Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/59afab-e0a8-42d0-873b-6005c0111f1e/1/R6guVXeaHqTvmWf4IdXMBbe9mek.mft
File: R6guVXeaHqTvmWf4IdXMBbe9mek.mft (raw, json)
Hash identifier: Q9GB/y65Rm3NV207C2DAkcL9k3BJBnjAtjs4r1EpZD0=
Subject key identifier: 0A:D5:7F:2C:5E:69:62:D6:8A:F9:43:1D:21:DE:C4:2C:C3:94:D3:15
Authority key identifier: 47:A8:2E:55:77:9A:1E:A4:EF:99:67:F8:21:D5:CC:05:B7:BD:99:E9
Certificate issuer: /CN=47a82e55779a1ea4ef9967f821d5cc05b7bd99e9
Certificate serial: 019A714A115801415DB232E430A402FBADCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R6guVXeaHqTvmWf4IdXMBbe9mek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/59afab-e0a8-42d0-873b-6005c0111f1e/1/R6guVXeaHqTvmWf4IdXMBbe9mek.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 05:01:10 +0000
Manifest this update: Tue 11 Nov 2025 05:01:10 +0000
Manifest next update: Wed 12 Nov 2025 05:01:10 +0000
Files and hashes: 1: CFUwFBzQtfgbafFzZOyLhQjWkGM.roa (hash: 97CGeBu3yLbE5oYRJj25Ylb6GhnLEinlvUvhqt045H4=)
2: R6guVXeaHqTvmWf4IdXMBbe9mek.crl (hash: 82RA9aYETqulLtq6bQX3j2jp20UpjNnYvl49Gj1MwaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/59afab-e0a8-42d0-873b-6005c0111f1e/1/R6guVXeaHqTvmWf4IdXMBbe9mek.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/59afab-e0a8-42d0-873b-6005c0111f1e/1/R6guVXeaHqTvmWf4IdXMBbe9mek.mft
rsync://rpki.ripe.net/repository/DEFAULT/R6guVXeaHqTvmWf4IdXMBbe9mek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:4a:11:58:01:41:5d:b2:32:e4:30:a4:02:fb:ad:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47a82e55779a1ea4ef9967f821d5cc05b7bd99e9
Validity
Not Before: Nov 11 05:01:10 2025 GMT
Not After : Nov 12 05:01:10 2025 GMT
Subject: CN=0ad57f2c5e6962d68af9431d21dec42cc394d315
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6e:10:29:66:00:1c:8c:ae:f9:5c:e5:e1:f0:
0e:5e:22:c9:34:11:5d:db:ab:a1:df:76:fd:61:16:
07:68:e4:92:37:f7:bd:29:00:de:ad:12:3e:13:3c:
d2:90:a3:69:38:ca:6c:22:79:33:0a:fa:08:a8:c4:
d9:10:4b:03:05:5c:ff:39:27:32:70:b4:15:db:44:
4d:7b:a6:a2:94:01:31:68:cc:e7:b0:87:a0:3a:7f:
7f:83:56:0a:92:c6:0c:aa:6b:e4:d0:82:fc:d7:98:
bd:61:f1:35:27:f5:1f:3b:e3:42:41:48:d8:61:a6:
1e:85:ca:be:dc:6c:7e:c5:51:39:3e:cf:45:fa:e1:
66:a4:55:20:66:07:55:b2:8a:25:91:47:12:46:a8:
f8:c1:d1:f8:ed:3c:35:75:b0:b1:a7:ce:eb:8d:92:
2e:55:7b:84:e8:f8:10:9a:78:6c:44:f4:a5:ba:70:
c1:91:5c:0c:97:76:ee:6b:a7:b0:c1:52:1d:08:a6:
6c:58:5b:76:25:83:2d:ec:d7:56:af:81:fb:a6:d9:
47:ef:ce:54:f7:f0:fa:94:5c:19:25:9c:ac:f8:3b:
fd:5a:4f:bb:d4:f0:10:35:32:60:d7:97:6a:f6:cc:
75:b6:40:50:08:2f:86:39:3c:61:42:9b:b7:1e:dc:
88:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:D5:7F:2C:5E:69:62:D6:8A:F9:43:1D:21:DE:C4:2C:C3:94:D3:15
X509v3 Authority Key Identifier:
keyid:47:A8:2E:55:77:9A:1E:A4:EF:99:67:F8:21:D5:CC:05:B7:BD:99:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R6guVXeaHqTvmWf4IdXMBbe9mek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/59afab-e0a8-42d0-873b-6005c0111f1e/1/R6guVXeaHqTvmWf4IdXMBbe9mek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/59afab-e0a8-42d0-873b-6005c0111f1e/1/R6guVXeaHqTvmWf4IdXMBbe9mek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:c8:96:6e:2f:e4:48:fa:8e:8c:e8:6d:71:29:28:66:f5:4a:
3c:39:fd:93:64:0b:9f:fe:a5:2c:da:01:5e:4c:a1:e4:14:45:
dc:44:23:e7:28:ef:8b:f8:b9:de:32:24:2d:4f:13:c5:e7:49:
58:d0:6d:a6:17:13:96:05:79:77:66:73:4f:48:ff:48:0d:71:
de:16:ca:09:c9:2a:d5:1b:1e:c7:a7:1e:b3:d8:73:f6:c5:d8:
88:a0:83:c0:47:9b:44:77:7e:91:80:60:c8:4d:28:60:e1:17:
c1:19:bd:3b:a0:df:be:0f:7c:ec:74:86:7d:4d:a8:ea:49:59:
ce:98:b4:fe:70:4b:b7:8b:80:b3:4d:77:0a:66:9a:fb:8b:7c:
9e:9b:39:83:86:a8:a3:90:38:5e:c8:a6:44:96:b5:90:1f:e5:
3a:29:9e:ee:e6:b8:b2:d6:f4:29:cc:c0:5e:25:c8:67:18:08:
33:63:2f:84:aa:ee:6a:72:46:cf:74:bc:99:44:fc:5b:e0:52:
6c:01:1c:1a:2e:3c:41:d7:4f:8b:79:92:13:8d:22:e2:ca:57:
6c:6c:5b:aa:74:aa:37:b3:93:53:e7:c3:b5:99:f0:3a:5a:4e:
d9:7d:f3:ca:85:ec:62:bc:ef:91:37:59:cc:46:f1:bc:0e:29:
9d:99:72:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:00:59 2025 by rpki-client