Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/9dd5e3-576f-44a1-a5cc-6509cb5f27f8/1/b6EE9qiXi7Fs0FMU-Yp4bg0NlWQ.mft
File: b6EE9qiXi7Fs0FMU-Yp4bg0NlWQ.mft (raw, json)
Hash identifier: pXghka7br3TBOQ40XTAmH147kQfuu37HZcxIK26PzIA=
Subject key identifier: A7:C9:BC:7D:E2:46:A4:CE:F2:6D:7C:76:7C:8D:EE:D2:41:66:12:80
Authority key identifier: 6F:A1:04:F6:A8:97:8B:B1:6C:D0:53:14:F9:8A:78:6E:0D:0D:95:64
Certificate issuer: /CN=6fa104f6a8978bb16cd05314f98a786e0d0d9564
Certificate serial: 019A725CCE0982C99FEC9DDC4ACB592FF3D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b6EE9qiXi7Fs0FMU-Yp4bg0NlWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/9dd5e3-576f-44a1-a5cc-6509cb5f27f8/1/b6EE9qiXi7Fs0FMU-Yp4bg0NlWQ.mft
Manifest number: 1722
Signing time: Tue 11 Nov 2025 10:01:15 +0000
Manifest this update: Tue 11 Nov 2025 10:01:15 +0000
Manifest next update: Wed 12 Nov 2025 10:01:15 +0000
Files and hashes: 1: PalviZLco2h6ucG2viir5MJ4Wvg.roa (hash: D2pj+/BZD2XBYZUI3y81qdZCcE/mlmlKVW87ul9H5bc=)
2: b6EE9qiXi7Fs0FMU-Yp4bg0NlWQ.crl (hash: 2mpt7TuitnrbB1hmsidqj4JRwQO0/zXWbD8cYu7wkTo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/9dd5e3-576f-44a1-a5cc-6509cb5f27f8/1/b6EE9qiXi7Fs0FMU-Yp4bg0NlWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/9dd5e3-576f-44a1-a5cc-6509cb5f27f8/1/b6EE9qiXi7Fs0FMU-Yp4bg0NlWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/b6EE9qiXi7Fs0FMU-Yp4bg0NlWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:ce:09:82:c9:9f:ec:9d:dc:4a:cb:59:2f:f3:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fa104f6a8978bb16cd05314f98a786e0d0d9564
Validity
Not Before: Nov 11 10:01:15 2025 GMT
Not After : Nov 12 10:01:15 2025 GMT
Subject: CN=a7c9bc7de246a4cef26d7c767c8deed241661280
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:b0:54:99:a1:56:cf:51:95:5c:80:fb:2d:87:
0b:bd:80:5a:b7:c3:4b:ce:b2:74:78:84:3f:39:c8:
d2:cb:fb:13:96:17:24:a1:3c:79:e6:ea:ec:0a:cf:
54:71:7a:e1:21:54:ca:ec:34:2d:c3:64:e9:b0:a3:
6f:c8:29:6e:b4:31:23:bc:42:2c:57:26:47:41:cf:
7e:ad:4b:01:e7:d0:05:c2:d2:87:d6:8e:18:04:40:
96:0d:91:1e:4c:51:56:b1:ce:29:cb:e0:a9:b1:f6:
c5:de:7e:68:37:a5:44:99:55:d4:fe:6f:1f:8b:c5:
41:21:22:ba:5b:d5:81:57:c8:3c:cc:67:3e:03:2b:
44:ee:5b:19:00:59:1a:6a:6d:10:82:60:80:2a:f0:
55:56:0e:75:4d:de:bb:c3:73:89:a1:53:b4:06:62:
bf:62:6f:db:a5:56:61:db:47:ff:09:09:d3:ff:d4:
35:66:10:bc:6e:ef:ec:ef:ce:b5:7c:5d:e3:68:8c:
6f:57:29:0e:a6:e6:dd:c6:c5:5f:05:e2:ad:78:5b:
9b:32:43:64:9a:9f:70:40:de:dd:e3:88:11:36:92:
f8:a4:7f:8e:97:7a:c9:0a:20:d7:69:c0:5d:8c:71:
b2:f7:9f:18:a7:23:40:e4:68:66:98:3a:8f:db:bd:
43:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:C9:BC:7D:E2:46:A4:CE:F2:6D:7C:76:7C:8D:EE:D2:41:66:12:80
X509v3 Authority Key Identifier:
keyid:6F:A1:04:F6:A8:97:8B:B1:6C:D0:53:14:F9:8A:78:6E:0D:0D:95:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6EE9qiXi7Fs0FMU-Yp4bg0NlWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/9dd5e3-576f-44a1-a5cc-6509cb5f27f8/1/b6EE9qiXi7Fs0FMU-Yp4bg0NlWQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/9dd5e3-576f-44a1-a5cc-6509cb5f27f8/1/b6EE9qiXi7Fs0FMU-Yp4bg0NlWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:74:41:d7:24:a8:bf:d0:ca:3a:ce:03:39:07:ba:21:ad:c0:
50:89:b1:b3:0e:de:dd:39:4c:b9:33:37:18:fe:c5:5d:6d:b5:
17:45:53:4c:25:c4:f1:8a:95:88:1b:20:9d:c3:2b:25:f3:57:
d0:31:e1:67:4a:ae:85:10:32:12:2a:8c:8e:40:c1:c9:51:61:
a7:90:65:6e:a3:12:fa:05:d1:31:0d:49:dc:ae:5a:f9:cb:61:
dd:e7:85:2e:da:c8:61:49:81:7d:a9:5f:c8:b4:03:40:ce:07:
bf:ee:c2:ce:cd:5e:f6:57:a3:0c:bf:ec:a3:78:1b:80:02:df:
68:63:32:c2:2c:1a:0e:45:4e:5a:11:05:7f:04:35:37:1a:70:
11:cb:ab:26:35:ed:17:a2:f2:1c:d7:3a:20:23:8c:26:88:0d:
e8:fc:2f:4f:a9:74:23:bc:ad:b6:2d:18:46:64:ef:93:09:3f:
1b:7a:65:b8:49:60:84:4a:db:2a:8d:ee:bf:4a:a1:90:84:f3:
6c:e9:47:e6:23:28:06:3a:8e:8d:41:ab:34:41:bd:1d:6d:d5:
5e:fb:cc:af:8f:bf:d5:3f:33:95:cf:24:ed:7c:a3:90:40:6a:
89:7d:22:64:8d:7d:31:1c:92:d0:2d:34:b3:fd:e8:30:24:6d:
99:f8:12:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:05:48 2025 by rpki-client