Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/77f532-398f-4ad8-b348-bdad7ef776c4/1/6Efoh0lwQpRVL-9UiGER7QWG7CQ.mft
File: 6Efoh0lwQpRVL-9UiGER7QWG7CQ.mft (raw, json)
Hash identifier: e5qLJ6g+j07Y4e3EirlQf0ArwV0hJle0alllFJPZ9p8=
Subject key identifier: 86:92:AA:38:61:BA:09:D4:E1:B0:D3:C4:74:D3:E4:58:BC:E0:92:0B
Authority key identifier: E8:47:E8:87:49:70:42:94:55:2F:EF:54:88:61:11:ED:05:86:EC:24
Certificate issuer: /CN=e847e88749704294552fef54886111ed0586ec24
Certificate serial: 019A3EA5605482792CDA2FDD4B16A6C4A2B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Efoh0lwQpRVL-9UiGER7QWG7CQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/77f532-398f-4ad8-b348-bdad7ef776c4/1/6Efoh0lwQpRVL-9UiGER7QWG7CQ.mft
Manifest number: 0494
Signing time: Sat 01 Nov 2025 09:00:16 +0000
Manifest this update: Sat 01 Nov 2025 09:00:16 +0000
Manifest next update: Sun 02 Nov 2025 09:00:16 +0000
Files and hashes: 1: 6Efoh0lwQpRVL-9UiGER7QWG7CQ.crl (hash: ioLzl5ix6DUtToPHUKjmg/3SRDZQuK9yFSC9y5xvxmo=)
2: fcrIgsFTuq19FBKqvOpJqv38n8M.roa (hash: NL7GdVXSlx1fCyZ9yJikitlzZCSr51QpP5vN2zoZyfI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/77f532-398f-4ad8-b348-bdad7ef776c4/1/6Efoh0lwQpRVL-9UiGER7QWG7CQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/77f532-398f-4ad8-b348-bdad7ef776c4/1/6Efoh0lwQpRVL-9UiGER7QWG7CQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/6Efoh0lwQpRVL-9UiGER7QWG7CQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:3e:a5:60:54:82:79:2c:da:2f:dd:4b:16:a6:c4:a2:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e847e88749704294552fef54886111ed0586ec24
Validity
Not Before: Nov 1 09:00:16 2025 GMT
Not After : Nov 2 09:00:16 2025 GMT
Subject: CN=8692aa3861ba09d4e1b0d3c474d3e458bce0920b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:c6:87:fb:2d:cb:5b:8a:cd:e6:b4:bf:7b:3c:
85:92:c4:01:fe:3a:00:b2:80:15:26:e1:55:bf:8c:
0d:54:fb:b7:38:23:73:a8:15:c1:06:fc:72:f9:e5:
90:b7:f9:fe:29:9e:5e:82:59:00:1d:04:42:f7:52:
0a:44:4d:ef:2b:47:86:c1:82:7c:cb:3c:75:9a:14:
4f:6f:d0:5c:d6:ae:2e:61:47:85:fc:c5:c5:f8:2a:
29:b0:17:08:0d:32:81:6b:7d:43:7d:df:ff:5b:7e:
0e:53:1e:9d:a1:b7:57:8c:e9:de:49:48:85:06:d0:
ed:42:83:75:74:e5:79:9e:f3:1c:4d:c6:54:96:61:
52:79:c8:da:85:ea:3e:22:46:2d:e3:a3:f1:41:66:
dc:2a:d8:bc:02:09:c7:15:ba:67:df:bf:44:71:15:
d5:d0:6d:15:29:bd:6e:84:75:18:c4:96:5f:83:8d:
06:77:94:1d:8d:55:03:56:3a:85:44:0e:20:5c:ef:
d6:00:e5:c8:a3:5a:3f:51:d2:09:08:8b:3e:ff:1b:
36:8d:f0:0e:30:c1:84:8f:66:46:6f:b5:a5:e5:f1:
cd:7d:25:d8:47:3f:8f:05:21:76:d0:98:1b:6a:a7:
70:50:74:3d:2c:5b:93:2b:3b:73:c4:4d:94:7b:00:
e7:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:92:AA:38:61:BA:09:D4:E1:B0:D3:C4:74:D3:E4:58:BC:E0:92:0B
X509v3 Authority Key Identifier:
keyid:E8:47:E8:87:49:70:42:94:55:2F:EF:54:88:61:11:ED:05:86:EC:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Efoh0lwQpRVL-9UiGER7QWG7CQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/77f532-398f-4ad8-b348-bdad7ef776c4/1/6Efoh0lwQpRVL-9UiGER7QWG7CQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/77f532-398f-4ad8-b348-bdad7ef776c4/1/6Efoh0lwQpRVL-9UiGER7QWG7CQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:8c:4f:39:cb:4c:26:5d:0e:4d:6e:7e:f3:01:a3:27:17:c6:
75:c8:d9:51:a4:ba:d7:71:53:f3:1c:14:9a:0e:d5:9b:ba:d3:
2d:42:ca:b2:e9:9c:16:11:00:40:98:88:17:c2:2b:f0:4a:17:
c8:b3:5b:13:f9:ea:83:54:cc:83:7e:f9:93:97:f1:28:ab:44:
70:c7:d6:a5:9c:d4:f5:23:97:17:c2:c5:13:d5:f6:84:97:d8:
1a:8e:0c:d1:a1:0f:fe:68:fc:69:b2:7f:5e:c1:9f:0a:c1:b9:
2d:f1:6a:47:1d:d8:4d:3d:e8:d5:90:cf:6d:ad:b2:b0:12:b4:
02:85:ca:fc:76:70:df:34:d0:d4:51:64:a9:a0:99:ad:16:23:
b6:08:73:ab:bf:f2:09:d6:22:c6:85:37:a6:e2:9b:35:5a:74:
cf:da:a1:3f:e4:5c:5b:2b:6d:ab:59:25:d5:cc:63:9a:0c:21:
6f:03:db:a6:b4:db:5b:41:ed:50:0d:cb:11:ad:9e:c3:56:36:
df:37:b6:ca:b9:06:73:c0:dd:25:60:92:6b:aa:8f:10:50:35:
9b:75:56:25:16:39:25:a5:3b:73:2d:44:c1:9c:4d:38:8f:7e:
63:1b:71:d0:20:31:b2:58:89:95:01:73:ca:92:88:c8:e9:ea:
a8:fd:85:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 1 12:34:43 2025 by rpki-client