Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.mft
File: 6Dk70TBfbMRDkZIRnGBfRLvwm8k.mft (raw, json)
Hash identifier: 3vrqn5IcqLcRQWC10dxlIavT0A/KSP+6Ryfioj1oNRU=
Subject key identifier: 4F:46:46:90:19:1A:DC:51:6A:CC:48:79:86:9D:60:27:BA:92:5D:F3
Authority key identifier: E8:39:3B:D1:30:5F:6C:C4:43:91:92:11:9C:60:5F:44:BB:F0:9B:C9
Certificate issuer: /CN=e8393bd1305f6cc4439192119c605f44bbf09bc9
Certificate serial: 019A52D1B7794643CFDDE2680A12BE359461
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Dk70TBfbMRDkZIRnGBfRLvwm8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.mft
Manifest number: 0A18
Signing time: Wed 05 Nov 2025 07:01:06 +0000
Manifest this update: Wed 05 Nov 2025 07:01:06 +0000
Manifest next update: Thu 06 Nov 2025 07:01:06 +0000
Files and hashes: 1: 6Dk70TBfbMRDkZIRnGBfRLvwm8k.crl (hash: XGD7Y9V4gso3NBNbFu9TAAME+/G4hxBkqulYMAK4Z0c=)
2: dGlwmlHKZ3Y604U9jPtZsAf1JsI.roa (hash: g6t/bPLMAjqWES1EVRCv4fx129KuT8ofKzhDnvgk+CU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/6Dk70TBfbMRDkZIRnGBfRLvwm8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d1:b7:79:46:43:cf:dd:e2:68:0a:12:be:35:94:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8393bd1305f6cc4439192119c605f44bbf09bc9
Validity
Not Before: Nov 5 07:01:06 2025 GMT
Not After : Nov 6 07:01:06 2025 GMT
Subject: CN=4f464690191adc516acc4879869d6027ba925df3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:44:ff:9f:45:1a:46:b3:56:ea:31:c0:88:d2:
f4:20:11:01:2c:c1:68:ca:41:96:09:b4:c6:bf:15:
9a:8f:8a:e7:20:a7:60:77:42:78:12:e5:65:5a:15:
51:6e:16:18:1a:a8:72:f6:92:8c:fd:4b:29:79:e4:
ac:6f:72:50:20:a4:92:0d:43:33:f7:db:fb:bc:10:
1b:b3:b0:a4:db:b3:b9:e2:7b:e5:1b:e9:e2:19:96:
b1:6c:2e:b6:a7:a5:bd:28:ab:99:1a:f3:0c:d4:70:
47:3e:d4:94:5e:80:15:69:63:44:82:97:57:28:37:
da:30:6d:f2:94:c7:66:08:91:af:3e:a7:89:49:04:
bf:dc:ea:0f:a2:a9:4b:2c:09:f7:76:f3:ba:51:62:
63:fc:f1:fb:68:40:1a:0e:c9:30:fc:ab:ad:82:a5:
f2:4f:31:24:75:86:b0:1e:aa:4d:75:4a:61:8d:d4:
7f:30:28:04:56:d5:b8:98:00:6a:23:c2:44:f7:26:
64:dd:cc:10:e5:7a:6c:6a:fb:5a:e8:55:54:a9:8c:
f4:a0:be:52:80:8d:22:f1:c2:78:19:b9:b2:55:f9:
63:59:a1:24:25:7a:ba:4a:7b:f4:ab:cb:53:16:e1:
75:34:b5:d8:a4:58:1d:e0:c1:09:28:44:34:7d:f1:
48:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:46:46:90:19:1A:DC:51:6A:CC:48:79:86:9D:60:27:BA:92:5D:F3
X509v3 Authority Key Identifier:
keyid:E8:39:3B:D1:30:5F:6C:C4:43:91:92:11:9C:60:5F:44:BB:F0:9B:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Dk70TBfbMRDkZIRnGBfRLvwm8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:58:ac:89:79:20:84:ef:aa:62:f7:7b:46:bf:ec:e7:8e:d1:
4d:04:f7:41:30:5f:7e:21:1b:32:ea:9b:c7:fa:51:3f:b1:59:
27:fa:93:e3:a4:b5:21:19:c1:9c:42:c7:ce:97:66:61:b1:03:
3d:22:41:53:6c:42:f0:12:cc:12:21:33:3d:65:5d:13:23:64:
d3:b8:33:36:f2:ce:ed:2c:ca:41:e9:72:10:4c:82:ee:7d:a3:
da:d5:5f:ab:20:16:3f:bb:82:b2:0e:fa:16:d1:ad:22:94:9d:
9f:d7:e1:b6:24:7e:ef:78:55:62:54:e7:32:e6:46:7c:72:a4:
b3:a2:87:4f:1b:5d:7b:f1:8d:c6:e3:45:92:de:08:23:fe:e5:
5d:be:cd:fd:43:30:3a:ae:93:21:8e:74:22:a0:2e:dd:26:a8:
57:92:0b:4c:ea:d9:1c:81:2f:b7:50:b2:42:0b:cd:07:55:2f:
71:15:a0:a2:8b:40:c8:e3:f0:83:ae:c5:3e:77:66:d3:1f:aa:
fa:36:3e:f5:be:06:b1:93:ee:19:47:5a:83:c4:9a:f2:8f:21:
4b:a2:1d:41:ad:9a:d3:08:a2:a0:2c:8a:dc:bc:c3:9f:28:13:
8c:27:dc:39:48:b9:7c:6c:28:df:2e:a8:c0:c0:5e:0a:5d:61:
b8:35:29:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:12:23 2025 by rpki-client