Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/c6570e-f22b-488b-a3fe-fdcb93b491e5/1/C6BoSDrLyWox4ovNpUu-r-NILRk.mft
File: C6BoSDrLyWox4ovNpUu-r-NILRk.mft (raw, json)
Hash identifier: dDDOfdGwR30WvCvMn9EVDR/awgSDP+DAhtr4KaODbw8=
Subject key identifier: AD:96:34:E5:31:8D:11:1B:30:34:73:A9:4E:6B:53:EE:9C:5D:90:F3
Authority key identifier: 0B:A0:68:48:3A:CB:C9:6A:31:E2:8B:CD:A5:4B:BE:AF:E3:48:2D:19
Certificate issuer: /CN=0ba068483acbc96a31e28bcda54bbeafe3482d19
Certificate serial: 019A706E1F4DE174CFDBD708C9EB6BFC88AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C6BoSDrLyWox4ovNpUu-r-NILRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/c6570e-f22b-488b-a3fe-fdcb93b491e5/1/C6BoSDrLyWox4ovNpUu-r-NILRk.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 01:00:56 +0000
Manifest this update: Tue 11 Nov 2025 01:00:56 +0000
Manifest next update: Wed 12 Nov 2025 01:00:56 +0000
Files and hashes: 1: C6BoSDrLyWox4ovNpUu-r-NILRk.crl (hash: tIM+9fxdPqB4wnKP3DBSrDzF/YMXstrZmY5C0MazYG4=)
2: YZzAhQaL88-jCpJ3mBWG-64btDU.roa (hash: RCtjkx1poAnNZoTiswLMPNgLTI2laFXye8HspCS+ElI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/c6570e-f22b-488b-a3fe-fdcb93b491e5/1/C6BoSDrLyWox4ovNpUu-r-NILRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/c6570e-f22b-488b-a3fe-fdcb93b491e5/1/C6BoSDrLyWox4ovNpUu-r-NILRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/C6BoSDrLyWox4ovNpUu-r-NILRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:6e:1f:4d:e1:74:cf:db:d7:08:c9:eb:6b:fc:88:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ba068483acbc96a31e28bcda54bbeafe3482d19
Validity
Not Before: Nov 11 01:00:56 2025 GMT
Not After : Nov 12 01:00:56 2025 GMT
Subject: CN=ad9634e5318d111b303473a94e6b53ee9c5d90f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a1:2b:fe:48:66:78:6b:5c:e5:69:46:1e:4f:
cf:bc:b5:23:28:a0:1e:04:7f:81:c6:3b:11:57:f6:
b1:0d:5c:2e:c5:3c:61:c5:66:63:84:43:19:f4:b3:
19:1a:b6:8c:c7:59:57:2e:c2:cb:fb:a1:89:65:58:
b5:5f:c0:c9:42:5c:5b:4e:f4:c4:c3:4b:3c:80:6b:
86:a9:32:b4:15:72:25:ba:27:3b:12:1a:c3:1c:38:
09:a9:ed:0c:1b:f1:c3:1c:fa:b2:71:78:bc:46:06:
d5:cc:22:e8:66:83:1f:18:a0:bd:44:d5:a8:7b:a2:
60:be:46:ec:3c:24:06:d8:ab:86:ea:03:2b:f7:72:
3b:bf:33:0a:9e:18:b9:a2:d7:bf:78:ae:1c:b8:03:
fd:9e:2b:58:08:f9:c2:69:7d:49:c7:9e:e8:87:1a:
4d:a0:47:21:1f:b2:c2:58:33:37:6e:39:fb:14:dd:
8b:ed:e1:b3:f5:1d:ec:43:85:23:a3:e1:92:76:a7:
b6:2c:dd:c0:51:e7:95:3c:14:95:ef:75:04:da:10:
18:0a:fc:d9:b8:97:51:7b:24:1a:19:d8:da:52:7e:
fa:a0:c9:d3:7f:c5:eb:38:19:0e:c7:ae:2f:26:f4:
fe:99:c9:d0:77:bb:d1:4b:99:f8:54:d1:9e:0d:32:
37:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:96:34:E5:31:8D:11:1B:30:34:73:A9:4E:6B:53:EE:9C:5D:90:F3
X509v3 Authority Key Identifier:
keyid:0B:A0:68:48:3A:CB:C9:6A:31:E2:8B:CD:A5:4B:BE:AF:E3:48:2D:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C6BoSDrLyWox4ovNpUu-r-NILRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c6570e-f22b-488b-a3fe-fdcb93b491e5/1/C6BoSDrLyWox4ovNpUu-r-NILRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c6570e-f22b-488b-a3fe-fdcb93b491e5/1/C6BoSDrLyWox4ovNpUu-r-NILRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
db:90:5f:d3:a7:59:a8:7a:b1:f6:eb:02:71:ea:23:8c:66:c8:
19:42:80:c2:7d:51:07:5a:a5:e0:34:11:e3:c1:61:31:12:2a:
26:f3:e3:5e:bb:45:c9:f2:08:03:24:75:ab:4f:6c:db:15:cc:
40:fb:a0:01:12:e1:7d:e2:9d:9a:d3:f4:9f:d6:c4:78:8c:be:
de:1b:d3:23:cd:de:f2:e9:6b:72:03:9e:90:9f:76:c6:9b:c1:
8b:a6:cf:a7:5e:20:14:4d:8d:c7:ef:0a:15:5d:5f:2b:ce:02:
0e:fe:c0:fe:66:1b:bd:e2:61:c3:6d:d3:80:03:7b:a7:70:d1:
6d:f4:82:82:59:83:4a:cb:0a:e4:54:af:fa:80:68:ea:90:1a:
1e:ee:ba:c9:dc:b0:74:c7:c7:86:2e:51:c6:4f:77:46:26:5f:
72:ff:e6:49:9a:09:ff:c0:1c:a4:93:02:2b:27:02:2e:90:33:
7f:05:00:9f:61:66:91:ee:d8:4c:49:7d:c4:4f:b2:43:24:95:
7a:9e:e8:ae:8a:bd:a4:58:9b:b5:ec:ed:cc:26:e0:b6:13:2d:
a5:7f:02:7d:c1:99:1f:16:00:7f:64:08:e1:cf:57:63:bb:0e:
08:e6:f2:69:fb:1d:f9:b8:97:14:41:b0:21:75:57:65:51:fe:
01:e3:c4:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:02 2025 by rpki-client