Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b52ae1-09a6-4458-9d06-0b6908737d7f/1/k6P6S3jlD0r5e-KF4ukQpdHtxjk.mft
File: k6P6S3jlD0r5e-KF4ukQpdHtxjk.mft (raw, json)
Hash identifier: bpklBs2HB2iRpUMAWpiF8IytHUjlUDtqMe9kF+o3SyI=
Subject key identifier: 8C:E4:D1:9B:C0:72:B6:B5:22:D4:CC:1B:1C:AB:CC:29:0E:3D:84:FC
Authority key identifier: 93:A3:FA:4B:78:E5:0F:4A:F9:7B:E2:85:E2:E9:10:A5:D1:ED:C6:39
Certificate issuer: /CN=93a3fa4b78e50f4af97be285e2e910a5d1edc639
Certificate serial: 019A71808D5B3E56321FB7598D34F42AA342
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k6P6S3jlD0r5e-KF4ukQpdHtxjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b52ae1-09a6-4458-9d06-0b6908737d7f/1/k6P6S3jlD0r5e-KF4ukQpdHtxjk.mft
Manifest number: 49
Signing time: Tue 11 Nov 2025 06:00:41 +0000
Manifest this update: Tue 11 Nov 2025 06:00:41 +0000
Manifest next update: Wed 12 Nov 2025 06:00:41 +0000
Files and hashes: 1: jj1_6ec2f2AWeD40St3we1tbDXE.roa (hash: dC+bz8YnKwWKOYnAkcDkCn/jxU0wAcfSc4U4fn0FwDs=)
2: k6P6S3jlD0r5e-KF4ukQpdHtxjk.crl (hash: D3v1XYZLxUDAxLHAOoYZ1fU7fJKGVdYP2xX5PnlR6qg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b52ae1-09a6-4458-9d06-0b6908737d7f/1/k6P6S3jlD0r5e-KF4ukQpdHtxjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b52ae1-09a6-4458-9d06-0b6908737d7f/1/k6P6S3jlD0r5e-KF4ukQpdHtxjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/k6P6S3jlD0r5e-KF4ukQpdHtxjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 06:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:80:8d:5b:3e:56:32:1f:b7:59:8d:34:f4:2a:a3:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93a3fa4b78e50f4af97be285e2e910a5d1edc639
Validity
Not Before: Nov 11 06:00:41 2025 GMT
Not After : Nov 12 06:00:41 2025 GMT
Subject: CN=8ce4d19bc072b6b522d4cc1b1cabcc290e3d84fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:26:8f:3b:58:88:9b:95:9a:df:ba:d0:ee:fa:
3f:17:ef:35:46:7f:67:fa:9e:2a:7c:d4:19:ee:98:
13:8a:4a:ce:db:76:06:d4:e1:aa:32:58:bc:8c:c5:
55:23:7c:10:93:d1:c7:ef:e3:b9:de:b3:e8:80:cc:
20:fa:67:2e:00:e8:7f:67:3c:c4:bb:bd:f4:ce:58:
cd:92:08:f9:a9:92:69:59:30:b0:ae:e3:77:03:27:
8e:9b:30:b6:52:ab:fd:af:b0:b8:f7:64:cf:0d:98:
f9:a9:e3:e2:04:ed:0d:41:8a:cb:a9:ad:a3:cc:66:
7a:84:06:26:7e:21:c1:84:42:a7:f5:c7:0f:e2:cf:
e3:c4:47:14:96:e9:2e:bd:de:09:d7:5d:2e:9e:1a:
66:35:7a:92:ed:b0:77:96:d0:75:2b:56:96:d8:ea:
c1:56:f0:6a:87:a1:38:4f:c9:22:ca:8c:a8:87:0b:
33:6f:9c:91:5f:95:62:4f:82:98:50:9b:da:0a:c9:
54:6e:7d:f3:7f:16:06:be:c2:7a:71:9b:c7:10:d8:
34:68:e1:3b:95:e0:62:98:17:dd:23:76:a6:e6:56:
a8:fa:65:02:5f:fc:ad:95:5a:18:d3:eb:36:cb:df:
6e:2d:52:6d:e6:7f:65:fd:05:22:59:d3:a8:a7:a7:
c2:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:E4:D1:9B:C0:72:B6:B5:22:D4:CC:1B:1C:AB:CC:29:0E:3D:84:FC
X509v3 Authority Key Identifier:
keyid:93:A3:FA:4B:78:E5:0F:4A:F9:7B:E2:85:E2:E9:10:A5:D1:ED:C6:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k6P6S3jlD0r5e-KF4ukQpdHtxjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b52ae1-09a6-4458-9d06-0b6908737d7f/1/k6P6S3jlD0r5e-KF4ukQpdHtxjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b52ae1-09a6-4458-9d06-0b6908737d7f/1/k6P6S3jlD0r5e-KF4ukQpdHtxjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:c5:bb:ee:cc:47:7e:4d:ac:07:91:91:43:1d:ce:f9:0d:3c:
56:fb:14:3d:be:80:77:22:47:ec:65:9e:98:78:84:fb:ee:75:
a2:8c:fd:47:17:58:99:49:16:75:78:8b:35:c5:b6:d0:4e:37:
3a:b1:1f:7a:5c:e4:d0:06:db:7b:b1:ad:1a:3d:91:5e:25:0b:
05:38:60:cc:ba:30:d9:bf:27:fd:b2:1c:69:93:34:c4:af:ab:
ca:d0:46:56:73:99:93:0d:08:3b:87:78:55:80:6f:75:4d:a8:
f9:2f:fa:59:bd:b4:c5:21:21:ff:c5:c1:02:e3:68:f0:c3:4f:
68:e4:b9:98:6b:47:cb:fe:da:6d:16:2f:3f:12:7c:d9:30:95:
a4:25:3d:69:20:90:66:9d:18:8a:05:c9:e6:78:c6:d8:d4:99:
4a:de:5c:16:2f:09:b4:ea:7d:54:d2:62:b0:59:ab:a3:e8:25:
90:23:40:78:44:76:87:17:38:0d:0d:a0:61:c5:38:7b:bd:16:
32:53:eb:2f:35:41:76:18:54:b4:a5:8d:e7:77:40:9e:54:bd:
62:68:3a:6f:2f:6a:60:51:98:7d:f8:87:e7:97:65:f0:db:90:
3b:c7:54:1c:91:93:b8:a1:02:6b:5f:8e:fb:ea:57:e3:e7:35:
3b:0d:1c:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:37:32 2025 by rpki-client