Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/91d629-7d1f-45bd-a1e1-931cf798e412/1/6rBmxuGACj9b0uQG6aYg0qD29lM.mft
File: 6rBmxuGACj9b0uQG6aYg0qD29lM.mft (raw, json)
Hash identifier: 8JZyLr7WeXpC8mVcd1bnUzQ1dvtLIH+rwLv/p0u/e90=
Subject key identifier: BD:D9:E2:CF:BF:EF:6B:F2:EC:44:C6:26:7E:A0:96:10:0A:FD:5F:81
Authority key identifier: EA:B0:66:C6:E1:80:0A:3F:5B:D2:E4:06:E9:A6:20:D2:A0:F6:F6:53
Certificate issuer: /CN=eab066c6e1800a3f5bd2e406e9a620d2a0f6f653
Certificate serial: 019A72266E9066219F150ED0287006A445C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6rBmxuGACj9b0uQG6aYg0qD29lM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/91d629-7d1f-45bd-a1e1-931cf798e412/1/6rBmxuGACj9b0uQG6aYg0qD29lM.mft
Manifest number: 0DB3
Signing time: Tue 11 Nov 2025 09:01:52 +0000
Manifest this update: Tue 11 Nov 2025 09:01:52 +0000
Manifest next update: Wed 12 Nov 2025 09:01:52 +0000
Files and hashes: 1: 6rBmxuGACj9b0uQG6aYg0qD29lM.crl (hash: o1YlRqXKI/PbMAFQ0rvEke7E0YZMw1LbL06gR0sWo3E=)
2: 9uvjekcau3PbfLrEyZwNzBwQO7Q.roa (hash: mH0HAaOf2X0fWHcxqJaO7mLzzy3VZpb8eqMe7h725z0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/91d629-7d1f-45bd-a1e1-931cf798e412/1/6rBmxuGACj9b0uQG6aYg0qD29lM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/91d629-7d1f-45bd-a1e1-931cf798e412/1/6rBmxuGACj9b0uQG6aYg0qD29lM.mft
rsync://rpki.ripe.net/repository/DEFAULT/6rBmxuGACj9b0uQG6aYg0qD29lM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:6e:90:66:21:9f:15:0e:d0:28:70:06:a4:45:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eab066c6e1800a3f5bd2e406e9a620d2a0f6f653
Validity
Not Before: Nov 11 09:01:52 2025 GMT
Not After : Nov 12 09:01:52 2025 GMT
Subject: CN=bdd9e2cfbfef6bf2ec44c6267ea096100afd5f81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:bd:e8:6d:17:d9:f7:60:5d:2c:1e:5a:13:96:
0f:c0:f7:42:35:d6:33:81:25:11:c3:60:2d:85:87:
cd:21:52:68:ea:89:5b:5c:df:0f:05:e9:a9:5d:05:
e6:2b:86:17:01:ea:47:76:c8:12:4d:19:be:ba:f3:
77:11:7b:e8:35:ff:8e:03:3d:f6:fd:d2:89:5d:aa:
92:85:ad:7a:94:59:ec:e8:c4:ba:7f:9c:6b:d5:2f:
45:7a:49:8d:21:92:27:df:3d:9c:a2:c9:ba:4d:ac:
9a:6c:1d:e3:e0:ae:dd:ca:25:52:0d:0c:83:0f:e9:
6c:41:8f:9d:e9:89:b1:3a:47:10:91:08:c7:db:0d:
7a:7d:0c:e3:db:e9:c6:c0:03:6c:b9:59:38:7d:f1:
08:98:78:cc:62:e1:f1:46:76:89:ee:45:a0:01:ab:
06:e6:40:e1:f1:a9:c7:24:bb:7d:73:00:75:e6:dc:
96:76:c2:37:14:a3:d9:87:18:db:17:0b:99:5d:aa:
b9:48:46:14:62:cf:e9:39:36:ca:41:ac:45:5b:5a:
04:69:0a:04:e5:07:57:b2:9a:a8:ed:c3:89:6b:a5:
76:cb:f0:17:75:de:58:22:54:43:d4:30:2c:55:3c:
98:80:27:9d:c1:07:dd:bd:e4:56:02:47:ff:9b:53:
f3:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:D9:E2:CF:BF:EF:6B:F2:EC:44:C6:26:7E:A0:96:10:0A:FD:5F:81
X509v3 Authority Key Identifier:
keyid:EA:B0:66:C6:E1:80:0A:3F:5B:D2:E4:06:E9:A6:20:D2:A0:F6:F6:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6rBmxuGACj9b0uQG6aYg0qD29lM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/91d629-7d1f-45bd-a1e1-931cf798e412/1/6rBmxuGACj9b0uQG6aYg0qD29lM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/91d629-7d1f-45bd-a1e1-931cf798e412/1/6rBmxuGACj9b0uQG6aYg0qD29lM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:f5:a0:34:1a:3d:48:1a:e3:f9:8a:0a:10:6e:ef:5d:11:b2:
c7:b4:e3:73:d5:4d:ad:4e:7f:33:09:d2:b4:47:44:02:d4:bd:
7c:a8:d4:62:ac:09:a4:90:87:fb:0b:a3:4c:d2:51:23:55:f8:
cd:b1:5a:04:7a:a1:80:26:f6:8d:73:23:37:ff:7e:c8:ae:eb:
52:c2:a5:a1:46:b1:68:be:e6:a6:8e:2a:90:dc:95:e1:e7:39:
a4:13:1a:65:af:26:c3:28:34:9d:bc:40:1e:b9:88:e4:a9:0e:
fe:ba:8e:24:57:39:41:7a:23:9f:ab:ad:70:30:58:a4:8f:1b:
79:9e:5b:25:63:0e:ef:14:fa:2c:c8:9d:ac:fa:4e:c6:7f:9c:
72:6a:89:61:d2:2d:4f:7a:fe:57:5c:de:a7:46:c1:03:8a:01:
e5:4a:0a:71:4e:3d:63:c7:4f:79:d9:7a:2a:56:78:53:9d:b0:
8f:c7:1d:9f:f5:e5:80:d1:19:2a:ba:ab:67:96:b6:2b:69:c9:
4a:13:09:b2:51:d9:26:63:53:c8:e3:8e:17:6c:c2:d4:62:5f:
61:be:b9:4c:7a:28:fe:e8:dd:32:bd:a9:e4:b8:05:92:c7:eb:
71:db:66:b6:51:2a:9d:2f:8c:fc:4c:b9:a8:de:91:53:e4:8b:
88:ad:55:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:35:00 2025 by rpki-client