Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/ad46a5-f900-4ad1-b229-e18435e432dc/1/6wkUma3HabD7qf7TKEVDp0JcI1E.mft
File: 6wkUma3HabD7qf7TKEVDp0JcI1E.mft (raw, json)
Hash identifier: tVReU/8tMO6rTRxhCL7cAkX01GMhVOhyI8/QG792zwI=
Subject key identifier: 62:68:68:C3:65:A1:7F:88:7C:D8:2F:94:61:4E:64:21:9C:9B:22:9E
Authority key identifier: EB:09:14:99:AD:C7:69:B0:FB:A9:FE:D3:28:45:43:A7:42:5C:23:51
Certificate issuer: /CN=eb091499adc769b0fba9fed3284543a7425c2351
Certificate serial: 019A71B82A68C7EBA797F1C80950FA9EF2DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6wkUma3HabD7qf7TKEVDp0JcI1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/ad46a5-f900-4ad1-b229-e18435e432dc/1/6wkUma3HabD7qf7TKEVDp0JcI1E.mft
Manifest number: 170F
Signing time: Tue 11 Nov 2025 07:01:26 +0000
Manifest this update: Tue 11 Nov 2025 07:01:26 +0000
Manifest next update: Wed 12 Nov 2025 07:01:26 +0000
Files and hashes: 1: 6wkUma3HabD7qf7TKEVDp0JcI1E.crl (hash: 4s4q9u/YgLOPdBeNGiExZ5CDBbAGQphb1p59NAMYPMc=)
2: GAIwhqy9s--sK4fAUb5ZmX0AYwU.roa (hash: Ns47X0wI0O3MuVbdsHwm7ba7lckhv6ZFSEeB9gRrT7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/ad46a5-f900-4ad1-b229-e18435e432dc/1/6wkUma3HabD7qf7TKEVDp0JcI1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/ad46a5-f900-4ad1-b229-e18435e432dc/1/6wkUma3HabD7qf7TKEVDp0JcI1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/6wkUma3HabD7qf7TKEVDp0JcI1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:2a:68:c7:eb:a7:97:f1:c8:09:50:fa:9e:f2:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb091499adc769b0fba9fed3284543a7425c2351
Validity
Not Before: Nov 11 07:01:26 2025 GMT
Not After : Nov 12 07:01:26 2025 GMT
Subject: CN=626868c365a17f887cd82f94614e64219c9b229e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f6:95:16:20:39:01:d4:d2:55:52:78:be:79:
b2:c1:41:a5:1e:e3:e1:1d:20:a8:58:04:b1:63:29:
ff:1e:cc:61:0c:ad:8c:1c:ef:91:3d:5a:73:49:87:
7e:ce:22:0e:0a:d9:d7:39:62:67:f4:3f:51:1e:ef:
d8:8c:f0:7f:79:9f:06:bd:39:60:b2:74:67:e5:b7:
3b:8f:dc:82:2c:7e:5d:b8:e1:fc:8c:1e:b1:92:4e:
d0:02:cf:27:67:7d:61:37:41:8d:e6:f8:39:f2:19:
9b:15:c3:ff:73:28:ce:6d:6a:c6:a1:c0:67:ce:cc:
80:56:42:2c:89:69:32:dc:a3:49:dc:09:08:5c:c3:
bc:b8:13:ee:e0:2f:07:28:15:42:0f:52:4f:8d:6e:
03:5f:6b:a8:03:9a:eb:c7:76:ae:9b:b9:17:5f:a3:
3a:16:58:d7:57:1c:07:67:81:5b:f7:ad:43:90:47:
71:4a:1c:bd:d6:3d:65:bc:64:b4:7c:96:6d:10:f7:
74:29:58:5f:c5:47:8e:32:e1:19:a9:cd:c2:ff:3e:
ca:ae:92:4d:46:bc:b6:95:4a:8f:56:af:08:ee:07:
be:be:5c:4c:b6:f8:73:a9:10:8d:4a:60:bd:d6:27:
99:51:6e:98:f4:42:1f:75:e2:d1:49:95:fd:bf:fa:
d2:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:68:68:C3:65:A1:7F:88:7C:D8:2F:94:61:4E:64:21:9C:9B:22:9E
X509v3 Authority Key Identifier:
keyid:EB:09:14:99:AD:C7:69:B0:FB:A9:FE:D3:28:45:43:A7:42:5C:23:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6wkUma3HabD7qf7TKEVDp0JcI1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ad46a5-f900-4ad1-b229-e18435e432dc/1/6wkUma3HabD7qf7TKEVDp0JcI1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ad46a5-f900-4ad1-b229-e18435e432dc/1/6wkUma3HabD7qf7TKEVDp0JcI1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:f4:f5:6d:62:c5:82:fa:eb:4d:37:7e:30:8f:08:d7:18:2d:
e0:57:23:a8:c6:53:ce:d7:e4:bd:3f:c1:79:2c:44:29:7c:0b:
22:c1:34:e0:6d:6e:2c:77:c7:46:91:cd:00:8f:6a:bd:98:4e:
70:cd:20:dd:7c:14:86:58:71:ab:06:29:21:6f:4b:92:97:34:
14:5c:fc:a2:3e:af:c1:71:a4:d4:8f:c0:81:20:83:20:bb:3e:
cb:0d:52:fd:89:77:7e:87:57:f3:8a:f0:b9:03:45:6b:51:57:
17:b4:04:39:d6:70:6b:61:c8:20:2e:10:9c:31:93:2e:e9:10:
2f:d5:18:03:b0:5c:17:02:25:11:36:55:f4:28:ac:10:05:c3:
de:56:9f:22:0b:ff:52:e8:51:7f:6c:37:3b:45:69:e4:09:6e:
95:71:6e:54:dd:51:1d:a7:20:dc:f8:c7:82:1e:f9:80:42:43:
3f:5e:e5:f3:84:26:37:ac:29:12:78:30:8d:92:c2:8b:5d:c9:
3b:5d:c6:9a:86:51:d0:cf:f3:14:b7:58:aa:11:db:e0:ad:d5:
07:3c:aa:36:ac:a9:fd:ce:af:4a:35:60:3e:c2:d4:04:a3:b9:
3d:c8:0c:68:cc:e3:ad:3f:b6:d1:44:d4:5a:79:f2:f0:f4:43:
62:01:cb:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:18:49 2025 by rpki-client