Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/1af4a5-0d6c-4776-be5c-be852f644201/1/6RbcnbTknecbL9CBna6FOusFOwY.mft
File: 6RbcnbTknecbL9CBna6FOusFOwY.mft (raw, json)
Hash identifier: +b86HZsghvwkKOoFw16XCbBSkM8zNvbYp24P+CBctyE=
Subject key identifier: F6:CA:1E:72:B8:9F:9B:96:A3:EE:61:31:24:AC:D3:E6:9A:8F:E5:E4
Authority key identifier: E9:16:DC:9D:B4:E4:9D:E7:1B:2F:D0:81:9D:AE:85:3A:EB:05:3B:06
Certificate issuer: /CN=e916dc9db4e49de71b2fd0819dae853aeb053b06
Certificate serial: 019A5AC1D75E169899F16698649689D130B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6RbcnbTknecbL9CBna6FOusFOwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/1af4a5-0d6c-4776-be5c-be852f644201/1/6RbcnbTknecbL9CBna6FOusFOwY.mft
Manifest number: 0A09
Signing time: Thu 06 Nov 2025 20:00:44 +0000
Manifest this update: Thu 06 Nov 2025 20:00:44 +0000
Manifest next update: Fri 07 Nov 2025 20:00:44 +0000
Files and hashes: 1: 6RbcnbTknecbL9CBna6FOusFOwY.crl (hash: tJShKR9YTetMra3njjZDfsV15kUzx6OlqQsEuXflR1A=)
2: KcWyo6HDH_f-Oalgo-AMzFyAZhU.roa (hash: lf0GIwDADpEwI5JyEJwH/aQKBfcwZ4TLIhoTMR/zw40=)
3: th7EIeqoBKrwZJJeDzKMKUXwuxc.roa (hash: ALjgBdMNXEgXhwMxQ4HYp3b8XrLy/GtDIe9aOPg2/3k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/1af4a5-0d6c-4776-be5c-be852f644201/1/6RbcnbTknecbL9CBna6FOusFOwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/1af4a5-0d6c-4776-be5c-be852f644201/1/6RbcnbTknecbL9CBna6FOusFOwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6RbcnbTknecbL9CBna6FOusFOwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 07 Nov 2025 20:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:5a:c1:d7:5e:16:98:99:f1:66:98:64:96:89:d1:30:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e916dc9db4e49de71b2fd0819dae853aeb053b06
Validity
Not Before: Nov 6 20:00:44 2025 GMT
Not After : Nov 7 20:00:44 2025 GMT
Subject: CN=f6ca1e72b89f9b96a3ee613124acd3e69a8fe5e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:8a:72:30:37:98:6f:dc:98:7d:c7:fb:2c:27:
ee:00:85:ea:f8:9c:e5:a9:06:d3:ed:e6:92:5f:3b:
54:9d:c9:7f:b6:5d:89:23:2a:ca:08:bf:e3:91:fa:
02:a1:20:22:38:74:90:9f:b3:06:f9:ab:ca:9c:51:
d4:18:da:5b:a3:0e:60:c0:b9:22:0d:77:af:99:45:
5b:70:b8:4b:98:ca:92:7e:36:43:92:3d:50:3a:9e:
d9:a4:be:55:41:63:b0:8b:3d:a1:1b:b6:71:bd:d8:
7b:c9:92:96:e9:93:43:32:f8:20:9b:f3:d8:6f:b2:
f8:23:49:31:ed:c7:d6:e0:03:38:13:07:e1:39:e4:
c7:51:8f:fa:b9:e3:ff:2f:43:a9:b1:ed:5d:1a:03:
02:19:4b:2c:6f:c2:1b:b0:74:79:5e:b0:c4:d8:9f:
c4:54:77:17:c0:b5:b3:ae:50:a5:3e:ee:6c:02:a9:
20:20:dc:46:80:f7:55:e7:a6:08:d0:42:8c:bc:e4:
61:40:4b:88:af:a8:cf:14:0b:56:b2:43:d8:45:7a:
04:25:50:ea:1c:39:c5:18:dc:6a:02:b9:8a:53:d2:
81:12:32:2f:4e:5b:78:96:0b:ca:1a:9b:9b:41:00:
10:a6:07:d7:3a:16:cb:4d:1b:50:25:20:bb:4a:47:
48:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:CA:1E:72:B8:9F:9B:96:A3:EE:61:31:24:AC:D3:E6:9A:8F:E5:E4
X509v3 Authority Key Identifier:
keyid:E9:16:DC:9D:B4:E4:9D:E7:1B:2F:D0:81:9D:AE:85:3A:EB:05:3B:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6RbcnbTknecbL9CBna6FOusFOwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/1af4a5-0d6c-4776-be5c-be852f644201/1/6RbcnbTknecbL9CBna6FOusFOwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/1af4a5-0d6c-4776-be5c-be852f644201/1/6RbcnbTknecbL9CBna6FOusFOwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:d8:6d:17:3f:38:01:f1:c9:77:12:a5:c0:20:97:82:6e:90:
d0:0d:18:43:5f:de:15:72:33:4b:54:8a:ea:0e:44:6c:9b:85:
2c:a6:65:30:ee:f2:ce:1f:d4:52:43:0e:55:c6:4f:b0:d0:95:
33:32:02:18:b1:a4:97:7b:6b:9f:7c:62:ca:65:57:38:db:cb:
df:d5:ef:a6:d3:55:db:40:de:f4:59:75:2e:b8:2a:c8:d8:64:
9b:0b:3d:f2:84:a2:4a:99:6e:cf:9b:c9:fe:22:23:63:5f:8c:
d1:12:c4:91:3d:02:7d:f9:43:e4:59:95:36:01:d5:eb:08:97:
58:b6:b3:54:0b:f5:ce:50:9d:90:86:73:4d:35:55:f6:91:44:
bc:69:1a:7b:b8:ff:de:ef:85:3d:30:d6:82:dc:df:5f:ca:ef:
7c:3a:9a:d0:31:57:64:40:08:e3:c2:93:db:ab:9f:59:e2:c9:
bf:cf:2f:f3:57:7b:0e:eb:df:67:5d:2b:13:ce:cf:42:84:e7:
90:00:0f:1e:fe:35:63:98:8e:8a:2b:54:08:82:e2:50:eb:c3:
82:21:a7:f5:63:9f:43:33:f7:79:7f:0f:50:cc:96:98:e5:0d:
d0:b8:e3:3b:0a:75:11:18:ba:61:63:d2:e4:36:92:4f:a8:c9:
c5:bc:2e:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 7 00:27:01 2025 by rpki-client