Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/b8c30c-82d9-46bb-bb07-9ca100428f10/1/6zN-rWubk90NdYq_nXswMHKpnrk.mft
File: 6zN-rWubk90NdYq_nXswMHKpnrk.mft (raw, json)
Hash identifier: Yp72ukKuGnvcSe5nlgS30fe7jOIVKgfNrZtr3EHNoHA=
Subject key identifier: 59:17:4B:98:80:6B:19:19:96:01:6A:17:F3:0A:D1:00:A7:3F:CE:E6
Authority key identifier: EB:33:7E:AD:6B:9B:93:DD:0D:75:8A:BF:9D:7B:30:30:72:A9:9E:B9
Certificate issuer: /CN=eb337ead6b9b93dd0d758abf9d7b303072a99eb9
Certificate serial: 019A7149D263D211625FE684A581D97794FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6zN-rWubk90NdYq_nXswMHKpnrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/b8c30c-82d9-46bb-bb07-9ca100428f10/1/6zN-rWubk90NdYq_nXswMHKpnrk.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 05:00:54 +0000
Manifest this update: Tue 11 Nov 2025 05:00:54 +0000
Manifest next update: Wed 12 Nov 2025 05:00:54 +0000
Files and hashes: 1: 6zN-rWubk90NdYq_nXswMHKpnrk.crl (hash: h+Ei7BnV9j91gDhUrDlwoS1IWk3UR6jYe90d5ZvP6kk=)
2: qKIz6NW658QiWYOFcDWwBberXPk.roa (hash: XrH4aIQQINYqHfRuibGZ0Zr0PYKUQ4mNWHvnArdnsa0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/b8c30c-82d9-46bb-bb07-9ca100428f10/1/6zN-rWubk90NdYq_nXswMHKpnrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/b8c30c-82d9-46bb-bb07-9ca100428f10/1/6zN-rWubk90NdYq_nXswMHKpnrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/6zN-rWubk90NdYq_nXswMHKpnrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:d2:63:d2:11:62:5f:e6:84:a5:81:d9:77:94:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb337ead6b9b93dd0d758abf9d7b303072a99eb9
Validity
Not Before: Nov 11 05:00:54 2025 GMT
Not After : Nov 12 05:00:54 2025 GMT
Subject: CN=59174b98806b191996016a17f30ad100a73fcee6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:62:0c:db:38:09:4b:4a:36:a3:5c:d0:4c:bb:
76:fa:7a:4c:44:e7:eb:c8:f1:9b:5c:d4:52:32:9a:
dc:de:dd:c7:27:52:e4:4b:ea:5a:b3:be:62:1f:20:
cc:98:7c:22:3d:e3:69:f7:bd:0e:6d:5b:3b:d0:34:
99:0d:ce:05:ef:62:0e:e6:4e:79:bc:cc:03:34:46:
47:b9:ab:91:52:30:de:c9:9b:05:0f:ef:64:29:0f:
32:37:9b:db:05:4f:16:4b:32:fc:da:8e:b5:ac:96:
2b:59:2c:b8:08:6c:81:99:b4:60:4c:b1:08:d5:21:
20:93:14:7a:89:c7:6d:4e:4e:3d:88:1a:bc:12:47:
c1:eb:11:ea:2c:81:64:4b:dc:e5:8e:53:91:bb:63:
a3:f9:3d:25:b0:5b:3c:61:05:b0:78:2e:02:62:e2:
47:22:b3:14:8a:02:1b:62:e8:d0:f6:c3:8b:95:76:
f2:b3:19:f3:9c:d6:9e:4c:28:62:80:85:4d:2f:72:
9a:ec:a6:60:b8:a7:62:8b:6a:e1:36:98:71:6b:80:
51:6b:63:3f:d3:ad:cb:fd:1e:c0:0d:da:74:27:90:
16:71:6b:d1:dc:ff:29:13:2e:97:c0:4f:9f:cb:32:
af:f4:59:db:0d:c7:96:bf:b4:eb:17:11:62:6f:4b:
c8:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:17:4B:98:80:6B:19:19:96:01:6A:17:F3:0A:D1:00:A7:3F:CE:E6
X509v3 Authority Key Identifier:
keyid:EB:33:7E:AD:6B:9B:93:DD:0D:75:8A:BF:9D:7B:30:30:72:A9:9E:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zN-rWubk90NdYq_nXswMHKpnrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b8c30c-82d9-46bb-bb07-9ca100428f10/1/6zN-rWubk90NdYq_nXswMHKpnrk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b8c30c-82d9-46bb-bb07-9ca100428f10/1/6zN-rWubk90NdYq_nXswMHKpnrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:ea:bd:39:bd:42:64:d5:29:5f:0d:c5:69:5c:02:f7:ec:05:
de:21:f8:4b:e4:09:3c:ba:a0:05:1f:ff:68:2b:19:58:16:ce:
6c:39:8f:c5:d1:d4:e1:f0:d5:bf:b4:5b:b0:cc:a1:a3:5c:da:
50:f2:d3:bb:23:01:e9:f8:d3:53:4a:f7:fe:28:28:99:02:68:
40:15:f6:c5:c1:9d:f6:d4:92:49:70:45:fc:80:25:de:10:55:
eb:fc:38:ff:da:dd:05:09:79:15:57:72:cb:d0:bb:ff:4f:4b:
56:b8:a2:38:a5:d8:57:32:5f:4c:da:f0:a3:0b:e9:8f:9d:20:
60:d6:fd:6d:10:01:bd:20:ff:f7:af:c8:78:6c:92:7e:02:66:
05:f2:e3:ed:ba:fd:e4:6b:9a:3b:f8:a3:2f:56:31:8b:98:6b:
7f:4d:57:5a:ef:e0:7f:eb:2c:fe:1f:74:07:f3:ed:cf:b6:50:
6e:1f:95:a9:16:65:e1:9c:3e:17:d3:60:04:c3:d8:2d:70:1b:
b3:6e:1e:a6:f9:33:1e:8f:b8:49:09:19:72:5a:1a:d9:f1:f2:
78:99:b1:65:37:ee:73:e0:c5:70:01:0b:81:3e:92:a2:3a:9c:
90:90:a3:74:4c:3d:fd:a7:35:52:3f:27:42:34:c3:44:10:26:
d5:96:e0:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:05:35 2025 by rpki-client