Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/6c15e8-8a82-49d5-a309-38be6a47cfcc/1/6Zam_9rVzrJiZhe9btnE7FcdDzo.mft
File: 6Zam_9rVzrJiZhe9btnE7FcdDzo.mft (raw, json)
Hash identifier: GXT7E4aCDO5W+HIVGiDRPOZsHdI6/jS+ilw2xZXpMfk=
Subject key identifier: 68:ED:6C:20:CF:A6:B6:CA:C3:2F:B5:D6:17:6E:33:4C:25:FB:1E:88
Authority key identifier: E9:96:A6:FF:DA:D5:CE:B2:62:66:17:BD:6E:D9:C4:EC:57:1D:0F:3A
Certificate issuer: /CN=e996a6ffdad5ceb2626617bd6ed9c4ec571d0f3a
Certificate serial: 019A71B905724B0E014B901427BAD70F467A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Zam_9rVzrJiZhe9btnE7FcdDzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/6c15e8-8a82-49d5-a309-38be6a47cfcc/1/6Zam_9rVzrJiZhe9btnE7FcdDzo.mft
Manifest number: 111A
Signing time: Tue 11 Nov 2025 07:02:22 +0000
Manifest this update: Tue 11 Nov 2025 07:02:22 +0000
Manifest next update: Wed 12 Nov 2025 07:02:22 +0000
Files and hashes: 1: 0DP07uLmhCaYUKz4-De4vVyiQvU.roa (hash: tLlgxWvlov28mbUFOnnNCCYCPUkvTsTiijysrOZYrbM=)
2: 6Zam_9rVzrJiZhe9btnE7FcdDzo.crl (hash: wEZux/7ih4Ioh57j5BIpd5v0a50VrAYDO5Nd0hLpB9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/6c15e8-8a82-49d5-a309-38be6a47cfcc/1/6Zam_9rVzrJiZhe9btnE7FcdDzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/6c15e8-8a82-49d5-a309-38be6a47cfcc/1/6Zam_9rVzrJiZhe9btnE7FcdDzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/6Zam_9rVzrJiZhe9btnE7FcdDzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:05:72:4b:0e:01:4b:90:14:27:ba:d7:0f:46:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e996a6ffdad5ceb2626617bd6ed9c4ec571d0f3a
Validity
Not Before: Nov 11 07:02:22 2025 GMT
Not After : Nov 12 07:02:22 2025 GMT
Subject: CN=68ed6c20cfa6b6cac32fb5d6176e334c25fb1e88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:1e:77:f3:ed:42:28:eb:71:d3:1e:4f:f3:54:
ff:1c:0a:41:21:32:bc:54:14:88:4d:f8:ef:05:c2:
6c:3f:e1:a0:d5:63:c2:84:e4:3f:0a:7d:a9:f1:69:
de:2b:a9:bd:fc:5f:9e:bb:d1:88:ec:22:26:c3:ab:
9e:cd:81:c4:3a:3e:86:1a:97:e9:a7:a6:9b:4c:07:
00:de:0d:17:c6:34:2e:0a:d7:4f:2f:7e:a5:37:86:
9b:99:28:cf:f5:77:1b:9d:21:c7:65:4a:da:35:6c:
c1:29:2d:73:57:69:5c:bc:11:b6:df:51:be:7a:81:
01:6b:29:09:e0:92:d5:56:94:d0:c2:f1:b9:e1:a9:
e9:0f:17:2e:60:bf:4f:20:f5:71:83:76:25:d3:db:
9b:61:37:75:66:dc:83:07:fb:2c:cd:11:71:49:27:
b0:16:06:4d:81:37:1c:b3:a6:1c:46:eb:b0:db:e7:
c2:85:e8:ef:06:f5:4c:aa:68:bc:9b:b8:00:6a:07:
dd:23:01:77:51:ea:2a:55:07:af:a9:76:b1:1a:4c:
49:fb:f5:31:ef:24:05:8d:cc:f9:f1:c2:06:04:5c:
b6:74:16:cf:53:f5:23:05:e9:dd:82:54:47:33:57:
40:84:40:d2:9b:da:02:80:92:da:32:40:3f:de:ec:
24:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:ED:6C:20:CF:A6:B6:CA:C3:2F:B5:D6:17:6E:33:4C:25:FB:1E:88
X509v3 Authority Key Identifier:
keyid:E9:96:A6:FF:DA:D5:CE:B2:62:66:17:BD:6E:D9:C4:EC:57:1D:0F:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Zam_9rVzrJiZhe9btnE7FcdDzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/6c15e8-8a82-49d5-a309-38be6a47cfcc/1/6Zam_9rVzrJiZhe9btnE7FcdDzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/6c15e8-8a82-49d5-a309-38be6a47cfcc/1/6Zam_9rVzrJiZhe9btnE7FcdDzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:45:18:c5:04:03:86:7a:2f:89:7c:e7:08:fb:29:bd:2d:70:
f6:ba:a1:85:36:c5:70:97:05:c9:16:0e:a0:42:c6:1f:1c:6f:
21:8d:3e:14:40:86:7a:be:01:b5:13:d6:31:40:99:16:05:03:
c8:ef:a6:27:81:99:17:55:1f:eb:b5:39:2e:bb:03:81:b7:63:
2d:99:8c:8f:dc:60:52:f3:ac:ca:43:20:59:11:f6:60:e8:8f:
76:1f:5f:3a:7e:b8:69:03:bb:b4:2a:8d:62:94:18:31:34:bc:
2c:4f:06:96:9b:27:87:26:98:7c:bc:50:cf:43:5d:56:31:04:
98:25:68:48:f6:83:ba:b9:37:a0:29:a0:de:1c:62:f2:02:d0:
7a:43:71:fe:dc:26:fc:70:08:1b:8c:d4:ad:cf:f0:2a:0b:3e:
f8:0c:cf:18:3c:b4:3d:fe:a8:93:e3:f1:3e:7b:d2:30:53:46:
94:48:aa:5a:c0:4e:ab:d5:9a:45:91:36:a9:ac:e7:4f:5b:8a:
4d:b3:b7:01:1c:54:ed:7f:8b:fd:2a:bd:d2:eb:7b:aa:e4:1d:
36:1d:cc:6a:b2:df:56:b6:be:da:e8:40:f5:96:ef:ab:5b:0e:
c1:a2:91:fb:db:8a:5f:c8:80:71:c3:0f:17:79:7f:12:05:fe:
55:6d:c3:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:31:29 2025 by rpki-client