Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/067837-baa0-4085-aa23-8023d945497a/1/v6yXEHYmO92w7s9b6mV0pAW5hd4.mft
File: v6yXEHYmO92w7s9b6mV0pAW5hd4.mft (raw, json)
Hash identifier: 0Ca6nogkqUsEs7OqEm4qp1oIpnv/nSPC5zkJJO6L914=
Subject key identifier: B6:D9:4A:79:B6:15:3D:5D:B4:BE:DF:24:A7:0D:73:36:54:68:D2:78
Authority key identifier: BF:AC:97:10:76:26:3B:DD:B0:EE:CF:5B:EA:65:74:A4:05:B9:85:DE
Certificate issuer: /CN=bfac971076263bddb0eecf5bea6574a405b985de
Certificate serial: 019A725CEC1B5A127F69DAC4342F09C17AC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v6yXEHYmO92w7s9b6mV0pAW5hd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/067837-baa0-4085-aa23-8023d945497a/1/v6yXEHYmO92w7s9b6mV0pAW5hd4.mft
Manifest number: 0665
Signing time: Tue 11 Nov 2025 10:01:23 +0000
Manifest this update: Tue 11 Nov 2025 10:01:23 +0000
Manifest next update: Wed 12 Nov 2025 10:01:23 +0000
Files and hashes: 1: _7L0Acw4ztEdkPRBoAymbB9GhBg.roa (hash: 8jN78r9jqAv4DYGKhFwbbm0pahreTH8x5yN86nYU05g=)
2: v6yXEHYmO92w7s9b6mV0pAW5hd4.crl (hash: a0E4c98nbpoY/e8ZyogRI8GxCtImoBB6UzdCLwth3/4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/067837-baa0-4085-aa23-8023d945497a/1/v6yXEHYmO92w7s9b6mV0pAW5hd4.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/067837-baa0-4085-aa23-8023d945497a/1/v6yXEHYmO92w7s9b6mV0pAW5hd4.mft
rsync://rpki.ripe.net/repository/DEFAULT/v6yXEHYmO92w7s9b6mV0pAW5hd4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:ec:1b:5a:12:7f:69:da:c4:34:2f:09:c1:7a:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfac971076263bddb0eecf5bea6574a405b985de
Validity
Not Before: Nov 11 10:01:23 2025 GMT
Not After : Nov 12 10:01:23 2025 GMT
Subject: CN=b6d94a79b6153d5db4bedf24a70d73365468d278
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:90:5e:da:2e:96:b7:2e:f7:4b:05:70:78:de:
06:2b:63:b6:c4:22:b5:ee:a5:04:5e:ab:de:e9:5c:
ce:c3:d1:a9:e5:a3:24:b9:25:fa:bd:6b:32:28:7b:
a1:4e:f5:48:d8:43:6d:cd:5d:85:fd:a9:09:77:46:
c4:2f:5e:db:54:40:27:96:2e:7c:16:f0:58:1d:5d:
1d:3f:1d:41:06:10:f1:d1:f2:f3:2e:12:8f:5e:08:
83:84:71:4c:6b:00:28:73:f2:7c:32:21:dd:e5:09:
1c:0c:76:ea:16:cb:3f:e8:2f:c8:71:ba:33:52:db:
27:6c:d0:da:1e:81:3f:8b:c6:42:10:fe:9c:ec:81:
76:c0:09:c5:af:91:75:27:3e:ea:ee:05:78:4c:46:
11:b8:f4:0a:a0:8f:85:81:df:b7:b3:be:28:b5:b3:
6e:ab:6a:30:0d:e5:ed:cd:9e:ad:0e:3f:cb:46:09:
e7:25:72:80:ff:54:97:c1:77:a4:1c:03:ff:a3:f8:
fe:6a:0b:35:77:b5:7c:f8:26:ac:54:fd:06:bb:54:
3c:90:1f:79:eb:6f:13:41:ac:07:18:54:a6:47:f7:
1d:ef:04:98:19:97:4a:b7:03:50:e5:78:89:dd:08:
4f:25:b9:37:3a:fe:45:d8:8b:db:fe:fc:c5:3c:c8:
12:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:D9:4A:79:B6:15:3D:5D:B4:BE:DF:24:A7:0D:73:36:54:68:D2:78
X509v3 Authority Key Identifier:
keyid:BF:AC:97:10:76:26:3B:DD:B0:EE:CF:5B:EA:65:74:A4:05:B9:85:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v6yXEHYmO92w7s9b6mV0pAW5hd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/067837-baa0-4085-aa23-8023d945497a/1/v6yXEHYmO92w7s9b6mV0pAW5hd4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/067837-baa0-4085-aa23-8023d945497a/1/v6yXEHYmO92w7s9b6mV0pAW5hd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:68:4b:d5:7a:2c:af:f5:19:ca:6f:2b:f8:05:6c:d8:86:d5:
3a:56:58:21:5b:f7:7c:d9:f3:e4:c4:1c:cb:98:0b:72:17:f4:
77:87:36:76:05:6d:49:6f:a5:bc:96:00:d3:75:b9:d8:96:6a:
fb:2d:ad:3a:14:8f:63:00:c3:52:da:cd:9b:7d:dc:51:27:4a:
0a:11:74:34:53:2c:63:e1:e5:93:cc:e9:ba:61:bf:50:df:d8:
dd:ab:0f:7a:9b:de:24:2a:7f:3e:50:b7:14:b6:78:3c:82:39:
d3:07:95:af:a5:84:e2:99:ef:83:88:ec:f4:d2:34:b8:e1:e2:
fd:f4:d8:93:28:c5:49:b1:5f:92:34:10:76:98:2a:be:e4:0c:
5a:2c:24:55:e7:cd:48:d8:32:ad:fc:3c:1b:a9:44:3d:68:51:
89:5d:3e:ed:6b:ee:45:de:7a:1c:33:51:2d:c8:6c:a5:44:48:
cc:36:ba:c4:94:f4:83:5f:97:06:95:9b:13:7a:df:9b:4a:b8:
7f:fd:ec:5b:b0:2d:18:63:35:a1:0e:e4:db:a1:f2:69:a7:18:
f1:62:29:f5:9d:b5:d9:37:3f:1c:59:73:aa:97:e3:a8:c0:01:
c5:6c:11:37:f3:6f:34:ce:a9:73:2c:93:ae:52:5b:8f:5f:f1:
70:95:06:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:16:44 2025 by rpki-client