Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/0aa9b7-0073-4685-aa7b-70771b55c2ab/1/6W790RLajZdctZOq0f6IQNbwiuM.mft
File: 6W790RLajZdctZOq0f6IQNbwiuM.mft (raw, json)
Hash identifier: sDmimlXb+1tNGUCfJbKnD83A7z+5N6W8mxNQM5PeyrA=
Subject key identifier: FB:A5:EE:1F:CB:EA:07:3E:81:44:E1:44:07:58:16:9A:E7:75:DF:6D
Authority key identifier: E9:6E:FD:D1:12:DA:8D:97:5C:B5:93:AA:D1:FE:88:40:D6:F0:8A:E3
Certificate issuer: /CN=e96efdd112da8d975cb593aad1fe8840d6f08ae3
Certificate serial: 019A7149B1EB46D256CFEA09A0DB80CE788B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6W790RLajZdctZOq0f6IQNbwiuM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/0aa9b7-0073-4685-aa7b-70771b55c2ab/1/6W790RLajZdctZOq0f6IQNbwiuM.mft
Manifest number: 02E7
Signing time: Tue 11 Nov 2025 05:00:46 +0000
Manifest this update: Tue 11 Nov 2025 05:00:46 +0000
Manifest next update: Wed 12 Nov 2025 05:00:46 +0000
Files and hashes: 1: 6W790RLajZdctZOq0f6IQNbwiuM.crl (hash: T0dAPRR0jlG3uwOd+pERfyy7qFk7K2LnMp4gUdLsiQ0=)
2: Nn9zvns-9MxxIXjn8JIbpmV34s8.roa (hash: 7A6j8hAQUIpmUDd+lagtKalWuiGm1he97we0iFCchhc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/0aa9b7-0073-4685-aa7b-70771b55c2ab/1/6W790RLajZdctZOq0f6IQNbwiuM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/0aa9b7-0073-4685-aa7b-70771b55c2ab/1/6W790RLajZdctZOq0f6IQNbwiuM.mft
rsync://rpki.ripe.net/repository/DEFAULT/6W790RLajZdctZOq0f6IQNbwiuM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:b1:eb:46:d2:56:cf:ea:09:a0:db:80:ce:78:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e96efdd112da8d975cb593aad1fe8840d6f08ae3
Validity
Not Before: Nov 11 05:00:46 2025 GMT
Not After : Nov 12 05:00:46 2025 GMT
Subject: CN=fba5ee1fcbea073e8144e1440758169ae775df6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:4d:24:f7:6b:ee:63:86:0f:c3:70:7f:ef:1e:
73:d2:89:4a:c6:25:10:0d:4c:41:e5:d2:fd:92:e2:
9a:7b:00:9d:b9:90:94:d2:a8:d4:80:25:b9:ea:c5:
37:17:af:a6:0c:5c:83:14:79:77:75:03:75:77:60:
e9:8c:25:72:fd:b0:97:5f:a1:59:70:ce:39:d2:6e:
85:89:84:b2:6a:83:d3:86:5c:62:ce:e1:49:ae:4b:
1f:a3:fa:88:be:71:32:89:af:5a:7f:75:b3:fd:a8:
8e:3f:16:25:37:6f:a2:b2:30:4d:eb:47:f0:69:b9:
0a:1a:d3:02:bd:fb:94:a7:39:23:e9:54:cc:d2:c9:
4d:78:60:38:4f:37:18:56:f8:04:e9:b5:37:68:6e:
3d:e1:b9:e4:ae:68:9d:c8:e4:07:45:7f:7c:da:00:
93:7a:98:26:22:a8:bd:05:11:9e:8b:d5:3e:91:79:
66:92:fa:04:f1:a7:fb:3c:39:96:75:36:77:82:9c:
97:12:a9:d4:c5:0b:6e:a0:de:b3:da:40:f0:54:6c:
3f:cf:45:41:01:97:cc:de:74:bf:b4:95:3d:ab:c7:
54:77:3f:4a:d3:9c:25:74:c4:ae:dc:b0:f8:cf:10:
36:29:d8:d5:c4:6e:a9:ea:46:84:59:c7:14:eb:20:
1c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:A5:EE:1F:CB:EA:07:3E:81:44:E1:44:07:58:16:9A:E7:75:DF:6D
X509v3 Authority Key Identifier:
keyid:E9:6E:FD:D1:12:DA:8D:97:5C:B5:93:AA:D1:FE:88:40:D6:F0:8A:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6W790RLajZdctZOq0f6IQNbwiuM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/0aa9b7-0073-4685-aa7b-70771b55c2ab/1/6W790RLajZdctZOq0f6IQNbwiuM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/0aa9b7-0073-4685-aa7b-70771b55c2ab/1/6W790RLajZdctZOq0f6IQNbwiuM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:ab:26:43:16:48:9f:38:0f:a1:bc:c5:41:e9:f9:d0:3f:da:
bc:3f:c6:70:43:a1:09:ab:20:23:fc:b7:06:c3:bb:ee:ed:51:
e7:05:c4:a3:16:a0:62:f7:31:bf:c6:57:e7:77:f0:e5:6b:a6:
fa:85:76:27:65:2e:03:e1:b1:7f:ed:fa:f7:89:0f:10:c3:63:
83:b0:2d:18:e7:f8:24:b4:10:ed:10:fd:e6:e8:3c:46:e5:48:
ac:22:36:4e:1d:80:e5:68:2c:db:26:ce:ff:00:d6:99:dd:b2:
40:7d:3d:f6:41:6b:56:aa:7f:53:d9:8c:ff:69:25:d1:31:ec:
e5:cd:af:87:70:dc:88:b1:30:b2:6d:0f:fb:c2:ee:7f:93:7a:
f8:9a:0f:5f:14:31:94:c1:6f:c4:b7:c1:e2:7d:82:24:3a:78:
55:b4:9e:ae:f7:71:21:fb:74:9c:55:f7:8a:cd:28:c3:63:ff:
49:8b:50:2e:6f:87:5b:a6:88:e3:a0:05:bc:7f:19:a8:d4:5a:
c3:02:02:cd:ec:ad:59:dd:5b:97:42:bd:f6:da:cf:6f:b5:3f:
7b:52:8d:0f:ec:80:ae:de:a2:3c:89:7b:67:3a:bb:86:01:71:
08:5f:4c:e7:da:58:a5:f9:11:eb:52:10:8f:7a:4b:b8:91:6e:
1a:49:e3:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:48 2025 by rpki-client