Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/d62d22-82f2-4b20-bac4-601a725a00f5/1/6R8nKxPHUBQ8fsh-DIAq6tisbgc.mft
File: 6R8nKxPHUBQ8fsh-DIAq6tisbgc.mft (raw, json)
Hash identifier: kgqFpVtmJ6ZyUtpMdrZWz/1MQwGLHVjaAELGFpcQTFY=
Subject key identifier: EC:BF:11:F8:5B:66:E4:E7:C1:F1:1A:34:35:BF:32:2D:A9:84:F3:BA
Authority key identifier: E9:1F:27:2B:13:C7:50:14:3C:7E:C8:7E:0C:80:2A:EA:D8:AC:6E:07
Certificate issuer: /CN=e91f272b13c750143c7ec87e0c802aead8ac6e07
Certificate serial: 019A725C59538ED293A856175638C033C985
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6R8nKxPHUBQ8fsh-DIAq6tisbgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/d62d22-82f2-4b20-bac4-601a725a00f5/1/6R8nKxPHUBQ8fsh-DIAq6tisbgc.mft
Manifest number: 0C7D
Signing time: Tue 11 Nov 2025 10:00:45 +0000
Manifest this update: Tue 11 Nov 2025 10:00:45 +0000
Manifest next update: Wed 12 Nov 2025 10:00:45 +0000
Files and hashes: 1: 6R8nKxPHUBQ8fsh-DIAq6tisbgc.crl (hash: tT5Sg+0wB3UtWyEUu5iv341kd/aju179wyOA4HcIlIc=)
2: 9SpuyxwY5s_DY9H2HuXrbxGl_AE.roa (hash: 8TyA+krjmjGFWghMXqG0FTTJGiUwEj3FhItOTxb8jEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/d62d22-82f2-4b20-bac4-601a725a00f5/1/6R8nKxPHUBQ8fsh-DIAq6tisbgc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/d62d22-82f2-4b20-bac4-601a725a00f5/1/6R8nKxPHUBQ8fsh-DIAq6tisbgc.mft
rsync://rpki.ripe.net/repository/DEFAULT/6R8nKxPHUBQ8fsh-DIAq6tisbgc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:59:53:8e:d2:93:a8:56:17:56:38:c0:33:c9:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e91f272b13c750143c7ec87e0c802aead8ac6e07
Validity
Not Before: Nov 11 10:00:45 2025 GMT
Not After : Nov 12 10:00:45 2025 GMT
Subject: CN=ecbf11f85b66e4e7c1f11a3435bf322da984f3ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:7a:12:67:01:7d:4b:dc:bd:cb:f5:13:5d:34:
7e:d9:b5:64:cc:60:30:6d:28:94:77:a6:0b:7c:22:
6e:66:0a:89:df:86:42:1f:59:a7:90:a3:7a:79:41:
31:95:63:20:d9:b7:61:f0:99:ec:60:3b:8b:96:33:
66:a3:99:6a:9d:73:86:dd:d2:de:2f:9b:67:49:0d:
6b:4e:05:7b:a5:fb:98:4a:74:63:e5:6f:9a:33:a9:
48:21:a6:2f:40:e9:49:6b:48:3f:84:ec:cd:3e:7b:
24:c4:45:0b:52:ab:29:62:c7:13:13:47:69:69:c1:
7f:b5:5c:20:26:d4:54:f0:f9:a4:51:fb:20:e4:8a:
29:56:23:63:49:2b:f9:fc:8e:93:81:c5:1a:55:d3:
90:ae:79:9c:3d:30:71:6a:c7:5b:f7:c0:a3:bc:e1:
28:62:5f:7f:e5:aa:cf:26:d6:90:32:b1:0a:73:bd:
ad:79:07:4e:39:49:e0:1a:31:af:94:fc:4e:8f:3c:
42:8e:d8:1f:01:41:0b:18:68:e6:7d:0d:3d:bc:9b:
1c:3e:ee:68:bf:94:bf:ee:ea:e6:d2:6f:38:86:31:
ec:de:7c:bc:db:9a:80:13:3c:89:72:02:fb:5f:39:
e5:bc:4f:8c:8d:75:86:45:b2:a5:18:e7:7e:a8:d1:
3f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:BF:11:F8:5B:66:E4:E7:C1:F1:1A:34:35:BF:32:2D:A9:84:F3:BA
X509v3 Authority Key Identifier:
keyid:E9:1F:27:2B:13:C7:50:14:3C:7E:C8:7E:0C:80:2A:EA:D8:AC:6E:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6R8nKxPHUBQ8fsh-DIAq6tisbgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d62d22-82f2-4b20-bac4-601a725a00f5/1/6R8nKxPHUBQ8fsh-DIAq6tisbgc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d62d22-82f2-4b20-bac4-601a725a00f5/1/6R8nKxPHUBQ8fsh-DIAq6tisbgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:fb:a7:dd:bf:08:58:71:73:66:22:dd:53:e9:57:78:26:00:
23:93:64:87:84:d6:b8:34:58:22:79:c1:34:fd:f4:40:63:81:
df:34:5f:41:62:af:73:85:1c:43:a6:fb:03:e6:40:e5:ca:56:
2e:f6:02:02:4a:ec:b9:5d:f1:ef:29:e9:aa:cd:83:6f:7e:9b:
55:46:7e:67:83:bf:33:05:03:b2:f4:3c:bd:d4:92:4d:06:91:
7d:fb:04:13:50:1d:3e:a2:4d:fa:89:b8:6a:ca:af:7a:eb:2f:
40:30:4b:f5:86:60:94:78:03:f9:36:61:ee:2f:a3:7f:d7:ee:
5e:5f:78:da:f5:f4:fa:ce:71:00:51:1d:d0:ae:90:52:5d:ef:
0d:72:bf:d9:bf:97:2e:15:6a:bc:ea:83:c4:82:8f:6e:51:68:
76:e4:82:6a:79:6a:0e:30:4f:59:c2:8b:76:63:ec:b9:ed:d0:
f9:54:6f:e8:c9:95:61:08:e6:eb:3d:4d:74:ab:8e:6a:46:34:
3d:0c:83:eb:6e:b9:da:ed:9f:1d:f1:15:9b:7c:d0:59:66:d9:
36:fe:19:a6:74:ed:eb:a9:83:42:78:8b:7f:80:04:d0:20:de:
c8:2c:d3:e9:01:af:52:72:1e:f2:ba:ed:f9:0f:8b:92:b0:74:
b2:d9:a2:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:46:15 2025 by rpki-client