Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/fb6e07-bbc1-447e-b3fa-5110f6b579bf/1/6IKTrBZwzy46Sz2mx3cfix6Ez-o.mft
File: 6IKTrBZwzy46Sz2mx3cfix6Ez-o.mft (raw, json)
Hash identifier: FLcZm+/6jSchS9giEwdMr59VkiqPfNXMFwF9qrVyP2c=
Subject key identifier: 3A:9A:F5:9A:B1:01:09:AC:0C:68:E7:24:32:70:12:09:8E:29:20:C1
Authority key identifier: E8:82:93:AC:16:70:CF:2E:3A:4B:3D:A6:C7:77:1F:8B:1E:84:CF:EA
Certificate issuer: /CN=e88293ac1670cf2e3a4b3da6c7771f8b1e84cfea
Certificate serial: 019A706E02F444A57459E34DD18928AD6420
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6IKTrBZwzy46Sz2mx3cfix6Ez-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/fb6e07-bbc1-447e-b3fa-5110f6b579bf/1/6IKTrBZwzy46Sz2mx3cfix6Ez-o.mft
Manifest number: 0FE1
Signing time: Tue 11 Nov 2025 01:00:49 +0000
Manifest this update: Tue 11 Nov 2025 01:00:49 +0000
Manifest next update: Wed 12 Nov 2025 01:00:49 +0000
Files and hashes: 1: 0IRtpKWzk8HJphT_ihghX52o_pQ.roa (hash: hQ8UcdaXM+7M8W7AcOjTNRV8pYkTm524u6CkYGZP1Ds=)
2: 6IKTrBZwzy46Sz2mx3cfix6Ez-o.crl (hash: THDQVGX1/YhG3zuCkzWIAh44yVU3FPqbJ+WWi9L3sjY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/fb6e07-bbc1-447e-b3fa-5110f6b579bf/1/6IKTrBZwzy46Sz2mx3cfix6Ez-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/fb6e07-bbc1-447e-b3fa-5110f6b579bf/1/6IKTrBZwzy46Sz2mx3cfix6Ez-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/6IKTrBZwzy46Sz2mx3cfix6Ez-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:6e:02:f4:44:a5:74:59:e3:4d:d1:89:28:ad:64:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e88293ac1670cf2e3a4b3da6c7771f8b1e84cfea
Validity
Not Before: Nov 11 01:00:49 2025 GMT
Not After : Nov 12 01:00:49 2025 GMT
Subject: CN=3a9af59ab10109ac0c68e724327012098e2920c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:84:49:08:41:8f:69:b3:ee:c9:55:b5:43:f9:
be:5c:56:4c:78:9d:a1:f3:ff:4b:38:54:fe:26:fa:
8a:11:33:e7:07:2a:0d:65:ad:cf:6f:72:80:51:e6:
de:8b:09:80:0e:df:39:8a:31:0f:23:70:01:13:31:
91:e2:f2:43:fc:3b:15:8f:1d:88:8f:d3:bd:d0:15:
a9:ee:cd:8c:45:cb:f0:15:fb:df:e3:c9:87:14:79:
0d:08:44:dd:5d:57:ef:d1:e7:e0:db:84:39:c3:43:
1e:ad:40:42:d5:18:58:e8:bc:17:28:d5:2c:44:13:
f3:47:62:1f:ef:8b:46:e4:45:90:a0:a5:3d:b2:34:
29:17:79:c1:28:a2:a1:ec:ec:58:b9:80:52:a1:d3:
04:35:b5:f3:7e:9d:d2:fa:03:9e:eb:8a:7d:2c:bb:
b7:27:88:61:cd:8d:e8:f9:5b:e4:00:15:2f:9d:97:
49:08:a6:8c:28:8b:88:3b:05:5a:ea:db:47:f9:a1:
95:1a:38:77:75:26:87:a0:a9:c5:3f:a2:0e:11:17:
fc:a6:e5:13:81:41:bf:4e:3f:5e:bf:4f:12:2b:7e:
c4:f9:dc:ee:2b:c4:a1:2e:36:29:0a:3b:38:ec:a8:
ac:34:29:91:3c:73:e1:8a:4a:61:7a:92:36:81:9c:
a1:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:9A:F5:9A:B1:01:09:AC:0C:68:E7:24:32:70:12:09:8E:29:20:C1
X509v3 Authority Key Identifier:
keyid:E8:82:93:AC:16:70:CF:2E:3A:4B:3D:A6:C7:77:1F:8B:1E:84:CF:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6IKTrBZwzy46Sz2mx3cfix6Ez-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fb6e07-bbc1-447e-b3fa-5110f6b579bf/1/6IKTrBZwzy46Sz2mx3cfix6Ez-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fb6e07-bbc1-447e-b3fa-5110f6b579bf/1/6IKTrBZwzy46Sz2mx3cfix6Ez-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:a8:13:69:a4:22:3a:77:b6:b3:9e:e2:1f:bd:3f:f1:c1:94:
7f:5f:a1:44:b0:80:e2:6f:17:06:23:6a:27:78:de:30:86:3e:
1d:27:e7:8c:17:c1:57:f0:e9:49:a4:7b:44:66:7a:a7:0d:17:
38:a8:4e:bc:14:0d:3f:dc:2c:bc:48:53:80:1a:12:1e:46:bb:
76:9d:af:98:56:0d:63:34:a2:c5:db:61:3c:7d:de:d7:c3:d0:
d7:2a:a8:04:ae:9b:aa:1b:11:b9:fd:9a:70:d4:56:61:97:11:
7d:f3:82:24:fc:40:a4:10:05:c2:19:74:b2:8f:99:53:f4:22:
c9:6f:7c:c9:e3:02:02:58:b8:22:c6:a4:83:a0:08:3e:9c:47:
f1:eb:32:9a:1f:fa:69:de:45:b8:75:6a:34:9e:66:2d:ee:0f:
68:5a:e8:4b:a0:f8:9d:1e:da:d7:82:77:bb:78:3b:7c:f4:d2:
07:fe:f1:f0:f9:b6:48:a8:1d:b3:67:9a:6c:52:c0:3a:b6:79:
1d:71:bd:77:55:14:a8:5e:13:ff:b2:28:48:87:d0:06:33:a2:
84:b1:21:cd:4e:9e:29:7a:50:2a:ba:b9:a1:bc:f7:a7:f5:fb:
ef:71:cc:94:71:4f:5f:df:60:2c:6b:41:50:c3:60:ad:57:2f:
28:92:d7:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:46 2025 by rpki-client