Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/4505ee-5fe0-448c-b621-8924850d95d6/1/6MNGnR5zWuTWCDe3cJwz_0J8joQ.mft
File: 6MNGnR5zWuTWCDe3cJwz_0J8joQ.mft (raw, json)
Hash identifier: OELyrL4FhVuxUc6ELzBnz8188Rz32mRRPeyY/FDDTbs=
Subject key identifier: 18:0F:29:FB:E4:77:C2:E3:E7:87:B0:69:C6:11:25:E3:68:8E:47:95
Authority key identifier: E8:C3:46:9D:1E:73:5A:E4:D6:08:37:B7:70:9C:33:FF:42:7C:8E:84
Certificate issuer: /CN=e8c3469d1e735ae4d60837b7709c33ff427c8e84
Certificate serial: 019A71B8645886E76D0EA919FE787663DDA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6MNGnR5zWuTWCDe3cJwz_0J8joQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/4505ee-5fe0-448c-b621-8924850d95d6/1/6MNGnR5zWuTWCDe3cJwz_0J8joQ.mft
Manifest number: 0B5A
Signing time: Tue 11 Nov 2025 07:01:40 +0000
Manifest this update: Tue 11 Nov 2025 07:01:40 +0000
Manifest next update: Wed 12 Nov 2025 07:01:40 +0000
Files and hashes: 1: 6MNGnR5zWuTWCDe3cJwz_0J8joQ.crl (hash: SDJLgz8BYR/S0x/R/rcjlGqyiVXuEnDlB13gHveFLKU=)
2: ClZdr1wg9-gyvQ2UI0rc36Tkqn8.roa (hash: kpxqL73T43lKVSu7/H7qyZ0Ta1r2r6Ekr0F6N2fIhsk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/4505ee-5fe0-448c-b621-8924850d95d6/1/6MNGnR5zWuTWCDe3cJwz_0J8joQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/4505ee-5fe0-448c-b621-8924850d95d6/1/6MNGnR5zWuTWCDe3cJwz_0J8joQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/6MNGnR5zWuTWCDe3cJwz_0J8joQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:64:58:86:e7:6d:0e:a9:19:fe:78:76:63:dd:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8c3469d1e735ae4d60837b7709c33ff427c8e84
Validity
Not Before: Nov 11 07:01:40 2025 GMT
Not After : Nov 12 07:01:40 2025 GMT
Subject: CN=180f29fbe477c2e3e787b069c61125e3688e4795
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:54:eb:d0:d4:ad:4f:69:29:93:64:7d:4a:d0:
ef:26:22:4b:f6:2b:c9:86:2b:64:56:3e:b0:b1:38:
c1:0e:af:46:fa:6b:40:b8:0e:59:39:37:7c:d6:4f:
2b:b1:8a:68:67:91:e5:51:14:ff:e5:13:64:29:02:
d5:b8:7b:cf:b5:6a:c0:23:39:e8:07:ff:6c:a8:ab:
de:eb:90:4f:37:d8:6e:ad:ac:f0:5e:7a:72:dd:2f:
15:10:1d:cc:ee:8b:f3:89:1f:6e:4c:31:62:45:c3:
cc:bf:9e:46:63:12:6a:f2:12:a1:e0:cf:2f:b0:67:
d5:5f:86:bf:31:01:5b:38:9e:0f:d1:fd:26:aa:88:
b8:52:8c:b1:08:fb:d0:bf:23:63:9a:c7:6b:a9:21:
ce:86:8a:5e:70:26:44:0a:db:fc:92:5a:41:f4:79:
9b:2b:cc:6d:2c:4b:19:79:66:ac:06:bf:35:9f:60:
5d:09:ea:b4:15:51:b1:09:80:a8:bc:00:3a:e0:e5:
94:2d:b4:c5:78:14:b9:7a:d3:d5:bc:67:de:17:ee:
16:86:e8:e8:e0:eb:10:ee:8e:fc:ae:49:d5:1c:88:
45:6e:c8:e6:72:66:2d:25:9c:7e:3d:2e:87:96:e7:
bf:c9:5f:00:2f:b3:12:0f:b3:be:c9:b8:c5:33:fb:
63:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:0F:29:FB:E4:77:C2:E3:E7:87:B0:69:C6:11:25:E3:68:8E:47:95
X509v3 Authority Key Identifier:
keyid:E8:C3:46:9D:1E:73:5A:E4:D6:08:37:B7:70:9C:33:FF:42:7C:8E:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6MNGnR5zWuTWCDe3cJwz_0J8joQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/4505ee-5fe0-448c-b621-8924850d95d6/1/6MNGnR5zWuTWCDe3cJwz_0J8joQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/4505ee-5fe0-448c-b621-8924850d95d6/1/6MNGnR5zWuTWCDe3cJwz_0J8joQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:73:a8:7d:5f:5d:e6:77:a0:70:3c:59:c0:f6:b2:ad:be:c7:
3f:06:3b:1c:b0:59:ab:8f:47:0e:03:3f:67:0f:07:00:1f:6e:
79:c9:b7:cb:5f:88:8e:6a:e3:c5:1d:d7:1a:9a:e5:3a:b6:b6:
eb:51:02:25:66:6c:33:11:42:6d:58:f1:7d:37:2c:73:9c:0c:
d4:d8:29:54:c3:17:d0:80:a5:e3:db:ba:45:b4:cb:84:5a:85:
bf:2a:98:6d:51:a8:7b:6c:c2:c5:03:d9:92:23:bf:5a:47:64:
11:d3:8d:10:1c:38:30:21:60:33:0a:3f:d9:c8:3e:14:8e:48:
89:c0:f0:f6:d6:4b:d7:e1:99:f2:0a:95:c7:0b:74:ec:30:c9:
ec:ce:b3:6d:4b:c9:f3:8f:8a:55:03:a2:3e:15:31:23:8a:db:
f6:70:66:4d:21:fe:c5:0e:0c:28:41:72:2d:ad:af:4b:9e:fc:
e2:db:81:44:8c:76:81:0b:75:30:fa:de:b6:33:5c:65:d9:c9:
f3:99:04:71:54:ea:86:a5:a0:fb:bd:54:a4:f3:8c:08:b4:1d:
db:48:3e:1b:34:f5:0e:cb:26:50:fe:d8:4c:23:55:30:14:78:
64:9b:98:9a:28:3e:c0:d1:c7:c5:52:a1:57:12:77:5c:44:c4:
b1:61:fb:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:10:19 2025 by rpki-client