
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/b4597f-ee1c-462b-ab84-ebe59e274840/1/6HJEiXx5F7eR4QDUaAM5xKNZP8M.mft
File: 6HJEiXx5F7eR4QDUaAM5xKNZP8M.mft (raw, json)
Hash identifier: cevofYyb72N5ydUzn+9xC9ydATne+gjDHVZPxsx5y8Y=
Subject key identifier: AA:05:9E:5C:85:E3:9C:DA:C0:1D:E2:76:4C:34:65:A5:B0:B0:53:B8
Authority key identifier: E8:72:44:89:7C:79:17:B7:91:E1:00:D4:68:03:39:C4:A3:59:3F:C3
Certificate issuer: /CN=e87244897c7917b791e100d4680339c4a3593fc3
Certificate serial: 019A70A53B5D6DFACC51563CA6D14E4C36A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6HJEiXx5F7eR4QDUaAM5xKNZP8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/b4597f-ee1c-462b-ab84-ebe59e274840/1/6HJEiXx5F7eR4QDUaAM5xKNZP8M.mft
Manifest number: 171C
Signing time: Tue 11 Nov 2025 02:01:08 +0000
Manifest this update: Tue 11 Nov 2025 02:01:08 +0000
Manifest next update: Wed 12 Nov 2025 02:01:08 +0000
Files and hashes: 1: 6HJEiXx5F7eR4QDUaAM5xKNZP8M.crl (hash: DZ5jgw7+W+Lm2GHIYoWs8i9jKe8tt4CdsUH+WhOiBfk=)
2: bnk0ln2aj6MfWOT6o9kQMXhL3ow.roa (hash: nUC34YHIv92VX7i6tmE4A0fGDBK2kzWYfNC+d/UuSnw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/b4597f-ee1c-462b-ab84-ebe59e274840/1/6HJEiXx5F7eR4QDUaAM5xKNZP8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/b4597f-ee1c-462b-ab84-ebe59e274840/1/6HJEiXx5F7eR4QDUaAM5xKNZP8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/6HJEiXx5F7eR4QDUaAM5xKNZP8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:3b:5d:6d:fa:cc:51:56:3c:a6:d1:4e:4c:36:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e87244897c7917b791e100d4680339c4a3593fc3
Validity
Not Before: Nov 11 02:01:08 2025 GMT
Not After : Nov 12 02:01:08 2025 GMT
Subject: CN=aa059e5c85e39cdac01de2764c3465a5b0b053b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b2:1d:2f:15:d5:5d:a8:77:31:5d:a9:2f:1c:
c6:b2:bd:8c:40:f5:20:ce:73:e9:93:f4:29:05:0d:
04:55:5e:5a:35:50:b5:d8:a6:17:0b:dd:13:93:4e:
28:5f:dc:22:3d:e1:b4:11:17:52:fd:49:0a:4e:ed:
75:a5:77:7e:43:2e:b6:2f:7e:4c:8c:d5:86:be:b2:
c2:f3:63:b5:05:14:40:bb:ed:da:83:90:3b:34:31:
1d:a9:e3:02:f6:3d:ca:2f:f4:31:30:e0:4c:5a:44:
a6:f7:4a:bf:48:a6:14:ac:b5:e8:2f:ec:0f:e0:29:
ab:8e:bf:fa:c3:13:56:33:1f:cb:7a:97:a1:bb:7e:
9e:2e:58:d4:7e:24:9f:1f:bf:6b:ba:e4:b1:5e:ff:
ec:a3:2b:62:0a:77:65:f0:d7:b7:9d:c8:1a:27:3c:
44:3e:5d:12:be:ff:24:3e:9f:db:b1:c1:8c:04:a1:
6c:e6:35:a9:e9:df:a1:86:e6:b0:a4:54:ed:2c:6d:
29:ae:e8:81:a6:e7:e2:8b:da:4b:f5:4d:20:dd:0c:
45:3e:b6:a4:5d:9c:76:ad:bf:14:96:99:5e:c7:06:
5d:0b:34:88:c9:9d:6f:b0:b5:a0:35:fc:74:34:24:
90:17:35:5f:d2:0b:26:f3:9c:42:f4:38:1b:51:2a:
70:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:05:9E:5C:85:E3:9C:DA:C0:1D:E2:76:4C:34:65:A5:B0:B0:53:B8
X509v3 Authority Key Identifier:
keyid:E8:72:44:89:7C:79:17:B7:91:E1:00:D4:68:03:39:C4:A3:59:3F:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6HJEiXx5F7eR4QDUaAM5xKNZP8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b4597f-ee1c-462b-ab84-ebe59e274840/1/6HJEiXx5F7eR4QDUaAM5xKNZP8M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b4597f-ee1c-462b-ab84-ebe59e274840/1/6HJEiXx5F7eR4QDUaAM5xKNZP8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:84:25:f3:fd:bc:cb:23:00:97:1e:52:c7:b3:c2:9c:08:72:
ed:96:14:88:67:6e:32:f9:a2:5d:25:57:ab:09:db:b0:37:7c:
19:81:75:e6:10:7e:46:1b:9f:84:0f:4e:21:7f:6c:a2:5d:2b:
92:c2:48:89:97:ef:74:2d:91:65:aa:83:db:ee:ed:e4:7f:97:
01:a7:ba:78:38:70:e8:ef:0c:9d:ad:f9:46:81:c1:d4:e9:7e:
91:1a:4e:cf:a8:78:04:b6:51:a9:c1:09:70:a6:c5:80:ae:65:
c5:66:ea:a0:77:21:a4:52:8e:65:5e:ba:77:a1:96:41:6f:a4:
bd:cd:2a:e4:ad:ab:ba:1a:a7:51:e0:17:15:54:1b:c5:42:b4:
0e:92:91:74:7d:e7:dd:93:cd:71:59:b4:62:95:75:ea:0f:fd:
a5:df:5b:9e:c8:6a:82:e5:83:b8:b5:54:61:b5:0b:e6:37:c7:
d7:24:7e:31:ae:2f:a9:d1:11:5e:94:42:22:4e:d1:9c:e6:b3:
10:de:2b:b6:bb:04:75:76:45:d4:84:9d:3f:8f:c1:d0:8d:71:
32:5a:3a:cb:a1:c5:37:0e:fd:9a:90:7e:4b:fa:1a:28:aa:d0:
52:5b:15:59:83:e6:fc:f0:fa:1b:9e:70:9c:e2:88:5f:dd:57:
cb:78:94:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:41:42 2025 by rpki-client