Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/9ad9dc-b84c-4a59-bb1c-0cc3b4caf683/1/6ch0aZeAldiv9jJygEuy810UkQM.mft
File: 6ch0aZeAldiv9jJygEuy810UkQM.mft (raw, json)
Hash identifier: f3pcAs7pq/ZBCYYM1dxgKqSqwOzl79EQ8McAMjA/h9k=
Subject key identifier: 47:2E:9D:71:3C:E2:9C:5D:A8:8B:42:0B:8F:F4:11:DF:9A:C9:D4:0A
Authority key identifier: E9:C8:74:69:97:80:95:D8:AF:F6:32:72:80:4B:B2:F3:5D:14:91:03
Certificate issuer: /CN=e9c87469978095d8aff63272804bb2f35d149103
Certificate serial: 019A71EECC56149C65F1AF4E4DEAF025AE03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6ch0aZeAldiv9jJygEuy810UkQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/9ad9dc-b84c-4a59-bb1c-0cc3b4caf683/1/6ch0aZeAldiv9jJygEuy810UkQM.mft
Manifest number: 0A5A
Signing time: Tue 11 Nov 2025 08:01:06 +0000
Manifest this update: Tue 11 Nov 2025 08:01:06 +0000
Manifest next update: Wed 12 Nov 2025 08:01:06 +0000
Files and hashes: 1: 6ch0aZeAldiv9jJygEuy810UkQM.crl (hash: 0GGZJlsSxeOwC6Q4m2gj7ISeVLM7uVGdKPD7F8zPqgA=)
2: zUJ5qWVbr4pmer3m739HNMffZjg.roa (hash: NJqHyM9HbL1+6lpUhrutNRFZX2Z30cCNuSy/2q+fWs4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/9ad9dc-b84c-4a59-bb1c-0cc3b4caf683/1/6ch0aZeAldiv9jJygEuy810UkQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/9ad9dc-b84c-4a59-bb1c-0cc3b4caf683/1/6ch0aZeAldiv9jJygEuy810UkQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/6ch0aZeAldiv9jJygEuy810UkQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:cc:56:14:9c:65:f1:af:4e:4d:ea:f0:25:ae:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9c87469978095d8aff63272804bb2f35d149103
Validity
Not Before: Nov 11 08:01:06 2025 GMT
Not After : Nov 12 08:01:06 2025 GMT
Subject: CN=472e9d713ce29c5da88b420b8ff411df9ac9d40a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:f3:67:5e:5a:bf:58:2c:dc:07:cd:15:b5:cf:
6d:e1:15:ba:7b:51:73:14:3e:21:d8:48:43:8a:20:
69:db:a2:f2:55:70:f6:9f:35:16:fe:2d:66:c3:9f:
93:72:61:1f:cd:e5:84:c3:63:8c:f4:f1:32:f0:fc:
b0:2e:30:1b:90:86:31:60:d0:85:fe:84:7b:c7:56:
ab:2c:ed:10:2b:e7:2c:42:4c:23:34:3f:d8:f7:23:
6c:b4:30:d8:10:58:2a:89:2c:83:48:fb:92:15:95:
a0:8e:a6:aa:e9:a3:75:b8:b5:80:c1:32:27:bb:ce:
2f:fd:12:6a:38:60:60:75:84:bd:a7:29:b7:b5:32:
29:54:86:39:87:74:fb:38:c2:85:d8:56:0a:83:d0:
7f:4b:de:9e:a2:ba:70:bd:9b:09:6b:9c:ab:c7:be:
8e:91:25:6e:ce:ff:82:b6:cc:f5:7d:0d:41:93:03:
9a:33:af:c6:0a:35:b1:f9:a6:e8:de:06:a5:f3:4a:
69:20:27:8c:95:a3:ed:66:c8:86:0e:8b:06:72:45:
ea:29:d7:02:7d:ee:a2:9e:3b:c1:99:cd:16:d9:22:
c3:2f:9a:f3:5e:07:95:98:2c:42:2e:5e:ab:27:78:
79:d5:52:51:86:15:36:37:94:71:bd:e6:70:cf:93:
e2:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:2E:9D:71:3C:E2:9C:5D:A8:8B:42:0B:8F:F4:11:DF:9A:C9:D4:0A
X509v3 Authority Key Identifier:
keyid:E9:C8:74:69:97:80:95:D8:AF:F6:32:72:80:4B:B2:F3:5D:14:91:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ch0aZeAldiv9jJygEuy810UkQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/9ad9dc-b84c-4a59-bb1c-0cc3b4caf683/1/6ch0aZeAldiv9jJygEuy810UkQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/9ad9dc-b84c-4a59-bb1c-0cc3b4caf683/1/6ch0aZeAldiv9jJygEuy810UkQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:e4:39:84:d0:a2:22:74:77:b5:5f:c9:2c:8a:48:45:b8:39:
35:3c:f5:b8:eb:13:a9:bd:5b:f9:1f:f1:8c:00:43:61:15:cb:
21:79:b1:6d:15:77:cb:bb:14:c9:ef:18:69:a4:47:42:94:42:
1f:e1:28:24:a9:27:d1:21:b2:0d:da:12:59:37:46:38:4e:0d:
0d:fb:b6:53:ac:16:2e:a8:f8:82:6d:aa:79:04:b9:30:3e:2c:
02:db:9a:1b:58:4b:12:d0:27:19:9c:f8:c4:ea:cb:04:b3:7b:
b4:cd:1e:e4:38:3a:99:0d:76:ae:a3:ad:d0:6e:ca:ee:0b:f3:
6d:9d:58:f0:28:f6:1f:88:73:d2:30:b4:c3:23:52:3a:30:06:
53:29:0a:71:69:9a:06:41:83:92:56:c9:97:2e:52:1f:60:0e:
b9:c4:59:b9:55:67:20:56:9b:ed:06:5c:61:54:5d:35:a2:70:
b7:89:51:2f:96:b1:ef:91:72:b7:f1:5d:c4:87:fa:75:26:51:
9b:45:61:e3:52:14:f6:b6:3e:94:a5:96:9f:48:de:91:e1:b2:
5f:46:37:a3:66:64:d1:0b:fb:05:8c:05:09:ce:be:55:92:6a:
15:fc:fe:4c:ce:69:de:68:0f:80:5c:e8:12:98:75:28:2e:41:
22:fd:a0:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:46:18 2025 by rpki-client