Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/77264e-4964-4f68-92e5-ffa4339bce4f/1/6sVEfAQxp17nu1lAohg8GEOOtrE.mft
File: 6sVEfAQxp17nu1lAohg8GEOOtrE.mft (raw, json)
Hash identifier: YEAdHykRMS/l08mptdtFfMRlHP6cNjRA77daZB2Z9yI=
Subject key identifier: 38:4D:51:1D:B4:72:89:4B:71:7A:4F:E2:11:11:C0:5F:B4:FF:87:16
Authority key identifier: EA:C5:44:7C:04:31:A7:5E:E7:BB:59:40:A2:18:3C:18:43:8E:B6:B1
Certificate issuer: /CN=eac5447c0431a75ee7bb5940a2183c18438eb6b1
Certificate serial: 019A4EF54901D9502842C24FAF45CA569E5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6sVEfAQxp17nu1lAohg8GEOOtrE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/77264e-4964-4f68-92e5-ffa4339bce4f/1/6sVEfAQxp17nu1lAohg8GEOOtrE.mft
Manifest number: 066D
Signing time: Tue 04 Nov 2025 13:01:29 +0000
Manifest this update: Tue 04 Nov 2025 13:01:29 +0000
Manifest next update: Wed 05 Nov 2025 13:01:29 +0000
Files and hashes: 1: 6sVEfAQxp17nu1lAohg8GEOOtrE.crl (hash: +9hMl7+l/GQzbQTrKz9IRrwo/XCpt6LQuI/YpQXPtxE=)
2: bZmXrqNyZ8AqEyFlE3XBS1-1gJo.roa (hash: aUsLyT1xm0BEqckeaf+LnCJ77YIIEkSZJAG2IbM/gAs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/77264e-4964-4f68-92e5-ffa4339bce4f/1/6sVEfAQxp17nu1lAohg8GEOOtrE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/77264e-4964-4f68-92e5-ffa4339bce4f/1/6sVEfAQxp17nu1lAohg8GEOOtrE.mft
rsync://rpki.ripe.net/repository/DEFAULT/6sVEfAQxp17nu1lAohg8GEOOtrE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:49:01:d9:50:28:42:c2:4f:af:45:ca:56:9e:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eac5447c0431a75ee7bb5940a2183c18438eb6b1
Validity
Not Before: Nov 4 13:01:29 2025 GMT
Not After : Nov 5 13:01:29 2025 GMT
Subject: CN=384d511db472894b717a4fe21111c05fb4ff8716
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:55:51:d5:ec:21:f4:27:b0:da:bb:90:c1:88:
87:3c:d8:e2:2f:6f:be:c5:ed:4f:60:8c:f5:67:86:
b4:d0:1a:23:b3:50:dd:d7:06:8b:cf:5b:72:6b:eb:
4a:78:46:f4:07:ba:2f:3c:39:b5:45:3c:07:c7:bf:
26:21:20:91:67:42:d5:31:26:65:ed:07:8d:ee:4a:
98:1a:e9:6e:c7:bd:e6:ae:55:ec:41:72:74:84:eb:
4c:72:26:9d:a4:80:fe:39:ae:4b:37:e5:d0:63:c6:
8c:a7:c2:fa:01:c4:2a:41:d5:70:86:aa:ba:0b:b5:
9a:95:61:fd:f5:5e:34:83:fe:7e:ef:ae:c0:fd:ed:
6e:99:2c:5b:4e:e0:ff:3b:fc:04:74:cb:ce:97:d9:
13:ee:74:f4:ea:03:fc:fe:8a:d8:5e:c6:aa:59:2d:
fa:5b:ba:48:c7:05:8c:06:1a:d0:37:a6:92:e0:31:
b3:54:65:b3:cf:1c:fa:9e:05:a5:67:4c:3f:e2:e7:
ae:65:62:83:60:57:e2:78:c4:d9:90:70:ab:44:07:
33:cc:3a:51:1a:b1:b9:f1:3c:43:02:c2:c4:cd:d7:
10:d2:a3:ce:69:50:62:c9:e1:a4:bb:7e:bc:b1:7b:
f6:18:a8:f9:77:c1:f4:9b:92:c3:87:af:81:13:7c:
da:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:4D:51:1D:B4:72:89:4B:71:7A:4F:E2:11:11:C0:5F:B4:FF:87:16
X509v3 Authority Key Identifier:
keyid:EA:C5:44:7C:04:31:A7:5E:E7:BB:59:40:A2:18:3C:18:43:8E:B6:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6sVEfAQxp17nu1lAohg8GEOOtrE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/77264e-4964-4f68-92e5-ffa4339bce4f/1/6sVEfAQxp17nu1lAohg8GEOOtrE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/77264e-4964-4f68-92e5-ffa4339bce4f/1/6sVEfAQxp17nu1lAohg8GEOOtrE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:67:4c:14:9a:a4:de:1b:94:27:ae:0e:df:22:5a:cc:36:84:
8a:98:f4:b6:e2:d2:36:28:81:f1:50:b1:2a:2c:5b:05:1c:3b:
a4:e5:4f:60:73:1a:3a:f4:7f:36:ed:39:18:86:70:31:fb:9c:
50:32:57:b1:35:d9:f3:d5:2e:28:34:bc:2f:66:17:6e:80:8a:
b0:af:f2:d5:c8:b7:c8:a4:b2:c8:13:aa:a7:e7:b3:33:e1:02:
65:74:00:ca:20:4e:9d:02:41:8f:df:6c:27:46:5a:98:98:63:
11:2e:1a:f1:b5:96:06:53:91:92:48:7e:e6:50:c3:3a:dc:28:
6b:74:8a:01:03:1a:6a:8e:c9:48:c5:0e:2b:ad:0f:f0:a3:4c:
5e:90:b8:1a:b4:88:ba:c6:8a:65:fc:ad:d7:55:be:b6:4e:f9:
ff:da:bd:f5:15:85:f8:2a:1c:90:5d:99:17:b7:7b:6c:11:ed:
96:15:04:c7:a3:65:0f:f3:84:3c:10:56:74:fe:0b:62:bb:2d:
67:f0:36:36:e0:2c:97:6f:e5:7f:0e:e7:6e:bd:13:ce:f5:04:
bd:6b:88:67:28:f9:e8:e5:4e:e8:68:44:d9:67:1c:dd:8c:03:
cf:fc:52:b1:f6:f4:93:45:62:fe:7f:c8:c8:83:90:b8:62:0a:
00:0f:2a:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:45:11 2025 by rpki-client