Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/fde2f5-af35-4a49-9b44-946d92c3f093/1/6e5l7GbZD_j_-NFwcyBXdALoXMc.mft
File: 6e5l7GbZD_j_-NFwcyBXdALoXMc.mft (raw, json)
Hash identifier: d041qBkWkmhmlKhS7IA/Qih8Xr3xk7kuuLyoKXF1VhA=
Subject key identifier: 11:55:ED:7C:DB:7B:5E:EF:8C:5A:6C:64:5B:73:ED:4F:E7:01:E3:C1
Authority key identifier: E9:EE:65:EC:66:D9:0F:F8:FF:F8:D1:70:73:20:57:74:02:E8:5C:C7
Certificate issuer: /CN=e9ee65ec66d90ff8fff8d1707320577402e85cc7
Certificate serial: 019A7112AEFE052A8D3C50ED8CBB28212704
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6e5l7GbZD_j_-NFwcyBXdALoXMc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/fde2f5-af35-4a49-9b44-946d92c3f093/1/6e5l7GbZD_j_-NFwcyBXdALoXMc.mft
Manifest number: 1119
Signing time: Tue 11 Nov 2025 04:00:41 +0000
Manifest this update: Tue 11 Nov 2025 04:00:41 +0000
Manifest next update: Wed 12 Nov 2025 04:00:41 +0000
Files and hashes: 1: 49q3DDmrg6cVtppsLABS81MGkqg.roa (hash: Y49UGOvEecC7Z5Ts0nifT62msA+Ws1fglGSRVZSw/Hs=)
2: 6e5l7GbZD_j_-NFwcyBXdALoXMc.crl (hash: 10mWo3DFUk2vNMMLfoZMyL3jo1C9E+eRLijEnAUr3oc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/fde2f5-af35-4a49-9b44-946d92c3f093/1/6e5l7GbZD_j_-NFwcyBXdALoXMc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/fde2f5-af35-4a49-9b44-946d92c3f093/1/6e5l7GbZD_j_-NFwcyBXdALoXMc.mft
rsync://rpki.ripe.net/repository/DEFAULT/6e5l7GbZD_j_-NFwcyBXdALoXMc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:ae:fe:05:2a:8d:3c:50:ed:8c:bb:28:21:27:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9ee65ec66d90ff8fff8d1707320577402e85cc7
Validity
Not Before: Nov 11 04:00:41 2025 GMT
Not After : Nov 12 04:00:41 2025 GMT
Subject: CN=1155ed7cdb7b5eef8c5a6c645b73ed4fe701e3c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:57:b1:70:11:6f:a9:8c:e2:13:3b:73:47:38:
59:12:5c:d4:46:72:66:91:1a:af:06:c6:ae:e0:85:
e2:b3:a5:8d:84:d2:20:c8:e3:95:17:ed:cc:60:b5:
d1:2c:23:fb:89:9c:f6:55:ca:e5:7a:da:e8:18:d2:
06:71:19:eb:ae:a6:59:80:61:4c:17:06:ff:07:1e:
38:9c:53:67:da:dd:8a:67:69:15:2d:c5:29:94:70:
86:5f:38:52:ca:86:e9:8f:78:dd:94:3e:a2:5a:b8:
ac:62:46:3d:2b:14:4d:ad:a5:d6:d3:5b:85:4b:54:
eb:69:c5:60:5a:62:54:a6:b7:27:8c:d9:c6:27:12:
4e:70:7e:57:5a:04:13:f3:42:29:34:df:eb:b4:f5:
0f:35:47:af:37:60:1c:c9:63:9a:57:38:ed:8f:ff:
c4:9f:89:12:9f:cf:09:2b:64:9b:76:de:3f:62:91:
bd:62:e7:63:fc:77:4a:fc:b0:7c:c4:bf:b5:96:c5:
4a:6e:85:83:b8:fa:8c:12:66:00:cb:87:5d:d4:77:
94:be:0f:aa:05:68:e9:14:4f:af:54:c1:d2:e6:9b:
e8:99:40:ef:74:65:55:ad:b1:0a:7c:5b:b1:da:10:
4b:9d:ac:ed:49:99:23:81:20:51:a8:52:91:39:76:
27:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:55:ED:7C:DB:7B:5E:EF:8C:5A:6C:64:5B:73:ED:4F:E7:01:E3:C1
X509v3 Authority Key Identifier:
keyid:E9:EE:65:EC:66:D9:0F:F8:FF:F8:D1:70:73:20:57:74:02:E8:5C:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e5l7GbZD_j_-NFwcyBXdALoXMc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/fde2f5-af35-4a49-9b44-946d92c3f093/1/6e5l7GbZD_j_-NFwcyBXdALoXMc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/fde2f5-af35-4a49-9b44-946d92c3f093/1/6e5l7GbZD_j_-NFwcyBXdALoXMc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:39:7d:95:64:14:da:e2:19:9a:39:55:28:d7:c7:48:26:11:
36:d9:c7:5b:3f:a4:cd:67:d5:20:36:b7:56:b9:f7:a4:04:5a:
92:58:cd:6c:bd:6d:ae:5f:67:cc:34:a0:89:a2:b6:ef:d1:d1:
d1:1e:e2:a6:8d:d9:74:9f:11:b5:15:1f:29:54:94:19:a8:b0:
62:88:f3:58:c6:b3:54:6f:89:74:ff:b4:f4:27:df:c1:39:42:
2b:a3:1c:cd:b1:e3:96:78:98:e0:cb:b8:f6:c8:47:df:fc:af:
3c:b6:76:1e:f2:31:fc:cb:d7:b6:21:ec:54:4e:8b:3c:02:d4:
86:43:6b:7d:1b:cf:01:6d:46:37:c5:c3:2b:89:04:62:6a:c6:
a6:c1:cf:25:0b:d6:d9:8e:88:cb:dc:1a:b2:f7:6f:b3:51:cd:
cd:fe:70:b9:98:b1:f7:4b:5c:63:b3:c4:a1:38:91:5c:b0:81:
95:dc:ff:33:d6:12:0e:81:5d:05:82:f8:17:bb:0b:1a:f9:2b:
62:81:f2:db:b1:44:7f:e5:dd:09:0c:3b:e6:67:81:48:91:62:
be:32:10:67:42:4e:29:0b:35:49:0e:57:32:8f:59:76:15:dc:
58:7a:32:2f:67:ee:9f:b2:f6:ee:be:e6:16:05:02:d0:94:33:
50:c3:da:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:15 2025 by rpki-client