Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/4d7f6e-c6df-41d7-8ffd-5089b602bfc2/1/6Y3F54JY5CZzm9iMLUwgCq3zvxM.mft
File: 6Y3F54JY5CZzm9iMLUwgCq3zvxM.mft (raw, json)
Hash identifier: zJDVTqs2/UyQZn05spV03L4v6dmRzhvk6VwH8l/ChXM=
Subject key identifier: 95:56:F3:A9:A1:A0:72:5D:FB:88:24:05:6C:31:EF:EF:CC:4D:53:C5
Authority key identifier: E9:8D:C5:E7:82:58:E4:26:73:9B:D8:8C:2D:4C:20:0A:AD:F3:BF:13
Certificate issuer: /CN=e98dc5e78258e426739bd88c2d4c200aadf3bf13
Certificate serial: 019A7225DE4BE8AA751F3EEB136F2B6638ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Y3F54JY5CZzm9iMLUwgCq3zvxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/4d7f6e-c6df-41d7-8ffd-5089b602bfc2/1/6Y3F54JY5CZzm9iMLUwgCq3zvxM.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 09:01:15 +0000
Manifest this update: Tue 11 Nov 2025 09:01:15 +0000
Manifest next update: Wed 12 Nov 2025 09:01:15 +0000
Files and hashes: 1: 6Y3F54JY5CZzm9iMLUwgCq3zvxM.crl (hash: h30a2Mj693Se+scmfrhlkBqVDH2ky7zR9HjGBxTDVnc=)
2: tseR8GP4Fbf261yqYCNjj9fDV1M.roa (hash: fi4QggPDU2QjSa/CfYSOVM8ZVKWF4rBk1jBf4sgMqBk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/4d7f6e-c6df-41d7-8ffd-5089b602bfc2/1/6Y3F54JY5CZzm9iMLUwgCq3zvxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/4d7f6e-c6df-41d7-8ffd-5089b602bfc2/1/6Y3F54JY5CZzm9iMLUwgCq3zvxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/6Y3F54JY5CZzm9iMLUwgCq3zvxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:de:4b:e8:aa:75:1f:3e:eb:13:6f:2b:66:38:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e98dc5e78258e426739bd88c2d4c200aadf3bf13
Validity
Not Before: Nov 11 09:01:15 2025 GMT
Not After : Nov 12 09:01:15 2025 GMT
Subject: CN=9556f3a9a1a0725dfb8824056c31efefcc4d53c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:77:b9:b6:5b:4d:88:c3:e2:19:29:96:b9:5e:
22:65:77:e8:80:d5:13:c1:86:66:8c:7b:d5:bc:bf:
b7:d2:e6:7d:0a:54:f3:20:22:66:9a:85:af:26:87:
66:f0:0c:9e:d3:f4:3c:8c:9b:94:9c:48:92:59:50:
64:89:e7:c8:5a:08:16:98:f7:46:a5:5e:f6:91:cf:
f9:a9:08:85:16:b7:6c:6e:5a:0d:53:9c:63:8e:79:
f9:ea:9c:59:6e:5b:c8:9a:7d:7b:1d:b7:51:d7:df:
56:35:2f:eb:5d:03:ea:e6:c7:77:90:9c:49:29:84:
4b:dd:e4:de:17:cb:51:3b:f7:7b:3a:c2:cf:45:c8:
34:d1:5c:1c:59:c4:33:e1:1b:03:54:6c:f0:bf:95:
15:ea:30:bb:4b:a8:cd:5e:6b:00:35:ad:68:3d:cd:
20:2d:ba:69:40:9a:f4:e4:6b:91:06:48:cf:d0:a1:
e4:1e:ba:f0:9a:ab:4b:5f:2c:0e:1e:48:27:6e:8e:
21:98:be:8d:45:53:85:7b:7a:5c:88:86:51:d5:31:
28:35:66:b1:9f:7e:bf:42:61:5b:0a:78:2a:aa:1e:
b0:b1:cb:5e:09:3a:a7:8c:0b:f0:2a:15:ec:01:29:
1b:b5:a3:69:7a:60:c9:0f:dd:4b:97:18:a5:71:8c:
0f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:56:F3:A9:A1:A0:72:5D:FB:88:24:05:6C:31:EF:EF:CC:4D:53:C5
X509v3 Authority Key Identifier:
keyid:E9:8D:C5:E7:82:58:E4:26:73:9B:D8:8C:2D:4C:20:0A:AD:F3:BF:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Y3F54JY5CZzm9iMLUwgCq3zvxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/4d7f6e-c6df-41d7-8ffd-5089b602bfc2/1/6Y3F54JY5CZzm9iMLUwgCq3zvxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/4d7f6e-c6df-41d7-8ffd-5089b602bfc2/1/6Y3F54JY5CZzm9iMLUwgCq3zvxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:57:81:fc:70:b1:b1:36:2f:68:f8:38:e7:44:e3:a5:81:fc:
ca:2a:df:35:71:61:79:be:a5:c7:a0:d9:f1:66:04:59:ba:f8:
b9:be:2e:cb:1a:d3:5e:82:1e:b4:d1:c2:2e:ad:c0:e3:52:8b:
d2:71:b3:a8:44:28:cc:09:a9:48:70:f2:25:e4:80:57:53:42:
09:4a:ac:77:73:c2:77:0f:25:27:32:1f:32:d4:a6:ba:62:53:
35:d4:af:db:ae:87:9b:51:57:e8:2b:d1:63:e3:3c:c4:93:2e:
7b:e6:36:8e:85:1d:16:56:88:cd:df:f8:3e:d3:25:33:0b:34:
72:f9:e7:d0:0f:10:a6:12:b4:ff:72:c0:23:46:0c:f3:b9:f3:
29:f0:4e:dc:26:0c:d5:f4:07:96:62:1e:21:22:fd:65:58:a4:
25:d2:a6:d3:c8:de:1f:8e:af:cb:22:31:12:92:2e:f9:0d:9f:
d3:a1:27:43:20:a3:41:40:46:44:2d:db:ed:e2:ae:a1:bf:c0:
e3:16:b2:e6:23:73:26:97:eb:25:a6:1a:94:ec:0c:d1:76:0d:
40:97:6b:d8:a2:e6:58:bf:85:25:48:95:4f:bf:8b:1b:da:65:
eb:d7:f0:37:99:d0:31:e4:ab:44:8b:35:95:25:70:5f:ec:e4:
b0:70:f1:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:18:05 2025 by rpki-client