Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/0e039a-be96-41fc-abcd-964b61bc319b/1/6vlt8xs_QE31t345nOeTcbT0REM.mft
File: 6vlt8xs_QE31t345nOeTcbT0REM.mft (raw, json)
Hash identifier: a6mJPY5iuMIJcrNHBnd4D9BGJrthJYaY7jtNroL32fU=
Subject key identifier: 74:89:6F:4A:4B:CA:14:CE:83:BA:3E:14:3E:AA:19:77:42:F0:23:41
Authority key identifier: EA:F9:6D:F3:1B:3F:40:4D:F5:B7:7E:39:9C:E7:93:71:B4:F4:44:43
Certificate issuer: /CN=eaf96df31b3f404df5b77e399ce79371b4f44443
Certificate serial: 019A72CA5A225EB769FC777A70B907A067FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6vlt8xs_QE31t345nOeTcbT0REM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/0e039a-be96-41fc-abcd-964b61bc319b/1/6vlt8xs_QE31t345nOeTcbT0REM.mft
Manifest number: 04C3
Signing time: Tue 11 Nov 2025 12:00:55 +0000
Manifest this update: Tue 11 Nov 2025 12:00:55 +0000
Manifest next update: Wed 12 Nov 2025 12:00:55 +0000
Files and hashes: 1: 6vlt8xs_QE31t345nOeTcbT0REM.crl (hash: tvXdAosUtYA8G4hT7X6Ms8K6a1/3laMoVLKUkdRaGI8=)
2: zku7rL4ehWHvRZK1RwrAb6MT-1c.roa (hash: nNwzvzSXO21Gwoc000T5O5APuYh4t3vWkKVJ9XFGR80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/0e039a-be96-41fc-abcd-964b61bc319b/1/6vlt8xs_QE31t345nOeTcbT0REM.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/0e039a-be96-41fc-abcd-964b61bc319b/1/6vlt8xs_QE31t345nOeTcbT0REM.mft
rsync://rpki.ripe.net/repository/DEFAULT/6vlt8xs_QE31t345nOeTcbT0REM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:5a:22:5e:b7:69:fc:77:7a:70:b9:07:a0:67:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaf96df31b3f404df5b77e399ce79371b4f44443
Validity
Not Before: Nov 11 12:00:55 2025 GMT
Not After : Nov 12 12:00:55 2025 GMT
Subject: CN=74896f4a4bca14ce83ba3e143eaa197742f02341
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:85:bf:2b:09:28:79:cc:ad:d6:ff:85:fb:df:
72:01:99:af:04:42:33:18:86:83:ff:25:81:c1:d3:
5b:0b:bc:22:de:96:da:c7:c2:6a:00:0d:04:4b:c0:
c2:e1:69:5f:46:99:10:23:df:36:25:bf:fe:ce:83:
a8:44:8a:c9:80:af:46:93:c7:09:6c:c4:fe:46:66:
ea:c7:a9:ef:36:48:27:b6:01:16:7b:8d:96:53:76:
63:a9:63:1e:40:c8:a5:ba:2c:d4:05:b5:bb:5a:4f:
d6:b2:68:ef:88:cc:e7:3e:5f:93:f0:8f:d5:44:ca:
8b:26:05:88:1a:b6:45:00:2c:6e:90:d1:ea:e5:0f:
49:63:b5:b2:1f:e9:fb:70:62:59:43:b9:be:3b:b1:
13:e6:34:63:1f:18:fc:27:55:cc:fa:8c:65:7a:5b:
c1:bc:e6:fe:dc:e5:38:78:c3:82:56:ac:de:49:26:
54:7a:7c:c2:de:a7:14:f6:e6:8b:51:10:c6:de:79:
4e:78:24:85:08:69:32:2e:8e:7b:6d:66:40:91:f7:
de:98:3d:22:8c:15:0a:5b:c3:4b:ba:a5:ca:16:54:
b9:16:75:1e:5d:1b:13:e8:2d:03:4d:2e:a3:a3:63:
9a:f5:f4:c3:e5:fb:7b:aa:3a:69:55:b8:ea:eb:dc:
9c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:89:6F:4A:4B:CA:14:CE:83:BA:3E:14:3E:AA:19:77:42:F0:23:41
X509v3 Authority Key Identifier:
keyid:EA:F9:6D:F3:1B:3F:40:4D:F5:B7:7E:39:9C:E7:93:71:B4:F4:44:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6vlt8xs_QE31t345nOeTcbT0REM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/0e039a-be96-41fc-abcd-964b61bc319b/1/6vlt8xs_QE31t345nOeTcbT0REM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/0e039a-be96-41fc-abcd-964b61bc319b/1/6vlt8xs_QE31t345nOeTcbT0REM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:ba:d1:ea:6b:8c:4a:39:f3:92:82:86:e9:d8:4c:5f:97:04:
f6:7a:de:77:c3:d5:38:06:ac:9d:cb:e5:e5:54:02:55:d8:30:
59:7f:69:f5:80:88:01:68:9c:16:32:38:93:f8:56:f5:c3:82:
ef:6b:12:23:4a:d1:9e:20:88:22:7b:24:33:bc:82:0f:4c:b1:
fb:d4:78:e7:2d:9e:87:07:27:44:e1:72:50:d5:f3:f7:ff:02:
7a:d6:d7:b0:d3:d1:e1:a3:33:4e:79:35:57:23:84:57:25:2d:
43:41:15:ec:34:21:83:b2:77:f1:42:03:8a:f6:63:d7:7d:29:
1b:83:af:ec:fb:14:47:03:6c:1b:12:c9:16:4f:f2:33:fa:2e:
a1:f8:ac:0f:53:fd:55:af:62:68:00:13:ce:14:b9:57:3e:c4:
d1:56:81:be:51:c0:13:a4:4f:90:9c:08:8e:42:a4:38:59:4a:
91:27:4e:81:77:c5:c5:88:38:d8:2c:8e:eb:54:d1:fc:a3:e6:
ff:57:fe:a9:d3:96:be:3f:1a:b5:71:f7:04:47:13:af:9c:d8:
b5:92:7a:12:3a:7f:3c:80:49:99:6d:73:df:a7:1f:6e:20:64:
c1:e1:22:c7:e3:84:43:a2:f2:cd:3b:cd:32:bd:7a:ed:fd:41:
96:c9:da:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:18:32 2025 by rpki-client