Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/787a96-fb0d-432a-8428-710ef47732b0/1/6QUkmbAAPqDurqJCYzjDTgv4_c8.mft
File: 6QUkmbAAPqDurqJCYzjDTgv4_c8.mft (raw, json)
Hash identifier: PH+2fcykH2Wuv5lYOh3LHRqj0YN5nJ+SCgJ0mXFZ39o=
Subject key identifier: 21:A3:B8:9D:D1:58:4D:DD:2E:AE:35:6C:D8:D2:6C:E7:31:F2:14:F6
Authority key identifier: E9:05:24:99:B0:00:3E:A0:EE:AE:A2:42:63:38:C3:4E:0B:F8:FD:CF
Certificate issuer: /CN=e9052499b0003ea0eeaea2426338c34e0bf8fdcf
Certificate serial: 019A7225C338BB8CFCDDB3DBAE0B3D661963
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6QUkmbAAPqDurqJCYzjDTgv4_c8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/787a96-fb0d-432a-8428-710ef47732b0/1/6QUkmbAAPqDurqJCYzjDTgv4_c8.mft
Manifest number: 0B0A
Signing time: Tue 11 Nov 2025 09:01:08 +0000
Manifest this update: Tue 11 Nov 2025 09:01:08 +0000
Manifest next update: Wed 12 Nov 2025 09:01:08 +0000
Files and hashes: 1: 53gBiMV-U5T_UTNr_H6y2uJN32c.roa (hash: loF7sBRMOPze87N7XZhvPgafCESVBxbr6i5uTn+lW9k=)
2: 6QUkmbAAPqDurqJCYzjDTgv4_c8.crl (hash: jCDSC1Tb3+NMdH5p/vdEqft18MPLPyAm/JGnyqDZyoo=)
3: lUuN68-IxOYTjJomy5kGo9veb00.roa (hash: IB0rOxo9mML04bmfaPFamlA+rNBljWr4GfuyYt2d/RU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/787a96-fb0d-432a-8428-710ef47732b0/1/6QUkmbAAPqDurqJCYzjDTgv4_c8.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/787a96-fb0d-432a-8428-710ef47732b0/1/6QUkmbAAPqDurqJCYzjDTgv4_c8.mft
rsync://rpki.ripe.net/repository/DEFAULT/6QUkmbAAPqDurqJCYzjDTgv4_c8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:c3:38:bb:8c:fc:dd:b3:db:ae:0b:3d:66:19:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9052499b0003ea0eeaea2426338c34e0bf8fdcf
Validity
Not Before: Nov 11 09:01:08 2025 GMT
Not After : Nov 12 09:01:08 2025 GMT
Subject: CN=21a3b89dd1584ddd2eae356cd8d26ce731f214f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:af:f1:2f:e6:35:1b:de:74:cb:d1:73:c2:71:
1b:9d:0f:41:3a:98:3f:10:0c:9b:da:44:fc:55:a6:
68:14:52:77:b5:db:1d:bc:8a:a7:2c:7e:5a:60:5a:
c8:c9:cd:11:39:2a:38:59:b6:2d:68:6b:05:9d:85:
83:87:b5:7f:c9:1c:fd:15:23:91:54:30:04:e4:df:
13:7d:4b:e0:ff:c1:8b:15:6e:44:dd:18:51:74:c9:
af:97:02:cb:68:76:70:d5:5a:df:ef:95:42:af:c1:
28:eb:cb:ae:61:da:05:c4:46:21:57:76:8b:ec:60:
d0:b2:d2:b1:a0:22:5a:22:8f:6b:48:6c:fe:13:41:
f3:91:25:2b:ba:65:16:b9:4d:3a:42:88:5b:4d:4c:
87:e3:26:fc:54:8e:1d:4a:8d:70:5e:80:3f:bb:3e:
ea:af:99:34:f5:45:d0:3c:f0:92:c6:b5:b2:ad:78:
03:47:bf:a6:a6:86:ad:ac:91:2e:0b:3e:fe:d3:6f:
64:76:ab:93:89:d5:6b:35:aa:37:14:cd:65:17:eb:
68:8e:15:d2:87:70:2d:e9:02:ca:38:1f:37:83:f9:
4b:00:c9:04:a4:4c:81:b5:63:0e:7f:e4:81:32:8c:
ca:db:4d:c8:2f:cc:f7:a2:dd:78:cb:b4:8a:19:8e:
f6:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:A3:B8:9D:D1:58:4D:DD:2E:AE:35:6C:D8:D2:6C:E7:31:F2:14:F6
X509v3 Authority Key Identifier:
keyid:E9:05:24:99:B0:00:3E:A0:EE:AE:A2:42:63:38:C3:4E:0B:F8:FD:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6QUkmbAAPqDurqJCYzjDTgv4_c8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/787a96-fb0d-432a-8428-710ef47732b0/1/6QUkmbAAPqDurqJCYzjDTgv4_c8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/787a96-fb0d-432a-8428-710ef47732b0/1/6QUkmbAAPqDurqJCYzjDTgv4_c8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:b5:40:70:f4:93:b1:06:72:b7:20:ff:be:45:b2:3b:58:ae:
92:45:62:c8:17:16:25:fa:bb:e3:db:15:09:5d:05:2b:46:01:
b0:30:dd:60:0c:1a:99:c2:69:f7:14:d4:ab:a6:d4:c9:7e:e7:
a7:24:04:33:1d:65:73:f3:11:f1:9b:ab:ac:3c:93:fe:94:49:
80:37:35:ce:26:be:7c:d9:31:b6:5c:a9:0a:10:2e:6d:a6:09:
ba:88:58:4b:c7:19:8a:64:97:a9:3d:a2:1d:d9:dc:1f:53:26:
9e:87:64:55:24:6f:c1:ef:2d:8f:d8:f9:d1:c5:59:aa:fc:7b:
9f:47:fe:d6:0f:59:d4:a8:5c:ed:d5:4a:34:a7:9c:ef:a1:86:
25:a3:d2:c0:ea:d7:ff:40:f8:26:60:69:58:7e:0b:75:83:17:
bb:12:07:61:16:f3:12:48:84:d6:91:26:cc:01:6a:8a:ad:5d:
a1:37:33:47:3b:68:df:2f:d5:40:79:06:2b:f4:59:47:65:7f:
9e:1e:9d:c7:5e:87:0b:f5:3f:91:e0:0f:56:61:f3:07:86:84:
8c:58:3b:8d:98:31:f1:fb:55:14:4f:29:e8:9a:51:91:cc:cc:
69:87:f0:5e:f3:60:97:8a:93:8f:08:48:51:70:b7:8c:b5:e6:
4f:33:d9:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:34:48 2025 by rpki-client