Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/52da35-26cb-4fea-bcd8-d3a38c76ad4d/1/6Ey_buD7yr9563S8Ykjzls8K6uQ.mft
File: 6Ey_buD7yr9563S8Ykjzls8K6uQ.mft (raw, json)
Hash identifier: QyVZkOhytWNc3ppNgJ2nXa2quB1lLqJt1g3hg+afqP0=
Subject key identifier: 18:86:B7:11:08:0A:26:A4:0D:0C:75:31:0C:6F:17:57:39:BD:BA:2E
Authority key identifier: E8:4C:BF:6E:E0:FB:CA:BF:79:EB:74:BC:62:48:F3:96:CF:0A:EA:E4
Certificate issuer: /CN=e84cbf6ee0fbcabf79eb74bc6248f396cf0aeae4
Certificate serial: 019A7149C5F95ECDB20D134C7F9DCEF7AA42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Ey_buD7yr9563S8Ykjzls8K6uQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/52da35-26cb-4fea-bcd8-d3a38c76ad4d/1/6Ey_buD7yr9563S8Ykjzls8K6uQ.mft
Manifest number: 0A2C
Signing time: Tue 11 Nov 2025 05:00:51 +0000
Manifest this update: Tue 11 Nov 2025 05:00:51 +0000
Manifest next update: Wed 12 Nov 2025 05:00:51 +0000
Files and hashes: 1: 6Ey_buD7yr9563S8Ykjzls8K6uQ.crl (hash: 14DbG+Sj/TV7iyqFkEaHWXIY2cQMylfBTShvUhMZUWo=)
2: mB31WjQtqMTVmm5ONFKs18JD3Uo.roa (hash: Z6mSYjSXOwJwo9Icil5Sl39+R4LrLCDB6tJ0XOF0rak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/52da35-26cb-4fea-bcd8-d3a38c76ad4d/1/6Ey_buD7yr9563S8Ykjzls8K6uQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/52da35-26cb-4fea-bcd8-d3a38c76ad4d/1/6Ey_buD7yr9563S8Ykjzls8K6uQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/6Ey_buD7yr9563S8Ykjzls8K6uQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:c5:f9:5e:cd:b2:0d:13:4c:7f:9d:ce:f7:aa:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e84cbf6ee0fbcabf79eb74bc6248f396cf0aeae4
Validity
Not Before: Nov 11 05:00:51 2025 GMT
Not After : Nov 12 05:00:51 2025 GMT
Subject: CN=1886b711080a26a40d0c75310c6f175739bdba2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:bc:71:e8:cf:0a:e0:d3:a3:e5:e8:95:46:c2:
a8:83:72:a8:80:79:f5:34:b9:05:19:00:84:bb:79:
85:f8:3d:d6:af:e3:51:94:7c:97:52:e8:1a:10:33:
de:e2:7e:2e:8f:c4:88:4e:bc:b4:85:15:df:c5:cd:
5e:13:fb:15:79:1a:a9:a5:6d:c7:1d:28:79:8a:05:
df:9e:c8:c8:64:97:97:4c:e3:11:0e:a7:4f:93:f4:
ec:53:a1:33:25:ec:66:13:3a:c6:7c:a3:5f:da:65:
3f:63:e7:51:6f:71:5d:d1:e1:33:43:e5:76:2a:38:
90:44:bc:2a:a0:fd:c8:11:cd:58:c1:57:4d:9f:ac:
4f:6c:ba:1b:3d:a6:c5:ad:14:42:3b:44:e0:ce:36:
a1:6f:fa:09:df:11:48:96:82:1e:97:dd:ca:61:1e:
6a:be:ff:ca:3c:4f:39:f6:32:5b:b2:c0:21:50:56:
36:5f:7a:39:97:30:ad:f1:ed:f8:f8:bf:be:af:91:
51:30:73:f7:8b:0e:cd:97:02:a5:c3:4d:79:07:62:
af:4e:5c:d9:6e:1d:8d:bf:9a:bb:15:6a:9f:f9:af:
c8:68:69:4c:e7:f2:24:8a:37:ca:03:26:22:bc:54:
ae:5b:9f:d1:7c:43:94:0b:b9:6e:4f:4e:1f:1f:d8:
2b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:86:B7:11:08:0A:26:A4:0D:0C:75:31:0C:6F:17:57:39:BD:BA:2E
X509v3 Authority Key Identifier:
keyid:E8:4C:BF:6E:E0:FB:CA:BF:79:EB:74:BC:62:48:F3:96:CF:0A:EA:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Ey_buD7yr9563S8Ykjzls8K6uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/52da35-26cb-4fea-bcd8-d3a38c76ad4d/1/6Ey_buD7yr9563S8Ykjzls8K6uQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/52da35-26cb-4fea-bcd8-d3a38c76ad4d/1/6Ey_buD7yr9563S8Ykjzls8K6uQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:5c:b9:49:aa:6b:2c:5d:1b:9d:6b:19:f0:fb:0b:1d:33:4d:
fb:d7:90:f7:60:aa:24:66:0c:1d:ab:ae:e1:15:d8:16:a0:9f:
aa:82:12:dc:a9:89:63:7c:11:7b:49:59:2f:b8:af:25:1d:54:
c4:64:b6:6a:d5:ca:1c:cb:76:a7:8e:68:48:45:e5:3f:3a:c7:
80:99:f2:1f:28:ca:c8:21:2f:c3:f4:e7:c5:e6:3c:bf:f9:b0:
7e:09:4d:72:11:d8:9d:ab:72:b0:78:5d:a1:0f:a9:c5:1f:3d:
ee:65:1a:82:0d:22:c7:3d:10:c8:35:b5:41:14:69:06:c0:e8:
e0:fc:f3:b3:e6:96:24:88:9f:98:37:f9:56:d8:9c:1a:b3:21:
f3:b6:a7:02:3e:29:22:71:ac:6c:2b:1f:d1:0d:5a:29:0c:4b:
8f:80:52:d3:81:b0:a5:f4:8a:9b:9d:bd:e4:97:a8:44:5f:94:
d2:f6:e8:c2:db:93:bb:67:07:45:73:9e:34:98:0c:71:67:c7:
d3:55:76:bf:c1:7b:57:94:dc:7c:19:3e:8d:f9:b4:df:ef:da:
cc:05:07:17:67:2c:c1:bd:ff:3c:af:e6:21:4e:d6:b7:84:8b:
f2:a9:f9:b1:d8:9a:d9:c4:8f:1d:94:2b:6e:0c:54:0a:33:01:
ab:aa:1c:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:17:40 2025 by rpki-client