Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/afdf95-2834-4dcc-b41d-3f9f264ceb20/1/6bGmwGFFXAjpFHsoH8dCTLxUX0E.mft
File: 6bGmwGFFXAjpFHsoH8dCTLxUX0E.mft (raw, json)
Hash identifier: 6aoe/KKI70Hoi6NvFO7UeJCtwLTCVhHc5HzmcALGiws=
Subject key identifier: F7:F5:DF:35:6F:6D:46:FC:E1:B9:99:31:1A:BE:23:12:B5:AB:7D:5F
Authority key identifier: E9:B1:A6:C0:61:45:5C:08:E9:14:7B:28:1F:C7:42:4C:BC:54:5F:41
Certificate issuer: /CN=e9b1a6c061455c08e9147b281fc7424cbc545f41
Certificate serial: 019A72CA1B45AEE72626C28D54A3D9469D9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6bGmwGFFXAjpFHsoH8dCTLxUX0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/afdf95-2834-4dcc-b41d-3f9f264ceb20/1/6bGmwGFFXAjpFHsoH8dCTLxUX0E.mft
Manifest number: 151D
Signing time: Tue 11 Nov 2025 12:00:39 +0000
Manifest this update: Tue 11 Nov 2025 12:00:39 +0000
Manifest next update: Wed 12 Nov 2025 12:00:39 +0000
Files and hashes: 1: 6bGmwGFFXAjpFHsoH8dCTLxUX0E.crl (hash: Xt/v6ALgnC5EjdGi1Ze0WFpKlJlncnHNCky6EMmFy8M=)
2: X2Ue9BiJRpGQwFUYXhIqlj7hvS4.roa (hash: qRbAcxIbrHVx6s0CuB/vd4dBEHEd2cFKqYXK6NGKEfc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/afdf95-2834-4dcc-b41d-3f9f264ceb20/1/6bGmwGFFXAjpFHsoH8dCTLxUX0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/afdf95-2834-4dcc-b41d-3f9f264ceb20/1/6bGmwGFFXAjpFHsoH8dCTLxUX0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/6bGmwGFFXAjpFHsoH8dCTLxUX0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:1b:45:ae:e7:26:26:c2:8d:54:a3:d9:46:9d:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9b1a6c061455c08e9147b281fc7424cbc545f41
Validity
Not Before: Nov 11 12:00:39 2025 GMT
Not After : Nov 12 12:00:39 2025 GMT
Subject: CN=f7f5df356f6d46fce1b999311abe2312b5ab7d5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ef:8c:f1:10:12:17:ff:df:31:99:ae:d4:f1:
35:36:0c:02:89:14:c1:f0:26:af:90:2a:86:39:ae:
94:ac:b9:ae:27:d5:5b:ee:28:ec:12:3f:ea:b9:58:
ae:7c:9e:73:93:28:e3:f4:6d:fd:f7:5e:e2:38:b0:
62:81:0d:a5:7d:3f:06:fe:65:eb:97:58:7f:fd:e7:
b9:d5:e4:d4:72:7f:63:18:08:b2:67:32:04:e1:7f:
47:3a:cb:0e:f8:35:6e:4a:71:54:2d:5d:90:63:5b:
1f:6c:3b:81:69:33:6d:d1:da:6c:44:3c:eb:03:51:
72:d3:7e:98:74:f1:28:70:06:41:16:73:3f:3e:f2:
2e:55:b9:b2:fd:28:5c:01:e8:e1:52:ce:f5:a4:7f:
94:c6:fb:15:4d:a3:d6:ea:e7:9d:33:1a:64:48:ea:
20:5c:a5:df:90:d4:81:1d:dc:34:11:da:44:05:0d:
48:69:13:b9:f4:9b:c5:0b:b0:2d:ad:19:8e:20:9e:
11:d8:86:b6:c6:3a:85:1c:75:2f:c9:94:f2:43:8d:
03:51:ed:f4:0a:42:f3:8d:97:7b:5a:94:43:2f:e9:
2c:e0:8d:49:5c:27:20:ba:ac:59:b6:04:96:2d:88:
35:5c:c5:ab:88:1f:00:ba:38:0f:50:89:fb:6c:a2:
9e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:F5:DF:35:6F:6D:46:FC:E1:B9:99:31:1A:BE:23:12:B5:AB:7D:5F
X509v3 Authority Key Identifier:
keyid:E9:B1:A6:C0:61:45:5C:08:E9:14:7B:28:1F:C7:42:4C:BC:54:5F:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6bGmwGFFXAjpFHsoH8dCTLxUX0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/afdf95-2834-4dcc-b41d-3f9f264ceb20/1/6bGmwGFFXAjpFHsoH8dCTLxUX0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/afdf95-2834-4dcc-b41d-3f9f264ceb20/1/6bGmwGFFXAjpFHsoH8dCTLxUX0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:cd:40:ab:74:08:62:17:6f:e7:10:02:92:58:6f:28:6b:06:
09:5b:c6:be:d6:ec:a3:59:b8:c5:a5:98:4a:2a:a9:b6:f9:5a:
de:bb:85:d2:b1:88:6a:e7:b2:93:65:b0:e4:db:59:35:0b:db:
f8:b3:32:4e:64:63:76:e6:70:cf:dd:99:cd:75:6a:b7:a7:55:
73:41:e8:70:90:ed:b8:b9:c0:62:e8:6e:a3:01:e7:3d:d4:0d:
b4:c4:c5:f5:79:b7:c1:0a:ad:84:04:0f:94:2a:d5:d0:04:bb:
b1:e5:9a:f7:33:36:5f:93:94:cd:a0:50:1f:1b:3a:cc:a7:52:
8e:cb:1f:f4:64:d1:2f:f1:c0:98:6c:2d:79:37:c3:62:1c:8b:
4c:84:56:d4:3d:1a:8b:bc:21:8a:78:22:21:70:b1:60:ee:36:
a5:42:ec:85:12:f4:41:f3:73:b7:1a:96:47:d6:8d:49:36:55:
85:2d:a2:52:07:c9:c5:e7:f5:5e:f0:bf:23:72:7e:7f:af:ae:
13:85:70:c8:14:0a:da:f7:e3:05:bc:98:c2:19:02:be:cd:64:
4c:53:f3:2a:ac:b8:ee:3d:df:73:e9:c4:8b:20:29:00:99:ac:
df:85:2c:8b:1b:59:f2:03:b7:31:c0:af:a9:76:b8:94:7c:f2:
13:32:97:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:22:41 2025 by rpki-client