Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/3f378e-e8a7-4a9f-858b-5c49c8264a7b/1/6FZKS1_vRERHffDaWxmSTVLRAJQ.mft
File: 6FZKS1_vRERHffDaWxmSTVLRAJQ.mft (raw, json)
Hash identifier: QdZ34MKvC2SK8O6LTqzKqK3Ar4QM4G9JEArENBtnDJw=
Subject key identifier: C9:E7:86:74:CF:A5:C9:96:72:2E:9E:F5:F5:70:89:4B:70:75:6E:BE
Authority key identifier: E8:56:4A:4B:5F:EF:44:44:47:7D:F0:DA:5B:19:92:4D:52:D1:00:94
Certificate issuer: /CN=e8564a4b5fef4444477df0da5b19924d52d10094
Certificate serial: 019A725C685CED148B5854726096072B0ECB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6FZKS1_vRERHffDaWxmSTVLRAJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/3f378e-e8a7-4a9f-858b-5c49c8264a7b/1/6FZKS1_vRERHffDaWxmSTVLRAJQ.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 10:00:49 +0000
Manifest this update: Tue 11 Nov 2025 10:00:49 +0000
Manifest next update: Wed 12 Nov 2025 10:00:49 +0000
Files and hashes: 1: 6FZKS1_vRERHffDaWxmSTVLRAJQ.crl (hash: qdNypeSZ0g0itMerMp5euxy1T63tBbZUL7O5WCrTA2g=)
2: 9SVfluOBZwBfs-bjwE_rTE8NN74.roa (hash: vH7rlpjAcAk1sy3DNBgkpNoFX/t68ex1sv/VxyfNsUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/3f378e-e8a7-4a9f-858b-5c49c8264a7b/1/6FZKS1_vRERHffDaWxmSTVLRAJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/3f378e-e8a7-4a9f-858b-5c49c8264a7b/1/6FZKS1_vRERHffDaWxmSTVLRAJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/6FZKS1_vRERHffDaWxmSTVLRAJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:68:5c:ed:14:8b:58:54:72:60:96:07:2b:0e:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8564a4b5fef4444477df0da5b19924d52d10094
Validity
Not Before: Nov 11 10:00:49 2025 GMT
Not After : Nov 12 10:00:49 2025 GMT
Subject: CN=c9e78674cfa5c996722e9ef5f570894b70756ebe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ff:db:13:7c:ce:06:37:66:22:fc:c9:ea:b8:
bc:f2:ee:5c:cf:ab:2b:b0:30:2f:2c:5e:1e:c2:e2:
fd:85:f2:3b:8e:84:18:c1:f3:73:da:78:46:5e:50:
7d:3e:84:8e:eb:ee:be:b8:0c:f3:6a:ae:d4:de:a6:
20:f2:c7:59:27:be:9e:6d:db:96:51:54:8f:da:26:
2b:37:9d:59:5d:d2:56:46:2a:f7:eb:2b:c5:7c:34:
be:10:0a:d7:b2:3a:8d:93:39:3d:fa:fe:cb:2d:85:
02:bb:12:31:70:38:98:85:38:04:0d:9a:4a:3a:40:
5b:4d:37:3c:37:81:9b:eb:0e:88:b6:db:bb:b0:fa:
78:d5:63:16:4f:ef:7e:cd:5c:99:d8:5d:e3:3a:94:
d2:35:5e:fe:ed:3c:83:a8:1d:cf:0e:98:e5:8c:85:
59:25:a1:0a:d1:18:e1:6c:5e:17:79:5d:ff:2e:4e:
ef:6d:b6:cf:04:dc:0e:0f:cd:bb:83:f3:a7:f4:67:
b9:3b:f3:8c:50:ae:ed:6c:62:5a:65:af:0e:07:19:
75:14:75:92:a1:f3:e4:d2:e2:5e:b9:39:e4:1b:a8:
4a:d1:3b:14:c6:e7:af:91:4c:6d:20:38:fa:b1:cc:
8f:b1:22:db:bd:3d:36:1e:37:39:14:54:0c:3d:48:
0c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:E7:86:74:CF:A5:C9:96:72:2E:9E:F5:F5:70:89:4B:70:75:6E:BE
X509v3 Authority Key Identifier:
keyid:E8:56:4A:4B:5F:EF:44:44:47:7D:F0:DA:5B:19:92:4D:52:D1:00:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6FZKS1_vRERHffDaWxmSTVLRAJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/3f378e-e8a7-4a9f-858b-5c49c8264a7b/1/6FZKS1_vRERHffDaWxmSTVLRAJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/3f378e-e8a7-4a9f-858b-5c49c8264a7b/1/6FZKS1_vRERHffDaWxmSTVLRAJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:71:c7:5b:6e:c4:e8:a3:16:d4:3b:ae:ec:08:ac:7c:8b:6c:
f5:c2:3e:5e:25:42:45:7f:c0:11:c0:c6:d0:da:65:d8:d8:d5:
57:ee:9e:95:61:f3:0f:6d:38:6d:12:c8:e5:f3:b4:f0:b3:d5:
44:ce:f2:2b:e9:a8:6c:12:d2:aa:eb:bf:b5:1a:ad:30:4f:cd:
96:74:d1:19:82:55:66:73:d0:d7:3f:32:0a:ed:31:bb:2a:a6:
69:44:36:ae:9b:89:8c:40:2c:fa:51:4e:8a:26:16:ba:b1:2c:
94:bd:2e:f6:80:1f:92:5b:e4:4f:95:26:3b:49:53:57:3b:1d:
f2:90:45:e0:d6:29:76:f7:3b:7f:39:ec:6e:0f:80:81:77:66:
a7:43:ba:c0:f4:b5:9c:da:c4:cc:4c:4b:6d:f4:33:76:b8:41:
84:4a:87:99:c7:0c:bf:14:a8:5d:a1:b5:34:71:b0:7f:97:c9:
f6:8f:14:66:1e:13:09:c1:76:d1:3f:9a:82:06:56:f6:11:3d:
97:a6:8c:8d:12:d6:90:7b:4f:be:07:67:9f:14:e9:53:94:5b:
55:47:0b:6e:6f:a3:a2:f7:ec:62:9c:70:6e:50:39:f2:b0:57:
c6:f0:89:61:3c:b7:d4:c5:a5:db:33:d5:9d:5d:ee:64:42:56:
fe:9c:25:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:17:42 2025 by rpki-client