274840/1/6HJEiXx5F7eR4QDUaAM5xKNZP8M.mft
File: 6HJEiXx5F7eR4QDUaAM5xKNZP8M.mft (raw, json)
Hash identifier: OcyK2iXCZgblgtuYjCnJJPBxIABiiJhcS3Am4d0E3e8=
Subject key identifier: 7E:9C:77:AC:7A:21:1E:AD:31:26:AA:F1:80:9E:3A:9E:8D:3F:F8:3C
Authority key identifier: E8:72:44:89:7C:79:17:B7:91:E1:00:D4:68:03:39:C4:A3:59:3F:C3
Certificate issuer: /CN=e87244897c7917b791e100d4680339c4a3593fc3
Certificate serial: 019A4DE15A4D9E7DDB165315FC626946184D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6HJEiXx5F7eR4QDUaAM5xKNZP8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/b4597f-ee1c-462b-ab84-ebe59e274840/1/6HJEiXx5F7eR4QDUaAM5xKNZP8M.mft
Manifest number: 170A
Signing time: Tue 04 Nov 2025 08:00:05 +0000
Manifest this update: Tue 04 Nov 2025 08:00:05 +0000
Manifest next update: Wed 05 Nov 2025 08:00:05 +0000
Files and hashes: 1: 6HJEiXx5F7eR4QDUaAM5xKNZP8M.crl (hash: X2jGlOZZfv8jeYBVW1VIj1w/5vUtr9Em8q2WYJC4h0Q=)
2: bnk0ln2aj6MfWOT6o9kQMXhL3ow.roa (hash: nUC34YHIv92VX7i6tmE4A0fGDBK2kzWYfNC+d/UuSnw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/b4597f-ee1c-462b-ab84-ebe59e274840/1/6HJEiXx5F7eR4QDUaAM5xKNZP8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/b4597f-ee1c-462b-ab84-ebe59e274840/1/6HJEiXx5F7eR4QDUaAM5xKNZP8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/6HJEiXx5F7eR4QDUaAM5xKNZP8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:5a:4d:9e:7d:db:16:53:15:fc:62:69:46:18:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e87244897c7917b791e100d4680339c4a3593fc3
Validity
Not Before: Nov 4 08:00:05 2025 GMT
Not After : Nov 5 08:00:05 2025 GMT
Subject: CN=7e9c77ac7a211ead3126aaf1809e3a9e8d3ff83c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4e:8d:24:68:21:be:a3:2e:d7:ae:a8:67:2e:
50:96:25:d3:e9:72:19:b2:e3:6b:99:48:11:55:9c:
b5:68:3d:8a:0b:95:1d:f0:1b:17:5b:67:13:1a:9f:
9b:29:cb:b2:ae:a3:e5:52:05:6b:98:85:95:31:ad:
83:8e:35:2c:90:83:57:d6:fe:45:f4:e9:4a:a3:a0:
7b:df:8c:de:d5:24:7d:17:62:1d:a9:05:c6:e1:02:
8f:d3:96:21:be:80:a8:ba:6a:f6:b0:8b:67:11:d0:
9d:3f:78:50:a7:4d:7c:b9:cc:2c:74:df:c7:fc:93:
a5:ec:27:36:63:41:12:fd:4c:a7:8c:f9:a3:fa:42:
61:85:43:f6:f3:f1:0a:0b:f7:63:8d:46:12:52:f6:
81:d4:bf:d5:17:0a:7b:be:b1:c1:51:1a:af:ef:cd:
94:69:f8:8c:fb:26:ac:13:b9:90:cf:77:76:89:97:
87:46:a7:a4:9e:92:6d:1f:a9:65:ff:aa:a0:1a:44:
56:eb:5c:31:a4:c7:65:ab:3f:bb:9c:95:c6:46:c0:
0f:65:08:57:8a:f5:32:2b:52:4c:bf:c5:21:b0:a8:
2d:1e:7e:bd:b2:20:4c:bd:b3:24:d6:3e:70:67:44:
05:be:82:b9:c4:71:63:a5:87:6f:ab:0f:f6:f6:2f:
23:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:9C:77:AC:7A:21:1E:AD:31:26:AA:F1:80:9E:3A:9E:8D:3F:F8:3C
X509v3 Authority Key Identifier:
keyid:E8:72:44:89:7C:79:17:B7:91:E1:00:D4:68:03:39:C4:A3:59:3F:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6HJEiXx5F7eR4QDUaAM5xKNZP8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b4597f-ee1c-462b-ab84-ebe59e274840/1/6HJEiXx5F7eR4QDUaAM5xKNZP8M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b4597f-ee1c-462b-ab84-ebe59e274840/1/6HJEiXx5F7eR4QDUaAM5xKNZP8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:48:8e:6d:42:81:78:b9:c0:f3:93:9a:53:d0:36:3f:54:11:
30:25:44:8c:41:e8:8a:f3:d4:2c:22:80:ee:f7:8a:b8:b1:ad:
ac:8f:bb:37:35:c0:26:8a:d4:b8:fe:fa:ad:f1:28:10:80:2e:
65:eb:13:ab:dd:82:6b:ae:63:65:b1:10:f9:7b:b2:9b:49:e0:
8e:e9:b1:84:82:d8:c1:c9:d1:51:16:44:9c:28:72:bf:af:3a:
a2:48:30:d9:1f:61:16:4a:1c:b2:64:f1:97:78:7f:8c:e6:ec:
61:71:8d:05:d2:32:ab:0d:3a:9e:2a:7e:6f:cb:4e:30:3b:dd:
9b:be:4f:0a:16:f8:42:ab:38:38:07:b2:4b:c5:c9:c1:8c:17:
93:17:45:21:b2:01:6a:32:86:f5:b7:83:d5:f5:91:da:62:ab:
2b:68:c9:53:56:50:1b:b5:a4:0e:59:01:0c:af:d6:b4:d9:f0:
27:3b:58:7c:3e:dc:33:ef:47:db:7a:1f:92:45:f6:71:a0:88:
1b:50:ef:15:58:d3:69:aa:17:fd:e0:52:b0:0a:8f:a2:65:18:
45:8e:43:21:ef:a2:e0:53:f7:f3:3d:bf:d2:ea:ae:bb:32:c0:
a3:b0:79:a4:02:6b:f5:97:15:5b:d0:a4:64:50:6b:68:a6:89:
12:71:62:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:05:56 2025 by rpki-client