Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/b6409b-1638-4c7a-81f2-94f8fb3009f2/1/6O1gL9DUbTjN4ecyxlLqmVjpdpE.mft
File: 6O1gL9DUbTjN4ecyxlLqmVjpdpE.mft (raw, json)
Hash identifier: cejhRac7R5qeZj9fqIm+EgjRRGQY8c7LwFImYRaFeVs=
Subject key identifier: 7B:BD:FB:B8:E3:33:0F:E2:0B:AB:82:66:56:3E:D9:3A:F8:8E:08:32
Authority key identifier: E8:ED:60:2F:D0:D4:6D:38:CD:E1:E7:32:C6:52:EA:99:58:E9:76:91
Certificate issuer: /CN=e8ed602fd0d46d38cde1e732c652ea9958e97691
Certificate serial: 019A7112FFF584811C595409BA1EB2FE30AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6O1gL9DUbTjN4ecyxlLqmVjpdpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/b6409b-1638-4c7a-81f2-94f8fb3009f2/1/6O1gL9DUbTjN4ecyxlLqmVjpdpE.mft
Manifest number: 16A6
Signing time: Tue 11 Nov 2025 04:01:01 +0000
Manifest this update: Tue 11 Nov 2025 04:01:01 +0000
Manifest next update: Wed 12 Nov 2025 04:01:01 +0000
Files and hashes: 1: 6O1gL9DUbTjN4ecyxlLqmVjpdpE.crl (hash: r/AGk2yZgBFJpLxVt+yuXiNFAL6pv/8VL2DFJMxC8Co=)
2: rvzjyC9muvr4migx_xtUIzZ2FRM.roa (hash: 2jsltHZ+YtkUSfR/OVprtu2235QmWCtb64qQWKzazWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/b6409b-1638-4c7a-81f2-94f8fb3009f2/1/6O1gL9DUbTjN4ecyxlLqmVjpdpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/b6409b-1638-4c7a-81f2-94f8fb3009f2/1/6O1gL9DUbTjN4ecyxlLqmVjpdpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/6O1gL9DUbTjN4ecyxlLqmVjpdpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:ff:f5:84:81:1c:59:54:09:ba:1e:b2:fe:30:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8ed602fd0d46d38cde1e732c652ea9958e97691
Validity
Not Before: Nov 11 04:01:01 2025 GMT
Not After : Nov 12 04:01:01 2025 GMT
Subject: CN=7bbdfbb8e3330fe20bab8266563ed93af88e0832
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:07:8b:72:c9:7d:f1:5c:08:2f:87:31:aa:f4:
f3:c2:19:fb:83:ce:4e:79:03:55:0c:04:f7:fd:11:
e9:2f:c9:0e:c9:4a:7b:08:47:83:b4:47:90:0b:58:
3b:1c:90:19:ca:ba:0b:ef:5a:16:62:b2:90:4c:54:
e1:84:c4:d7:d8:5e:79:ba:7b:00:07:92:cd:b7:2d:
5a:7d:63:f9:16:31:7c:87:cd:d0:40:28:ac:84:e2:
86:b9:d0:79:82:d3:73:d0:c7:6a:2e:56:11:74:e5:
c4:01:a2:a9:88:94:a7:4d:04:7d:ec:b6:af:5c:eb:
62:eb:a1:4e:d0:cf:74:97:15:17:91:53:6c:dc:e4:
24:68:a9:e7:cc:6d:bd:17:f6:c8:38:97:41:13:92:
6f:e7:45:36:c2:8b:f6:a1:07:13:91:2f:a0:b3:70:
57:27:ae:3e:82:61:32:b9:5b:64:23:c3:18:81:bb:
8b:79:07:0c:98:cd:1c:d6:62:2f:1b:bd:90:18:74:
4a:c3:74:8b:26:5c:98:01:03:a0:c6:02:4a:53:83:
9d:b5:c9:4e:a5:1f:ca:d3:29:a1:fc:31:b7:59:85:
8b:1e:4f:65:ad:e5:50:74:72:a9:9c:53:29:a4:80:
34:74:f9:e8:0a:8b:fa:7b:03:9c:1c:06:d7:22:c7:
f5:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:BD:FB:B8:E3:33:0F:E2:0B:AB:82:66:56:3E:D9:3A:F8:8E:08:32
X509v3 Authority Key Identifier:
keyid:E8:ED:60:2F:D0:D4:6D:38:CD:E1:E7:32:C6:52:EA:99:58:E9:76:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6O1gL9DUbTjN4ecyxlLqmVjpdpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/b6409b-1638-4c7a-81f2-94f8fb3009f2/1/6O1gL9DUbTjN4ecyxlLqmVjpdpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/b6409b-1638-4c7a-81f2-94f8fb3009f2/1/6O1gL9DUbTjN4ecyxlLqmVjpdpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:a8:86:10:bb:01:6b:fa:82:63:8d:76:11:d2:31:6e:0d:95:
fd:4d:8d:5f:c6:75:1f:65:ff:cf:a0:38:6b:65:d0:81:16:a6:
e1:53:91:bc:4c:ac:73:73:2b:8c:55:b7:3b:6b:3c:78:01:d7:
83:57:60:16:8b:56:cb:5b:61:fb:a7:f7:cc:8d:7d:f1:31:2a:
3a:94:c9:1c:92:2c:b9:bd:79:d3:84:0a:64:a5:f9:09:8f:78:
f1:1f:68:fb:1a:b1:7e:e3:65:db:74:a8:89:20:c1:5b:e8:1e:
d6:c8:fc:ec:6b:0c:e8:51:72:93:10:f9:f3:38:38:f6:20:19:
f5:9f:cf:c7:09:57:86:c1:60:67:4d:de:c9:f0:4b:03:b2:59:
df:eb:c6:fc:be:6e:bf:c7:57:c7:f0:cd:3e:7b:4f:b3:f4:2a:
42:32:36:f2:42:2e:c5:1e:20:52:f8:c5:80:6e:54:0a:a6:b7:
db:ce:65:b3:35:55:e7:39:b5:9a:70:84:ac:26:92:94:a9:26:
c3:b4:84:aa:2d:a1:51:e3:9b:e6:54:6c:57:75:30:7d:c0:b1:
b3:23:d6:c5:93:d2:11:f2:65:21:d9:6d:f7:32:e5:94:9c:b5:
0a:07:a3:5b:cf:5c:42:dd:79:f3:5c:e2:04:d7:c5:5e:e4:c2:
ea:e7:70:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:17:27 2025 by rpki-client