Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/d2ff0f-e24a-4313-98c1-22e5547316b5/1/6B0tzytpq9vWCUNkQBFank6hmgU.mft
File: 6B0tzytpq9vWCUNkQBFank6hmgU.mft (raw, json)
Hash identifier: UmpZbWYgz7Wc3LWsbVODPPQHocIOUyMX+Ok+VS0zFnw=
Subject key identifier: 31:3E:2E:71:33:85:E0:2D:42:CA:E3:52:B2:B6:28:55:C7:1C:80:D4
Authority key identifier: E8:1D:2D:CF:2B:69:AB:DB:D6:09:43:64:40:11:5A:9E:4E:A1:9A:05
Certificate issuer: /CN=e81d2dcf2b69abdbd609436440115a9e4ea19a05
Certificate serial: 019A71130543AA360F81B379BED5B27F31C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6B0tzytpq9vWCUNkQBFank6hmgU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/d2ff0f-e24a-4313-98c1-22e5547316b5/1/6B0tzytpq9vWCUNkQBFank6hmgU.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 04:01:03 +0000
Manifest this update: Tue 11 Nov 2025 04:01:03 +0000
Manifest next update: Wed 12 Nov 2025 04:01:03 +0000
Files and hashes: 1: 6B0tzytpq9vWCUNkQBFank6hmgU.crl (hash: YJvDZe0vr/bzIznG/HcqVZVZSQ/tgkmDBNiU3NYbmjM=)
2: rqSMK05KYSg_B0GzBcqvNHZV8BM.roa (hash: 7UiFO6ZTlzbJGR5qeW9I8KOwaVtEW4c742Prj97IAno=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/d2ff0f-e24a-4313-98c1-22e5547316b5/1/6B0tzytpq9vWCUNkQBFank6hmgU.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/d2ff0f-e24a-4313-98c1-22e5547316b5/1/6B0tzytpq9vWCUNkQBFank6hmgU.mft
rsync://rpki.ripe.net/repository/DEFAULT/6B0tzytpq9vWCUNkQBFank6hmgU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:05:43:aa:36:0f:81:b3:79:be:d5:b2:7f:31:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e81d2dcf2b69abdbd609436440115a9e4ea19a05
Validity
Not Before: Nov 11 04:01:03 2025 GMT
Not After : Nov 12 04:01:03 2025 GMT
Subject: CN=313e2e713385e02d42cae352b2b62855c71c80d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:50:dd:69:2c:8b:5a:25:bc:b2:fd:a7:51:d8:
92:d7:bf:5e:0d:8d:c7:1c:c6:cc:6c:ad:04:d8:04:
da:32:4d:5f:96:5e:26:03:f6:17:22:01:cd:68:ca:
c5:c1:00:3c:c0:8b:c1:a3:74:dd:64:27:a7:62:45:
0f:cb:5f:73:08:44:7b:55:d3:73:a6:04:d2:92:36:
2c:4a:da:9e:71:b5:65:08:7d:46:d9:7b:e0:a1:1b:
47:c9:dc:79:a3:5a:98:bd:71:26:f1:cf:82:db:fa:
44:48:33:4a:9b:82:14:38:7a:3b:7d:a2:a3:a9:f0:
43:9d:2e:04:67:d0:91:1a:7b:80:1d:ea:88:67:c0:
28:ce:e6:a7:9c:28:ac:31:78:e7:08:31:af:49:df:
8e:78:42:0c:c7:40:5a:5d:0c:1c:a0:d3:d1:d7:7c:
0c:26:36:b6:d2:a5:bc:f5:db:97:9b:4a:a3:5c:2f:
cf:b7:e0:ee:86:54:8d:f9:dd:1c:08:05:16:9b:35:
8f:2b:b4:f9:27:af:7a:a6:fb:f8:77:70:df:7d:04:
76:c9:57:7c:74:96:fb:19:b2:1c:d9:3b:a6:1c:df:
20:0f:ca:b7:40:27:fe:5f:26:d1:8e:d7:9c:42:0d:
b6:f2:d5:e6:88:34:82:f6:2e:aa:ba:20:b7:7f:85:
7d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:3E:2E:71:33:85:E0:2D:42:CA:E3:52:B2:B6:28:55:C7:1C:80:D4
X509v3 Authority Key Identifier:
keyid:E8:1D:2D:CF:2B:69:AB:DB:D6:09:43:64:40:11:5A:9E:4E:A1:9A:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6B0tzytpq9vWCUNkQBFank6hmgU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/d2ff0f-e24a-4313-98c1-22e5547316b5/1/6B0tzytpq9vWCUNkQBFank6hmgU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/d2ff0f-e24a-4313-98c1-22e5547316b5/1/6B0tzytpq9vWCUNkQBFank6hmgU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:73:59:3f:95:48:72:87:52:48:c0:18:a7:ae:82:2b:a5:cf:
2b:89:46:e0:af:ec:11:3c:bb:fb:af:e4:f2:40:f3:8a:bd:ae:
9b:81:66:40:3e:b3:8e:a5:7d:fd:2f:1e:b9:0f:81:84:60:89:
8a:a5:6d:9f:3e:35:89:7b:e9:ff:17:fd:0e:eb:03:f3:9d:83:
e6:2c:83:6b:e6:d7:21:7d:e4:dc:4d:30:30:20:42:bd:1b:06:
a2:00:65:d7:01:35:be:86:08:9a:7a:3c:8d:c8:2e:63:89:93:
63:8c:38:e8:99:90:d9:08:85:07:04:fe:07:94:ee:17:06:38:
e1:1e:9b:98:40:75:d1:06:7d:67:26:40:49:16:1b:17:67:bc:
11:6b:69:b0:a9:f9:ce:32:52:a7:6c:d7:2c:36:22:27:ca:98:
70:bf:0f:f9:40:9d:35:df:24:13:e6:78:43:a6:79:cf:bc:32:
a7:5a:23:5a:92:74:2d:c2:49:52:72:cd:a5:76:7e:2c:00:8d:
5c:4a:bd:0a:9d:f5:cb:e0:a7:35:31:a6:24:ba:25:a0:55:81:
1e:f3:23:96:09:53:ca:ce:c9:b6:39:f7:60:2f:53:89:cd:a1:
b8:0d:a2:d6:65:84:18:f7:88:69:d8:3a:27:d9:ab:c1:40:25:
bd:d8:b0:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:26 2025 by rpki-client