Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/f78937-aed3-4b6f-aa2d-c832ed7d5fec/1/6Y4gI4HByI2C87cPO-Booao3K50.mft
File: 6Y4gI4HByI2C87cPO-Booao3K50.mft (raw, json)
Hash identifier: rpsZRbT0FeTFx6CR46rsXXCz8t3b4kiyPLTkuQXTWcM=
Subject key identifier: 40:4E:49:76:56:05:CC:B2:24:F0:A9:D6:77:80:D9:D4:20:C2:8E:CC
Authority key identifier: E9:8E:20:23:81:C1:C8:8D:82:F3:B7:0F:3B:E0:68:A1:AA:37:2B:9D
Certificate issuer: /CN=e98e202381c1c88d82f3b70f3be068a1aa372b9d
Certificate serial: 019A72935904861A69B7BF990C7431D0F56C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Y4gI4HByI2C87cPO-Booao3K50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/f78937-aed3-4b6f-aa2d-c832ed7d5fec/1/6Y4gI4HByI2C87cPO-Booao3K50.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 11:00:50 +0000
Manifest this update: Tue 11 Nov 2025 11:00:50 +0000
Manifest next update: Wed 12 Nov 2025 11:00:50 +0000
Files and hashes: 1: 5EXO9UiepL6Zq1llBjLLIrL5oUg.roa (hash: f7qlXZI97BeR4x4m6/QuC0gLJcnSYhH/2MDokTxi6Pw=)
2: 6Y4gI4HByI2C87cPO-Booao3K50.crl (hash: x3/iaRr5bnAoXOrYuKXPTRe8zWybiDteiqXjs+pXgHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/f78937-aed3-4b6f-aa2d-c832ed7d5fec/1/6Y4gI4HByI2C87cPO-Booao3K50.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/f78937-aed3-4b6f-aa2d-c832ed7d5fec/1/6Y4gI4HByI2C87cPO-Booao3K50.mft
rsync://rpki.ripe.net/repository/DEFAULT/6Y4gI4HByI2C87cPO-Booao3K50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:59:04:86:1a:69:b7:bf:99:0c:74:31:d0:f5:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e98e202381c1c88d82f3b70f3be068a1aa372b9d
Validity
Not Before: Nov 11 11:00:50 2025 GMT
Not After : Nov 12 11:00:50 2025 GMT
Subject: CN=404e49765605ccb224f0a9d67780d9d420c28ecc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c5:ef:2b:7a:b7:12:1b:df:d3:67:60:fb:c1:
6a:18:1d:b0:84:d4:fe:37:af:71:2f:57:b7:14:90:
44:32:5c:47:3a:f0:53:64:43:ac:c2:e7:fc:a5:86:
ba:34:d1:cf:71:a2:da:45:c4:a7:36:3e:0f:79:d8:
30:ec:7d:fb:26:5a:4e:7f:68:e9:4b:36:d8:b1:69:
49:47:7f:33:61:8c:6c:ad:6c:c5:41:3d:0b:f1:92:
4c:cc:37:0c:10:cf:d8:1c:95:ae:82:de:12:cf:d2:
8f:99:eb:2a:c0:48:64:69:4d:6c:41:99:39:6c:93:
a0:37:34:b0:0f:76:3b:a1:05:a1:ff:76:02:e8:70:
5a:c7:2e:10:9f:dd:10:40:7f:bf:75:da:a5:21:25:
d8:ca:df:e0:97:e8:c3:8f:60:4c:af:7f:86:3e:8c:
f2:79:52:08:4a:51:73:66:81:43:06:e2:e2:9d:a8:
00:27:55:8b:02:d7:05:cc:83:81:bb:fa:7e:60:2e:
99:bb:c0:3e:87:a3:e2:c7:25:d4:4d:69:b8:1d:97:
4d:22:9f:50:56:4a:57:c1:3c:5f:63:48:e2:20:7d:
74:4f:e5:73:09:f3:8a:fc:38:16:6c:8a:48:e3:92:
7d:17:4c:de:1f:3e:a2:f7:c6:d3:53:7e:50:9e:09:
ab:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:4E:49:76:56:05:CC:B2:24:F0:A9:D6:77:80:D9:D4:20:C2:8E:CC
X509v3 Authority Key Identifier:
keyid:E9:8E:20:23:81:C1:C8:8D:82:F3:B7:0F:3B:E0:68:A1:AA:37:2B:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Y4gI4HByI2C87cPO-Booao3K50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f78937-aed3-4b6f-aa2d-c832ed7d5fec/1/6Y4gI4HByI2C87cPO-Booao3K50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f78937-aed3-4b6f-aa2d-c832ed7d5fec/1/6Y4gI4HByI2C87cPO-Booao3K50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:f8:5a:90:cb:60:18:52:7f:23:78:7b:74:b9:ea:1d:91:ef:
a9:af:84:30:c3:66:17:4b:df:99:d3:86:7e:79:fe:3a:cd:5f:
7b:bd:5c:55:dc:74:82:b5:b3:2e:5f:ed:3a:04:e4:1b:65:9f:
d7:ac:19:9a:1d:e4:98:91:26:1e:87:f2:72:cf:65:57:e8:16:
9f:e3:a1:25:4f:b6:31:f6:fb:d5:2b:af:9f:f1:1f:74:91:c8:
97:f2:9d:2b:bd:15:4c:a0:b9:bd:70:dc:7c:5e:df:c6:f8:70:
06:08:f8:9d:f9:2f:11:09:09:ad:55:43:84:18:2d:4e:1c:3e:
02:a8:71:07:ee:d9:24:b9:01:24:ca:5e:b9:9e:c8:41:ad:15:
fd:2c:dd:46:24:ac:b3:c9:34:ee:ea:86:7b:ae:23:4b:0e:a1:
06:31:f5:19:ef:d3:00:f6:99:9e:2a:aa:a8:46:62:c5:af:4d:
42:02:14:ca:bc:5d:0d:a4:86:8e:53:c0:40:35:15:c2:5a:18:
80:71:c4:00:9f:6c:78:65:97:cf:c3:ed:89:87:47:56:71:e3:
aa:62:3b:83:13:0c:a0:95:de:e2:32:4c:fa:80:53:91:04:2a:
aa:0b:f1:e8:b1:b0:01:0d:f8:8b:8e:46:97:0b:41:b8:7d:bb:
3b:a3:d8:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:16:12 2025 by rpki-client