Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/db4658-4275-43ba-9da9-6d810b0ada0a/1/6MPmRSpj-OR6JX5Twaj_p1-R6kA.mft
File: 6MPmRSpj-OR6JX5Twaj_p1-R6kA.mft (raw, json)
Hash identifier: SJGwAFKyOkwEjPEFvceP8YmK3NRfcRRQ+y3S873weQs=
Subject key identifier: E7:77:0F:01:49:43:E3:87:38:09:28:0D:4E:BE:1A:5E:E2:FC:A0:51
Authority key identifier: E8:C3:E6:45:2A:63:F8:E4:7A:25:7E:53:C1:A8:FF:A7:5F:91:EA:40
Certificate issuer: /CN=e8c3e6452a63f8e47a257e53c1a8ffa75f91ea40
Certificate serial: 019A7225C0F329CD03DFB43D65311CC4E986
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6MPmRSpj-OR6JX5Twaj_p1-R6kA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/db4658-4275-43ba-9da9-6d810b0ada0a/1/6MPmRSpj-OR6JX5Twaj_p1-R6kA.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 09:01:08 +0000
Manifest this update: Tue 11 Nov 2025 09:01:08 +0000
Manifest next update: Wed 12 Nov 2025 09:01:08 +0000
Files and hashes: 1: 6MPmRSpj-OR6JX5Twaj_p1-R6kA.crl (hash: tOdMd5blc0fvexPfGwtjh2/E1JyQ0QwM6Owu0o/VNSI=)
2: GK0Bp6TP9K4-qwdEgsDkQHad0Jw.roa (hash: vbPhg+vd0Vmphw6uDH8Qj3C//m4qsvwfSx93uUcGgb8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/db4658-4275-43ba-9da9-6d810b0ada0a/1/6MPmRSpj-OR6JX5Twaj_p1-R6kA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/db4658-4275-43ba-9da9-6d810b0ada0a/1/6MPmRSpj-OR6JX5Twaj_p1-R6kA.mft
rsync://rpki.ripe.net/repository/DEFAULT/6MPmRSpj-OR6JX5Twaj_p1-R6kA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:c0:f3:29:cd:03:df:b4:3d:65:31:1c:c4:e9:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8c3e6452a63f8e47a257e53c1a8ffa75f91ea40
Validity
Not Before: Nov 11 09:01:08 2025 GMT
Not After : Nov 12 09:01:08 2025 GMT
Subject: CN=e7770f014943e3873809280d4ebe1a5ee2fca051
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:c0:b7:8b:f2:57:f7:bf:f9:f0:23:54:0a:58:
04:18:3c:ed:53:a1:e8:ed:c9:3c:0a:65:7c:89:f0:
d4:94:ec:d2:5a:d6:c9:6a:30:55:5b:86:f1:68:db:
e1:a9:94:ad:aa:13:fa:90:d5:47:74:49:68:d8:64:
af:13:ed:c4:05:66:d7:04:36:d0:67:0b:28:25:65:
af:5b:b8:2d:e0:78:e3:13:24:1c:e7:4d:ec:60:12:
23:42:e8:6a:68:c0:e8:67:cc:5e:c9:f1:65:68:29:
37:5d:39:65:51:95:dd:4f:41:fd:32:c0:c8:58:6e:
52:b8:a0:f3:3a:3f:5e:3c:fc:fd:f9:b4:c5:b2:f1:
9f:f0:66:11:67:48:28:bd:0d:fc:93:55:3e:b2:2d:
cb:12:43:ff:37:fe:d4:36:17:75:9a:62:68:5f:af:
53:fb:cc:f1:1e:1b:ed:ba:09:ac:87:42:e9:bc:ae:
17:7d:4e:d3:cb:a9:75:b2:a9:06:3b:86:3f:7c:ad:
4e:e2:70:9c:6f:98:6f:33:db:6c:ed:5a:21:83:9c:
a1:98:67:99:5c:a3:a0:b2:ba:7b:1d:71:4a:2e:d9:
dc:47:5d:cd:6e:25:84:e2:ee:79:22:c2:e1:b9:7b:
3c:d8:cc:a4:61:28:7a:c5:40:37:d7:74:55:8f:72:
89:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:77:0F:01:49:43:E3:87:38:09:28:0D:4E:BE:1A:5E:E2:FC:A0:51
X509v3 Authority Key Identifier:
keyid:E8:C3:E6:45:2A:63:F8:E4:7A:25:7E:53:C1:A8:FF:A7:5F:91:EA:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6MPmRSpj-OR6JX5Twaj_p1-R6kA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/db4658-4275-43ba-9da9-6d810b0ada0a/1/6MPmRSpj-OR6JX5Twaj_p1-R6kA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/db4658-4275-43ba-9da9-6d810b0ada0a/1/6MPmRSpj-OR6JX5Twaj_p1-R6kA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:69:06:9d:db:b5:6e:7f:56:43:6f:b3:7f:9c:50:9c:01:f4:
5e:2b:bc:f4:cc:2e:9a:15:43:00:ed:e4:08:67:86:37:84:c9:
6c:ac:63:9c:ac:54:fa:62:8d:5e:19:f4:9f:5e:fe:7c:09:6a:
58:10:7c:4c:6b:d8:27:09:d1:d6:40:6c:b5:04:d0:c5:cc:0f:
41:a8:af:bc:59:d5:04:9f:6a:86:d0:0d:dd:fd:29:b2:ea:ee:
a9:78:db:37:1b:7c:62:74:77:fc:1b:36:f1:7d:75:91:84:0c:
0c:a9:2d:01:55:3c:77:c1:d1:d3:3d:85:28:0d:86:e6:41:34:
db:6a:a4:2e:90:74:b8:bd:ea:57:1e:a6:2d:44:73:a3:5e:52:
80:a2:85:0f:12:09:c8:e1:ee:4d:9d:42:db:57:9f:23:88:cf:
2b:5c:ce:ba:7f:de:44:5a:1f:1b:dd:03:2d:74:76:18:2a:27:
b0:af:01:54:c0:96:d8:e5:f1:a5:8e:0f:00:39:3f:ad:22:02:
b1:91:f4:7e:d2:22:36:88:54:d8:a0:31:c8:19:b4:cb:26:ea:
33:59:cf:e7:42:27:9f:34:1b:ad:21:9f:a0:76:1d:72:b2:b6:
75:c2:6d:ab:e9:f3:8c:08:af:5a:9d:16:3f:d0:70:ea:e5:c9:
ed:e6:c4:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:53:41 2025 by rpki-client