Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/9639b2-a9da-4373-b651-8637abf731f3/1/6JZQV_SqCZsKkZ8_C9SmSI4ww0g.mft
File: 6JZQV_SqCZsKkZ8_C9SmSI4ww0g.mft (raw, json)
Hash identifier: T8HcHmcBPqToEffWlIzn5b+bLBBnCw8huLukP7TkKK8=
Subject key identifier: A6:60:06:D5:3D:67:F9:3E:1F:CA:7F:E0:A5:35:A1:5A:7A:22:A3:91
Authority key identifier: E8:96:50:57:F4:AA:09:9B:0A:91:9F:3F:0B:D4:A6:48:8E:30:C3:48
Certificate issuer: /CN=e8965057f4aa099b0a919f3f0bd4a6488e30c348
Certificate serial: 019A7337FEDDE3D39EAA27F8A3D293E6E288
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6JZQV_SqCZsKkZ8_C9SmSI4ww0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/9639b2-a9da-4373-b651-8637abf731f3/1/6JZQV_SqCZsKkZ8_C9SmSI4ww0g.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 14:00:40 +0000
Manifest this update: Tue 11 Nov 2025 14:00:40 +0000
Manifest next update: Wed 12 Nov 2025 14:00:40 +0000
Files and hashes: 1: 6JZQV_SqCZsKkZ8_C9SmSI4ww0g.crl (hash: PDHTfHsum/UF+2hwQhpoXOIDX4M4XHc0jH/m1A0QXu8=)
2: VgS-u0ELxQR2AwhETKCUa6iULQU.roa (hash: 7YXeyW9OYhf7wVeeaMa0yi4RPICzvGAFTAe8JBcfnZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/9639b2-a9da-4373-b651-8637abf731f3/1/6JZQV_SqCZsKkZ8_C9SmSI4ww0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/9639b2-a9da-4373-b651-8637abf731f3/1/6JZQV_SqCZsKkZ8_C9SmSI4ww0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/6JZQV_SqCZsKkZ8_C9SmSI4ww0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:37:fe:dd:e3:d3:9e:aa:27:f8:a3:d2:93:e6:e2:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8965057f4aa099b0a919f3f0bd4a6488e30c348
Validity
Not Before: Nov 11 14:00:40 2025 GMT
Not After : Nov 12 14:00:40 2025 GMT
Subject: CN=a66006d53d67f93e1fca7fe0a535a15a7a22a391
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:7b:c3:46:f8:52:50:25:88:f1:53:45:f8:ff:
34:f7:30:fb:c4:ef:8d:4d:7e:bc:f9:f1:12:c0:98:
0c:6f:a2:a2:50:0f:cd:51:44:8c:4b:01:59:7e:e3:
af:ae:95:77:5e:ce:ac:5d:a1:07:30:0c:43:1e:70:
1f:71:2f:3d:51:d6:0b:1a:0c:4f:30:05:9b:a3:5a:
76:36:d7:a5:79:67:1c:1d:9c:ee:8b:9a:c6:da:ca:
6f:1d:42:45:29:5b:85:20:cf:3c:4d:30:8e:9d:a3:
19:58:5b:fb:63:ac:19:af:23:17:6f:33:4f:1f:68:
cd:5b:da:fb:d6:74:66:d1:58:06:eb:56:af:97:02:
44:b0:8e:3e:e0:90:d7:d2:a2:b1:8b:4c:49:98:d8:
d9:d5:53:84:63:cf:c7:c0:a1:83:c9:e4:fb:cb:b8:
b9:0a:93:97:aa:5d:a0:51:bd:1c:bb:0e:ed:76:c7:
eb:b0:82:01:cc:0c:d2:33:ac:72:8e:7e:e5:82:b2:
6c:3d:3a:02:99:c2:75:33:dd:d6:41:38:2a:9c:07:
cc:3c:21:de:5e:18:4c:32:e2:7f:3d:d6:d2:d0:ad:
3b:16:cb:c7:87:73:b1:87:7a:5b:52:50:6c:ea:d6:
41:13:e4:57:e0:4c:4a:1e:0c:06:db:60:1e:fa:f3:
55:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:60:06:D5:3D:67:F9:3E:1F:CA:7F:E0:A5:35:A1:5A:7A:22:A3:91
X509v3 Authority Key Identifier:
keyid:E8:96:50:57:F4:AA:09:9B:0A:91:9F:3F:0B:D4:A6:48:8E:30:C3:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6JZQV_SqCZsKkZ8_C9SmSI4ww0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/9639b2-a9da-4373-b651-8637abf731f3/1/6JZQV_SqCZsKkZ8_C9SmSI4ww0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/9639b2-a9da-4373-b651-8637abf731f3/1/6JZQV_SqCZsKkZ8_C9SmSI4ww0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:97:6f:ec:3a:ea:0f:a2:c9:27:f2:3c:d4:5d:9f:14:04:46:
c4:96:bd:8e:14:a5:92:5a:f7:f9:18:8d:5c:20:95:ae:31:61:
0c:1a:bf:91:53:42:98:29:f0:d5:fd:23:6c:31:5d:c0:0e:05:
d2:ff:6c:9d:dd:5d:43:e8:88:3a:9e:29:03:d3:e3:5f:92:b1:
2b:af:17:f4:eb:df:bd:16:16:d3:94:58:fb:9a:7f:3a:6a:f3:
6e:e5:56:20:e3:2f:5a:47:c0:c9:a2:66:7c:0a:19:44:5a:2c:
d2:14:62:fe:03:31:24:a6:8f:e0:96:62:45:d5:6d:f7:f4:2d:
73:72:29:5b:1f:92:f9:9e:25:cf:34:70:93:4d:17:53:72:9b:
b2:9e:d0:49:73:06:8a:88:4b:08:a5:f4:dc:c8:c7:a7:b3:e7:
61:87:53:ce:9d:58:ce:03:6b:e2:06:06:ab:b7:cd:c3:e6:f4:
3c:52:6f:34:2e:91:c2:26:9d:65:c2:ef:50:11:fd:e5:8c:59:
29:25:9b:1f:56:89:9d:42:28:c1:c5:0e:8b:96:8a:1e:36:dc:
65:9f:46:9a:ff:d3:8e:88:ea:e2:df:4e:02:ee:fe:82:4a:4a:
6e:e0:22:f2:78:00:61:0d:af:d8:51:06:61:fb:c3:56:bb:cc:
9f:c9:a9:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:54:27 2025 by rpki-client