Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/dbf8be-68a2-4b3d-97db-82e2d5ee9c90/1/6lF2nOhnLFbRZSv5ClrvyoGbSIo.mft
File: 6lF2nOhnLFbRZSv5ClrvyoGbSIo.mft (raw, json)
Hash identifier: qHvXijwlXHAGyH8YhpxG7HBqceEbyjPQKz5FaCIwXLw=
Subject key identifier: 2E:5F:77:0B:0E:80:52:06:85:E4:AE:61:25:FD:A9:5D:0E:47:9D:3D
Authority key identifier: EA:51:76:9C:E8:67:2C:56:D1:65:2B:F9:0A:5A:EF:CA:81:9B:48:8A
Certificate issuer: /CN=ea51769ce8672c56d1652bf90a5aefca819b488a
Certificate serial: 019A71B7B098CFEB4563F7E3029A17D5772E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6lF2nOhnLFbRZSv5ClrvyoGbSIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/dbf8be-68a2-4b3d-97db-82e2d5ee9c90/1/6lF2nOhnLFbRZSv5ClrvyoGbSIo.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 07:00:54 +0000
Manifest this update: Tue 11 Nov 2025 07:00:54 +0000
Manifest next update: Wed 12 Nov 2025 07:00:54 +0000
Files and hashes: 1: 6lF2nOhnLFbRZSv5ClrvyoGbSIo.crl (hash: OOk1HSjFyZDMtAeZIRJimJ3Q3B/Ed3bi3QC97DSsnm0=)
2: zLngmWEw_D0Bxeb-kcPWwP9gp_U.roa (hash: Sf54rTElSlunUVvFtUXJDy0FrQ/XeLhMeCRG3/nN1oE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/dbf8be-68a2-4b3d-97db-82e2d5ee9c90/1/6lF2nOhnLFbRZSv5ClrvyoGbSIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/dbf8be-68a2-4b3d-97db-82e2d5ee9c90/1/6lF2nOhnLFbRZSv5ClrvyoGbSIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/6lF2nOhnLFbRZSv5ClrvyoGbSIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:b0:98:cf:eb:45:63:f7:e3:02:9a:17:d5:77:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea51769ce8672c56d1652bf90a5aefca819b488a
Validity
Not Before: Nov 11 07:00:54 2025 GMT
Not After : Nov 12 07:00:54 2025 GMT
Subject: CN=2e5f770b0e80520685e4ae6125fda95d0e479d3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:03:fa:18:0b:e8:b5:9c:1d:d3:31:11:af:40:
64:09:28:77:b7:95:c1:2a:0b:0a:aa:f9:44:01:5d:
96:a4:be:6e:df:26:4c:c9:bd:0c:c6:8e:5e:d9:61:
75:4f:61:c5:44:38:0b:97:a9:4f:3a:3e:25:6e:99:
33:33:44:ca:54:eb:ab:1c:a6:c0:2d:3e:4e:40:d2:
fb:08:7a:86:d8:c2:44:3b:e8:73:3b:5e:69:fe:32:
bb:9e:64:88:46:b9:da:40:ce:55:68:bc:0b:db:00:
1a:e2:62:b2:85:3b:33:fb:79:40:c5:c9:96:92:c8:
2c:7e:93:b9:c1:76:7b:1c:fd:fd:8f:7b:32:e3:d6:
55:b7:ed:19:6a:e5:96:9c:06:72:07:05:56:e2:ac:
95:20:ac:72:50:54:e5:9d:b6:4a:8a:0b:50:ca:a5:
8b:c2:08:e1:02:18:ae:a6:6d:ab:bf:e2:e8:be:b9:
47:e7:f5:42:a0:c4:fa:20:4e:4d:78:7a:70:f1:98:
d5:9c:42:52:bd:21:b5:a7:71:90:e3:c6:c7:0d:b6:
d7:4c:84:13:84:aa:40:dd:45:92:c3:0e:0b:6b:a8:
34:0f:23:21:b0:45:31:8f:e8:26:ee:5d:25:03:15:
df:ca:e7:b1:28:9a:1a:d6:90:1c:7c:6e:3d:fc:54:
52:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:5F:77:0B:0E:80:52:06:85:E4:AE:61:25:FD:A9:5D:0E:47:9D:3D
X509v3 Authority Key Identifier:
keyid:EA:51:76:9C:E8:67:2C:56:D1:65:2B:F9:0A:5A:EF:CA:81:9B:48:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6lF2nOhnLFbRZSv5ClrvyoGbSIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/dbf8be-68a2-4b3d-97db-82e2d5ee9c90/1/6lF2nOhnLFbRZSv5ClrvyoGbSIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/dbf8be-68a2-4b3d-97db-82e2d5ee9c90/1/6lF2nOhnLFbRZSv5ClrvyoGbSIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:40:c2:6e:2c:13:53:dc:10:b7:5c:e2:bc:c2:97:7a:d2:8a:
18:4e:d1:dc:9d:79:c3:37:91:89:e9:e0:33:73:05:a4:87:68:
6b:bd:c6:38:6f:fd:7b:ed:62:51:9a:36:6c:59:6c:cd:a9:5e:
9d:3f:e7:6b:fb:dd:f3:cf:01:fa:a1:17:bc:f9:2c:35:83:72:
ed:b1:29:55:a3:a9:84:b5:c2:2f:bd:24:7b:6c:96:1e:b4:1e:
a2:79:c9:bf:1f:31:37:3f:97:21:23:25:6a:92:ac:99:83:12:
17:3e:1e:e8:cd:16:2e:b2:b9:9a:59:67:72:18:16:fd:fa:74:
33:12:0f:5b:d6:2e:fb:e0:c7:82:48:c8:78:88:f9:ae:9b:30:
bd:4d:b7:49:1f:8a:ac:80:0b:0a:1f:b1:bc:1b:3d:36:10:b0:
1e:a2:fc:16:5d:f7:49:32:25:a0:f0:2f:86:95:a0:f8:57:3b:
0f:e1:9b:3b:61:e7:36:50:c2:83:2a:b9:02:0b:b4:9b:6b:7c:
5e:c7:32:13:a1:e0:53:31:01:dd:53:e6:16:ea:14:a7:85:7b:
4e:15:35:61:73:97:c6:40:98:0d:38:93:da:87:03:27:6d:92:
0c:ed:be:c8:57:23:50:28:00:84:cb:c2:b9:df:d4:9b:53:68:
90:fd:ac:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:54 2025 by rpki-client