Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/ff2ceb-e9a8-478c-88c1-3de4ece3ab2a/1/a2GZ5Vw1Pvfz0r9KT-ON0aCthWU.mft
File: a2GZ5Vw1Pvfz0r9KT-ON0aCthWU.mft (raw, json)
Hash identifier: aEShGfhIfS8ZUh9RUlaRV24nMQxT8wkJeqJQ9eY4REo=
Subject key identifier: E2:A1:DA:81:92:AC:0B:63:1C:4E:DA:82:EE:57:E0:F9:D2:09:A5:D1
Authority key identifier: 6B:61:99:E5:5C:35:3E:F7:F3:D2:BF:4A:4F:E3:8D:D1:A0:AD:85:65
Certificate issuer: /CN=6b6199e55c353ef7f3d2bf4a4fe38dd1a0ad8565
Certificate serial: 019A7149AF715911514F495331CFFC0A984C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a2GZ5Vw1Pvfz0r9KT-ON0aCthWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/ff2ceb-e9a8-478c-88c1-3de4ece3ab2a/1/a2GZ5Vw1Pvfz0r9KT-ON0aCthWU.mft
Manifest number: 09E6
Signing time: Tue 11 Nov 2025 05:00:45 +0000
Manifest this update: Tue 11 Nov 2025 05:00:45 +0000
Manifest next update: Wed 12 Nov 2025 05:00:45 +0000
Files and hashes: 1: KbkgC7W04AC2dfiCKLffjYIdfm0.roa (hash: b+1XnR1qClXgo0+h2XFqiEy+RpYXEzB0EWpEqBHm3rM=)
2: a2GZ5Vw1Pvfz0r9KT-ON0aCthWU.crl (hash: J2j4jsbiQvOF/fjno+onob6c3rzb2E4uYAplil/YuGU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/ff2ceb-e9a8-478c-88c1-3de4ece3ab2a/1/a2GZ5Vw1Pvfz0r9KT-ON0aCthWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/ff2ceb-e9a8-478c-88c1-3de4ece3ab2a/1/a2GZ5Vw1Pvfz0r9KT-ON0aCthWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/a2GZ5Vw1Pvfz0r9KT-ON0aCthWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:af:71:59:11:51:4f:49:53:31:cf:fc:0a:98:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b6199e55c353ef7f3d2bf4a4fe38dd1a0ad8565
Validity
Not Before: Nov 11 05:00:45 2025 GMT
Not After : Nov 12 05:00:45 2025 GMT
Subject: CN=e2a1da8192ac0b631c4eda82ee57e0f9d209a5d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d1:a5:09:3d:21:ce:58:f6:00:f1:34:29:8b:
40:55:69:7b:55:e8:21:ae:13:52:51:d9:4d:8d:ad:
d3:7f:1c:4c:7f:06:28:33:d4:76:eb:d6:2a:5b:63:
32:89:49:65:c4:20:32:47:3f:d8:cc:0d:f2:6e:6b:
f4:85:66:be:d0:3f:32:e9:da:67:0a:83:96:a2:38:
ca:bb:c2:6a:e0:1c:6e:7f:9a:a8:c2:87:d8:4d:6a:
1d:93:75:32:c3:94:14:11:4d:d6:12:7b:db:52:05:
61:a0:af:8f:53:46:2b:44:6b:f5:d6:ab:f0:5d:01:
69:a1:7c:bd:ea:ed:81:6f:4a:2e:83:e5:b2:67:7f:
2d:d7:28:87:2d:e7:7d:cf:a3:c1:ad:25:10:3c:ae:
95:20:3e:29:9d:92:f8:49:d2:40:3b:8f:98:ab:26:
d1:bb:70:01:f7:f7:82:8f:d9:8d:0c:5c:8e:65:08:
65:41:df:28:b0:a1:6f:e3:10:53:45:45:39:88:8a:
0f:b0:f0:6e:21:2f:37:46:74:a2:f5:93:d2:d6:e1:
ba:fe:a6:7b:26:1b:97:ca:85:ed:e2:5b:bd:a0:f2:
1f:42:71:58:28:16:9a:ea:66:a3:d9:58:d4:b2:29:
65:26:4a:fc:e3:5e:1e:9d:4c:34:87:f2:6c:d0:9d:
17:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:A1:DA:81:92:AC:0B:63:1C:4E:DA:82:EE:57:E0:F9:D2:09:A5:D1
X509v3 Authority Key Identifier:
keyid:6B:61:99:E5:5C:35:3E:F7:F3:D2:BF:4A:4F:E3:8D:D1:A0:AD:85:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2GZ5Vw1Pvfz0r9KT-ON0aCthWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/ff2ceb-e9a8-478c-88c1-3de4ece3ab2a/1/a2GZ5Vw1Pvfz0r9KT-ON0aCthWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/ff2ceb-e9a8-478c-88c1-3de4ece3ab2a/1/a2GZ5Vw1Pvfz0r9KT-ON0aCthWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:4d:92:35:f1:87:c4:81:eb:c8:ab:a3:fb:92:7f:f8:43:08:
f7:9f:51:19:2f:11:b0:8a:d8:99:fa:5e:5e:4a:49:8c:3b:50:
1e:7d:37:50:66:d3:3b:a5:18:b2:76:fe:6f:16:2d:98:e9:dc:
c4:41:1c:fd:d0:b4:6b:b6:28:12:aa:bd:eb:10:aa:d9:4c:b4:
b2:35:bb:4c:9f:f5:1c:ac:93:ed:9b:e1:49:d5:66:4f:62:af:
c0:2e:1e:ab:ff:01:92:fb:f9:3e:00:99:3e:51:11:34:60:49:
ce:a7:0e:2d:70:fb:36:64:ab:ff:16:4a:15:86:d8:94:82:4c:
56:00:f5:45:08:f9:45:8a:5d:d1:8c:a9:ad:86:67:5d:a2:bd:
69:f0:b2:98:d6:71:dd:1a:a4:94:f2:22:84:39:3a:99:61:0f:
8f:29:02:56:29:29:2d:1a:ff:08:fc:7f:29:2e:5c:37:3f:37:
45:e5:17:e1:a5:e4:91:23:82:95:43:b5:0b:f0:ae:ae:ba:62:
3a:4d:fa:6a:02:24:70:1f:28:90:f2:96:3b:fa:ce:79:ce:37:
b4:6a:80:38:bf:f3:ac:50:27:04:3b:aa:e5:7d:fd:8e:f5:6a:
55:c5:b5:f0:61:d3:37:bf:9d:26:7c:b1:14:8b:55:e9:df:d6:
3b:47:d9:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:03:40 2025 by rpki-client