Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/4db770-d7f5-4bcb-ba44-857712720a35/1/6rmhV-EqLvcX0TIxrwb9hUVLMVE.mft
File: 6rmhV-EqLvcX0TIxrwb9hUVLMVE.mft (raw, json)
Hash identifier: C0+wfY+cEeOG7puLCs44F7//o6X0tp4lhoVQ9HI1/XA=
Subject key identifier: 88:5B:20:0A:6F:12:87:F5:CB:BB:71:F9:A0:69:05:1B:1C:E9:E5:67
Authority key identifier: EA:B9:A1:57:E1:2A:2E:F7:17:D1:32:31:AF:06:FD:85:45:4B:31:51
Certificate issuer: /CN=eab9a157e12a2ef717d13231af06fd85454b3151
Certificate serial: 019A722651A9128D82AC7EF2B4B59F453602
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6rmhV-EqLvcX0TIxrwb9hUVLMVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/4db770-d7f5-4bcb-ba44-857712720a35/1/6rmhV-EqLvcX0TIxrwb9hUVLMVE.mft
Manifest number: 1022
Signing time: Tue 11 Nov 2025 09:01:45 +0000
Manifest this update: Tue 11 Nov 2025 09:01:45 +0000
Manifest next update: Wed 12 Nov 2025 09:01:45 +0000
Files and hashes: 1: 6rmhV-EqLvcX0TIxrwb9hUVLMVE.crl (hash: Q0n3ekilVkdFI4i6wKaJFlVimrjELi4wN8Shq9dXi0U=)
2: HOKH-4cqRMA_yXERkwbNDzuMfg0.roa (hash: BxrSjj1tg8yper8hXCVO7HyCIeXNMBvlZBpIdnV+E/w=)
3: q-7o-VTmQktM6CANooQxHGpfUPs.roa (hash: nkRO+yCLAt1MadmnWmx2ah2ZlpvxH2J3hDHN33uCuqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/4db770-d7f5-4bcb-ba44-857712720a35/1/6rmhV-EqLvcX0TIxrwb9hUVLMVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/4db770-d7f5-4bcb-ba44-857712720a35/1/6rmhV-EqLvcX0TIxrwb9hUVLMVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/6rmhV-EqLvcX0TIxrwb9hUVLMVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:51:a9:12:8d:82:ac:7e:f2:b4:b5:9f:45:36:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eab9a157e12a2ef717d13231af06fd85454b3151
Validity
Not Before: Nov 11 09:01:45 2025 GMT
Not After : Nov 12 09:01:45 2025 GMT
Subject: CN=885b200a6f1287f5cbbb71f9a069051b1ce9e567
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:35:9c:1d:6b:39:db:ff:8c:f6:4e:0a:3d:1b:
7a:8a:fe:ed:52:0e:96:f0:b3:3f:87:28:ca:58:98:
2d:74:9e:ca:ab:90:96:fa:7b:0a:70:9f:f6:43:11:
a4:67:b0:4f:51:e3:24:bf:e8:7b:3b:2f:d0:30:08:
63:cd:1e:89:6e:80:f8:d3:4e:95:b2:ff:97:ed:1b:
aa:f7:2c:4b:24:3b:da:af:ae:40:a3:00:b6:d2:2d:
25:e6:ec:de:78:8a:71:e7:7c:7e:56:c2:73:32:b1:
fe:52:52:93:9e:a0:b7:2d:51:44:eb:b1:3f:00:ea:
ef:35:2c:94:35:28:e9:df:0d:74:3e:dc:95:67:78:
8f:8e:dd:c4:12:5f:b0:d5:93:86:25:d0:27:45:eb:
dd:50:c3:db:60:59:3d:46:17:8a:ed:c4:fd:1b:dc:
96:88:17:69:e9:70:1d:85:c8:11:b6:59:6c:c9:f2:
14:6f:a5:fe:55:41:61:60:eb:2f:26:48:2b:2f:8f:
24:88:ce:b9:bd:13:d0:7b:ac:4c:27:68:01:7f:07:
69:03:70:58:80:e3:b9:94:b9:ad:be:eb:f1:94:d7:
28:27:0a:1c:5e:f7:77:bb:3d:fb:36:23:e0:c6:66:
b4:e8:6f:44:69:d4:20:22:ec:c4:ac:78:3b:42:60:
72:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:5B:20:0A:6F:12:87:F5:CB:BB:71:F9:A0:69:05:1B:1C:E9:E5:67
X509v3 Authority Key Identifier:
keyid:EA:B9:A1:57:E1:2A:2E:F7:17:D1:32:31:AF:06:FD:85:45:4B:31:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6rmhV-EqLvcX0TIxrwb9hUVLMVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/4db770-d7f5-4bcb-ba44-857712720a35/1/6rmhV-EqLvcX0TIxrwb9hUVLMVE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/4db770-d7f5-4bcb-ba44-857712720a35/1/6rmhV-EqLvcX0TIxrwb9hUVLMVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:55:4f:93:4c:4f:0e:6c:ba:f1:8c:9e:94:03:28:14:3b:69:
9d:c8:e2:ee:38:73:cf:b6:36:ea:e8:c7:1f:b1:b9:c0:d6:ca:
36:e2:07:73:fe:27:0f:e4:2c:27:d9:d0:df:0e:a5:0c:de:63:
62:ad:84:97:de:d4:a5:f0:f9:5a:44:22:8d:be:fd:da:89:bf:
22:37:ad:32:15:cf:bf:9f:93:61:8e:fd:fe:5e:27:dc:f6:a4:
ed:e8:30:76:71:0c:f0:dd:4c:89:2f:56:26:40:a2:89:ba:68:
36:d1:4c:ef:3f:ee:54:4a:41:45:6c:e1:15:82:05:87:93:38:
21:d0:44:95:d7:64:dc:1d:7d:4f:fa:0a:a9:0b:70:78:14:56:
d0:8e:e6:ad:4f:da:28:a9:e2:cd:54:b4:9a:f1:1c:b9:9d:53:
d0:31:6e:ea:0c:b1:27:68:90:00:66:74:5f:5c:60:2a:97:d9:
b1:ad:53:61:84:74:ca:e5:5f:31:51:ab:b7:ab:02:91:77:0f:
70:69:83:53:10:e3:1b:95:b8:54:67:a8:6e:ee:76:99:6d:37:
de:d2:fd:a2:0d:4f:46:ac:9f:c7:b4:d1:92:22:1c:ae:99:e0:
47:ab:de:89:00:54:09:27:54:e2:ff:8b:50:c5:b9:d7:3b:3c:
de:a6:11:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:34:54 2025 by rpki-client