Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/1b9202-4869-4d45-9521-eb11b4954f33/1/6ZQF7o9djnZOkL1mvdHomsEoCeg.mft
File: 6ZQF7o9djnZOkL1mvdHomsEoCeg.mft (raw, json)
Hash identifier: bHSswpfMY4MHgwJe2lYYmAxaJYr1fm9zKt+4kXxPL+k=
Subject key identifier: 83:79:8A:D4:3F:38:58:50:A6:82:8B:38:54:D9:58:11:FB:2D:4A:E7
Authority key identifier: E9:94:05:EE:8F:5D:8E:76:4E:90:BD:66:BD:D1:E8:9A:C1:28:09:E8
Certificate issuer: /CN=e99405ee8f5d8e764e90bd66bdd1e89ac12809e8
Certificate serial: 019A72CAB2B616C1E5B651F2C76B325A32BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6ZQF7o9djnZOkL1mvdHomsEoCeg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/1b9202-4869-4d45-9521-eb11b4954f33/1/6ZQF7o9djnZOkL1mvdHomsEoCeg.mft
Manifest number: 0A76
Signing time: Tue 11 Nov 2025 12:01:17 +0000
Manifest this update: Tue 11 Nov 2025 12:01:17 +0000
Manifest next update: Wed 12 Nov 2025 12:01:17 +0000
Files and hashes: 1: 6ZQF7o9djnZOkL1mvdHomsEoCeg.crl (hash: naLgzUhZunLnLuIiO4jjwi4umPNFs355d1yNQTRPVlc=)
2: vDzT1MfGHy3qiiGgUF2NvHG69NY.roa (hash: /QoWZln+ZcMlohGoxqm79B+9B4Oq5GX6wiGGVl8wkGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/1b9202-4869-4d45-9521-eb11b4954f33/1/6ZQF7o9djnZOkL1mvdHomsEoCeg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/1b9202-4869-4d45-9521-eb11b4954f33/1/6ZQF7o9djnZOkL1mvdHomsEoCeg.mft
rsync://rpki.ripe.net/repository/DEFAULT/6ZQF7o9djnZOkL1mvdHomsEoCeg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:b2:b6:16:c1:e5:b6:51:f2:c7:6b:32:5a:32:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e99405ee8f5d8e764e90bd66bdd1e89ac12809e8
Validity
Not Before: Nov 11 12:01:17 2025 GMT
Not After : Nov 12 12:01:17 2025 GMT
Subject: CN=83798ad43f385850a6828b3854d95811fb2d4ae7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a8:a3:ef:dd:3d:38:96:2a:ad:d6:34:14:1d:
71:41:40:42:f8:c2:0b:c1:eb:fa:f3:da:3c:c8:4b:
1f:fc:1c:0f:a7:58:02:34:f2:4d:b6:be:43:c1:a6:
e9:84:4d:31:a1:40:a1:16:43:72:26:e4:d0:bf:2b:
d3:4b:2e:ed:a5:e2:f5:db:98:d2:39:79:44:d2:58:
2e:9c:b7:1a:60:76:af:c2:95:7d:e5:a0:ac:6e:f1:
ba:38:06:c1:26:1b:b9:fe:32:37:cf:40:1b:c9:17:
ea:b8:55:8b:c5:5d:5e:15:52:37:d2:6e:50:8d:43:
85:30:14:b8:2c:b3:01:ce:d0:d1:37:bc:0f:34:50:
82:ee:62:ca:04:ff:8f:8e:30:70:a8:e9:20:bf:66:
a1:59:b4:37:56:d9:93:b1:22:fe:35:02:14:6b:3d:
cf:ed:de:a0:fb:66:5c:28:48:2a:f3:97:6b:d9:6a:
4e:96:e1:31:dd:1a:a3:d3:ce:01:3a:42:e2:f0:93:
8f:f0:4b:da:88:a8:08:64:f4:64:99:69:ac:ec:c7:
52:ae:7e:e4:4a:a6:20:9a:64:4a:ec:2a:82:9c:ca:
89:b4:06:72:08:f1:9b:a9:38:35:80:f8:42:41:bb:
9b:ac:a0:ce:ca:95:38:f9:39:ea:a2:78:fe:be:5d:
a4:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:79:8A:D4:3F:38:58:50:A6:82:8B:38:54:D9:58:11:FB:2D:4A:E7
X509v3 Authority Key Identifier:
keyid:E9:94:05:EE:8F:5D:8E:76:4E:90:BD:66:BD:D1:E8:9A:C1:28:09:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ZQF7o9djnZOkL1mvdHomsEoCeg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1b9202-4869-4d45-9521-eb11b4954f33/1/6ZQF7o9djnZOkL1mvdHomsEoCeg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1b9202-4869-4d45-9521-eb11b4954f33/1/6ZQF7o9djnZOkL1mvdHomsEoCeg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:d8:4c:b8:f7:4c:5d:1a:91:42:50:34:f0:1c:cc:99:66:80:
0d:b3:fc:a7:00:df:03:0a:53:d8:58:95:85:e2:1b:b3:04:a6:
3f:6a:a8:b0:0f:40:e3:c4:07:d9:8c:69:06:f9:4b:d7:fe:19:
67:a4:1f:a1:87:db:fa:b1:06:39:15:45:aa:68:a6:f7:21:b8:
e5:50:83:08:e1:0b:83:1b:8f:bb:1f:1c:c1:e5:93:de:19:8b:
82:78:a0:03:c4:a7:68:bf:ab:e3:b2:62:13:d0:30:34:3e:c0:
1d:09:93:4c:f3:74:7a:20:5e:ff:f5:69:ba:6b:72:e8:e3:a9:
e9:55:1c:52:6a:1f:84:04:94:c6:e6:d7:20:b7:2c:13:e4:b5:
2b:28:0a:d3:66:73:03:c3:a7:cc:4e:d7:2c:9e:40:45:04:5b:
0d:07:a5:52:ae:fd:ca:a1:fd:69:09:18:42:e8:dd:6e:0c:14:
76:07:b1:fe:5a:b0:bd:4b:61:b7:5a:33:da:b5:b1:ee:f0:30:
3f:02:b7:dd:d3:f6:ee:61:9f:16:19:01:2d:be:60:9e:63:63:
5f:9f:06:58:75:f9:72:e7:34:3e:b8:1d:99:9c:2b:4f:40:2e:
77:25:51:f7:d4:f5:8f:fb:b6:ac:2c:2d:85:6a:cf:0f:d2:7a:
5c:7b:18:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:15:44 2025 by rpki-client