Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/4508c4-332b-403c-9f56-db905913cb87/1/6T7pptFATGHrGbArAtdNqDpmM9o.mft
File: 6T7pptFATGHrGbArAtdNqDpmM9o.mft (raw, json)
Hash identifier: QyPSLUXKIN84sqrs/L4DMvhRcRxofGX3MCtbmigXnno=
Subject key identifier: 3E:05:56:4E:90:C9:71:3A:68:18:BB:84:B7:C6:A6:28:AA:9E:82:E5
Authority key identifier: E9:3E:E9:A6:D1:40:4C:61:EB:19:B0:2B:02:D7:4D:A8:3A:66:33:DA
Certificate issuer: /CN=e93ee9a6d1404c61eb19b02b02d74da83a6633da
Certificate serial: 019A7149A650BBCF1980D446CDD5DF794DFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6T7pptFATGHrGbArAtdNqDpmM9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/4508c4-332b-403c-9f56-db905913cb87/1/6T7pptFATGHrGbArAtdNqDpmM9o.mft
Manifest number: 0224
Signing time: Tue 11 Nov 2025 05:00:43 +0000
Manifest this update: Tue 11 Nov 2025 05:00:43 +0000
Manifest next update: Wed 12 Nov 2025 05:00:43 +0000
Files and hashes: 1: 6T7pptFATGHrGbArAtdNqDpmM9o.crl (hash: mAws+P2D2RSAVTaPuSBavGl5PbqDvbXrS4pHuQH788g=)
2: nTzt_7yObYF91YEfJlGe8rhCQyE.roa (hash: UZJuy0N8FDFUyDPS/6Vsx+tptqpEF0jDlmMqyvXeZZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/4508c4-332b-403c-9f56-db905913cb87/1/6T7pptFATGHrGbArAtdNqDpmM9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/4508c4-332b-403c-9f56-db905913cb87/1/6T7pptFATGHrGbArAtdNqDpmM9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/6T7pptFATGHrGbArAtdNqDpmM9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:a6:50:bb:cf:19:80:d4:46:cd:d5:df:79:4d:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e93ee9a6d1404c61eb19b02b02d74da83a6633da
Validity
Not Before: Nov 11 05:00:43 2025 GMT
Not After : Nov 12 05:00:43 2025 GMT
Subject: CN=3e05564e90c9713a6818bb84b7c6a628aa9e82e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:29:e6:ca:fc:d7:cd:15:b5:51:9d:7d:53:ec:
ec:f2:05:d3:91:54:df:ac:a8:9d:e4:e8:51:f1:8c:
6b:a1:f5:8b:67:c2:ec:5d:85:16:2f:96:05:91:e9:
25:e4:20:df:32:e4:f6:ca:f7:a4:4d:69:0e:d8:6f:
e0:ec:7d:37:32:87:b1:65:7a:cc:24:77:ef:4d:b6:
d1:aa:cd:0d:81:28:53:4f:b2:a0:5b:c8:cc:56:a8:
ee:c5:55:01:0c:9d:6d:11:7c:d7:c8:15:94:da:cf:
59:2e:97:68:cc:a8:d7:d5:f4:0a:bf:88:40:6c:c7:
12:a4:32:da:75:10:23:95:38:8b:96:9a:61:6e:03:
08:69:50:38:5c:52:9e:de:73:94:83:01:94:4e:dd:
a3:06:7b:b7:28:db:e4:47:84:0e:90:09:2d:65:2e:
d0:7c:29:7c:5d:a7:34:92:d6:2a:ea:12:83:49:97:
22:87:66:71:c5:ae:72:a1:e0:9e:a8:50:96:65:4b:
9a:25:2c:48:2f:a2:8b:eb:01:d0:7f:6c:66:4a:71:
3b:39:26:b4:1f:dc:0f:2a:d7:c6:ea:22:7f:73:15:
86:8d:b5:75:99:8f:35:32:61:04:ff:54:fb:27:6e:
a9:05:14:4b:77:f7:62:69:6b:db:cc:43:a6:5e:59:
bf:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:05:56:4E:90:C9:71:3A:68:18:BB:84:B7:C6:A6:28:AA:9E:82:E5
X509v3 Authority Key Identifier:
keyid:E9:3E:E9:A6:D1:40:4C:61:EB:19:B0:2B:02:D7:4D:A8:3A:66:33:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6T7pptFATGHrGbArAtdNqDpmM9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/4508c4-332b-403c-9f56-db905913cb87/1/6T7pptFATGHrGbArAtdNqDpmM9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/4508c4-332b-403c-9f56-db905913cb87/1/6T7pptFATGHrGbArAtdNqDpmM9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:e7:c9:7c:2a:f2:2e:ef:7b:42:52:a6:22:24:33:ce:a0:d1:
7b:96:5e:9b:ed:78:8a:3a:c8:9f:ac:b5:b6:05:34:ab:40:38:
7d:0f:b9:d2:6e:4e:4c:4b:f8:3b:47:3d:ba:34:fb:55:a6:11:
23:a6:a4:00:af:44:ec:99:70:0c:7f:1c:a3:d1:c1:dd:e3:3b:
71:e2:88:fc:80:4e:7a:58:5a:21:8d:69:e6:78:13:58:1d:91:
06:4f:6d:ce:cb:99:55:b7:d1:e0:34:83:ef:60:b7:81:b2:e6:
5b:5e:03:86:0d:07:58:64:63:fe:0e:0c:58:92:8f:80:2c:d5:
ba:cf:dc:44:a7:c5:4e:e1:48:75:58:26:a2:06:78:3e:1f:a7:
f6:fa:b0:c2:10:2c:ef:ae:c4:47:4a:77:0a:48:1c:30:1b:58:
22:40:2b:6c:d1:21:07:ff:85:3b:c5:6c:a3:af:4b:02:18:ff:
f3:d0:c0:20:2e:6f:5a:9f:66:b1:4c:43:70:d1:11:cc:ea:e4:
92:b4:7f:e9:4a:c7:a5:da:63:fd:45:8e:56:7b:da:ee:8d:b9:
27:11:3a:db:57:ac:88:34:de:4a:1b:19:b1:2c:ef:04:de:90:
3b:69:11:4d:87:df:d5:65:1e:f7:c6:9a:c2:70:7f:0e:f7:d4:
ec:de:cd:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:41:49 2025 by rpki-client