Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/6E31KvRgym-oySOkn1y3lepnB_c.mft
File: 6E31KvRgym-oySOkn1y3lepnB_c.mft (raw, json)
Hash identifier: H+xZiXYQjdliDrk5q/GdeF4wmVaYIUa77uCtahMVc94=
Subject key identifier: 3A:70:7C:AF:63:AE:FC:3E:20:1D:8C:14:13:BF:A2:D6:8E:07:50:32
Authority key identifier: E8:4D:F5:2A:F4:60:CA:6F:A8:C9:23:A4:9F:5C:B7:95:EA:67:07:F7
Certificate issuer: /CN=e84df52af460ca6fa8c923a49f5cb795ea6707f7
Certificate serial: 019A72CA445C900C0DD0D0EACB0FA48C12D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6E31KvRgym-oySOkn1y3lepnB_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/6E31KvRgym-oySOkn1y3lepnB_c.mft
Manifest number: 09C4
Signing time: Tue 11 Nov 2025 12:00:49 +0000
Manifest this update: Tue 11 Nov 2025 12:00:49 +0000
Manifest next update: Wed 12 Nov 2025 12:00:49 +0000
Files and hashes: 1: 1-Q_tpIcGxIQN87_v5Q9yiTu9dYA.roa (hash: XfJwIAI7NcvwkO/KOOkHLNUW6PjQwjjvkoTrKUB4eK4=)
2: 2b9LvTP21iFo95hoRuJmbk14nB4.roa (hash: h50aMVaLA2P/YoV/aGBh8veA94OaJ1r/LnTS0SELFjo=)
3: 6E31KvRgym-oySOkn1y3lepnB_c.crl (hash: wTRyreVkamKxjG0N5qu4zY5nmFu6P01/kVNqZuv4rLE=)
4: IBYohiSfrdp01nVXXkVdPVwTXu8.roa (hash: xHDIvb8rjLO6em8S12Zcvhamk/oay8uBCC+89yrhRMg=)
5: KG0ELDyPHSkIQS-mg9gLAsQapjw.roa (hash: e+EZSd1IAWr6lFOaOhHRn/7FSXywEXsdZ12xJvEd9no=)
6: lRJP557P-ah_9W8ZheSmqCwj9zE.roa (hash: gieMZm91HbwHzADRLU0Wb4pj7bnfrsU9RpRwfF79zX4=)
7: seDSxzYBDi_CrZLkMdUaljzvmis.roa (hash: yQNwwzfFhPg6rcTmXnCejvtGGODhGwUh9kbGffGWogA=)
8: uX23_mzV3I9ZD7Q7zQwf1E3ofQo.roa (hash: FeYP7aaDi48jmb8v+wyHZazNXEJBqq9Kz30r2ZHOodg=)
9: z7XpKInxMUGGJ1-tIa9aZMIU0NM.roa (hash: eE8LFeccl/2KqXQm9lZ97GRHlNXsQ2CX2nj/+cj0tfI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/6E31KvRgym-oySOkn1y3lepnB_c.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/6E31KvRgym-oySOkn1y3lepnB_c.mft
rsync://rpki.ripe.net/repository/DEFAULT/6E31KvRgym-oySOkn1y3lepnB_c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:44:5c:90:0c:0d:d0:d0:ea:cb:0f:a4:8c:12:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e84df52af460ca6fa8c923a49f5cb795ea6707f7
Validity
Not Before: Nov 11 12:00:49 2025 GMT
Not After : Nov 12 12:00:49 2025 GMT
Subject: CN=3a707caf63aefc3e201d8c1413bfa2d68e075032
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:7f:a3:a7:4d:58:9f:69:ac:1c:b7:cc:68:43:
c8:1e:92:30:31:6f:3e:df:a0:23:87:e2:fa:31:14:
fd:d2:8f:e0:20:06:a2:94:6d:3c:5d:c3:c8:42:f3:
ca:c5:fa:07:3e:54:1c:c4:3d:f3:d0:c2:1b:41:70:
bf:d7:23:3b:cc:8a:a7:a9:91:7b:ec:9a:3b:83:b5:
e3:c2:55:4b:02:5b:bb:50:39:17:1d:da:46:38:10:
bf:d5:02:84:04:4f:08:10:40:ff:2c:f6:8e:88:f8:
32:aa:59:05:a4:c0:4a:43:e5:48:4a:51:b2:02:71:
fb:c2:a3:77:a0:74:f7:28:d6:ed:99:b7:6f:55:3a:
e7:cc:95:c5:57:81:cf:04:80:72:eb:85:ba:a4:2d:
82:14:a0:6d:71:fa:ab:87:e9:3a:06:28:e1:64:fd:
2b:05:46:bb:d4:78:73:c0:2d:d0:22:75:a0:d7:39:
5c:4c:3d:de:74:5b:cc:0f:3b:f9:62:d1:80:fc:46:
e4:7d:54:f4:68:54:7e:ed:06:cf:30:7e:19:cf:54:
fc:b4:e9:ec:b1:69:97:5b:e1:eb:87:e0:fa:7d:2f:
1b:dd:19:57:e0:90:a6:bc:be:e9:f9:e4:02:35:aa:
f5:76:19:83:43:17:05:53:3c:13:da:61:e9:99:41:
37:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:70:7C:AF:63:AE:FC:3E:20:1D:8C:14:13:BF:A2:D6:8E:07:50:32
X509v3 Authority Key Identifier:
keyid:E8:4D:F5:2A:F4:60:CA:6F:A8:C9:23:A4:9F:5C:B7:95:EA:67:07:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6E31KvRgym-oySOkn1y3lepnB_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/6E31KvRgym-oySOkn1y3lepnB_c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/6E31KvRgym-oySOkn1y3lepnB_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:a1:7f:26:13:0a:83:fd:1e:a4:ec:91:2d:b3:c5:62:93:c8:
4e:ee:03:6d:f2:99:bd:8e:53:f7:b5:27:1f:a3:55:e2:37:6f:
d3:cc:22:47:e6:46:2e:5f:14:ae:f3:75:8e:da:64:d1:a1:79:
82:62:75:26:f6:46:99:f9:5e:48:ce:72:d2:38:73:c0:0b:c1:
f1:ab:7a:8f:95:6b:c8:5b:9d:9f:0e:d6:38:52:69:c7:05:bf:
d2:4b:77:ac:ff:eb:fb:44:0d:b2:f6:36:df:6e:40:e4:62:57:
73:ef:7e:0d:c9:99:b5:41:2d:98:55:fb:ef:1f:d6:4c:47:0f:
11:75:0c:fd:df:9d:d2:1c:48:15:a4:ec:cf:d3:09:03:1a:06:
d2:90:c2:a6:f0:b8:05:c7:28:a3:dd:27:54:2a:13:db:cc:29:
b2:3b:f3:ad:dc:e3:33:d9:1a:e9:70:97:b9:9b:e0:84:9f:43:
38:ec:ff:89:9a:83:10:68:7a:64:87:c8:08:0f:6b:2e:a0:8c:
d4:c3:20:1f:7c:c8:fd:b8:ea:59:0b:f5:1a:66:97:68:54:91:
39:94:1e:37:bb:44:9e:a5:93:bc:8e:9c:5e:59:57:fd:b3:91:
1a:05:7a:72:65:37:0d:5b:33:5b:5e:1c:ad:72:a7:ba:b7:4c:
ea:90:9a:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:42:56 2025 by rpki-client