Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/4b8cc4-5fc2-4f26-8045-50ef726a9136/1/6fxsgWY89vzpLoPl1mKLwOtqlNI.mft
File: 6fxsgWY89vzpLoPl1mKLwOtqlNI.mft (raw, json)
Hash identifier: hKNB9teY/zpivPTSURgRhrHMviwzxwOuyKWHJM7UTgs=
Subject key identifier: 63:C9:89:3E:8E:83:21:EF:E3:BA:2B:F6:17:9D:F2:9A:A3:37:65:8B
Authority key identifier: E9:FC:6C:81:66:3C:F6:FC:E9:2E:83:E5:D6:62:8B:C0:EB:6A:94:D2
Certificate issuer: /CN=e9fc6c81663cf6fce92e83e5d6628bc0eb6a94d2
Certificate serial: 019A3F1395BF4A5893BA955CDEA0CF445E8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6fxsgWY89vzpLoPl1mKLwOtqlNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/4b8cc4-5fc2-4f26-8045-50ef726a9136/1/6fxsgWY89vzpLoPl1mKLwOtqlNI.mft
Manifest number: 0490
Signing time: Sat 01 Nov 2025 11:00:39 +0000
Manifest this update: Sat 01 Nov 2025 11:00:39 +0000
Manifest next update: Sun 02 Nov 2025 11:00:39 +0000
Files and hashes: 1: 6fxsgWY89vzpLoPl1mKLwOtqlNI.crl (hash: milmUJwjjj3QtpSCoKLcJEuLyFF8w+jwhRHbozDCdx4=)
2: hiFOlTDCg2a8NEVG384am3Bu0NI.roa (hash: QsAcrNKEK47Yz8Letal9hjURM1pVKMmWpzSetDZsOkE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/4b8cc4-5fc2-4f26-8045-50ef726a9136/1/6fxsgWY89vzpLoPl1mKLwOtqlNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/4b8cc4-5fc2-4f26-8045-50ef726a9136/1/6fxsgWY89vzpLoPl1mKLwOtqlNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/6fxsgWY89vzpLoPl1mKLwOtqlNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Nov 2025 11:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:3f:13:95:bf:4a:58:93:ba:95:5c:de:a0:cf:44:5e:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9fc6c81663cf6fce92e83e5d6628bc0eb6a94d2
Validity
Not Before: Nov 1 11:00:39 2025 GMT
Not After : Nov 2 11:00:39 2025 GMT
Subject: CN=63c9893e8e8321efe3ba2bf6179df29aa337658b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:70:8d:82:6d:c7:21:2e:66:e8:0e:50:cc:e7:
39:07:7e:d0:2d:0d:d6:f3:88:e8:e9:a3:92:96:5b:
ee:81:67:48:b5:15:bd:42:c8:ba:64:d6:71:2d:2a:
18:7c:a8:d3:96:14:47:20:30:60:1a:40:15:8d:de:
16:b1:16:06:9e:51:38:64:b5:c0:71:c0:9e:58:c8:
a8:e4:64:4d:f1:67:1e:10:e5:8f:53:0c:27:c9:d4:
ca:9c:ee:87:5c:2d:5e:60:f7:95:f9:78:54:b2:1e:
dd:f8:42:4c:0b:d4:b4:5f:b9:44:46:23:a9:a0:cc:
c2:1f:e6:ff:d3:b0:39:5b:f8:45:45:bc:48:06:df:
43:5d:e6:a0:57:a8:61:0a:17:9b:81:25:7c:23:aa:
22:42:95:81:ce:f2:8b:39:e3:88:73:38:71:e8:7c:
e6:5d:27:c7:69:3f:32:8d:fb:da:28:ed:a3:1b:0d:
af:5e:76:e8:54:f2:8f:fa:97:33:c6:bf:0a:7e:27:
b9:fd:28:67:72:97:29:f3:c2:cf:39:60:2a:f4:e5:
87:4f:c5:83:e8:bf:02:0d:0b:22:fe:c3:c3:d9:b1:
ae:bd:a8:d8:98:39:90:97:c2:57:47:19:8d:21:0a:
f5:e2:7a:c8:93:62:9a:2d:44:98:cd:68:94:7f:23:
c6:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:C9:89:3E:8E:83:21:EF:E3:BA:2B:F6:17:9D:F2:9A:A3:37:65:8B
X509v3 Authority Key Identifier:
keyid:E9:FC:6C:81:66:3C:F6:FC:E9:2E:83:E5:D6:62:8B:C0:EB:6A:94:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6fxsgWY89vzpLoPl1mKLwOtqlNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/4b8cc4-5fc2-4f26-8045-50ef726a9136/1/6fxsgWY89vzpLoPl1mKLwOtqlNI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/4b8cc4-5fc2-4f26-8045-50ef726a9136/1/6fxsgWY89vzpLoPl1mKLwOtqlNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:74:81:f8:f2:36:dc:87:66:2e:04:6d:16:01:69:ed:df:63:
23:fd:c8:cc:3f:36:34:05:c3:51:fe:33:ed:da:0c:71:8d:d8:
4f:53:44:6e:a8:e7:f4:ce:8e:f3:8b:0d:8b:d9:6f:31:a4:52:
80:6f:cd:ae:d9:08:2d:78:e3:5b:21:50:3c:2e:7d:a3:fd:f6:
31:d9:47:1b:8e:6f:14:3a:9b:e7:71:ea:34:76:82:19:dd:be:
e2:ab:a3:20:4c:c3:91:4f:43:a0:9b:45:6b:da:34:82:31:c5:
fe:e2:05:4e:74:66:c1:b9:fd:83:0b:11:28:83:a9:16:cf:26:
4f:93:13:3e:47:0f:d1:9e:f9:61:36:f3:20:a4:7e:5b:03:8e:
12:7f:55:28:51:d4:c5:8b:57:99:78:d2:78:6d:f1:24:71:59:
aa:28:74:44:47:3d:6b:42:ce:6a:2b:60:82:c4:3d:fd:41:24:
91:3c:bb:34:b9:c7:bb:3f:f6:41:e9:73:76:2c:e3:1b:34:e0:
89:fc:2f:96:1d:98:5c:55:9b:7d:42:84:ec:6d:14:3f:74:65:
5d:c3:54:4f:64:38:9f:36:6d:eb:ec:1e:fa:b3:25:1a:0c:4d:
0c:0b:fd:2f:bc:d8:fb:fb:d7:9f:60:83:aa:c0:cd:94:ed:2a:
03:d6:fd:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 1 14:45:56 2025 by rpki-client