Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/f39f30-14f0-4226-be6f-b269f895e7f7/1/6EpS3W883rR4C7KZj1AWYMybiP8.mft
File: 6EpS3W883rR4C7KZj1AWYMybiP8.mft (raw, json)
Hash identifier: jejnIL6hpwOO9TG3hLfWMNSsqobTjJ6v3dQkjCJxESA=
Subject key identifier: 97:D6:39:0D:20:F3:DD:E1:CF:12:E4:22:1B:4D:18:3E:75:45:17:E2
Authority key identifier: E8:4A:52:DD:6F:3C:DE:B4:78:0B:B2:99:8F:50:16:60:CC:9B:88:FF
Certificate issuer: /CN=e84a52dd6f3cdeb4780bb2998f501660cc9b88ff
Certificate serial: 019A71B7D5C54692AFCA5D91D6CA03DCC691
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6EpS3W883rR4C7KZj1AWYMybiP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/f39f30-14f0-4226-be6f-b269f895e7f7/1/6EpS3W883rR4C7KZj1AWYMybiP8.mft
Manifest number: 0A38
Signing time: Tue 11 Nov 2025 07:01:04 +0000
Manifest this update: Tue 11 Nov 2025 07:01:04 +0000
Manifest next update: Wed 12 Nov 2025 07:01:04 +0000
Files and hashes: 1: 6EpS3W883rR4C7KZj1AWYMybiP8.crl (hash: J65YtqJknBN76PhGDmxtV6ASD1Ymomp8xJXQLSn3btA=)
2: k-C92F5fBC7tzidpGResaRP_3Y8.roa (hash: cCgzC2CyBMRCMgCeDBY61Xy0TGv8/RtXgzQi7ffbn8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/f39f30-14f0-4226-be6f-b269f895e7f7/1/6EpS3W883rR4C7KZj1AWYMybiP8.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/f39f30-14f0-4226-be6f-b269f895e7f7/1/6EpS3W883rR4C7KZj1AWYMybiP8.mft
rsync://rpki.ripe.net/repository/DEFAULT/6EpS3W883rR4C7KZj1AWYMybiP8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:d5:c5:46:92:af:ca:5d:91:d6:ca:03:dc:c6:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e84a52dd6f3cdeb4780bb2998f501660cc9b88ff
Validity
Not Before: Nov 11 07:01:04 2025 GMT
Not After : Nov 12 07:01:04 2025 GMT
Subject: CN=97d6390d20f3dde1cf12e4221b4d183e754517e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f6:a1:4a:3e:fd:ea:ee:b9:4d:eb:61:7e:8f:
4b:46:b0:f0:32:f3:67:d8:bf:72:1d:c5:65:dc:49:
e8:bd:f7:d0:74:5e:b8:aa:f8:f0:f0:60:a3:df:34:
7b:75:84:2b:06:9e:fb:05:b6:e5:6c:fd:3d:22:1f:
82:93:4b:67:8c:a7:1d:e1:89:66:43:cf:60:e6:cc:
9b:a6:3a:88:df:b7:cc:63:f2:75:c7:68:dd:b7:66:
87:42:9d:df:da:95:8f:64:c8:54:c8:c1:fe:b8:e6:
9c:30:96:4e:6b:43:81:5e:2d:1c:ea:a4:2a:78:99:
4a:ef:1d:e7:d9:e6:b7:61:92:27:18:7c:98:a5:aa:
10:16:b1:cd:40:6c:6d:74:bb:e2:74:22:2b:51:9f:
50:01:fa:b5:2f:7f:48:11:2f:9e:de:b4:72:b9:0c:
ee:b7:75:1a:bc:62:77:de:59:7e:e9:5a:95:e3:d7:
2d:47:6d:5a:dd:e3:ce:45:e6:5b:78:f3:67:16:da:
71:fd:9c:a5:e3:a9:28:fd:bd:cd:73:2d:6b:74:33:
c7:06:6f:14:17:1b:06:65:34:45:76:77:67:04:84:
32:08:cc:2c:c2:57:cb:1f:e9:6e:ea:7b:27:a3:ff:
da:4c:f4:db:33:df:6c:70:2a:20:53:85:ef:b6:1b:
7c:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:D6:39:0D:20:F3:DD:E1:CF:12:E4:22:1B:4D:18:3E:75:45:17:E2
X509v3 Authority Key Identifier:
keyid:E8:4A:52:DD:6F:3C:DE:B4:78:0B:B2:99:8F:50:16:60:CC:9B:88:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EpS3W883rR4C7KZj1AWYMybiP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f39f30-14f0-4226-be6f-b269f895e7f7/1/6EpS3W883rR4C7KZj1AWYMybiP8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f39f30-14f0-4226-be6f-b269f895e7f7/1/6EpS3W883rR4C7KZj1AWYMybiP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:69:1a:0b:92:14:4b:31:9d:cf:aa:31:2b:42:35:02:19:4b:
92:f0:a6:ba:4c:55:9d:ca:d0:b4:1d:b7:e9:c9:32:da:12:5e:
0c:3f:29:69:10:82:11:88:7a:b8:9d:d3:5f:d5:41:bf:b5:67:
58:f6:e3:66:a0:ec:50:c5:8c:76:10:8a:f0:35:e7:8c:2e:37:
3d:74:f6:f8:e3:cd:2b:a4:1e:2b:ae:54:12:ca:45:7a:46:26:
ab:79:da:22:ee:03:3d:2a:61:c1:f7:0b:a9:27:e3:fd:74:c4:
2c:84:72:e9:0a:a0:82:38:2d:fa:7a:7f:ce:bd:15:9d:b7:48:
fe:e7:26:37:3a:99:04:d2:7f:a8:8b:b8:59:9e:40:8e:e2:91:
e2:03:d7:ac:c1:a0:42:3f:da:f9:d8:4a:01:ab:48:9a:55:2c:
8c:0b:8e:77:d6:82:af:28:e8:16:c5:81:27:81:83:b3:94:5a:
12:8d:45:b3:cd:ac:99:6a:bd:16:a3:56:a5:ef:b8:dd:93:18:
17:c0:c3:3a:d6:13:8f:03:7c:cf:4e:97:83:7f:d6:97:59:ed:
d0:08:4b:0b:89:2d:62:b6:1a:5f:96:c5:49:6c:5f:34:cc:db:
6a:a4:9b:84:04:1d:7c:b8:ca:0e:4a:f2:2a:da:c7:01:7b:08:
e0:d6:06:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:43:10 2025 by rpki-client