Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/a4356c-8d14-4b1c-a55b-70c2e7686e6b/1/6M_lsz7kQ_3pK9QhGIgcpugmOkk.mft
File: 6M_lsz7kQ_3pK9QhGIgcpugmOkk.mft (raw, json)
Hash identifier: skHmkgnxeyJHNeunvHCQ/4H2coLXYbG65vERYwCaUlc=
Subject key identifier: DA:A0:BD:79:01:02:A0:AA:CA:C7:48:5B:19:F8:55:86:93:0A:05:FB
Authority key identifier: E8:CF:E5:B3:3E:E4:43:FD:E9:2B:D4:21:18:88:1C:A6:E8:26:3A:49
Certificate issuer: /CN=e8cfe5b33ee443fde92bd42118881ca6e8263a49
Certificate serial: 019A71B78C7E7172714B47927044C9187499
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6M_lsz7kQ_3pK9QhGIgcpugmOkk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/a4356c-8d14-4b1c-a55b-70c2e7686e6b/1/6M_lsz7kQ_3pK9QhGIgcpugmOkk.mft
Manifest number: 01AC
Signing time: Tue 11 Nov 2025 07:00:45 +0000
Manifest this update: Tue 11 Nov 2025 07:00:45 +0000
Manifest next update: Wed 12 Nov 2025 07:00:45 +0000
Files and hashes: 1: 6M_lsz7kQ_3pK9QhGIgcpugmOkk.crl (hash: 7rUaf6ezbVZpW72Evu62LX1ptAVD5E/bd5Hb5RdRhew=)
2: Yv4Nu-EN5zhL6KGxxs_xzdLAzPE.roa (hash: g3Z/I7jSdU5A7yhO2T69Xb/0yTPIA/OmlqPS3Q3yctw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/a4356c-8d14-4b1c-a55b-70c2e7686e6b/1/6M_lsz7kQ_3pK9QhGIgcpugmOkk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/a4356c-8d14-4b1c-a55b-70c2e7686e6b/1/6M_lsz7kQ_3pK9QhGIgcpugmOkk.mft
rsync://rpki.ripe.net/repository/DEFAULT/6M_lsz7kQ_3pK9QhGIgcpugmOkk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:8c:7e:71:72:71:4b:47:92:70:44:c9:18:74:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8cfe5b33ee443fde92bd42118881ca6e8263a49
Validity
Not Before: Nov 11 07:00:45 2025 GMT
Not After : Nov 12 07:00:45 2025 GMT
Subject: CN=daa0bd790102a0aacac7485b19f85586930a05fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:25:49:b7:9f:8a:e5:a8:dc:17:72:6d:99:98:
2d:60:9c:bc:35:4b:88:6e:68:56:b7:99:5d:bd:99:
e3:1b:c9:6e:32:c1:6e:10:15:bc:be:5c:7e:17:8b:
f6:20:01:c3:fb:d8:f7:30:c3:6a:41:c8:7d:d3:a8:
5d:e6:cd:69:56:cc:e3:a3:03:1b:34:e3:73:e2:56:
45:1a:cb:53:65:de:fc:8e:8d:d9:de:14:ac:15:05:
17:48:52:db:19:8c:09:87:23:eb:d1:12:bc:5a:08:
aa:07:4e:55:14:d2:44:47:94:83:ed:da:e9:56:56:
cf:06:3d:ce:df:00:ca:7c:20:44:e0:e9:c1:82:ea:
01:0d:ef:11:34:12:6f:23:d3:7a:0c:8c:2f:c9:c5:
97:2a:ee:b0:f6:7f:a3:4e:6c:d3:39:03:a2:03:b4:
08:0c:7e:d7:13:82:6c:6a:f9:5c:42:f3:63:87:ee:
f2:5d:cf:99:2e:5e:e3:1e:34:a4:6e:d3:52:1d:b2:
8d:65:db:c7:4a:44:af:7e:32:0b:3a:f5:74:49:7e:
62:36:05:73:27:65:09:ca:89:e8:f3:ad:8f:f5:30:
29:0a:81:57:94:9e:ae:e6:57:c8:c8:4e:5d:cb:13:
fa:47:8a:d6:6d:df:a3:b0:bc:16:8f:50:1d:80:17:
63:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:A0:BD:79:01:02:A0:AA:CA:C7:48:5B:19:F8:55:86:93:0A:05:FB
X509v3 Authority Key Identifier:
keyid:E8:CF:E5:B3:3E:E4:43:FD:E9:2B:D4:21:18:88:1C:A6:E8:26:3A:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6M_lsz7kQ_3pK9QhGIgcpugmOkk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/a4356c-8d14-4b1c-a55b-70c2e7686e6b/1/6M_lsz7kQ_3pK9QhGIgcpugmOkk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/a4356c-8d14-4b1c-a55b-70c2e7686e6b/1/6M_lsz7kQ_3pK9QhGIgcpugmOkk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:cc:b1:79:f9:fc:12:75:d8:a4:79:52:f6:c0:2a:08:de:fb:
2f:93:eb:4e:3f:61:26:8e:0a:3b:b4:3e:8f:9e:61:cd:a0:b6:
28:ff:72:71:cc:97:0e:c1:6e:30:6a:29:dc:b4:98:1d:d8:32:
14:65:69:4e:ad:9e:bb:3a:df:6a:f0:da:da:f6:48:22:a4:1b:
3c:b4:b4:95:85:52:55:e4:d2:4c:cf:92:b1:cc:96:f2:38:bf:
b8:10:12:26:94:d5:f4:27:7d:ba:73:f6:2f:54:6e:ff:f0:f2:
3a:30:28:38:cf:bf:99:27:b2:44:64:f5:01:9d:98:57:3c:c8:
c0:b0:3f:c9:8b:4f:82:7b:31:08:93:f7:c2:6e:79:2a:c9:de:
1a:62:43:e7:d4:2a:e3:51:de:99:7b:dc:a6:56:ad:db:b2:21:
ec:a7:f3:d9:25:a6:39:8b:14:4b:8a:70:06:99:24:b3:50:a1:
a6:ee:2a:d0:55:44:56:d1:a8:f8:59:47:7f:bb:bb:b1:af:de:
3f:10:a6:bb:d9:f8:25:6b:29:bf:bb:37:e3:de:6c:d0:6b:b5:
09:71:d4:87:ea:d4:e5:2b:9d:c2:50:85:bd:b8:df:9b:f1:0f:
e4:30:36:f2:74:2c:d8:f4:ce:35:58:b3:4a:fc:6a:af:b6:67:
b1:b2:a4:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:04:15 2025 by rpki-client