Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/07ce7e-4641-4985-9845-1a007157d59a/1/6z1v54fFBVOwcxcRLhnmW09nWTE.mft
File: 6z1v54fFBVOwcxcRLhnmW09nWTE.mft (raw, json)
Hash identifier: AhHqoFyzjgKHw3y8bhHhjMixcARCKC4V0gXvvXxDHDU=
Subject key identifier: BB:43:18:14:0F:DA:EC:72:A9:50:42:2B:93:CE:F0:B7:7C:8A:77:4E
Authority key identifier: EB:3D:6F:E7:87:C5:05:53:B0:73:17:11:2E:19:E6:5B:4F:67:59:31
Certificate issuer: /CN=eb3d6fe787c50553b07317112e19e65b4f675931
Certificate serial: 019A71EEC2F37D3693D79C5FC5D41F92CD9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6z1v54fFBVOwcxcRLhnmW09nWTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/07ce7e-4641-4985-9845-1a007157d59a/1/6z1v54fFBVOwcxcRLhnmW09nWTE.mft
Manifest number: 16E2
Signing time: Tue 11 Nov 2025 08:01:04 +0000
Manifest this update: Tue 11 Nov 2025 08:01:04 +0000
Manifest next update: Wed 12 Nov 2025 08:01:04 +0000
Files and hashes: 1: 6z1v54fFBVOwcxcRLhnmW09nWTE.crl (hash: LQaF1pOLT4Odex+UDMNZktcGEu+f7Vd9QiE24mrtrko=)
2: jcrTKRLVafxbmhoPzjEKfBszAmk.roa (hash: dZzjw0X45T+if5mYD87H3+tKeMoeDlrA485y+6aDQxk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/07ce7e-4641-4985-9845-1a007157d59a/1/6z1v54fFBVOwcxcRLhnmW09nWTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/07ce7e-4641-4985-9845-1a007157d59a/1/6z1v54fFBVOwcxcRLhnmW09nWTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/6z1v54fFBVOwcxcRLhnmW09nWTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:c2:f3:7d:36:93:d7:9c:5f:c5:d4:1f:92:cd:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb3d6fe787c50553b07317112e19e65b4f675931
Validity
Not Before: Nov 11 08:01:04 2025 GMT
Not After : Nov 12 08:01:04 2025 GMT
Subject: CN=bb4318140fdaec72a950422b93cef0b77c8a774e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:df:19:a6:c5:fd:cd:c9:0b:7a:1b:99:51:3d:
17:48:d3:16:a9:41:bc:8f:a1:2c:d5:64:d2:3f:8d:
aa:db:f1:d4:03:7d:89:00:2c:2d:93:93:df:e4:01:
87:b1:14:fc:2c:22:a2:b0:93:e0:4b:01:7e:b1:ce:
ee:cd:aa:4f:44:85:29:85:21:9a:7b:67:57:1b:a9:
ae:1a:39:3b:f2:43:79:d7:06:b8:6c:4f:84:86:f6:
bd:87:e7:bd:2d:8e:89:a3:26:2c:37:92:e0:72:ec:
5c:7f:a2:b6:65:3b:4d:2c:a8:f1:7a:18:ca:df:62:
06:22:be:e0:38:9a:af:0f:ec:99:2f:ea:89:41:f7:
31:cf:48:92:e7:99:d1:2f:18:3b:7d:3e:e2:51:2c:
ed:de:99:f5:63:1e:21:b9:1a:69:cb:d8:1b:b4:23:
8a:4f:d2:2b:27:87:1b:08:18:48:47:e9:05:8c:08:
20:df:29:65:36:28:81:8d:39:25:18:69:b1:21:d0:
67:0c:14:81:1c:ba:e8:f7:46:d5:9b:4d:f6:1d:c2:
e6:10:9f:ef:d6:5c:d7:c6:54:60:80:51:3f:a8:97:
2c:43:5c:2c:76:b0:f4:4e:87:c3:50:37:de:03:e5:
ee:43:9e:8e:d6:33:4f:8e:5a:a4:89:78:9c:22:89:
be:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:43:18:14:0F:DA:EC:72:A9:50:42:2B:93:CE:F0:B7:7C:8A:77:4E
X509v3 Authority Key Identifier:
keyid:EB:3D:6F:E7:87:C5:05:53:B0:73:17:11:2E:19:E6:5B:4F:67:59:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6z1v54fFBVOwcxcRLhnmW09nWTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/07ce7e-4641-4985-9845-1a007157d59a/1/6z1v54fFBVOwcxcRLhnmW09nWTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/07ce7e-4641-4985-9845-1a007157d59a/1/6z1v54fFBVOwcxcRLhnmW09nWTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:10:89:02:fc:1f:f2:ea:ed:e2:4d:cf:46:51:f2:b1:6a:ff:
9b:39:bb:1d:dc:d5:1c:9c:a4:1c:c1:9c:95:f9:75:53:35:1c:
cf:e6:bc:f8:32:0b:18:d7:cb:79:8b:98:f4:88:7d:1f:63:f8:
b7:82:e2:79:11:de:9e:52:74:4e:cf:37:99:7e:8d:b9:2e:ea:
4d:4a:a1:83:13:eb:99:b8:9c:50:ae:fd:d5:cf:fd:df:32:97:
d0:30:7d:9e:0c:1b:48:b5:50:5b:c6:ff:5a:99:4c:5a:0c:46:
6d:e8:7f:b4:a9:98:f6:f4:2e:7d:7e:57:3c:4f:93:4b:ba:76:
59:13:7f:dc:6b:94:10:ab:86:bd:8a:59:49:96:b3:9f:da:2f:
3d:ea:1f:4f:64:a4:93:e2:f0:04:50:b0:01:6d:08:bb:ee:2d:
0e:2c:6b:c7:d6:4c:d1:87:09:eb:20:8a:77:3b:a9:bb:e1:55:
c6:bd:52:e1:99:cf:47:24:20:ca:b6:2e:2e:53:60:a8:4e:9f:
b9:50:a4:c8:32:16:40:2c:d9:52:bb:f8:cf:60:dd:9b:83:6e:
75:6b:99:05:1e:55:21:fa:48:d8:d5:6f:36:bb:36:7a:bd:aa:
52:8c:92:a2:86:a6:a6:b6:0d:3b:31:d2:bc:e5:32:c8:c3:d8:
83:cd:f3:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:22:09 2025 by rpki-client