Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/af78c9-999d-4651-b21e-f95cd36bf91a/1/6B4yXNISZiXGbUadtk5O-aqw3GM.mft
File: 6B4yXNISZiXGbUadtk5O-aqw3GM.mft (raw, json)
Hash identifier: zxPL1qnehx7f1i4c1dZzoE9L6/t/1NhooXSjByPGIKQ=
Subject key identifier: E2:83:D9:CF:2B:B4:69:33:61:47:E1:57:EF:5F:7D:A7:C5:3F:52:0E
Authority key identifier: E8:1E:32:5C:D2:12:66:25:C6:6D:46:9D:B6:4E:4E:F9:AA:B0:DC:63
Certificate issuer: /CN=e81e325cd2126625c66d469db64e4ef9aab0dc63
Certificate serial: 019A71EEAA248B4251AC4111CCEAFDC6F5E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6B4yXNISZiXGbUadtk5O-aqw3GM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/af78c9-999d-4651-b21e-f95cd36bf91a/1/6B4yXNISZiXGbUadtk5O-aqw3GM.mft
Manifest number: 0E80
Signing time: Tue 11 Nov 2025 08:00:57 +0000
Manifest this update: Tue 11 Nov 2025 08:00:57 +0000
Manifest next update: Wed 12 Nov 2025 08:00:57 +0000
Files and hashes: 1: 6B4yXNISZiXGbUadtk5O-aqw3GM.crl (hash: nEAsMX+OSw/2NZYyE2ca7cjZ2oSXz/m7ZOjoy1KlY+w=)
2: guRa0ry_XeErXAXDimQX6nD8r-o.roa (hash: HkTFHVv5bF3CwAvh/UV6s5H3UbyzToqbz92TpMOY9SE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/af78c9-999d-4651-b21e-f95cd36bf91a/1/6B4yXNISZiXGbUadtk5O-aqw3GM.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/af78c9-999d-4651-b21e-f95cd36bf91a/1/6B4yXNISZiXGbUadtk5O-aqw3GM.mft
rsync://rpki.ripe.net/repository/DEFAULT/6B4yXNISZiXGbUadtk5O-aqw3GM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:aa:24:8b:42:51:ac:41:11:cc:ea:fd:c6:f5:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e81e325cd2126625c66d469db64e4ef9aab0dc63
Validity
Not Before: Nov 11 08:00:57 2025 GMT
Not After : Nov 12 08:00:57 2025 GMT
Subject: CN=e283d9cf2bb469336147e157ef5f7da7c53f520e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:02:22:0e:80:fb:f4:eb:d4:66:02:6b:16:90:
3b:65:94:67:be:b2:7d:52:d8:6e:3c:bc:59:d7:76:
be:53:20:60:fc:77:c6:19:d4:1d:53:6f:98:7f:84:
97:40:de:39:e8:92:cb:15:15:b3:10:59:ae:2d:94:
17:31:ea:46:37:df:ec:42:4f:58:6d:16:e5:b1:5e:
91:04:a1:7c:7c:81:ca:48:89:79:c3:23:82:ef:f5:
de:1a:99:ed:aa:51:78:6b:e7:d1:de:ad:fe:50:b5:
5b:02:3e:55:d1:09:45:65:c2:92:48:88:06:ba:da:
2d:e3:72:fa:32:ee:d5:44:04:38:47:36:2e:f9:86:
29:df:67:76:b1:38:fc:0f:7c:05:8d:4a:49:1c:86:
46:12:4f:07:33:1c:95:0b:87:af:a1:13:0e:40:88:
36:3a:16:6d:f3:24:91:07:3e:1c:24:ec:8b:1e:1f:
29:18:b9:77:8a:62:92:21:f3:57:fe:16:74:ed:ff:
6e:4a:ad:39:e0:86:5b:d6:d8:8b:16:34:26:9d:05:
20:d3:e6:83:64:24:7b:44:2e:0a:e7:4e:8e:dc:14:
3d:d2:2a:58:87:09:a2:66:19:aa:f8:35:cf:d0:cd:
9b:7d:dc:77:4a:05:12:7a:13:27:6d:4e:1d:27:0b:
6a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:83:D9:CF:2B:B4:69:33:61:47:E1:57:EF:5F:7D:A7:C5:3F:52:0E
X509v3 Authority Key Identifier:
keyid:E8:1E:32:5C:D2:12:66:25:C6:6D:46:9D:B6:4E:4E:F9:AA:B0:DC:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6B4yXNISZiXGbUadtk5O-aqw3GM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/af78c9-999d-4651-b21e-f95cd36bf91a/1/6B4yXNISZiXGbUadtk5O-aqw3GM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/af78c9-999d-4651-b21e-f95cd36bf91a/1/6B4yXNISZiXGbUadtk5O-aqw3GM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:bb:3d:67:61:4c:f5:10:7d:e5:6f:88:de:14:8e:b1:34:b3:
03:4b:56:9c:35:35:7a:6d:f6:51:62:ea:d3:bf:fe:0e:ae:f3:
2d:01:da:a4:d1:03:c4:d0:79:a9:0e:e3:08:d6:d6:6f:b7:92:
7d:ec:fb:95:65:f0:75:5a:f3:e4:7a:d2:66:ce:30:5a:46:93:
5b:96:f6:36:c1:bf:9d:71:72:32:74:64:67:23:85:4c:c5:ef:
46:04:59:20:11:6d:60:a0:54:ad:ce:db:a3:22:36:e6:da:9f:
e6:f2:97:b7:ba:8c:24:50:45:bc:18:3a:d6:92:05:b2:48:74:
56:c3:c6:da:4d:f6:80:41:b7:9d:47:9a:dd:a0:d9:e5:b1:f3:
dd:db:3f:f2:27:54:13:3d:7d:d1:33:b5:14:b4:68:67:11:5a:
d1:69:30:85:93:3d:c9:04:67:1a:a7:fb:fd:43:07:43:70:40:
7e:aa:b2:a1:98:ba:41:43:6a:0e:53:ea:aa:1c:f8:9e:68:2e:
03:64:80:a8:d7:bd:e4:d4:ec:f1:19:7c:74:32:c5:3f:42:11:
81:f7:55:54:f8:e2:b9:46:bc:61:4d:60:58:24:d6:97:48:ac:
12:24:60:15:6e:63:d2:b8:3a:df:92:a2:1b:a4:5c:31:20:8c:
35:d3:80:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:43:19 2025 by rpki-client