Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/6f2886-2ff7-40b0-9673-75b684f890b4/1/6azP0hq9f-P6DWuzHfSCC_taQYg.mft
File: 6azP0hq9f-P6DWuzHfSCC_taQYg.mft (raw, json)
Hash identifier: mkT/elWjQiEJZr6hxTaWBdbOHbZ/hGBgBVsVKSyn1RY=
Subject key identifier: E5:34:8C:AC:9E:31:25:49:D7:16:59:33:FC:27:DB:20:33:D4:92:90
Authority key identifier: E9:AC:CF:D2:1A:BD:7F:E3:FA:0D:6B:B3:1D:F4:82:0B:FB:5A:41:88
Certificate issuer: /CN=e9accfd21abd7fe3fa0d6bb31df4820bfb5a4188
Certificate serial: 019A71B8C3114E51D842FE5F116F407380AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6azP0hq9f-P6DWuzHfSCC_taQYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/6f2886-2ff7-40b0-9673-75b684f890b4/1/6azP0hq9f-P6DWuzHfSCC_taQYg.mft
Manifest number: 09DC
Signing time: Tue 11 Nov 2025 07:02:05 +0000
Manifest this update: Tue 11 Nov 2025 07:02:05 +0000
Manifest next update: Wed 12 Nov 2025 07:02:05 +0000
Files and hashes: 1: 6azP0hq9f-P6DWuzHfSCC_taQYg.crl (hash: KpNEM+RjFIJKLeaRWgOhnERFTtUw7S2A0FjRYOOckQ4=)
2: _MxMNpyNBthjBmfib_9uhPuqPf0.roa (hash: EolAt4dLQVvdwjyApcTjs0rowC2XcqD4wINaXLiU8UM=)
3: qtuqIB5CtIi31UAhEs4p3pi5c2Y.roa (hash: /hLyLmNfmw61h29Ovfaz4hXm3fgjqU+pple47V8gAy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/6f2886-2ff7-40b0-9673-75b684f890b4/1/6azP0hq9f-P6DWuzHfSCC_taQYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/6f2886-2ff7-40b0-9673-75b684f890b4/1/6azP0hq9f-P6DWuzHfSCC_taQYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/6azP0hq9f-P6DWuzHfSCC_taQYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:c3:11:4e:51:d8:42:fe:5f:11:6f:40:73:80:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9accfd21abd7fe3fa0d6bb31df4820bfb5a4188
Validity
Not Before: Nov 11 07:02:05 2025 GMT
Not After : Nov 12 07:02:05 2025 GMT
Subject: CN=e5348cac9e312549d7165933fc27db2033d49290
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c4:f0:57:95:97:18:ec:f4:20:24:7a:91:e2:
7d:f9:0b:47:d4:b3:55:5d:e3:9f:22:c7:24:49:8b:
00:3b:14:69:ae:1e:a9:8a:6a:f1:89:0e:c2:e6:ab:
db:3d:c0:3c:db:88:3f:16:34:6c:46:a8:c1:e9:17:
f8:d1:1e:9f:e4:22:35:1a:be:33:1b:e5:a9:bd:25:
9d:b4:53:bb:7d:ed:62:52:57:99:b1:55:77:95:28:
2a:70:c4:b8:48:86:9d:02:53:ce:96:cd:a8:71:78:
79:c7:99:3b:f5:16:86:b9:57:24:11:73:12:0b:d7:
0c:6a:8d:e9:4b:01:7d:8a:a0:70:e8:53:95:6d:48:
f0:34:1b:68:d4:54:ad:ea:ed:e2:48:f6:69:8f:82:
54:b7:8e:a0:a0:7f:4a:a6:64:18:c4:4e:e8:51:59:
c0:42:c6:73:b4:ac:ee:8a:8a:47:c7:c8:02:f3:37:
01:32:c4:60:99:8e:5e:e2:6b:3e:77:73:28:5a:83:
9d:2a:89:9c:ae:ee:1f:74:86:65:4e:16:ac:98:de:
c7:18:1c:81:0d:c6:8a:c8:46:01:7e:8a:6f:c3:a2:
51:96:32:5a:32:27:38:69:26:af:80:6e:b6:26:4f:
43:29:00:f7:2b:81:f8:57:0f:ec:e6:3d:c3:10:54:
56:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:34:8C:AC:9E:31:25:49:D7:16:59:33:FC:27:DB:20:33:D4:92:90
X509v3 Authority Key Identifier:
keyid:E9:AC:CF:D2:1A:BD:7F:E3:FA:0D:6B:B3:1D:F4:82:0B:FB:5A:41:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6azP0hq9f-P6DWuzHfSCC_taQYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/6f2886-2ff7-40b0-9673-75b684f890b4/1/6azP0hq9f-P6DWuzHfSCC_taQYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/6f2886-2ff7-40b0-9673-75b684f890b4/1/6azP0hq9f-P6DWuzHfSCC_taQYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:08:df:50:35:34:38:2a:42:04:0e:0a:c8:89:c8:4f:a7:51:
5d:17:9b:5d:f4:69:7a:af:ef:17:e7:ee:5f:07:eb:36:a9:1a:
f7:52:f2:6b:71:0e:dc:99:78:b0:00:5d:f5:65:8d:c4:d6:47:
df:c0:3c:c7:72:1a:f0:de:36:7a:d5:22:f8:fa:7e:80:34:b9:
2a:3c:11:71:53:54:fd:08:56:53:e9:d2:ad:f6:1b:19:c7:19:
c6:b2:fb:17:7c:75:bd:9d:86:ab:df:01:37:41:42:fe:89:b0:
b3:1c:8e:71:50:8f:48:0f:1f:71:97:21:5c:dd:2e:b0:7c:2a:
be:f3:b4:a2:a0:ef:bc:0b:f1:79:59:01:28:5b:2d:e5:f9:95:
14:58:86:f0:f7:16:c5:ea:8a:22:9a:25:aa:ae:95:f5:66:f0:
92:64:ad:cb:20:dd:06:99:76:bf:d3:fe:b6:d0:3a:2e:da:d0:
98:16:61:ab:29:60:c3:3b:7d:20:16:71:7c:7a:b5:c2:83:21:
5f:0c:c5:30:a0:a0:bd:ff:1a:de:fb:b5:55:e3:64:97:d6:26:
a8:49:e1:96:2b:04:54:6f:b4:8a:fb:6e:32:de:8d:e2:92:3f:
c9:c8:f8:e4:85:d6:e5:81:fa:a1:68:ee:cd:1d:57:a0:98:da:
44:cb:e1:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:36:56 2025 by rpki-client