Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/4bb067-c365-452e-a93e-39da1ae8b731/1/6xU9o8JM4SNuIMRoYWNdyO-1apI.mft
File: 6xU9o8JM4SNuIMRoYWNdyO-1apI.mft (raw, json)
Hash identifier: ce8EKrlKBtLrHCUn0vSQpS6NFmPbn1xrPWmE+MxfkyU=
Subject key identifier: 3D:53:53:36:D5:0E:4F:F0:76:10:EC:CE:00:B9:E0:D9:3F:FC:54:FC
Authority key identifier: EB:15:3D:A3:C2:4C:E1:23:6E:20:C4:68:61:63:5D:C8:EF:B5:6A:92
Certificate issuer: /CN=eb153da3c24ce1236e20c46861635dc8efb56a92
Certificate serial: 019A1C507C60F60BA2D8E0E02BA4298207E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6xU9o8JM4SNuIMRoYWNdyO-1apI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/4bb067-c365-452e-a93e-39da1ae8b731/1/6xU9o8JM4SNuIMRoYWNdyO-1apI.mft
Manifest number: 0DD9
Signing time: Sat 25 Oct 2025 17:00:27 +0000
Manifest this update: Sat 25 Oct 2025 17:00:27 +0000
Manifest next update: Sun 26 Oct 2025 17:00:27 +0000
Files and hashes: 1: 6xU9o8JM4SNuIMRoYWNdyO-1apI.crl (hash: 9GDGiVahF2JXkt2aBqxVpg81+6UJGceEa659pvpys4g=)
2: ipmJ5LQmK4ddp63lgFVAIAYopkE.roa (hash: YVYb+vZufn7OkrWKbNACiC73zlWWGlO/lMGiNA3e8zY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/4bb067-c365-452e-a93e-39da1ae8b731/1/6xU9o8JM4SNuIMRoYWNdyO-1apI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/4bb067-c365-452e-a93e-39da1ae8b731/1/6xU9o8JM4SNuIMRoYWNdyO-1apI.mft
rsync://rpki.ripe.net/repository/DEFAULT/6xU9o8JM4SNuIMRoYWNdyO-1apI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 11:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1c:50:7c:60:f6:0b:a2:d8:e0:e0:2b:a4:29:82:07:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb153da3c24ce1236e20c46861635dc8efb56a92
Validity
Not Before: Oct 25 17:00:27 2025 GMT
Not After : Oct 26 17:00:27 2025 GMT
Subject: CN=3d535336d50e4ff07610ecce00b9e0d93ffc54fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:56:bb:16:ab:84:ff:ad:bc:09:0a:e8:2c:11:
67:2e:4e:fe:c4:fb:9f:b9:3c:92:a7:c3:fb:a9:c7:
0b:cb:fd:2c:39:e5:78:79:77:94:9f:fd:9c:93:f4:
4c:3d:77:88:f7:15:77:1b:be:a8:bf:d5:eb:7d:b0:
50:4b:72:0a:1f:30:6c:00:fa:37:a6:17:15:3b:16:
e1:33:b8:f5:ba:19:30:61:d1:3b:90:cf:f5:91:ca:
e2:87:a5:48:87:0b:c4:5f:91:a5:d0:55:16:83:4a:
d0:42:78:2f:26:97:8d:ad:c0:17:72:5a:91:2d:50:
69:f5:8a:8c:44:cc:81:3b:ae:d6:85:53:b8:9f:29:
ef:b0:d9:6f:ac:d3:46:7f:f2:40:0c:fa:52:5d:93:
18:58:52:18:3a:00:b3:80:61:bb:a6:f2:0b:b2:6d:
ed:70:71:10:7c:71:07:f3:b2:5e:05:f2:e5:de:fe:
5a:9f:aa:49:47:ba:5f:74:61:3e:5f:38:e3:d7:a0:
77:b8:06:55:43:b6:cc:2f:2b:67:8a:82:c0:ae:91:
30:9d:73:9d:8c:50:6e:20:5f:25:f2:ea:15:61:76:
fb:a3:6d:6e:28:d6:3e:85:f3:3f:7e:da:ed:47:68:
66:9c:65:e4:d5:13:c9:80:10:87:d3:1f:29:f6:1f:
28:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:53:53:36:D5:0E:4F:F0:76:10:EC:CE:00:B9:E0:D9:3F:FC:54:FC
X509v3 Authority Key Identifier:
keyid:EB:15:3D:A3:C2:4C:E1:23:6E:20:C4:68:61:63:5D:C8:EF:B5:6A:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6xU9o8JM4SNuIMRoYWNdyO-1apI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4bb067-c365-452e-a93e-39da1ae8b731/1/6xU9o8JM4SNuIMRoYWNdyO-1apI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4bb067-c365-452e-a93e-39da1ae8b731/1/6xU9o8JM4SNuIMRoYWNdyO-1apI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:e4:7a:83:f8:12:52:b8:d7:e0:9f:68:28:3a:7f:f1:fc:8f:
ed:7c:4a:e4:8d:1e:39:fd:13:52:e9:33:88:02:ff:60:c0:f3:
f2:b4:c0:52:27:f0:64:0c:8f:69:0b:17:a1:ca:5c:c2:31:69:
86:21:ec:9d:26:5d:58:53:ce:1d:62:de:05:6d:a7:6f:c9:07:
5f:b3:67:21:cf:e5:7d:d1:be:2b:d8:f8:b1:ac:66:85:5e:cb:
6f:c1:d0:11:09:24:81:a3:71:a1:21:27:2d:b8:f5:c1:d0:4c:
9a:b9:62:26:5c:05:0f:c5:95:80:4a:5a:2a:0c:1a:f5:2b:01:
62:88:12:bc:cc:11:38:78:f7:81:74:f9:e6:15:1e:b8:bd:1f:
7b:4b:a7:c9:8b:e1:ff:e0:48:e3:49:02:95:0f:5d:f2:4b:ac:
87:eb:f7:5c:9f:af:aa:08:bd:6d:35:a8:c3:a0:03:9c:75:9c:
97:cc:f2:19:7d:f2:66:07:19:ac:67:3a:6c:2c:f5:ae:26:1f:
29:c3:f6:cc:6b:d8:98:74:05:29:f9:c2:a5:a8:65:96:08:95:
c7:e1:6d:7a:7a:69:c3:fa:0f:87:da:a3:0e:e8:78:03:30:c9:
20:e2:b5:04:cf:a6:57:83:4f:2b:97:de:17:22:0b:69:a7:11:
8b:0f:a4:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 20:53:37 2025 by rpki-client