Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/42217e-ead0-46be-8ad0-05f90ad24f3e/1/6XWS8etB1siTzQ3XK2P8NO5VNTM.mft
File: 6XWS8etB1siTzQ3XK2P8NO5VNTM.mft (raw, json)
Hash identifier: 0lsL9Ek/JLgHI3sHdmskZopxTWqIKtfMRTLyqLlxKKA=
Subject key identifier: 18:08:81:F1:C2:FD:EB:42:59:F0:E3:DF:CF:47:B5:FB:63:B3:5A:87
Authority key identifier: E9:75:92:F1:EB:41:D6:C8:93:CD:0D:D7:2B:63:FC:34:EE:55:35:33
Certificate issuer: /CN=e97592f1eb41d6c893cd0dd72b63fc34ee553533
Certificate serial: 019A73A5EE7F7E9B523E8687D9D6B73BC65E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XWS8etB1siTzQ3XK2P8NO5VNTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/42217e-ead0-46be-8ad0-05f90ad24f3e/1/6XWS8etB1siTzQ3XK2P8NO5VNTM.mft
Manifest number: 1722
Signing time: Tue 11 Nov 2025 16:00:45 +0000
Manifest this update: Tue 11 Nov 2025 16:00:45 +0000
Manifest next update: Wed 12 Nov 2025 16:00:45 +0000
Files and hashes: 1: 6XWS8etB1siTzQ3XK2P8NO5VNTM.crl (hash: AwCfm7XpyURcFiBegIDtCtLXFXACbSfr9K8d2ixMGw8=)
2: r6T3XlH0NydhUiVntY08YEEt0HY.roa (hash: j+28xx5Rq8KrtlCf807KmCTOzzUVWhkp01bXOIcVWSo=)
3: wPTagVR3pNusa3J3LbaZykmYrdM.roa (hash: k0uAisbBEgTj7/x2tEyMYhIzPLODPGtJvKxV+pOGuVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/42217e-ead0-46be-8ad0-05f90ad24f3e/1/6XWS8etB1siTzQ3XK2P8NO5VNTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/42217e-ead0-46be-8ad0-05f90ad24f3e/1/6XWS8etB1siTzQ3XK2P8NO5VNTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/6XWS8etB1siTzQ3XK2P8NO5VNTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:a5:ee:7f:7e:9b:52:3e:86:87:d9:d6:b7:3b:c6:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e97592f1eb41d6c893cd0dd72b63fc34ee553533
Validity
Not Before: Nov 11 16:00:45 2025 GMT
Not After : Nov 12 16:00:45 2025 GMT
Subject: CN=180881f1c2fdeb4259f0e3dfcf47b5fb63b35a87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3d:f2:19:77:ec:d9:fb:2d:56:96:a6:db:61:
42:6b:51:2d:b1:8b:9d:cb:a1:c7:60:a9:0e:3c:68:
57:fa:41:a0:53:52:fe:0b:54:23:9e:39:15:c6:64:
d5:5d:45:2c:17:33:3b:18:a8:fa:61:01:5b:c3:6a:
d3:93:81:49:7f:81:ad:b1:86:86:d1:04:50:c6:a7:
42:fa:8d:df:a1:e6:3d:2a:29:1c:09:b8:30:ca:d9:
de:0e:2a:6e:8f:da:f0:02:c3:7a:7b:49:c8:eb:84:
25:fc:cb:dd:41:f4:9b:33:aa:6f:a7:aa:12:f9:8b:
4c:f1:0b:0c:1b:9c:0d:e6:06:ac:e5:95:f3:5f:b8:
21:bb:4c:de:1c:a9:c3:a2:6c:23:17:65:da:0f:bb:
0d:b3:b5:6c:5f:a1:4a:c1:f8:7f:dd:71:bf:22:49:
ac:9a:b1:5e:0f:4b:2f:d7:54:55:57:eb:c9:59:65:
16:dc:a3:70:13:b3:ec:81:86:bf:30:f6:41:fd:f6:
9b:13:d4:69:60:a2:7a:16:13:07:59:e2:c9:52:73:
1d:c0:5f:d0:2c:0d:09:db:29:fa:fd:8f:a1:01:0e:
bf:bc:5a:cc:91:91:0e:95:bc:8c:cb:1a:21:69:52:
a7:de:9a:18:5c:c6:73:e8:5d:6d:17:5b:b2:ca:73:
90:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:08:81:F1:C2:FD:EB:42:59:F0:E3:DF:CF:47:B5:FB:63:B3:5A:87
X509v3 Authority Key Identifier:
keyid:E9:75:92:F1:EB:41:D6:C8:93:CD:0D:D7:2B:63:FC:34:EE:55:35:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XWS8etB1siTzQ3XK2P8NO5VNTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/42217e-ead0-46be-8ad0-05f90ad24f3e/1/6XWS8etB1siTzQ3XK2P8NO5VNTM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/42217e-ead0-46be-8ad0-05f90ad24f3e/1/6XWS8etB1siTzQ3XK2P8NO5VNTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:4e:67:5c:13:5b:21:48:b8:ed:9e:23:1d:e3:50:73:24:e5:
44:d0:28:02:70:c2:e1:19:df:3d:78:4e:e2:5f:dd:6b:4d:29:
94:3d:c4:e2:d7:ab:f9:c4:06:d4:fa:eb:63:19:25:09:1f:af:
1e:af:da:ac:be:75:ec:cc:03:e4:3f:f6:95:54:c8:ad:c6:87:
d4:e9:25:b7:d6:d6:36:8b:4c:c4:0f:43:ed:9b:01:be:39:cb:
6f:99:79:c8:19:6f:1b:a2:86:ac:1b:61:54:68:c7:0f:58:a9:
17:5b:34:67:59:60:31:b2:bf:b9:68:8a:e7:df:ae:59:a2:51:
b6:bd:18:30:55:db:c8:1f:6f:ca:12:32:80:cb:7e:69:a7:67:
74:cd:cf:3a:1b:ed:84:80:ec:d8:2d:06:c8:64:43:5f:e2:81:
0a:4d:86:f4:ac:4a:a6:2c:ed:74:55:5b:bf:7e:1a:29:80:b2:
8a:61:a1:37:34:88:49:98:2c:b9:70:8f:91:c1:cb:22:7b:3c:
06:53:5e:32:1a:59:4f:51:1c:95:03:ef:0e:a3:d6:37:d5:de:
b8:95:46:e0:72:7b:be:e3:75:84:40:39:9c:ef:e1:f8:a4:79:
1c:4e:41:7a:96:59:01:10:4b:17:eb:4e:f2:8c:89:2a:6b:d2:
b8:06:52:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 18:41:04 2025 by rpki-client