Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/a34b68-5dcf-4a81-bc08-d1c3f288799c/1/6RvExCxQPaC3-K8W9-5LVHH_DgE.mft
File: 6RvExCxQPaC3-K8W9-5LVHH_DgE.mft (raw, json)
Hash identifier: X1aW1djJAbRS46lmOf+HbTetTv41kzRMNGx1lqaopIs=
Subject key identifier: C8:B6:00:26:98:49:7C:10:08:1F:66:25:48:FA:F5:11:18:26:61:DE
Authority key identifier: E9:1B:C4:C4:2C:50:3D:A0:B7:F8:AF:16:F7:EE:4B:54:71:FF:0E:01
Certificate issuer: /CN=e91bc4c42c503da0b7f8af16f7ee4b5471ff0e01
Certificate serial: 019A733891738E942D9257E9333425984B76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6RvExCxQPaC3-K8W9-5LVHH_DgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/a34b68-5dcf-4a81-bc08-d1c3f288799c/1/6RvExCxQPaC3-K8W9-5LVHH_DgE.mft
Manifest number: 019E
Signing time: Tue 11 Nov 2025 14:01:18 +0000
Manifest this update: Tue 11 Nov 2025 14:01:18 +0000
Manifest next update: Wed 12 Nov 2025 14:01:18 +0000
Files and hashes: 1: 0eASUYw5buzWADKhJAPCD_thD4s.roa (hash: Uq52mQ0d5aOs+tiyr9sazFI/NXMlXJdBfmeH08G5ncI=)
2: 6RvExCxQPaC3-K8W9-5LVHH_DgE.crl (hash: xyEat+ywT0vNeWWiubmofbPVEqbz8rDIfv69MiOXmUk=)
3: mWHZWvt3p5MCg5LBUwow2A8Kk6M.roa (hash: rbpJ3fLj4o2mcv3jMC9K4zfYj/SC5m2zNP1X60zbbmc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/a34b68-5dcf-4a81-bc08-d1c3f288799c/1/6RvExCxQPaC3-K8W9-5LVHH_DgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/a34b68-5dcf-4a81-bc08-d1c3f288799c/1/6RvExCxQPaC3-K8W9-5LVHH_DgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/6RvExCxQPaC3-K8W9-5LVHH_DgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:38:91:73:8e:94:2d:92:57:e9:33:34:25:98:4b:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e91bc4c42c503da0b7f8af16f7ee4b5471ff0e01
Validity
Not Before: Nov 11 14:01:18 2025 GMT
Not After : Nov 12 14:01:18 2025 GMT
Subject: CN=c8b6002698497c10081f662548faf511182661de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ce:5b:a7:20:b2:99:6a:6e:29:dd:10:94:e0:
5a:ce:9f:7f:8d:57:c9:76:16:83:c4:cd:44:db:49:
96:f3:c1:ed:cd:c1:e6:28:a4:23:cd:3d:7a:0e:d1:
d4:06:f7:a3:8a:89:57:25:54:46:dd:c2:58:40:f9:
5b:a3:e2:3a:16:08:c8:9d:81:9c:a4:a5:b9:eb:d9:
ea:38:5d:0d:f9:83:58:31:59:1d:c7:3e:b3:16:12:
a0:13:7c:fc:f3:dd:01:92:24:1f:be:cb:0d:52:4a:
6e:b3:2c:5f:5c:86:a9:c5:a0:52:3f:9f:ee:81:2e:
ca:bc:4b:88:5c:41:64:fe:55:73:0a:92:39:e0:25:
2c:bb:c6:7d:7d:d9:a4:0d:e3:e1:aa:7e:f3:19:17:
0f:3f:d1:b7:21:65:7c:d8:40:2a:96:6e:26:4d:0e:
af:1c:d8:06:23:0b:0b:15:43:5f:67:a6:62:8c:9f:
9a:c3:e3:30:6f:06:39:13:3f:a0:d5:94:0e:36:17:
23:fe:39:b4:15:75:ef:1d:27:93:37:f0:6d:8e:08:
a1:6e:45:44:91:fd:77:fa:8e:e4:e6:50:4d:01:02:
d6:04:c8:7b:39:24:2d:ca:b2:a1:2c:b8:5a:4b:88:
0d:60:72:17:b7:69:78:24:ba:38:3e:8f:76:61:df:
8b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:B6:00:26:98:49:7C:10:08:1F:66:25:48:FA:F5:11:18:26:61:DE
X509v3 Authority Key Identifier:
keyid:E9:1B:C4:C4:2C:50:3D:A0:B7:F8:AF:16:F7:EE:4B:54:71:FF:0E:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6RvExCxQPaC3-K8W9-5LVHH_DgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a34b68-5dcf-4a81-bc08-d1c3f288799c/1/6RvExCxQPaC3-K8W9-5LVHH_DgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a34b68-5dcf-4a81-bc08-d1c3f288799c/1/6RvExCxQPaC3-K8W9-5LVHH_DgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:72:eb:29:fe:cb:ed:e8:fe:9c:c0:02:28:38:a9:09:fd:d9:
02:c6:61:55:62:c8:b2:8d:99:9d:8f:9b:d2:65:ac:9c:4d:15:
d6:7a:59:0b:1f:0a:41:20:bc:b6:03:7e:2d:12:1f:4b:a6:23:
a1:0c:02:64:fa:9d:ac:bd:06:db:28:10:08:58:ed:5d:31:fd:
d0:26:1e:fe:ab:62:dd:d5:57:74:76:e6:b3:d2:29:a9:00:fb:
bf:c6:73:aa:0c:d9:db:b3:74:5f:03:b9:e6:9f:48:71:7b:0f:
ab:2a:85:b4:63:c2:59:4b:df:93:1f:51:85:24:be:16:93:26:
eb:e9:c9:10:c2:2c:b6:88:2f:d9:f7:6a:d4:c3:8f:83:4c:2d:
ea:89:e9:f9:8f:3e:b4:10:d7:71:42:8d:75:0e:24:68:b1:e1:
71:db:70:57:35:8f:6f:e9:26:8b:78:a5:44:0e:06:e6:48:92:
0c:13:e7:6d:be:40:ee:87:75:42:b3:23:b5:b4:37:df:fb:c4:
31:75:14:31:a3:2c:96:1c:00:44:67:14:eb:d6:96:f4:29:8f:
6c:59:f0:40:69:9b:ca:f5:b4:53:63:dd:80:1b:6c:cd:e3:9f:
31:04:40:1f:2e:4f:30:4d:29:25:d3:7a:d6:37:b7:a0:a6:b9:
ed:8f:7b:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 18:36:43 2025 by rpki-client