Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/82d824-4e02-46d4-854a-bd0512ce4905/1/_6QdNBPdrMkf4PRCaoKGgc8w4Pw.mft
File: _6QdNBPdrMkf4PRCaoKGgc8w4Pw.mft (raw, json)
Hash identifier: 3Vhy7VpZPvJrVNBVupng1CMXowvfF/rJU8mffYTv1Zo=
Subject key identifier: 31:E9:E8:03:B9:86:F3:97:6A:2C:9E:8C:30:92:9E:98:D3:2E:EE:19
Authority key identifier: FF:A4:1D:34:13:DD:AC:C9:1F:E0:F4:42:6A:82:86:81:CF:30:E0:FC
Certificate issuer: /CN=ffa41d3413ddacc91fe0f4426a828681cf30e0fc
Certificate serial: 019A7225B52E211DF23671BCBBBBE09928DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_6QdNBPdrMkf4PRCaoKGgc8w4Pw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/82d824-4e02-46d4-854a-bd0512ce4905/1/_6QdNBPdrMkf4PRCaoKGgc8w4Pw.mft
Manifest number: 0E04
Signing time: Tue 11 Nov 2025 09:01:05 +0000
Manifest this update: Tue 11 Nov 2025 09:01:05 +0000
Manifest next update: Wed 12 Nov 2025 09:01:05 +0000
Files and hashes: 1: 8eIa-4UA2fnyQQyLs8y9bQIaWAM.roa (hash: SYGKUkvXI/obgdGVYKiFu2OylosInlCBmN7hXgRUyO8=)
2: _6QdNBPdrMkf4PRCaoKGgc8w4Pw.crl (hash: uKcTWH7iB78lXv4geyctuZA1ZJK8ue05Hd5twWdfWSc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/82d824-4e02-46d4-854a-bd0512ce4905/1/_6QdNBPdrMkf4PRCaoKGgc8w4Pw.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/82d824-4e02-46d4-854a-bd0512ce4905/1/_6QdNBPdrMkf4PRCaoKGgc8w4Pw.mft
rsync://rpki.ripe.net/repository/DEFAULT/_6QdNBPdrMkf4PRCaoKGgc8w4Pw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:b5:2e:21:1d:f2:36:71:bc:bb:bb:e0:99:28:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffa41d3413ddacc91fe0f4426a828681cf30e0fc
Validity
Not Before: Nov 11 09:01:05 2025 GMT
Not After : Nov 12 09:01:05 2025 GMT
Subject: CN=31e9e803b986f3976a2c9e8c30929e98d32eee19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:02:d0:05:08:cc:c4:a5:d1:eb:7a:89:27:a5:
e4:ac:53:f6:02:39:bb:f0:f7:8d:b0:9e:6d:70:84:
05:32:d6:80:29:54:0e:a8:33:9b:ac:aa:1e:5c:27:
9a:f6:c6:d2:0e:b0:37:aa:95:63:19:4d:f2:7c:bd:
b9:26:3d:84:d3:a1:f7:67:2a:04:1b:e0:cd:3f:8c:
88:02:f3:85:07:7b:32:df:98:e1:35:cf:c9:f0:2e:
9a:de:17:82:a7:a0:e1:e9:82:dc:dd:d0:c4:df:6f:
4c:4d:0c:d0:49:60:d6:d4:62:ce:17:6d:aa:80:34:
0b:16:04:ae:83:fc:7e:9d:6f:65:90:b8:9e:f3:58:
40:72:f3:ef:87:60:bb:25:39:31:5f:5f:78:38:7f:
1e:b2:6d:ca:01:3a:00:43:10:18:e4:65:54:c4:9d:
de:1a:81:a2:34:5b:7c:49:b9:9d:8e:43:e5:65:95:
2f:44:d6:eb:6d:fc:58:ec:bb:4c:35:2d:40:7c:16:
88:4f:00:d9:4a:3f:62:70:56:fc:ae:5d:e0:af:12:
74:ba:74:8f:ae:52:87:b7:a2:cf:7b:3e:30:9f:8f:
ca:05:94:0a:99:49:e1:1c:6c:02:83:34:97:07:64:
5a:ff:3a:7c:65:5b:0f:cb:32:2e:a5:8b:48:d3:05:
3e:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:E9:E8:03:B9:86:F3:97:6A:2C:9E:8C:30:92:9E:98:D3:2E:EE:19
X509v3 Authority Key Identifier:
keyid:FF:A4:1D:34:13:DD:AC:C9:1F:E0:F4:42:6A:82:86:81:CF:30:E0:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_6QdNBPdrMkf4PRCaoKGgc8w4Pw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/82d824-4e02-46d4-854a-bd0512ce4905/1/_6QdNBPdrMkf4PRCaoKGgc8w4Pw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/82d824-4e02-46d4-854a-bd0512ce4905/1/_6QdNBPdrMkf4PRCaoKGgc8w4Pw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:0f:33:7d:74:e1:9c:5d:0e:1e:99:a8:5a:32:18:58:b3:26:
8f:21:0e:74:e3:42:1e:a3:f0:00:8d:22:6d:db:9e:d9:97:22:
3d:20:fe:73:21:cd:94:83:28:16:fe:e9:bc:77:c3:86:fa:72:
cf:6c:c5:e4:9e:f4:91:a3:13:93:c9:0b:73:a6:f3:93:2c:02:
10:8e:69:e4:93:7b:ed:73:30:07:87:e0:67:95:e8:70:e3:28:
07:c3:38:29:75:56:b8:51:50:85:79:ff:8c:6c:4b:5d:4c:85:
94:e1:0e:94:a4:b6:ff:08:19:77:96:c4:4f:46:48:7a:74:55:
64:69:4c:68:db:ce:b6:3e:39:ba:fd:d2:ae:79:6e:93:0f:a7:
ce:ce:99:f3:bf:32:a9:cc:81:d6:80:75:c6:40:a8:37:88:72:
42:d3:1a:3c:9a:08:bc:30:c3:45:11:78:2e:13:c3:bd:12:5e:
8b:62:49:17:d3:8a:c0:96:5b:59:23:2c:41:e6:bf:5f:4e:55:
0e:69:98:6a:db:55:8c:ec:d9:ec:52:22:b6:70:5b:c3:e9:e4:
90:bd:b4:3d:1f:8f:3f:0e:dd:02:d5:22:e8:a2:71:4d:3f:44:
93:65:81:d5:4e:3c:01:85:01:ab:19:e2:58:5e:2e:2e:75:01:
f4:ec:84:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:36:59 2025 by rpki-client