Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/9864ff-6341-4004-ab6d-0f3b9c05de45/1/6zZ3mxOux4Cw1Df4REqw9EOgXdA.mft
File: 6zZ3mxOux4Cw1Df4REqw9EOgXdA.mft (raw, json)
Hash identifier: RPmUKoJglmkcPpjlrFYERMMw3vgoqLTwxC4vm74d4eo=
Subject key identifier: BA:11:01:64:53:73:26:BE:E5:8B:1F:CB:4E:42:82:92:A3:8A:B2:DF
Authority key identifier: EB:36:77:9B:13:AE:C7:80:B0:D4:37:F8:44:4A:B0:F4:43:A0:5D:D0
Certificate issuer: /CN=eb36779b13aec780b0d437f8444ab0f443a05dd0
Certificate serial: 019A7293E911C6EA4CC0A9F34E8A476AAA39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6zZ3mxOux4Cw1Df4REqw9EOgXdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/9864ff-6341-4004-ab6d-0f3b9c05de45/1/6zZ3mxOux4Cw1Df4REqw9EOgXdA.mft
Manifest number: 1020
Signing time: Tue 11 Nov 2025 11:01:27 +0000
Manifest this update: Tue 11 Nov 2025 11:01:27 +0000
Manifest next update: Wed 12 Nov 2025 11:01:27 +0000
Files and hashes: 1: 6zZ3mxOux4Cw1Df4REqw9EOgXdA.crl (hash: IFgxrFmpKfSbiavTbzN3oMfE95NhqaKRu3KOGQaz7hE=)
2: bbiCAC8k2CawpBPgM6fTMAmYAY0.roa (hash: FIWbsZ3JZZD2fluaVWFHhluHhUwUg7ek5YY8fTNR7Ow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/9864ff-6341-4004-ab6d-0f3b9c05de45/1/6zZ3mxOux4Cw1Df4REqw9EOgXdA.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/9864ff-6341-4004-ab6d-0f3b9c05de45/1/6zZ3mxOux4Cw1Df4REqw9EOgXdA.mft
rsync://rpki.ripe.net/repository/DEFAULT/6zZ3mxOux4Cw1Df4REqw9EOgXdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:e9:11:c6:ea:4c:c0:a9:f3:4e:8a:47:6a:aa:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb36779b13aec780b0d437f8444ab0f443a05dd0
Validity
Not Before: Nov 11 11:01:27 2025 GMT
Not After : Nov 12 11:01:27 2025 GMT
Subject: CN=ba110164537326bee58b1fcb4e428292a38ab2df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:08:1d:22:28:01:a7:11:9b:b4:84:57:92:95:
fc:96:1f:76:77:17:9f:f6:a7:e5:c5:30:cf:9f:05:
6b:2b:0e:14:71:a0:8c:ff:41:68:63:2d:3e:69:ee:
54:7c:b2:fe:69:97:97:28:8c:bb:b0:c0:85:1f:48:
60:03:9a:ae:ad:02:29:f6:00:c1:ad:05:b9:67:db:
46:3c:a8:02:b9:74:87:19:3a:50:86:32:4b:81:4b:
14:0d:a1:f4:91:61:b6:21:a3:a8:81:89:23:11:76:
6d:1f:73:90:c3:73:e5:8d:8f:df:9a:8f:10:f7:99:
df:a5:5c:6f:d0:b1:15:21:c0:89:02:c9:6b:48:62:
66:dd:34:44:40:a9:4a:a4:f9:ec:c9:65:f7:75:00:
44:b8:5a:55:1c:09:f1:61:b8:7f:9e:b4:9d:c5:d3:
1d:fe:e2:31:05:73:73:88:55:84:28:06:4e:3f:a8:
7c:7c:e6:ab:9f:f9:63:f3:dc:b0:e5:c3:b5:71:f3:
0d:b1:be:d5:8e:3a:3f:13:bb:7f:0e:50:1d:17:64:
a7:13:be:51:59:f6:c9:7f:0f:4e:63:3f:f0:e7:4b:
45:be:fc:17:8d:ef:9a:00:aa:0a:53:2c:d3:8c:85:
85:f9:fb:a1:90:a8:2b:7a:66:e7:de:71:e1:70:f1:
be:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:11:01:64:53:73:26:BE:E5:8B:1F:CB:4E:42:82:92:A3:8A:B2:DF
X509v3 Authority Key Identifier:
keyid:EB:36:77:9B:13:AE:C7:80:B0:D4:37:F8:44:4A:B0:F4:43:A0:5D:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zZ3mxOux4Cw1Df4REqw9EOgXdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/9864ff-6341-4004-ab6d-0f3b9c05de45/1/6zZ3mxOux4Cw1Df4REqw9EOgXdA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/9864ff-6341-4004-ab6d-0f3b9c05de45/1/6zZ3mxOux4Cw1Df4REqw9EOgXdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:ed:f6:be:c4:14:7f:b6:13:f6:f4:68:7c:84:21:78:fb:ed:
ec:b0:b0:a4:6b:10:36:87:71:51:29:1a:f2:da:9f:20:70:ba:
b4:f6:c7:6f:8c:3b:a3:e7:79:06:06:d7:69:b3:02:ea:77:9e:
da:cf:d6:d7:35:0c:ed:50:cb:66:70:cc:e1:50:0a:59:26:bc:
7a:de:3b:b6:0b:7b:13:5e:d1:c8:b3:6e:a0:b1:5a:d7:f9:13:
46:32:37:a9:64:63:42:5e:5e:73:9d:c1:1b:07:76:57:83:d7:
10:83:8e:1c:5b:f6:af:0a:60:73:e0:f4:1e:51:87:c1:50:14:
1a:de:19:a5:50:6c:7a:01:f4:b2:16:5e:25:73:88:00:2e:e8:
30:13:71:24:02:47:c0:ee:37:84:dc:77:6d:1e:ff:8a:9c:7f:
50:05:17:78:31:e5:6b:07:92:38:41:fc:59:17:ab:45:b2:b3:
e1:44:d3:98:f2:98:86:2d:a7:1b:bc:b0:12:46:71:35:d6:c0:
1a:ae:0c:6b:21:7c:ec:28:76:ee:c9:05:0e:66:02:ea:87:1a:
12:ac:e6:cc:57:fe:71:37:6f:04:9e:78:e2:4c:76:fd:2d:ca:
36:b7:e4:9f:e8:2c:d0:5f:4a:58:6e:61:6e:1f:ad:39:82:58:
a8:f0:4b:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:40:19 2025 by rpki-client