Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/ad64bb-d539-4a8e-b0e6-5f89b885f729/1/6Nh4qlMIGJO6UoUk7xQ-qScTkrg.mft
File: 6Nh4qlMIGJO6UoUk7xQ-qScTkrg.mft (raw, json)
Hash identifier: CmkW3LpdhQy2t+hOx08vdu6QKCcgyY9g7xwU4sT+YNY=
Subject key identifier: 77:E6:11:DB:A5:2F:13:6B:67:EF:E5:E7:76:7C:58:AA:77:C3:F0:1D
Authority key identifier: E8:D8:78:AA:53:08:18:93:BA:52:85:24:EF:14:3E:A9:27:13:92:B8
Certificate issuer: /CN=e8d878aa53081893ba528524ef143ea9271392b8
Certificate serial: 019A729388F4A9E1C4010A7B33F078AE60F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Nh4qlMIGJO6UoUk7xQ-qScTkrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/ad64bb-d539-4a8e-b0e6-5f89b885f729/1/6Nh4qlMIGJO6UoUk7xQ-qScTkrg.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 11:01:02 +0000
Manifest this update: Tue 11 Nov 2025 11:01:02 +0000
Manifest next update: Wed 12 Nov 2025 11:01:02 +0000
Files and hashes: 1: 5sx0qR-B9y6mGDgRbtSLnw5KGsw.roa (hash: Nyr6wmMl755m5pBB7dzD6+3NgxbHjvOEn2wkeXz+Yqw=)
2: 6Nh4qlMIGJO6UoUk7xQ-qScTkrg.crl (hash: gT01P9NGZwkQUh/xTYKeGdtU0YhTkmObh9zvWP181EY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/ad64bb-d539-4a8e-b0e6-5f89b885f729/1/6Nh4qlMIGJO6UoUk7xQ-qScTkrg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/ad64bb-d539-4a8e-b0e6-5f89b885f729/1/6Nh4qlMIGJO6UoUk7xQ-qScTkrg.mft
rsync://rpki.ripe.net/repository/DEFAULT/6Nh4qlMIGJO6UoUk7xQ-qScTkrg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:88:f4:a9:e1:c4:01:0a:7b:33:f0:78:ae:60:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8d878aa53081893ba528524ef143ea9271392b8
Validity
Not Before: Nov 11 11:01:02 2025 GMT
Not After : Nov 12 11:01:02 2025 GMT
Subject: CN=77e611dba52f136b67efe5e7767c58aa77c3f01d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:76:8a:ae:ed:19:c0:84:e8:d8:19:58:78:b3:
b0:fe:7b:37:2e:f2:96:9e:2e:5e:dc:33:eb:dd:79:
cc:d9:7f:63:94:c2:4a:52:8e:bc:46:6e:b4:ce:fe:
64:4a:e5:f8:b2:42:3c:61:64:6b:c1:f2:5c:69:6f:
dc:fa:74:7d:ac:2d:89:7b:17:3e:a4:cf:32:22:10:
91:d7:b6:24:21:a2:6b:78:54:f2:71:96:a0:4f:b6:
21:8e:1e:4e:3f:44:0d:83:15:09:cc:36:fd:56:38:
fb:09:23:d0:79:7a:39:44:41:76:3f:d5:26:c1:8f:
26:9b:16:e6:be:b9:7c:5d:c9:94:44:f0:08:77:03:
80:70:7b:80:0c:3b:db:31:af:4f:44:51:09:c4:60:
3d:6f:54:4a:49:38:22:65:59:1d:f1:34:a4:d1:19:
13:52:87:d7:b5:62:b0:a8:2b:4c:ca:a7:7a:ed:df:
41:78:61:9f:bf:b8:94:c7:83:ad:fb:cc:ed:93:c0:
80:0c:b2:dc:ef:a8:ac:27:60:ef:ac:25:5e:74:b6:
90:fd:5f:f2:b1:ed:d9:58:d9:fb:b7:1a:92:f7:68:
60:08:73:54:c0:cb:85:9b:f5:d0:ec:71:af:5d:ee:
16:8d:55:ad:f5:ea:16:a0:96:82:88:80:1c:84:0e:
cc:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:E6:11:DB:A5:2F:13:6B:67:EF:E5:E7:76:7C:58:AA:77:C3:F0:1D
X509v3 Authority Key Identifier:
keyid:E8:D8:78:AA:53:08:18:93:BA:52:85:24:EF:14:3E:A9:27:13:92:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Nh4qlMIGJO6UoUk7xQ-qScTkrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ad64bb-d539-4a8e-b0e6-5f89b885f729/1/6Nh4qlMIGJO6UoUk7xQ-qScTkrg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ad64bb-d539-4a8e-b0e6-5f89b885f729/1/6Nh4qlMIGJO6UoUk7xQ-qScTkrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:f9:29:17:35:8f:7b:e2:d2:7c:15:92:94:45:48:eb:c3:70:
ac:5b:dd:69:6a:dd:18:c8:8d:58:22:50:00:6d:0d:79:dd:30:
44:4c:07:df:ac:2e:b8:85:d5:27:7f:6e:92:84:de:03:1d:e4:
5e:ed:8c:16:e2:36:e6:53:3b:2e:4a:98:3e:2c:c6:c4:9c:95:
1c:d1:52:c5:30:94:c9:d4:37:12:d0:63:71:a9:31:7c:f1:bf:
31:ee:05:fa:fe:bf:ab:96:63:b5:fe:b3:19:db:5c:07:ab:80:
64:0c:e7:06:d0:1e:95:c9:23:5e:53:d9:42:f1:c6:7a:9e:d7:
42:b5:90:c0:02:f0:38:b8:66:0b:70:3b:8e:1c:3f:1f:93:ce:
4f:ad:60:7e:5a:e0:18:4f:b8:74:78:3a:de:46:a9:ed:c7:34:
17:d6:83:1d:7a:60:8d:2c:d7:71:b0:25:83:8c:02:4c:24:10:
1b:d8:9b:1d:ca:da:6d:ef:64:65:af:e7:5d:f3:c7:ff:34:f0:
23:80:b4:19:ef:84:5f:aa:bb:6e:34:21:76:f6:24:a4:5a:ec:
d6:df:eb:e8:93:8b:c5:67:b0:b3:51:3b:4c:b2:bf:55:88:e6:
93:97:45:f1:8d:02:8e:de:9d:07:f9:d8:53:0d:b8:13:ac:dc:
40:b7:f7:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:16:17 2025 by rpki-client