Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/7dc313-42bc-4677-8e91-11a9e9922537/1/6WR3bOxi7xOoKiFl5vjUeJDXc00.mft
File: 6WR3bOxi7xOoKiFl5vjUeJDXc00.mft (raw, json)
Hash identifier: +Yocfc9DAMYYks70Rw8yv1hDaeUjkCsSb/c8sL7k7E8=
Subject key identifier: 1E:18:4A:9D:43:B5:05:E0:E7:2C:F7:52:8A:EB:6F:8E:5E:DC:02:8C
Authority key identifier: E9:64:77:6C:EC:62:EF:13:A8:2A:21:65:E6:F8:D4:78:90:D7:73:4D
Certificate issuer: /CN=e964776cec62ef13a82a2165e6f8d47890d7734d
Certificate serial: 019A71EE8EBD4C68E04C5B07A7B4422CF2AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6WR3bOxi7xOoKiFl5vjUeJDXc00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/7dc313-42bc-4677-8e91-11a9e9922537/1/6WR3bOxi7xOoKiFl5vjUeJDXc00.mft
Manifest number: 04D2
Signing time: Tue 11 Nov 2025 08:00:50 +0000
Manifest this update: Tue 11 Nov 2025 08:00:50 +0000
Manifest next update: Wed 12 Nov 2025 08:00:50 +0000
Files and hashes: 1: 6WR3bOxi7xOoKiFl5vjUeJDXc00.crl (hash: veM/Z5O9JKG7d+L0h58/S9FIgvBAwI3tc+VPRAyVc3U=)
2: gULVBnS6_qNHU7cQ0dkYMIuUayU.roa (hash: g1yDTdtovs95F32kLsCVnbkwBNkiMceKZcm5mTyCkJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/7dc313-42bc-4677-8e91-11a9e9922537/1/6WR3bOxi7xOoKiFl5vjUeJDXc00.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/7dc313-42bc-4677-8e91-11a9e9922537/1/6WR3bOxi7xOoKiFl5vjUeJDXc00.mft
rsync://rpki.ripe.net/repository/DEFAULT/6WR3bOxi7xOoKiFl5vjUeJDXc00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:8e:bd:4c:68:e0:4c:5b:07:a7:b4:42:2c:f2:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e964776cec62ef13a82a2165e6f8d47890d7734d
Validity
Not Before: Nov 11 08:00:50 2025 GMT
Not After : Nov 12 08:00:50 2025 GMT
Subject: CN=1e184a9d43b505e0e72cf7528aeb6f8e5edc028c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:9a:75:75:95:01:3b:05:65:aa:cc:ac:47:89:
5b:b3:8c:44:d5:b5:91:e7:e1:e2:7e:44:4a:04:34:
85:54:2c:dc:76:3a:74:ad:c8:4c:1c:0f:3c:54:fa:
c2:db:b0:15:cc:6f:c6:ef:dc:69:f0:4a:31:ac:05:
5c:2d:24:d6:35:ba:97:ec:31:01:c3:f6:22:09:82:
ef:2e:4f:25:76:a0:92:7f:ad:08:5e:34:16:8a:82:
4b:94:a9:e3:10:9f:15:28:4c:aa:22:03:09:b3:d7:
e2:59:5d:d9:24:ba:08:f0:15:3d:93:d6:f5:71:99:
e3:ae:60:ac:80:4e:22:36:81:c1:09:f4:c9:a1:d3:
f6:c7:2d:f4:2a:28:ae:7b:e5:18:cf:08:35:ac:44:
56:a2:7a:d4:d0:79:50:d8:71:e8:f2:14:6d:ff:48:
b5:49:80:d2:33:a2:c6:07:0d:5c:d9:f4:ba:c6:5d:
72:01:82:29:1f:6a:99:f8:53:7c:c8:97:7b:b7:b4:
76:b9:69:cb:54:f9:67:9e:0d:59:34:ff:ee:3f:fb:
70:c8:fb:e6:01:21:7e:b1:4d:f4:2a:ae:03:97:e3:
76:2d:f7:85:74:43:9b:b9:be:9a:81:3a:c2:77:4e:
fa:d6:45:66:f3:4e:19:21:ad:38:09:2a:bf:bf:5c:
f0:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:18:4A:9D:43:B5:05:E0:E7:2C:F7:52:8A:EB:6F:8E:5E:DC:02:8C
X509v3 Authority Key Identifier:
keyid:E9:64:77:6C:EC:62:EF:13:A8:2A:21:65:E6:F8:D4:78:90:D7:73:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6WR3bOxi7xOoKiFl5vjUeJDXc00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7dc313-42bc-4677-8e91-11a9e9922537/1/6WR3bOxi7xOoKiFl5vjUeJDXc00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7dc313-42bc-4677-8e91-11a9e9922537/1/6WR3bOxi7xOoKiFl5vjUeJDXc00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:e0:f7:fa:c7:5c:03:e2:69:92:17:21:ba:c4:cb:6b:19:6b:
00:e7:09:91:4d:e1:b8:90:5d:24:75:7a:54:17:e0:b8:3d:7e:
85:a4:13:9b:fa:94:46:52:5f:9c:95:d3:f9:fe:22:fc:bd:a6:
4a:0f:0e:f8:5a:ba:97:53:1f:4d:75:06:88:15:39:df:4d:65:
c1:10:43:f8:a8:2f:39:44:78:ea:4a:c4:f3:77:bb:d0:ab:71:
28:cc:a9:43:35:0d:7c:d6:7a:b6:2e:f4:5c:a3:0c:a6:5a:a5:
67:64:92:f8:d0:af:f8:c9:69:75:fc:ca:83:da:90:9f:44:25:
43:c7:32:3a:3b:41:04:45:75:61:c9:a8:41:15:dc:64:fc:11:
68:6a:7a:a6:69:5c:12:90:08:1d:fa:c2:fe:16:8f:ed:b2:73:
eb:7a:b2:ad:44:42:eb:d5:a8:67:00:4a:85:91:7a:21:29:7e:
55:6f:42:05:50:51:20:44:9a:35:39:83:d5:40:a5:15:57:37:
fe:20:a5:32:9b:69:38:86:c1:2a:ff:87:b7:85:bb:66:46:3c:
ab:4f:f4:b7:71:ed:fd:92:a1:7c:e4:cf:b5:07:4c:e2:4a:89:
cb:86:b4:0a:0f:12:43:08:d1:1c:54:c0:19:97:1e:e0:3a:52:
8e:8e:3c:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:18:39 2025 by rpki-client