Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/05f238-bb62-455d-9921-3a2722507ee5/1/6lGHy_c4wOnXo-2b_LLEpnciZIM.mft
File: 6lGHy_c4wOnXo-2b_LLEpnciZIM.mft (raw, json)
Hash identifier: xDIHOYJXAiKLgRTeo2sYojKZlrkwhAHE2tMHvyHQvkM=
Subject key identifier: CD:77:26:B6:E5:52:67:43:32:DE:0A:3D:13:6F:D0:4C:67:FF:13:CE
Authority key identifier: EA:51:87:CB:F7:38:C0:E9:D7:A3:ED:9B:FC:B2:C4:A6:77:22:64:83
Certificate issuer: /CN=ea5187cbf738c0e9d7a3ed9bfcb2c4a677226483
Certificate serial: 019A6733D23B0BFB2E8B8638A01E9F8FCA9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6lGHy_c4wOnXo-2b_LLEpnciZIM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/05f238-bb62-455d-9921-3a2722507ee5/1/6lGHy_c4wOnXo-2b_LLEpnciZIM.mft
Manifest number: 171C
Signing time: Sun 09 Nov 2025 06:00:40 +0000
Manifest this update: Sun 09 Nov 2025 06:00:40 +0000
Manifest next update: Mon 10 Nov 2025 06:00:40 +0000
Files and hashes: 1: 6lGHy_c4wOnXo-2b_LLEpnciZIM.crl (hash: rey5wHff37ekY5Nc39Gfje82BskkxwabpzQCNwtLGfk=)
2: vZG9jNJvpP2dQTHDHjZo_HSuUlM.roa (hash: l7IzR2g9EaxDuqo4eOsNuovFYqnZrK9ipQBej6WUnUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/05f238-bb62-455d-9921-3a2722507ee5/1/6lGHy_c4wOnXo-2b_LLEpnciZIM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/05f238-bb62-455d-9921-3a2722507ee5/1/6lGHy_c4wOnXo-2b_LLEpnciZIM.mft
rsync://rpki.ripe.net/repository/DEFAULT/6lGHy_c4wOnXo-2b_LLEpnciZIM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 10 Nov 2025 03:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:67:33:d2:3b:0b:fb:2e:8b:86:38:a0:1e:9f:8f:ca:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea5187cbf738c0e9d7a3ed9bfcb2c4a677226483
Validity
Not Before: Nov 9 06:00:40 2025 GMT
Not After : Nov 10 06:00:40 2025 GMT
Subject: CN=cd7726b6e552674332de0a3d136fd04c67ff13ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:5f:fc:16:cc:e0:c8:40:94:56:e6:5f:0c:ca:
d1:a9:15:70:60:30:7a:da:74:d3:21:66:50:0c:8a:
f6:f4:71:6c:b2:a2:ca:17:cc:39:d8:9c:00:15:0a:
8a:a1:8f:c3:e8:2d:15:2b:6b:2d:4a:b7:ec:42:03:
18:b8:dc:96:ff:17:64:52:f8:e7:f4:cf:f3:1b:a6:
0b:da:65:08:d6:f5:dc:8a:11:bb:54:16:30:7f:98:
85:e5:cf:b5:63:e0:83:0b:15:d6:28:aa:11:fe:b4:
07:54:85:df:86:20:8e:65:90:25:35:14:05:01:98:
26:67:7a:f6:fc:7a:13:0e:40:ee:a0:cf:c7:24:82:
9c:78:72:73:6b:90:28:f9:61:f3:f5:c6:33:e3:b7:
b8:b7:f1:4d:21:0f:07:17:0d:bc:8e:a4:2d:df:5a:
39:b6:34:47:a9:3b:ec:c8:f7:c7:dd:c8:ff:c5:13:
12:51:80:a7:cd:5d:5a:1c:4f:11:7c:46:84:03:96:
35:78:5e:e0:48:46:96:86:be:27:0b:28:bf:6a:27:
2d:5c:0a:67:c7:c8:fc:ec:75:d0:54:00:a8:0c:58:
05:23:a0:1e:3d:79:9e:8e:1f:41:4d:8f:17:94:6b:
bb:d1:e1:00:09:ed:dc:84:c3:b6:87:c6:50:e3:a4:
1b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:77:26:B6:E5:52:67:43:32:DE:0A:3D:13:6F:D0:4C:67:FF:13:CE
X509v3 Authority Key Identifier:
keyid:EA:51:87:CB:F7:38:C0:E9:D7:A3:ED:9B:FC:B2:C4:A6:77:22:64:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6lGHy_c4wOnXo-2b_LLEpnciZIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/05f238-bb62-455d-9921-3a2722507ee5/1/6lGHy_c4wOnXo-2b_LLEpnciZIM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/05f238-bb62-455d-9921-3a2722507ee5/1/6lGHy_c4wOnXo-2b_LLEpnciZIM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:ac:d2:fd:90:33:57:36:ab:24:af:bb:6e:05:63:6c:5d:2b:
81:67:69:fb:91:28:34:9c:6c:bd:1b:6d:68:8e:ce:57:f0:28:
09:bf:ef:0e:81:a3:56:97:be:4c:b7:01:e2:75:90:7d:27:82:
91:fb:15:a2:1e:12:86:a9:f4:90:8b:69:24:18:b1:67:be:e3:
3a:02:29:8e:dd:9e:4e:50:bd:c4:d9:07:f8:90:92:c7:ef:28:
a7:81:21:11:d0:2a:ba:2d:31:09:23:94:bb:58:4a:1e:b5:05:
19:3f:f3:f7:e0:11:e9:b8:f7:b7:1a:46:99:3a:72:ee:68:9f:
52:a3:90:9b:77:3a:09:e9:05:f0:0b:7e:3e:b5:47:f9:f2:f2:
fb:14:1f:f2:38:c9:5d:e6:34:0a:ef:e4:46:f4:28:d2:4e:e3:
2f:4a:5d:88:7f:eb:4a:cb:af:3d:c3:45:d5:5b:18:39:39:21:
bc:da:05:8a:29:83:27:5c:60:d9:41:0d:7a:70:e7:a9:af:1e:
8a:94:60:8f:c7:b8:7f:9e:9b:44:26:3e:67:48:05:72:38:d2:
ab:22:1c:b9:d6:fa:ab:bb:ac:ed:f6:11:3b:03:9f:5e:a7:20:
27:2b:68:2b:25:7a:93:62:92:42:a4:94:99:23:e5:e4:dd:6f:
1e:cc:42:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 9 09:28:01 2025 by rpki-client