Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/303a8f-367f-4cfa-9a78-e81621b61d65/1/6XlAPNaMmN9zjjEGKQOgsyJgC1k.mft
File: 6XlAPNaMmN9zjjEGKQOgsyJgC1k.mft (raw, json)
Hash identifier: YZouonLBz5iIps1dfBvigiYlYLGsPmuJ9U7KYhQPnek=
Subject key identifier: CF:F1:22:FA:01:34:2F:EE:AB:50:56:20:7F:5C:69:9F:83:83:0F:AE
Authority key identifier: E9:79:40:3C:D6:8C:98:DF:73:8E:31:06:29:03:A0:B3:22:60:0B:59
Certificate issuer: /CN=e979403cd68c98df738e31062903a0b322600b59
Certificate serial: 019A7226293B93C2201D37AD72CE6D7134D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XlAPNaMmN9zjjEGKQOgsyJgC1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/303a8f-367f-4cfa-9a78-e81621b61d65/1/6XlAPNaMmN9zjjEGKQOgsyJgC1k.mft
Manifest number: 02C7
Signing time: Tue 11 Nov 2025 09:01:34 +0000
Manifest this update: Tue 11 Nov 2025 09:01:34 +0000
Manifest next update: Wed 12 Nov 2025 09:01:34 +0000
Files and hashes: 1: 6XlAPNaMmN9zjjEGKQOgsyJgC1k.crl (hash: yyNrvopQvga86Klk9IDYAR/6m8hi0bEwwGkW4w9w0eQ=)
2: F2xZ9QgRce67ga9Jmar4OMuLjGo.roa (hash: bnt8ZsENPOXky7xH9NrByc19Ki/WFnxkHvhWkRdi1JQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/303a8f-367f-4cfa-9a78-e81621b61d65/1/6XlAPNaMmN9zjjEGKQOgsyJgC1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/303a8f-367f-4cfa-9a78-e81621b61d65/1/6XlAPNaMmN9zjjEGKQOgsyJgC1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/6XlAPNaMmN9zjjEGKQOgsyJgC1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:29:3b:93:c2:20:1d:37:ad:72:ce:6d:71:34:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e979403cd68c98df738e31062903a0b322600b59
Validity
Not Before: Nov 11 09:01:34 2025 GMT
Not After : Nov 12 09:01:34 2025 GMT
Subject: CN=cff122fa01342feeab5056207f5c699f83830fae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:57:29:a2:06:82:7c:c6:15:b9:9b:9a:31:da:
ef:6e:e6:54:8b:58:3c:05:08:da:3f:b9:6a:a7:d0:
65:58:25:3d:f3:d7:d4:64:bf:9a:23:c6:e8:a1:a9:
42:11:99:e2:74:79:b9:37:a9:51:4c:d5:58:49:05:
02:7f:18:01:69:9c:28:fb:2f:36:14:d9:96:e9:af:
8b:a5:e7:29:42:1d:04:7d:dd:9a:92:8a:3e:96:91:
09:aa:7c:4c:55:06:57:71:fb:a9:6c:52:5f:92:71:
d4:f6:e9:66:b1:9c:b7:ff:63:ca:ee:dc:bd:3b:47:
9e:6d:e7:c6:19:69:c4:a1:8c:26:30:e4:e2:b7:27:
ca:80:e5:52:fe:a8:3e:a9:22:67:a1:3e:e8:b9:1f:
5c:65:5e:63:8d:a4:34:97:54:ac:da:28:09:c7:21:
e4:93:12:0a:7c:ad:89:6c:31:fe:bf:de:9a:3b:70:
91:ec:47:00:0e:6b:52:e5:4f:54:8d:39:91:7e:c1:
4e:6f:7e:3b:ab:30:01:fc:b9:9b:e0:61:3a:be:2f:
72:22:a7:78:24:b6:ba:8b:30:1e:48:bb:40:e9:3f:
62:18:11:51:cb:08:ff:71:ac:ac:30:01:7a:19:6b:
36:80:6b:c1:7e:f4:2d:72:cf:83:72:b8:9e:fb:ef:
22:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:F1:22:FA:01:34:2F:EE:AB:50:56:20:7F:5C:69:9F:83:83:0F:AE
X509v3 Authority Key Identifier:
keyid:E9:79:40:3C:D6:8C:98:DF:73:8E:31:06:29:03:A0:B3:22:60:0B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XlAPNaMmN9zjjEGKQOgsyJgC1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/303a8f-367f-4cfa-9a78-e81621b61d65/1/6XlAPNaMmN9zjjEGKQOgsyJgC1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/303a8f-367f-4cfa-9a78-e81621b61d65/1/6XlAPNaMmN9zjjEGKQOgsyJgC1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:01:cb:57:a9:20:2c:78:d9:57:3d:5d:ea:d0:bb:72:ff:be:
59:bc:69:82:5f:f4:e3:33:4e:7e:72:12:05:e6:74:86:af:ae:
45:02:21:55:69:b0:20:81:41:5a:9e:d8:3a:64:bf:e3:cd:29:
7e:18:f8:a5:cd:48:47:35:0b:86:4e:91:77:64:fd:a7:54:6c:
fe:5a:a2:59:83:ff:9f:35:21:2b:d8:fc:3a:b6:9e:3a:98:e0:
88:7d:7f:af:1f:d1:df:45:77:a5:95:be:5e:5b:9f:bd:c4:a2:
59:53:2a:f7:61:68:49:c0:38:5e:4b:08:ac:40:dd:f7:e5:1e:
a9:37:f2:c7:63:c3:48:0d:ba:29:13:58:7c:0f:37:2a:ba:98:
37:4a:97:25:25:94:e6:84:d8:86:1a:bc:4a:80:f2:a8:0a:2a:
8a:9f:6a:43:a0:c0:bc:4e:9b:c7:8d:0b:15:19:10:6d:fb:08:
e8:56:60:44:f7:53:8c:9e:f0:44:91:98:9c:db:ec:44:19:86:
55:1b:7c:0f:41:1c:6b:1a:0b:a7:c4:c3:6b:c1:68:27:96:b7:
e5:03:7d:ca:cf:b0:bd:60:96:9b:01:d8:1a:d2:bd:29:74:75:
b6:ec:38:ee:af:b3:d5:75:3f:a7:9b:0d:7f:9e:01:47:50:f2:
6c:29:4f:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:00:33 2025 by rpki-client