Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/442506-53f9-47db-b3b8-3ab21b523000/1/6X9KenczHtX3zn7oBowu29LQ034.mft
File: 6X9KenczHtX3zn7oBowu29LQ034.mft (raw, json)
Hash identifier: XjJO3ySNdTaDLrqNQ2hXT6vJGX7qUywkswMfpIPk3Mo=
Subject key identifier: 43:CD:F2:D3:BA:D0:AA:95:D5:A8:DC:44:2F:B1:3C:20:DB:94:D1:39
Authority key identifier: E9:7F:4A:7A:77:33:1E:D5:F7:CE:7E:E8:06:8C:2E:DB:D2:D0:D3:7E
Certificate issuer: /CN=e97f4a7a77331ed5f7ce7ee8068c2edbd2d0d37e
Certificate serial: 019A71B817A0955B3EE7443CB402BDBC144B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6X9KenczHtX3zn7oBowu29LQ034.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/442506-53f9-47db-b3b8-3ab21b523000/1/6X9KenczHtX3zn7oBowu29LQ034.mft
Manifest number: 171C
Signing time: Tue 11 Nov 2025 07:01:21 +0000
Manifest this update: Tue 11 Nov 2025 07:01:21 +0000
Manifest next update: Wed 12 Nov 2025 07:01:21 +0000
Files and hashes: 1: 6X9KenczHtX3zn7oBowu29LQ034.crl (hash: T8CH5h+TNIXv4/FHOLvRkp5xkspzV1K1jEuNoOKJ9Fk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/442506-53f9-47db-b3b8-3ab21b523000/1/6X9KenczHtX3zn7oBowu29LQ034.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/442506-53f9-47db-b3b8-3ab21b523000/1/6X9KenczHtX3zn7oBowu29LQ034.mft
rsync://rpki.ripe.net/repository/DEFAULT/6X9KenczHtX3zn7oBowu29LQ034.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:17:a0:95:5b:3e:e7:44:3c:b4:02:bd:bc:14:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e97f4a7a77331ed5f7ce7ee8068c2edbd2d0d37e
Validity
Not Before: Nov 11 07:01:21 2025 GMT
Not After : Nov 12 07:01:21 2025 GMT
Subject: CN=43cdf2d3bad0aa95d5a8dc442fb13c20db94d139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:48:d7:b3:72:9f:ee:73:91:ac:c8:0b:ef:60:
66:50:10:03:7c:28:c0:26:7b:6d:ad:d7:f6:fe:65:
04:2f:65:b7:35:ab:25:7b:ff:21:86:76:94:05:12:
dc:e3:c7:0f:3f:80:23:0e:05:99:ce:5f:2d:90:34:
c1:81:e5:ca:63:6d:07:0e:e2:43:51:59:12:6a:af:
53:87:f6:c5:17:0f:34:6e:ff:7d:39:b7:68:91:a0:
be:39:ca:17:4d:15:f6:5b:01:34:16:33:69:3e:41:
99:51:0c:c4:0d:c0:45:f9:31:fe:01:1f:3e:88:be:
30:34:c5:37:e3:bf:f7:9d:b1:3d:75:a1:9b:6a:ea:
ed:a1:05:0c:da:32:b7:bd:cb:49:a1:10:2b:23:ef:
4c:e8:a7:93:bf:6f:97:1d:aa:1b:5a:3d:31:7e:9f:
d2:b4:ea:b7:d7:bb:70:0e:45:2e:e3:b7:a3:79:50:
23:5a:1c:23:a7:b5:aa:13:6d:09:da:b1:97:b3:5e:
fb:4d:d6:3f:85:5f:52:a2:71:10:6f:41:35:56:5c:
25:4d:19:e8:82:5c:3e:1f:00:3e:65:f0:7f:c3:90:
59:5d:0e:41:5b:52:e0:ad:ee:d4:07:9c:a5:ae:a1:
77:01:d1:68:3c:66:e0:5f:05:87:6e:ee:f6:d5:a0:
06:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:CD:F2:D3:BA:D0:AA:95:D5:A8:DC:44:2F:B1:3C:20:DB:94:D1:39
X509v3 Authority Key Identifier:
keyid:E9:7F:4A:7A:77:33:1E:D5:F7:CE:7E:E8:06:8C:2E:DB:D2:D0:D3:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6X9KenczHtX3zn7oBowu29LQ034.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/442506-53f9-47db-b3b8-3ab21b523000/1/6X9KenczHtX3zn7oBowu29LQ034.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/442506-53f9-47db-b3b8-3ab21b523000/1/6X9KenczHtX3zn7oBowu29LQ034.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:36:55:1d:4c:5a:e1:93:fc:ae:79:a6:ec:33:b7:92:95:6f:
18:9a:d0:91:dc:8d:80:ed:71:4f:c4:e3:c2:9e:cf:2c:b8:d4:
b9:ed:67:af:e1:4e:37:6b:63:bd:11:73:39:a2:cd:21:62:3c:
4b:a7:33:3d:48:ad:ca:9e:e2:6e:e4:41:ae:1b:25:5c:e9:32:
27:23:0b:b5:92:b4:da:4c:01:6d:23:f8:8a:b4:3c:38:e7:95:
72:6b:0c:e2:9a:63:ae:25:7c:0d:ca:96:be:81:97:5b:05:57:
ea:1f:30:d5:bd:dc:80:38:0b:ce:cd:67:21:05:6c:38:16:6b:
b1:94:07:e0:50:1e:ce:64:f4:6b:58:91:16:8d:dd:cc:d6:17:
95:86:28:89:9e:41:6e:7c:2f:ea:58:b5:60:8a:e2:91:ed:5c:
fb:0c:dd:d0:f3:b9:49:d4:0c:21:b5:8b:a4:7b:b0:21:de:b8:
4d:7d:ff:31:b7:bb:b8:7c:e0:be:91:28:77:38:0d:20:fb:6e:
de:aa:91:c7:19:dd:a8:a6:2c:8a:ff:f9:46:64:81:65:43:5d:
6a:c8:8e:bf:9a:46:5f:36:c6:60:fc:d5:34:df:d3:60:95:3b:
ef:bf:76:58:52:02:5b:01:eb:df:7e:3a:53:31:71:44:84:72:
cc:d8:94:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:04:38 2025 by rpki-client