Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/4b4748-5af0-4513-aca9-0b41234cb0ce/1/6Fshr-GwkW9V7qbVvcHb8uc6PGg.mft
File: 6Fshr-GwkW9V7qbVvcHb8uc6PGg.mft (raw, json)
Hash identifier: CsY0soxGUP+IgH/7WJ3C4fwmGg7McP93M0aRw5wq+c8=
Subject key identifier: D3:D0:BE:32:31:AF:AE:98:28:79:2C:A1:D6:1D:5C:4C:C6:32:6C:3A
Authority key identifier: E8:5B:21:AF:E1:B0:91:6F:55:EE:A6:D5:BD:C1:DB:F2:E7:3A:3C:68
Certificate issuer: /CN=e85b21afe1b0916f55eea6d5bdc1dbf2e73a3c68
Certificate serial: 019A73384BF12A3A873052B8E42BD96A3650
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Fshr-GwkW9V7qbVvcHb8uc6PGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/4b4748-5af0-4513-aca9-0b41234cb0ce/1/6Fshr-GwkW9V7qbVvcHb8uc6PGg.mft
Manifest number: 066A
Signing time: Tue 11 Nov 2025 14:01:00 +0000
Manifest this update: Tue 11 Nov 2025 14:01:00 +0000
Manifest next update: Wed 12 Nov 2025 14:01:00 +0000
Files and hashes: 1: 6Fshr-GwkW9V7qbVvcHb8uc6PGg.crl (hash: c/Uappf2kEiFE4eG5vmYNaqGJpHbR/CkiyeHdsGYR+o=)
2: kRbJM0r9hkR1wq3RdsUFiL0HT7Q.roa (hash: TB8ehbBKofWhXL0zKQ3+dh6paWgo+N+m/aat6bTAmec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/4b4748-5af0-4513-aca9-0b41234cb0ce/1/6Fshr-GwkW9V7qbVvcHb8uc6PGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/4b4748-5af0-4513-aca9-0b41234cb0ce/1/6Fshr-GwkW9V7qbVvcHb8uc6PGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/6Fshr-GwkW9V7qbVvcHb8uc6PGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:38:4b:f1:2a:3a:87:30:52:b8:e4:2b:d9:6a:36:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e85b21afe1b0916f55eea6d5bdc1dbf2e73a3c68
Validity
Not Before: Nov 11 14:01:00 2025 GMT
Not After : Nov 12 14:01:00 2025 GMT
Subject: CN=d3d0be3231afae9828792ca1d61d5c4cc6326c3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6a:6f:47:db:4b:cf:72:0a:4d:a0:ac:23:1f:
62:a0:a9:0b:94:0e:d3:95:a3:a0:d3:31:f9:6a:ab:
55:10:45:61:cc:e2:4f:5c:a0:85:29:6f:77:a8:2a:
2d:e6:b5:f0:6d:dc:9f:7d:dc:d7:6f:e1:bc:03:09:
d6:c8:c3:46:01:1e:fb:e4:a6:37:69:2f:2d:05:2c:
f7:0f:35:62:87:39:a2:3a:0c:bc:94:62:bf:a9:da:
ad:63:b3:fe:29:50:dc:4c:93:53:37:45:7a:4a:3e:
86:02:44:7c:26:a2:29:8e:e4:dc:c1:4e:e2:7b:ce:
d6:39:91:b3:3a:08:2d:74:55:39:74:20:16:8c:9d:
c9:f4:33:c0:8e:1b:78:d2:c7:1f:f2:6f:59:e0:1b:
15:39:3c:4b:d3:db:1b:7f:25:67:e5:71:83:b4:bb:
6b:19:10:97:af:3d:45:6a:93:86:e3:1b:1f:da:42:
51:dc:9b:f4:d1:f7:33:75:26:c9:c1:ab:43:ef:86:
54:0d:27:4e:fa:21:4c:c5:bb:65:79:37:af:cc:f2:
d6:1f:18:7f:37:3d:70:41:b3:3e:c2:9e:f7:4a:a0:
e6:5d:77:66:3a:5f:b0:af:fd:5d:83:d8:d7:9b:a1:
68:c8:b1:3d:c8:c0:93:b6:01:a8:b7:08:64:b7:99:
21:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:D0:BE:32:31:AF:AE:98:28:79:2C:A1:D6:1D:5C:4C:C6:32:6C:3A
X509v3 Authority Key Identifier:
keyid:E8:5B:21:AF:E1:B0:91:6F:55:EE:A6:D5:BD:C1:DB:F2:E7:3A:3C:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Fshr-GwkW9V7qbVvcHb8uc6PGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/4b4748-5af0-4513-aca9-0b41234cb0ce/1/6Fshr-GwkW9V7qbVvcHb8uc6PGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/4b4748-5af0-4513-aca9-0b41234cb0ce/1/6Fshr-GwkW9V7qbVvcHb8uc6PGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:b2:16:29:1c:76:8c:36:0f:75:0e:09:08:2d:fd:f7:4c:5c:
b3:d3:cc:11:d4:ad:a7:14:79:44:3b:15:2d:bb:11:98:40:1c:
3e:4e:34:96:0a:78:41:97:a6:51:c5:9f:79:b1:1a:74:8b:d0:
59:42:d3:2a:18:5a:32:d2:9f:d0:c7:06:85:0b:ba:ca:ab:13:
5e:47:15:7c:c5:7f:30:64:f2:c4:21:67:59:57:9b:88:5b:36:
50:95:e6:33:56:ad:58:7f:ae:ab:1f:c4:aa:be:ad:fa:b4:75:
e7:b3:29:6a:82:b3:56:18:99:b7:f2:ef:09:2c:65:3b:a8:a8:
9e:46:e2:fd:34:2f:8a:3e:bc:6f:34:64:0b:76:86:51:91:6c:
cc:38:4a:0b:10:69:51:70:9b:af:b9:8e:77:99:cf:17:9a:6a:
24:46:0e:73:a9:bc:f6:9f:29:f1:cf:d3:e7:cd:26:9c:79:49:
31:14:e6:3d:89:58:34:3c:1f:57:81:0a:7f:44:ae:a1:94:ea:
43:75:24:0d:a3:81:16:20:c2:03:89:08:02:f8:f3:6c:57:e3:
c6:81:ca:3c:66:eb:7b:11:89:47:1a:2e:20:7a:e1:cd:33:04:
07:07:22:0d:69:b8:b0:25:c0:2b:6e:cf:ba:f3:76:6f:ba:d3:
cf:2b:3c:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 18:10:15 2025 by rpki-client