Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/8a495d-c435-42dc-9123-ecd7fee7c1b0/1/a6TjY5dLLvkOywU0CvXa9rJBYMs.mft
File: a6TjY5dLLvkOywU0CvXa9rJBYMs.mft (raw, json)
Hash identifier: SShSI+UxFxpc3P3dLvpY0uPJOi/iRqaq57QzZllgeRA=
Subject key identifier: 7E:96:16:21:73:C7:BD:2E:DD:F6:0C:3A:02:E2:FF:5E:D6:4A:20:F8
Authority key identifier: 6B:A4:E3:63:97:4B:2E:F9:0E:CB:05:34:0A:F5:DA:F6:B2:41:60:CB
Certificate issuer: /CN=6ba4e363974b2ef90ecb05340af5daf6b24160cb
Certificate serial: 019A71B8B511C39B67232DB01399441097CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a6TjY5dLLvkOywU0CvXa9rJBYMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/8a495d-c435-42dc-9123-ecd7fee7c1b0/1/a6TjY5dLLvkOywU0CvXa9rJBYMs.mft
Manifest number: 0C68
Signing time: Tue 11 Nov 2025 07:02:01 +0000
Manifest this update: Tue 11 Nov 2025 07:02:01 +0000
Manifest next update: Wed 12 Nov 2025 07:02:01 +0000
Files and hashes: 1: 6m7j2x5GGq7W52qf5FgsTL2uZFM.roa (hash: yw3o2fOj27y6FNYr5DEC0pNcsBL8VcXlNTgJH2EfiEg=)
2: a6TjY5dLLvkOywU0CvXa9rJBYMs.crl (hash: lSm5wMbgjq3v9p3mmBOFWyVythHsO9HeGYwAi78LAuc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/8a495d-c435-42dc-9123-ecd7fee7c1b0/1/a6TjY5dLLvkOywU0CvXa9rJBYMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/8a495d-c435-42dc-9123-ecd7fee7c1b0/1/a6TjY5dLLvkOywU0CvXa9rJBYMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/a6TjY5dLLvkOywU0CvXa9rJBYMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:b5:11:c3:9b:67:23:2d:b0:13:99:44:10:97:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ba4e363974b2ef90ecb05340af5daf6b24160cb
Validity
Not Before: Nov 11 07:02:01 2025 GMT
Not After : Nov 12 07:02:01 2025 GMT
Subject: CN=7e96162173c7bd2eddf60c3a02e2ff5ed64a20f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:41:a0:5d:18:fa:cf:2e:bb:c4:fb:08:b9:8f:
56:48:40:61:6c:2f:dd:f0:63:65:de:6e:ef:d6:7f:
dc:d1:12:88:43:14:07:7a:25:c6:db:94:5b:c1:df:
91:86:3d:b0:fb:e3:a4:ce:3f:a9:af:bb:ef:ab:23:
52:bf:d7:cf:2b:d5:51:ea:38:ba:9f:42:18:e4:7b:
02:13:1b:24:4f:d7:dc:4b:8a:71:1a:3f:35:9c:1c:
0b:75:22:d6:86:97:01:d4:96:21:4f:b6:e3:4f:54:
9f:84:7e:00:e2:1d:3f:e9:ea:98:1e:3a:36:fc:6f:
15:6c:63:cc:79:25:63:47:68:d9:d3:0c:30:e1:e0:
dc:e2:60:91:50:17:e5:68:98:e4:ff:57:4f:05:c2:
da:b0:3a:2b:f8:20:e0:ed:aa:e3:32:64:5a:aa:ca:
dc:49:d6:04:27:93:6a:18:e1:73:17:85:03:a7:aa:
f0:95:a7:f3:a6:f1:8d:c8:41:c7:d6:2c:3a:0d:d4:
eb:ad:b8:75:a1:71:4a:db:34:ad:42:95:e2:73:0f:
f4:5c:88:89:39:ef:94:08:4f:80:e9:b3:1d:5c:e0:
88:49:51:af:32:75:07:84:92:91:7b:96:21:41:c8:
08:7d:e4:00:f3:e4:cc:e5:dc:3c:0d:58:76:05:16:
9e:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:96:16:21:73:C7:BD:2E:DD:F6:0C:3A:02:E2:FF:5E:D6:4A:20:F8
X509v3 Authority Key Identifier:
keyid:6B:A4:E3:63:97:4B:2E:F9:0E:CB:05:34:0A:F5:DA:F6:B2:41:60:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6TjY5dLLvkOywU0CvXa9rJBYMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/8a495d-c435-42dc-9123-ecd7fee7c1b0/1/a6TjY5dLLvkOywU0CvXa9rJBYMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/8a495d-c435-42dc-9123-ecd7fee7c1b0/1/a6TjY5dLLvkOywU0CvXa9rJBYMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
df:4b:fc:3c:e9:73:88:b6:2e:f3:57:c2:6a:0a:de:9d:1c:95:
5c:29:d6:07:e5:c9:08:ce:6a:44:ba:12:ee:3f:be:c9:98:73:
df:c8:ee:c4:59:85:25:86:da:76:e8:99:da:70:39:bb:e0:78:
9f:b8:cb:11:29:be:0e:48:b1:2b:4d:b6:60:4b:80:78:43:0c:
b3:80:b4:30:ec:9b:77:67:1d:98:6b:e4:1b:c4:83:f5:55:f0:
40:5b:a2:bf:4a:c2:bb:94:03:f8:8c:58:1d:9f:3b:ea:75:48:
8e:96:8d:c8:45:a4:f1:99:33:63:12:47:95:16:21:11:34:9e:
9d:b2:91:b8:0d:23:f6:92:2e:18:9b:42:12:56:d7:dd:66:6e:
21:0f:45:26:88:6e:5a:a0:86:fc:97:97:85:ab:0d:29:a3:2d:
30:76:ab:5a:7d:19:6a:29:2c:cd:1e:86:08:a4:9c:3c:dc:fb:
42:b4:7f:b4:fc:7c:3b:dc:82:d2:d4:1f:4b:49:b9:bd:f7:fd:
0d:ec:c6:ca:cc:6b:81:0b:72:c9:28:ba:ae:e5:bd:d9:fc:35:
be:d5:d4:45:55:eb:96:a0:d9:e6:14:ec:4e:35:b5:dd:d4:23:
33:ac:2f:7a:78:6e:4e:8c:30:0e:fa:fd:09:d2:fe:5e:e5:e7:
e3:09:86:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:51:42 2025 by rpki-client