Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6f5128-7cba-49c5-9b25-99c1b0cfc3a8/1/6lg9YfLlemsW6ksanKJ7slDXSO8.mft
File: 6lg9YfLlemsW6ksanKJ7slDXSO8.mft (raw, json)
Hash identifier: B2rm2OGSYyQ2FejynAylE3F0riMOtjC5WxsoeS/TB5k=
Subject key identifier: 17:42:22:94:C5:0E:8D:30:32:11:89:C1:BE:7D:55:1F:7F:73:7F:F3
Authority key identifier: EA:58:3D:61:F2:E5:7A:6B:16:EA:4B:1A:9C:A2:7B:B2:50:D7:48:EF
Certificate issuer: /CN=ea583d61f2e57a6b16ea4b1a9ca27bb250d748ef
Certificate serial: 019A4D3CC637D307BF41C6DC4F1D6ED36747
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6lg9YfLlemsW6ksanKJ7slDXSO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6f5128-7cba-49c5-9b25-99c1b0cfc3a8/1/6lg9YfLlemsW6ksanKJ7slDXSO8.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 05:00:19 +0000
Manifest this update: Tue 04 Nov 2025 05:00:19 +0000
Manifest next update: Wed 05 Nov 2025 05:00:19 +0000
Files and hashes: 1: 6lg9YfLlemsW6ksanKJ7slDXSO8.crl (hash: BqNvynt5kPCzh+c9+kPrD0duAQCN5pZkd5TF+U4FMnw=)
2: BDcWEX2jsziWI3BwAdwXDgVlUUs.roa (hash: ohMsIfsvhMfjPWnDhvdOtdCZBCwqZ7Awj2tCgJhUEaE=)
3: YZeqBXKQFmXRNEkSHxYTd5FtBG8.roa (hash: H2qTKciVzX2Iz/NfWeOKudVbBEab6voHC2+59WhtYSU=)
4: eIUbhEvS312QdpTsSOJbOfKRhjg.roa (hash: TDTdEPNKnFdTs1u7Iy6p2CE/KWnf5yhsocLiaVIOsqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/6f5128-7cba-49c5-9b25-99c1b0cfc3a8/1/6lg9YfLlemsW6ksanKJ7slDXSO8.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/6f5128-7cba-49c5-9b25-99c1b0cfc3a8/1/6lg9YfLlemsW6ksanKJ7slDXSO8.mft
rsync://rpki.ripe.net/repository/DEFAULT/6lg9YfLlemsW6ksanKJ7slDXSO8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3c:c6:37:d3:07:bf:41:c6:dc:4f:1d:6e:d3:67:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea583d61f2e57a6b16ea4b1a9ca27bb250d748ef
Validity
Not Before: Nov 4 05:00:19 2025 GMT
Not After : Nov 5 05:00:19 2025 GMT
Subject: CN=17422294c50e8d30321189c1be7d551f7f737ff3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:42:fa:fc:16:7f:37:5e:42:69:dd:e0:24:f2:
31:b5:81:08:8e:0e:9e:81:cb:d0:f6:60:fa:4f:66:
3b:c9:7c:c6:4b:bb:d1:ce:64:b5:4a:9a:bb:8a:48:
68:05:b2:d1:6a:0f:b1:f3:42:97:9c:8a:fb:c0:cf:
e3:67:97:59:20:fc:43:ef:cf:5c:76:a8:ad:06:2f:
fa:12:f1:7e:18:ce:11:bc:50:75:7f:37:00:25:35:
c7:02:98:29:f2:87:27:5c:6a:0a:b5:4e:48:9b:72:
cf:4f:de:c2:de:4f:d4:b0:71:08:7f:27:78:b1:c1:
01:6a:dc:db:1c:d2:6c:5e:63:0f:b9:98:2b:c2:73:
6d:56:d4:af:ce:94:ad:c5:40:af:4a:e3:5b:7d:cd:
c2:0f:be:3c:cb:8c:cb:c6:ac:e1:d3:45:ca:25:b5:
c7:fa:68:d8:03:d9:87:b9:86:b9:4c:f0:67:64:f3:
f1:28:1e:d9:41:80:64:c2:31:45:f5:27:6a:13:31:
a4:3d:9d:6a:9a:3f:22:ff:9c:5a:a5:f3:81:8b:72:
72:2c:3b:d1:33:69:42:c8:1b:f6:68:56:6c:8e:a5:
c9:51:c8:c8:4d:fc:7b:2a:64:2b:9d:eb:8f:cc:a7:
a1:5d:41:ce:9b:0d:fb:9b:74:a1:ed:09:ae:ac:9e:
a2:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:42:22:94:C5:0E:8D:30:32:11:89:C1:BE:7D:55:1F:7F:73:7F:F3
X509v3 Authority Key Identifier:
keyid:EA:58:3D:61:F2:E5:7A:6B:16:EA:4B:1A:9C:A2:7B:B2:50:D7:48:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6lg9YfLlemsW6ksanKJ7slDXSO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6f5128-7cba-49c5-9b25-99c1b0cfc3a8/1/6lg9YfLlemsW6ksanKJ7slDXSO8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6f5128-7cba-49c5-9b25-99c1b0cfc3a8/1/6lg9YfLlemsW6ksanKJ7slDXSO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:bd:c7:71:94:27:6e:9d:4e:ec:c2:4f:ef:65:68:52:d4:f5:
dc:bc:61:be:3e:78:c5:64:4f:f7:58:ed:ca:ae:90:25:55:fd:
6d:10:81:b8:3c:db:bb:67:a3:be:44:6d:6d:81:a7:7c:56:2f:
98:ba:40:f8:e4:43:cb:98:ed:7e:d4:75:b4:56:f9:b9:e6:79:
ca:d4:7d:70:34:3a:4b:aa:67:5c:51:c8:b5:9a:c6:0c:47:6a:
e5:cb:e6:0c:97:40:3d:76:6b:28:56:2c:4b:87:bc:5e:80:9e:
d1:67:97:ca:21:94:bc:06:ad:44:84:01:20:c1:9c:9f:35:97:
66:8b:94:1f:d8:1e:51:b2:03:cd:5c:e5:4a:d7:43:f4:21:72:
0e:cc:ae:fa:19:fe:ef:75:6f:59:f0:b5:36:a7:e4:64:5d:32:
2d:52:59:54:02:06:57:50:1e:d0:98:67:60:71:69:c5:e8:70:
e5:18:8e:8a:23:84:3c:20:ad:8e:5e:2b:f3:b4:a8:21:7c:ef:
a6:33:2f:60:34:a6:0a:1b:7c:38:58:9d:1c:2c:03:41:dd:20:
91:70:79:6e:02:11:b8:fe:e8:78:f2:0e:1d:c4:75:ec:ed:9f:
09:d8:bd:71:3e:47:4b:e6:54:5f:52:1a:eb:e2:f2:52:6d:5a:
d6:33:07:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 09:30:08 2025 by rpki-client