Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/494fc5-8370-4313-a775-4c7c6ee1d645/1/6Vv1iCFn0VKIW0akbDYJbscsEOg.mft
File: 6Vv1iCFn0VKIW0akbDYJbscsEOg.mft (raw, json)
Hash identifier: zBbiqGycF2qZwEAGgtN6BbrGgPxli9oeUP9t0DEKEMQ=
Subject key identifier: 58:E6:FA:26:76:14:73:F9:ED:9C:DB:5A:EB:DB:16:B7:FB:DD:EF:E2
Authority key identifier: E9:5B:F5:88:21:67:D1:52:88:5B:46:A4:6C:36:09:6E:C7:2C:10:E8
Certificate issuer: /CN=e95bf5882167d152885b46a46c36096ec72c10e8
Certificate serial: 019A70A57E258D79D69A27DE3F83E6E3C1F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Vv1iCFn0VKIW0akbDYJbscsEOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/494fc5-8370-4313-a775-4c7c6ee1d645/1/6Vv1iCFn0VKIW0akbDYJbscsEOg.mft
Manifest number: 0117
Signing time: Tue 11 Nov 2025 02:01:25 +0000
Manifest this update: Tue 11 Nov 2025 02:01:25 +0000
Manifest next update: Wed 12 Nov 2025 02:01:25 +0000
Files and hashes: 1: 6Vv1iCFn0VKIW0akbDYJbscsEOg.crl (hash: 1aze5gwbRFHqSGPVRP1VhNQAWetr9jLeTDtlTPe8vTY=)
2: ecPi4F9FvpvnnyN08rNPNOwyAw0.roa (hash: gVC4oBRFhWQMZYBIpFGSJSlbUZiFGdF6+OMg3NAk+j8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/494fc5-8370-4313-a775-4c7c6ee1d645/1/6Vv1iCFn0VKIW0akbDYJbscsEOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/494fc5-8370-4313-a775-4c7c6ee1d645/1/6Vv1iCFn0VKIW0akbDYJbscsEOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/6Vv1iCFn0VKIW0akbDYJbscsEOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:7e:25:8d:79:d6:9a:27:de:3f:83:e6:e3:c1:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e95bf5882167d152885b46a46c36096ec72c10e8
Validity
Not Before: Nov 11 02:01:25 2025 GMT
Not After : Nov 12 02:01:25 2025 GMT
Subject: CN=58e6fa26761473f9ed9cdb5aebdb16b7fbddefe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:a6:f7:51:78:eb:2b:2a:39:c6:9d:f9:0c:f8:
6e:5e:90:78:9b:b0:a4:20:ba:de:b3:21:73:57:ef:
8e:10:f0:98:92:b1:f7:d8:f0:d8:09:83:23:6e:4f:
a8:02:2a:98:c7:ff:d3:24:cc:17:95:03:8e:5c:d0:
7e:66:d7:c7:5a:2d:9e:f5:75:1d:81:d1:0a:0d:01:
67:64:d2:78:91:03:ca:f7:74:4b:de:11:8c:b0:60:
f6:bd:40:af:84:cf:c1:b1:94:dc:f1:7c:6c:7b:45:
88:e4:9a:31:78:6a:5a:41:e2:a3:d1:d6:55:5d:88:
2b:64:f8:2a:52:ec:06:39:a4:16:26:6a:b7:88:a4:
49:2d:b2:ed:d6:ce:0c:de:95:df:30:99:20:63:a0:
95:04:a0:64:4f:21:c5:fa:df:86:31:1f:11:46:de:
aa:fa:5a:10:8a:79:ee:9f:9c:c4:80:8c:b2:ad:28:
c0:e0:bc:70:90:5c:c2:23:3b:72:12:7a:9b:98:6f:
d6:37:d2:3b:20:27:86:71:25:fe:c2:e9:ea:12:e8:
cf:94:bd:19:e9:f8:eb:cb:b3:c9:de:bf:11:38:77:
6b:54:26:48:b6:e0:25:db:28:1b:68:c2:1b:20:21:
f5:bd:00:f1:1f:eb:57:99:90:d7:a6:04:c8:fe:cc:
ed:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:E6:FA:26:76:14:73:F9:ED:9C:DB:5A:EB:DB:16:B7:FB:DD:EF:E2
X509v3 Authority Key Identifier:
keyid:E9:5B:F5:88:21:67:D1:52:88:5B:46:A4:6C:36:09:6E:C7:2C:10:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Vv1iCFn0VKIW0akbDYJbscsEOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/494fc5-8370-4313-a775-4c7c6ee1d645/1/6Vv1iCFn0VKIW0akbDYJbscsEOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/494fc5-8370-4313-a775-4c7c6ee1d645/1/6Vv1iCFn0VKIW0akbDYJbscsEOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:40:b2:71:e6:f2:a9:11:0b:4e:ba:02:cc:e9:2a:b3:42:18:
45:59:76:10:31:36:ce:e7:cb:a6:9d:d5:ff:ea:5a:90:ae:58:
5e:8c:de:1d:be:91:e8:99:df:2e:14:a6:c0:f5:8d:48:3a:83:
64:57:77:97:5e:e7:22:ce:5d:4b:c4:eb:aa:4d:19:8f:6b:59:
84:be:7e:ed:9a:b4:36:f0:41:b8:50:6d:cc:14:58:c7:f3:6a:
df:35:d0:34:c2:46:8f:d9:2d:86:d2:02:6f:29:88:e9:c9:2f:
af:75:db:4e:8d:f8:fa:8a:c1:15:16:9f:c1:c4:6c:23:b9:51:
9c:02:05:10:13:00:c2:a1:6a:b6:e6:b5:00:cd:24:e5:3f:58:
9f:87:ad:4e:ff:8b:2b:85:1d:bf:a9:65:5b:ff:0a:2d:46:ed:
54:dc:52:be:46:8f:87:71:56:db:cd:8a:b4:41:26:63:1b:b0:
6b:ed:3d:a4:b5:35:f6:29:dd:44:c9:9b:ea:f1:45:a8:8e:56:
e8:34:9e:0e:d8:2f:8e:97:99:73:f4:e3:7b:41:3e:42:6d:63:
9c:fe:7c:9c:0c:6a:c9:0b:08:81:b1:21:d5:7c:0c:32:c5:43:
7e:b6:f4:57:b1:15:71:ab:bd:89:99:20:2e:72:93:5c:f2:c6:
22:54:60:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:49 2025 by rpki-client