Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/eafefe-787d-4b2d-b530-8af05ae3192c/1/6-MkxP_wckDusfAOY-Y198uQL5g.mft
File: 6-MkxP_wckDusfAOY-Y198uQL5g.mft (raw, json)
Hash identifier: hY9LEfH+G5VuJxiazIC08I+PPvHEbBXL5dkK5pMN81E=
Subject key identifier: A9:34:86:B3:F1:4B:39:F0:3C:10:AE:EA:DE:80:0F:2D:05:C3:E9:24
Authority key identifier: EB:E3:24:C4:FF:F0:72:40:EE:B1:F0:0E:63:E6:35:F7:CB:90:2F:98
Certificate issuer: /CN=ebe324c4fff07240eeb1f00e63e635f7cb902f98
Certificate serial: 019A4FD0956D81C336369FC6D00A32141DB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6-MkxP_wckDusfAOY-Y198uQL5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/eafefe-787d-4b2d-b530-8af05ae3192c/1/6-MkxP_wckDusfAOY-Y198uQL5g.mft
Manifest number: 0E44
Signing time: Tue 04 Nov 2025 17:01:01 +0000
Manifest this update: Tue 04 Nov 2025 17:01:01 +0000
Manifest next update: Wed 05 Nov 2025 17:01:01 +0000
Files and hashes: 1: 6-MkxP_wckDusfAOY-Y198uQL5g.crl (hash: hEfQxae0oTpP/CfwolgiI8KTFudz8H5COK50A3xCYwI=)
2: DFaeiuG21JQh7LgP1wreIhkJwBQ.roa (hash: wxSUZZvHSXnKRZev5eL/xbvmkg1KjmEbGMojvHEIEo0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/eafefe-787d-4b2d-b530-8af05ae3192c/1/6-MkxP_wckDusfAOY-Y198uQL5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/eafefe-787d-4b2d-b530-8af05ae3192c/1/6-MkxP_wckDusfAOY-Y198uQL5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/6-MkxP_wckDusfAOY-Y198uQL5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:95:6d:81:c3:36:36:9f:c6:d0:0a:32:14:1d:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebe324c4fff07240eeb1f00e63e635f7cb902f98
Validity
Not Before: Nov 4 17:01:01 2025 GMT
Not After : Nov 5 17:01:01 2025 GMT
Subject: CN=a93486b3f14b39f03c10aeeade800f2d05c3e924
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:62:ed:dd:e8:12:9a:30:dd:2a:97:cd:45:f4:
dd:5c:d4:d4:f4:c1:2d:b4:dc:8f:e7:ae:3d:f5:b1:
c5:c6:50:75:32:66:5e:94:a7:6b:e7:32:a0:70:d9:
68:2f:55:89:77:d2:71:b5:94:7b:38:b8:f2:06:eb:
a0:d1:a2:8d:6a:35:1d:01:76:f2:d5:50:da:28:e5:
56:7d:f8:de:fb:fd:d6:d1:6b:ad:05:13:9b:9c:9b:
53:5b:e2:0d:40:27:98:d0:b9:91:f7:95:e6:ae:e8:
1b:03:69:85:50:fe:6c:ed:ea:02:85:b8:02:d4:33:
a5:6a:7b:17:d0:6e:06:a7:ba:92:02:bd:7c:ca:cb:
ee:c9:1f:f3:94:61:de:e8:23:06:fa:79:7c:8f:30:
a0:39:be:23:52:56:87:0b:90:cb:4a:1c:61:3d:eb:
f4:ab:b4:89:c0:bd:12:68:ad:0a:7c:12:81:12:ad:
7d:2a:57:6a:16:9b:d2:80:77:31:5b:bb:cb:94:eb:
a7:77:ea:bf:7f:cf:90:a4:33:f2:8a:f0:9a:37:68:
cd:4c:eb:2f:4f:59:03:04:11:b9:c7:c5:6e:cf:05:
38:b5:0e:e6:99:42:71:20:2d:82:60:a8:d2:9e:61:
bb:e7:ce:76:ae:c1:18:4f:a4:fe:ea:fd:01:a7:c4:
6b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:34:86:B3:F1:4B:39:F0:3C:10:AE:EA:DE:80:0F:2D:05:C3:E9:24
X509v3 Authority Key Identifier:
keyid:EB:E3:24:C4:FF:F0:72:40:EE:B1:F0:0E:63:E6:35:F7:CB:90:2F:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-MkxP_wckDusfAOY-Y198uQL5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/eafefe-787d-4b2d-b530-8af05ae3192c/1/6-MkxP_wckDusfAOY-Y198uQL5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/eafefe-787d-4b2d-b530-8af05ae3192c/1/6-MkxP_wckDusfAOY-Y198uQL5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dc:77:91:3d:4f:c6:b1:ab:36:6f:e0:dd:57:32:76:ab:e8:60:
5b:53:23:a7:e1:75:aa:e3:d4:cb:d0:dc:7c:30:f5:5e:1f:d5:
7d:5d:74:11:72:f4:04:15:68:65:c8:a6:fa:cd:4d:77:9e:4c:
a3:f5:74:ac:af:ef:b3:18:c8:08:07:7a:94:ec:11:e9:f3:84:
a1:ee:c1:44:e6:3c:39:3c:a2:ec:3c:9c:d4:99:df:19:a6:21:
e0:88:7f:69:ef:89:ad:af:24:9a:9f:9c:d6:c9:6a:f5:cf:9f:
3b:43:d6:6c:97:0d:3e:7e:26:4d:ab:50:6d:4c:ae:f1:98:d2:
c7:ab:5d:d3:93:7b:1c:4d:bf:be:fd:64:54:0b:d1:bb:78:9f:
3f:67:64:40:1d:be:8c:fc:a4:7b:7a:f7:28:06:d5:c4:29:ff:
d9:81:e5:1a:8f:17:7a:e0:c2:b1:55:b6:7b:a2:6e:92:d5:b8:
7d:be:7c:cb:71:b8:b8:be:43:f7:01:f5:c1:54:f3:aa:0c:60:
13:14:82:2f:0f:94:97:4f:15:eb:e1:77:e9:5c:6f:d2:39:2b:
37:50:cc:e2:d2:73:86:a2:15:52:e4:47:01:d7:da:3a:bf:be:
88:59:69:ab:f1:93:8f:62:ff:44:69:dc:43:5d:a4:b3:aa:69:
76:ee:50:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:22:02 2025 by rpki-client