Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/816cf9-e6a0-43f1-8a3d-5c7c3ad74a32/1/6DGCFvAxEBktn29i_-4ZDrvVxBs.mft
File: 6DGCFvAxEBktn29i_-4ZDrvVxBs.mft (raw, json)
Hash identifier: qjXeRFgpzn2FhrFkwEBC02jNWa3p4R3MEd6VmY65TZ8=
Subject key identifier: 06:05:B2:CC:5C:3A:03:D6:57:E8:B2:43:0B:57:CA:C3:6B:2E:70:7C
Authority key identifier: E8:31:82:16:F0:31:10:19:2D:9F:6F:62:FF:EE:19:0E:BB:D5:C4:1B
Certificate issuer: /CN=e8318216f03110192d9f6f62ffee190ebbd5c41b
Certificate serial: 019A725C477C54EEDEC680E5CAC00ABD7B35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6DGCFvAxEBktn29i_-4ZDrvVxBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/816cf9-e6a0-43f1-8a3d-5c7c3ad74a32/1/6DGCFvAxEBktn29i_-4ZDrvVxBs.mft
Manifest number: 0164
Signing time: Tue 11 Nov 2025 10:00:41 +0000
Manifest this update: Tue 11 Nov 2025 10:00:41 +0000
Manifest next update: Wed 12 Nov 2025 10:00:41 +0000
Files and hashes: 1: 6DGCFvAxEBktn29i_-4ZDrvVxBs.crl (hash: SQys0jG6vCo6JBuV48USCDno0zJncs49+Q7tf1M/t88=)
2: 7rHBYtW6X1cejc9TILphrdP_TBk.roa (hash: fyAkynyCTru31PmwyHkLxs5s4xfquOrJnfeQ7K5zOpE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/816cf9-e6a0-43f1-8a3d-5c7c3ad74a32/1/6DGCFvAxEBktn29i_-4ZDrvVxBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/816cf9-e6a0-43f1-8a3d-5c7c3ad74a32/1/6DGCFvAxEBktn29i_-4ZDrvVxBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/6DGCFvAxEBktn29i_-4ZDrvVxBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:47:7c:54:ee:de:c6:80:e5:ca:c0:0a:bd:7b:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8318216f03110192d9f6f62ffee190ebbd5c41b
Validity
Not Before: Nov 11 10:00:41 2025 GMT
Not After : Nov 12 10:00:41 2025 GMT
Subject: CN=0605b2cc5c3a03d657e8b2430b57cac36b2e707c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:98:a3:b1:fc:9a:a1:1f:ec:05:fa:02:4b:d0:
09:f2:24:14:0b:7c:71:55:fc:dc:2c:ab:35:22:86:
ea:0b:55:d8:c8:5e:22:58:18:58:02:b0:62:d5:6d:
1f:c7:e7:17:c0:fd:49:7f:ba:8b:d5:0f:7e:d9:cf:
84:e1:43:ff:ae:b0:5b:2c:a1:da:2d:75:af:8f:c2:
8b:5b:e7:3e:9e:35:21:4e:d5:43:30:ab:4c:7a:05:
13:c1:e6:b2:63:21:ab:98:8a:1f:44:46:ba:53:51:
e5:91:fe:c6:8f:78:1c:6c:89:02:ff:12:d6:37:db:
ff:d6:25:40:6f:12:dc:47:48:5e:19:e4:7e:67:97:
83:03:27:64:6b:35:00:eb:32:8d:4d:5a:f4:92:47:
8e:64:fd:87:b3:20:09:9e:7e:95:47:eb:ff:10:36:
18:03:c3:9c:8f:92:90:14:4d:b6:56:e2:ce:38:56:
69:eb:6c:c5:a4:fd:20:79:a6:f0:28:20:19:a6:63:
a6:f4:bc:85:4f:2d:5b:c2:f5:47:38:ad:d6:4d:e8:
fc:17:82:9c:c8:96:22:77:d7:20:cf:69:8e:97:dc:
d3:fb:c1:93:e9:ed:63:b0:84:79:61:5e:42:8d:db:
73:cb:4f:d4:3b:84:08:c5:f3:c7:0b:bd:7d:ce:fe:
c4:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:05:B2:CC:5C:3A:03:D6:57:E8:B2:43:0B:57:CA:C3:6B:2E:70:7C
X509v3 Authority Key Identifier:
keyid:E8:31:82:16:F0:31:10:19:2D:9F:6F:62:FF:EE:19:0E:BB:D5:C4:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6DGCFvAxEBktn29i_-4ZDrvVxBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/816cf9-e6a0-43f1-8a3d-5c7c3ad74a32/1/6DGCFvAxEBktn29i_-4ZDrvVxBs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/816cf9-e6a0-43f1-8a3d-5c7c3ad74a32/1/6DGCFvAxEBktn29i_-4ZDrvVxBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:13:63:c8:83:76:b3:98:2d:1e:d9:06:3a:0c:51:53:dc:09:
3c:3a:e9:cd:7f:cc:44:f5:cb:a0:4e:a6:c0:40:e0:76:e9:3a:
99:86:8d:2e:17:46:36:78:fd:ca:db:34:e8:ba:5c:f9:be:af:
4f:ee:43:7c:4d:18:6a:db:7a:34:3d:15:8c:33:db:44:43:76:
fb:2e:59:a0:82:d3:0c:e7:9d:60:a7:a1:77:83:3c:45:bb:0a:
02:a3:a9:4f:46:90:3f:b1:c0:4e:54:c1:0b:ab:2d:e2:d5:4a:
fd:9a:86:b4:59:00:e2:37:8a:3a:b7:5f:b9:c7:2f:98:ef:95:
42:92:69:61:ce:b2:74:77:72:d3:ee:28:7f:9c:f7:b0:e1:e4:
23:cc:ab:76:5b:da:91:32:3d:46:a2:ff:59:cf:9f:b1:82:32:
23:83:89:c1:2a:b6:78:ae:34:e6:1e:f1:ff:ab:0e:90:ff:f3:
76:af:5e:37:c7:29:47:dc:38:5d:97:de:b1:aa:f5:3e:0b:6a:
fb:53:37:9d:8a:15:89:51:ea:7a:ed:48:ab:a8:f3:1f:dc:86:
c8:19:ca:43:fe:2b:37:02:60:63:a6:dd:00:d6:31:f9:4b:35:
08:a1:9b:e8:ef:06:c2:7a:ca:83:31:41:12:fe:d6:63:e2:da:
ef:c1:f4:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:05:44 2025 by rpki-client