Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/3f7da4-3631-4b03-ba84-6cb2d3b4437c/1/6cTNQRjd_-5W6IVmN5VUeh3j-Yo.mft
File: 6cTNQRjd_-5W6IVmN5VUeh3j-Yo.mft (raw, json)
Hash identifier: stPjd1yE2kNb35QCO2mVD8fKYl9vyNQvpgldUvQ4yl8=
Subject key identifier: 8D:B6:FB:0C:14:80:A6:3A:25:74:7A:03:12:A7:8A:B7:2B:93:E6:BE
Authority key identifier: E9:C4:CD:41:18:DD:FF:EE:56:E8:85:66:37:95:54:7A:1D:E3:F9:8A
Certificate issuer: /CN=e9c4cd4118ddffee56e885663795547a1de3f98a
Certificate serial: 019A7337F7539B2333A9B0388B6D27552F9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6cTNQRjd_-5W6IVmN5VUeh3j-Yo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/3f7da4-3631-4b03-ba84-6cb2d3b4437c/1/6cTNQRjd_-5W6IVmN5VUeh3j-Yo.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 14:00:38 +0000
Manifest this update: Tue 11 Nov 2025 14:00:38 +0000
Manifest next update: Wed 12 Nov 2025 14:00:38 +0000
Files and hashes: 1: 6cTNQRjd_-5W6IVmN5VUeh3j-Yo.crl (hash: efCRuEjkKcUxgilG8xFODpFKnh5hRUtHEpk2g/tbv6Q=)
2: yQp3lf1OVxhMQ-si3fJCgBiD3so.roa (hash: 2hMAD2c5ISOXJtDVu0nTlgQQryv7G6wnTPw6jHWepts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/3f7da4-3631-4b03-ba84-6cb2d3b4437c/1/6cTNQRjd_-5W6IVmN5VUeh3j-Yo.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/3f7da4-3631-4b03-ba84-6cb2d3b4437c/1/6cTNQRjd_-5W6IVmN5VUeh3j-Yo.mft
rsync://rpki.ripe.net/repository/DEFAULT/6cTNQRjd_-5W6IVmN5VUeh3j-Yo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:37:f7:53:9b:23:33:a9:b0:38:8b:6d:27:55:2f:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9c4cd4118ddffee56e885663795547a1de3f98a
Validity
Not Before: Nov 11 14:00:38 2025 GMT
Not After : Nov 12 14:00:38 2025 GMT
Subject: CN=8db6fb0c1480a63a25747a0312a78ab72b93e6be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:74:d1:ed:36:97:74:50:2c:fd:37:76:e2:53:
5a:22:04:7f:24:78:61:83:cc:1b:08:3d:c2:17:35:
b7:8b:5a:86:5f:ca:a5:94:01:96:47:9f:14:de:5d:
d0:06:35:69:0b:f5:e5:7b:5f:16:87:6b:06:ef:21:
4a:ab:0b:ea:d3:dc:22:5e:c5:1f:17:87:4a:2f:d2:
1e:13:60:2c:5b:27:7a:a0:87:34:1a:75:0f:81:49:
db:19:73:f5:03:f8:77:02:14:6c:93:8f:e9:52:c6:
ca:b3:f9:71:5a:64:f4:4c:31:5b:2c:b3:c6:2e:1d:
40:22:9f:f8:3d:d1:ee:b1:03:ca:4e:14:79:63:1d:
e1:6c:69:10:2e:f3:85:c4:23:9d:74:39:dc:0a:ba:
2f:2b:f7:c6:c6:66:4a:b8:e4:c8:c7:50:48:0b:e8:
0f:4f:df:30:49:f9:b5:1a:e6:90:aa:ed:db:b4:4c:
b4:0d:4c:10:4a:7b:d6:9b:09:c9:c2:95:0e:86:23:
3c:32:4c:34:91:c0:75:71:38:7a:f4:63:cf:48:37:
29:3b:bb:3a:5d:a1:ad:df:98:72:82:f2:49:3d:8d:
38:6a:3a:77:9c:e1:58:c1:1e:63:f2:a2:8d:64:37:
b9:64:89:fc:59:b8:f2:09:ba:e9:27:33:c9:f2:b4:
83:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:B6:FB:0C:14:80:A6:3A:25:74:7A:03:12:A7:8A:B7:2B:93:E6:BE
X509v3 Authority Key Identifier:
keyid:E9:C4:CD:41:18:DD:FF:EE:56:E8:85:66:37:95:54:7A:1D:E3:F9:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6cTNQRjd_-5W6IVmN5VUeh3j-Yo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3f7da4-3631-4b03-ba84-6cb2d3b4437c/1/6cTNQRjd_-5W6IVmN5VUeh3j-Yo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3f7da4-3631-4b03-ba84-6cb2d3b4437c/1/6cTNQRjd_-5W6IVmN5VUeh3j-Yo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:69:82:c2:02:a8:cb:7f:74:0d:f3:ab:a5:4f:c0:b3:4b:5c:
87:1c:88:17:54:c6:99:eb:10:36:4d:06:6b:07:5b:ae:5e:09:
60:4b:6b:21:0e:6f:34:eb:74:a0:9c:5a:2d:a5:74:72:9e:a6:
d2:e0:d1:1a:03:b4:c4:3f:cd:7e:2e:b3:10:7d:e7:29:3c:5e:
af:44:42:8c:b5:c8:b0:a9:17:57:b8:53:49:86:24:e1:08:ec:
b0:9c:3f:84:c9:b7:21:57:a9:a3:3e:bf:f9:3b:47:2e:69:66:
25:8d:a6:16:c0:fb:c2:f4:e3:a3:28:3e:b3:72:1a:a2:89:55:
5a:eb:7d:bd:44:cd:59:15:62:7c:e5:df:fc:1a:c8:d4:87:1a:
6d:1a:42:19:b4:b2:23:cc:45:3b:c1:60:0d:d9:e7:b1:00:10:
9b:fe:4c:3f:0b:6a:b0:59:01:7a:06:d9:b7:57:9f:54:42:8d:
62:df:60:2e:2d:5e:da:3c:fc:67:30:6e:44:e2:61:fb:1d:c1:
7f:8b:b7:c3:1e:f3:03:a2:41:e2:f1:e1:44:b1:17:8f:0c:92:
a6:19:af:27:2a:9d:bf:c0:d9:df:76:11:52:3e:54:81:94:ae:
0a:e3:8b:7b:be:2a:88:12:7d:6c:26:09:d8:99:fd:d9:ea:6d:
75:38:87:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:48:09 2025 by rpki-client