
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/35f43b-087c-490b-9c03-1857e4268fbf/1/6LZfHV6XDmCC0s_W-Z75yBdKFEA.mft
File: 6LZfHV6XDmCC0s_W-Z75yBdKFEA.mft (raw, json)
Hash identifier: 6Lu8t0bCfzIzZCI+yLnJDgzZngKs6CwMHanmgfb9hQU=
Subject key identifier: F6:AD:6F:60:FE:FF:2A:64:C1:D4:5E:45:0F:97:0C:70:FB:4F:30:F9
Authority key identifier: E8:B6:5F:1D:5E:97:0E:60:82:D2:CF:D6:F9:9E:F9:C8:17:4A:14:40
Certificate issuer: /CN=e8b65f1d5e970e6082d2cfd6f99ef9c8174a1440
Certificate serial: 019A725C4BC6DCCA34EFE5615BF5C0B3316D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6LZfHV6XDmCC0s_W-Z75yBdKFEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/35f43b-087c-490b-9c03-1857e4268fbf/1/6LZfHV6XDmCC0s_W-Z75yBdKFEA.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 10:00:42 +0000
Manifest this update: Tue 11 Nov 2025 10:00:42 +0000
Manifest next update: Wed 12 Nov 2025 10:00:42 +0000
Files and hashes: 1: 1-Gp-Aj6rXUl3rCcfTEV_zKX81GM.roa (hash: jcNgC8sUFB2sRMcieBCYPhWYxbrZslrozKmwIIc2sSY=)
2: 6LZfHV6XDmCC0s_W-Z75yBdKFEA.crl (hash: hfbNJUVtxY0KkdQ1H9zp6NwUo2KnVwg+s/5X/CWqmnk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/35f43b-087c-490b-9c03-1857e4268fbf/1/6LZfHV6XDmCC0s_W-Z75yBdKFEA.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/35f43b-087c-490b-9c03-1857e4268fbf/1/6LZfHV6XDmCC0s_W-Z75yBdKFEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/6LZfHV6XDmCC0s_W-Z75yBdKFEA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:4b:c6:dc:ca:34:ef:e5:61:5b:f5:c0:b3:31:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8b65f1d5e970e6082d2cfd6f99ef9c8174a1440
Validity
Not Before: Nov 11 10:00:42 2025 GMT
Not After : Nov 12 10:00:42 2025 GMT
Subject: CN=f6ad6f60feff2a64c1d45e450f970c70fb4f30f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:77:d0:7f:dc:a7:a2:dc:10:2c:6b:17:53:02:
9e:7c:54:ba:f2:94:a1:2c:09:82:6e:c6:9e:8a:34:
2d:d4:41:06:ba:57:7a:3e:b9:3f:c1:32:ff:23:8f:
fa:c7:29:15:0c:0a:fa:d1:9f:1e:c3:3a:e7:b7:88:
40:9e:8c:7e:cd:66:99:0d:24:34:a9:54:cd:15:7b:
a6:cc:5c:a5:39:fc:3f:0e:80:a5:4d:c4:7e:78:9b:
93:fc:76:5d:c6:c9:bc:3d:0e:ff:a3:22:a1:b2:cd:
47:c4:76:35:b3:3c:6f:28:e7:21:8b:12:dc:80:20:
da:d4:1a:ca:82:e4:8d:fe:14:45:15:45:37:10:52:
0e:48:36:bf:7e:3b:01:87:d8:e9:7f:0a:0a:ab:df:
f6:44:2f:f0:70:77:d7:40:08:7f:60:31:7f:04:f5:
1f:88:82:a4:17:69:bf:f8:4a:8f:85:92:44:9f:06:
83:8e:a5:28:20:6f:b6:a3:bf:8b:aa:64:a7:f0:52:
2b:02:f5:61:4a:4b:95:65:6c:61:64:5e:40:1b:d0:
28:dc:d2:eb:7a:a7:7f:b5:1a:3c:ae:ac:80:96:48:
7e:27:2a:93:df:85:fb:64:ef:c6:66:ad:13:eb:7b:
bc:c5:c4:65:03:63:a4:10:1a:43:37:a0:02:f5:dd:
b0:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:AD:6F:60:FE:FF:2A:64:C1:D4:5E:45:0F:97:0C:70:FB:4F:30:F9
X509v3 Authority Key Identifier:
keyid:E8:B6:5F:1D:5E:97:0E:60:82:D2:CF:D6:F9:9E:F9:C8:17:4A:14:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6LZfHV6XDmCC0s_W-Z75yBdKFEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/35f43b-087c-490b-9c03-1857e4268fbf/1/6LZfHV6XDmCC0s_W-Z75yBdKFEA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/35f43b-087c-490b-9c03-1857e4268fbf/1/6LZfHV6XDmCC0s_W-Z75yBdKFEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:e7:48:d8:53:b1:db:de:aa:fd:7c:aa:56:6e:e0:d6:6f:0a:
86:7a:57:2c:71:b7:36:51:e9:0c:03:59:fd:1d:a8:59:3f:89:
4f:8d:a1:4b:8c:f9:75:c8:e5:66:ce:f9:5a:ee:9d:d3:30:f1:
e2:5b:9b:b2:94:d5:bb:3c:55:a2:5f:bf:46:7b:de:98:c7:03:
d0:25:5f:6e:5a:ef:cc:49:12:fd:81:d6:9a:35:6e:70:8a:1d:
57:7c:70:93:96:0e:bf:3e:31:42:15:a0:73:fd:b9:4f:d4:90:
d5:72:95:2d:f0:3f:6d:13:72:20:a8:01:62:44:ca:71:b5:4f:
8a:19:57:c6:37:ab:d0:6f:e4:4b:61:84:04:01:51:b3:8f:b6:
a7:69:43:c8:91:f5:6e:60:fa:13:8d:6f:93:b0:a6:db:2a:cc:
cd:0f:3d:c6:d5:0c:c8:c5:e3:3b:1c:6b:3e:21:05:af:2f:c5:
be:55:1c:c0:b5:1e:79:3a:52:ff:8a:f4:c2:76:f9:1a:d4:52:
b8:a8:c6:b2:a6:81:6f:7a:ad:a7:5c:bb:76:81:15:a0:b7:00:
c5:17:55:5d:05:fa:31:71:55:d5:4e:e6:81:77:22:08:bc:f6:
27:51:91:ae:bd:98:30:79:bc:0e:da:bd:73:cf:8f:3b:e6:a8:
f4:dc:15:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:47:01 2025 by rpki-client