Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/596791-53cf-4d09-aeec-5e6cf96f70cb/1/6EKPwtpbZWN0nMuZd1d16CC3czw.mft
File: 6EKPwtpbZWN0nMuZd1d16CC3czw.mft (raw, json)
Hash identifier: xGkrbT63q7MnyjU9867B/H2GGSRohJF09ycA4LOUN+k=
Subject key identifier: 86:E4:11:7B:3E:3A:FD:A6:67:C9:25:8F:DC:FC:EF:70:B5:DC:E8:B3
Authority key identifier: E8:42:8F:C2:DA:5B:65:63:74:9C:CB:99:77:57:75:E8:20:B7:73:3C
Certificate issuer: /CN=e8428fc2da5b6563749ccb99775775e820b7733c
Certificate serial: 019A72261F9BC894A191DD2BA836A82F05AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6EKPwtpbZWN0nMuZd1d16CC3czw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/596791-53cf-4d09-aeec-5e6cf96f70cb/1/6EKPwtpbZWN0nMuZd1d16CC3czw.mft
Manifest number: 1150
Signing time: Tue 11 Nov 2025 09:01:32 +0000
Manifest this update: Tue 11 Nov 2025 09:01:32 +0000
Manifest next update: Wed 12 Nov 2025 09:01:32 +0000
Files and hashes: 1: 6EKPwtpbZWN0nMuZd1d16CC3czw.crl (hash: h0f7+umZVLIwIgi/1IT0q5B8wpzJLaczEK1NAXR/Ahk=)
2: LFFuuAaPymw7mrLkEc1dJw_pneU.roa (hash: roCdm0ObDLqCzKMIH+P6b5BVl1CPDBPmD6VmUXfwJys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/596791-53cf-4d09-aeec-5e6cf96f70cb/1/6EKPwtpbZWN0nMuZd1d16CC3czw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/596791-53cf-4d09-aeec-5e6cf96f70cb/1/6EKPwtpbZWN0nMuZd1d16CC3czw.mft
rsync://rpki.ripe.net/repository/DEFAULT/6EKPwtpbZWN0nMuZd1d16CC3czw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:1f:9b:c8:94:a1:91:dd:2b:a8:36:a8:2f:05:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8428fc2da5b6563749ccb99775775e820b7733c
Validity
Not Before: Nov 11 09:01:32 2025 GMT
Not After : Nov 12 09:01:32 2025 GMT
Subject: CN=86e4117b3e3afda667c9258fdcfcef70b5dce8b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:7d:04:ad:b0:5d:16:ac:9c:7b:43:33:2a:1b:
0a:95:66:b8:68:60:ec:84:09:53:49:cc:86:ba:01:
02:12:26:2a:fa:41:05:7f:cd:34:ae:6f:0e:ee:4e:
10:aa:01:be:0e:23:a2:4f:d8:79:45:08:19:6b:05:
f9:38:d1:19:63:71:a3:80:20:78:61:8e:0e:07:de:
f2:68:c7:1c:0a:d1:e1:2d:14:29:04:0a:20:3b:70:
7a:3a:da:83:91:21:19:12:71:bd:d6:fe:80:49:ee:
4d:de:2a:d4:93:85:2f:d8:90:35:9d:86:2d:4a:4f:
d7:e6:45:81:cb:5c:b9:b2:27:f9:b6:46:02:73:ce:
68:64:e0:c5:67:d0:3b:2b:ba:5e:e0:ff:65:ba:69:
2d:a9:1d:e7:ae:a0:35:a9:5f:d4:47:4c:3e:67:77:
cd:02:b5:11:eb:79:be:e0:ac:bd:51:c6:d9:d2:4c:
95:41:4f:d8:1e:4b:3e:e8:e1:e0:9d:66:07:1f:38:
d9:7b:ae:11:08:c5:33:b3:35:d6:47:bd:58:40:31:
18:2d:78:2e:c1:0f:a1:87:dd:8a:d7:ea:ec:48:6d:
b6:3a:f2:ef:4a:2a:9a:24:4e:d0:2e:40:05:58:be:
f6:2f:12:90:bc:f2:9a:2f:d6:a1:28:58:b0:0e:dd:
56:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:E4:11:7B:3E:3A:FD:A6:67:C9:25:8F:DC:FC:EF:70:B5:DC:E8:B3
X509v3 Authority Key Identifier:
keyid:E8:42:8F:C2:DA:5B:65:63:74:9C:CB:99:77:57:75:E8:20:B7:73:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EKPwtpbZWN0nMuZd1d16CC3czw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/596791-53cf-4d09-aeec-5e6cf96f70cb/1/6EKPwtpbZWN0nMuZd1d16CC3czw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/596791-53cf-4d09-aeec-5e6cf96f70cb/1/6EKPwtpbZWN0nMuZd1d16CC3czw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:d9:69:56:1d:fb:e1:ba:bd:a8:4e:c9:1f:1e:3d:7e:48:a9:
7a:71:ce:51:c0:dd:dc:05:3b:38:24:16:12:2f:86:91:fb:4e:
ff:9b:cb:2a:82:23:ad:6f:2a:37:e8:ba:0c:32:62:33:fa:a7:
6d:63:fa:15:79:8c:5b:4b:f0:22:4b:16:92:3e:fe:26:a9:42:
53:c3:64:44:1d:07:0a:74:3e:b1:6a:1b:fb:4a:42:43:f2:30:
84:42:79:27:05:5c:f0:db:16:be:db:1c:79:74:ab:13:5c:ca:
12:5e:26:19:17:46:0e:e2:f0:a4:66:42:98:df:89:0a:88:29:
2c:14:35:92:2b:98:13:90:90:44:be:28:74:fb:d5:18:ec:06:
6c:e6:27:58:b3:ab:b2:81:e5:de:48:26:34:99:53:ed:36:b9:
2b:c1:5f:ef:13:7f:80:1b:e9:30:0d:ea:2b:de:73:cc:bf:2d:
e6:dc:0b:b7:c9:f7:a2:7d:86:dc:f9:69:9a:00:31:4c:25:35:
ce:90:7d:a0:7b:5f:a6:5a:fc:ab:b0:ed:16:9c:45:7b:c6:98:
cb:fc:58:f7:6e:04:bd:47:24:f1:01:ec:15:e1:1c:69:78:da:
5b:0f:29:3f:36:ce:da:b8:9f:b0:59:11:cf:ed:86:dc:bf:3c:
c9:42:b3:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:52:28 2025 by rpki-client