
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/9bdbd8-e25b-4b98-8194-14af2dfd2dfc/1/6e6weDKMPHspw3AA9xqS9XKRjeY.mft
File: 6e6weDKMPHspw3AA9xqS9XKRjeY.mft (raw, json)
Hash identifier: 2YIZD4+pV3sCfOsLGU/kJIx0xwJo3tgAu9O1p4EPXPY=
Subject key identifier: D1:1C:99:56:4F:3D:32:D6:93:51:A2:17:9B:A2:2C:B9:20:F4:30:9C
Authority key identifier: E9:EE:B0:78:32:8C:3C:7B:29:C3:70:00:F7:1A:92:F5:72:91:8D:E6
Certificate issuer: /CN=e9eeb078328c3c7b29c37000f71a92f572918de6
Certificate serial: 019A71EEB8B0E2A550CE0F95483E3C458A25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6e6weDKMPHspw3AA9xqS9XKRjeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/9bdbd8-e25b-4b98-8194-14af2dfd2dfc/1/6e6weDKMPHspw3AA9xqS9XKRjeY.mft
Manifest number: 6B
Signing time: Tue 11 Nov 2025 08:01:01 +0000
Manifest this update: Tue 11 Nov 2025 08:01:01 +0000
Manifest next update: Wed 12 Nov 2025 08:01:01 +0000
Files and hashes: 1: 6e6weDKMPHspw3AA9xqS9XKRjeY.crl (hash: 4lqYc6lMinPymEdlYP+3BttDq7sXZOxQ2Jpik7XWQwI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/9bdbd8-e25b-4b98-8194-14af2dfd2dfc/1/6e6weDKMPHspw3AA9xqS9XKRjeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/9bdbd8-e25b-4b98-8194-14af2dfd2dfc/1/6e6weDKMPHspw3AA9xqS9XKRjeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6e6weDKMPHspw3AA9xqS9XKRjeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:b8:b0:e2:a5:50:ce:0f:95:48:3e:3c:45:8a:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9eeb078328c3c7b29c37000f71a92f572918de6
Validity
Not Before: Nov 11 08:01:01 2025 GMT
Not After : Nov 12 08:01:01 2025 GMT
Subject: CN=d11c99564f3d32d69351a2179ba22cb920f4309c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:1e:06:5e:f4:6e:9e:ad:f2:bd:f6:f1:94:ac:
71:4b:3f:22:26:fd:1e:c8:dd:7f:0e:c5:ed:74:5b:
28:f4:3e:32:30:8e:fd:4d:17:53:ab:98:bd:cd:05:
f4:48:ed:2c:a6:6f:c4:f0:c9:5c:f6:2a:24:44:0b:
b3:4c:88:ba:61:02:71:bc:3f:47:2e:c5:26:b1:3d:
de:3f:23:3b:b5:03:f3:74:86:e0:15:15:cc:e6:22:
b8:cb:bf:b6:76:c0:d0:f4:2c:5d:f7:bc:c3:ea:94:
7a:77:c2:52:b1:2b:6d:76:ab:d5:bc:50:a0:a8:a7:
62:e4:25:41:d3:3c:c9:5d:1b:18:92:4e:31:89:2e:
9a:2a:06:52:5f:4c:7d:45:ea:8e:22:19:07:fe:37:
14:9c:ec:ee:80:13:35:6b:38:b6:f5:30:3e:c6:25:
97:53:e4:fe:52:ca:a4:01:66:ac:9f:2e:4d:f3:09:
d9:55:e7:34:94:ea:be:ba:94:0e:87:d9:d5:2a:5a:
df:10:a2:96:d7:45:68:c4:1f:04:ec:d1:7a:87:6a:
1c:41:ab:37:d4:41:10:de:df:af:ea:d9:13:b0:a4:
c7:ab:bd:47:0c:a3:cd:fc:bc:4e:a8:30:76:28:bd:
67:b9:72:67:9f:39:73:fe:d4:f5:78:31:ea:4b:84:
f0:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:1C:99:56:4F:3D:32:D6:93:51:A2:17:9B:A2:2C:B9:20:F4:30:9C
X509v3 Authority Key Identifier:
keyid:E9:EE:B0:78:32:8C:3C:7B:29:C3:70:00:F7:1A:92:F5:72:91:8D:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e6weDKMPHspw3AA9xqS9XKRjeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9bdbd8-e25b-4b98-8194-14af2dfd2dfc/1/6e6weDKMPHspw3AA9xqS9XKRjeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9bdbd8-e25b-4b98-8194-14af2dfd2dfc/1/6e6weDKMPHspw3AA9xqS9XKRjeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:6e:69:2b:c3:d6:0c:85:87:82:36:10:de:7f:7e:53:f9:37:
71:29:06:56:e0:cb:4f:ae:53:99:de:97:b1:b3:20:1e:87:dd:
af:8b:88:cb:ce:16:a0:99:19:8e:61:da:13:83:60:ab:21:b4:
b0:99:e2:75:73:76:19:90:9e:5a:76:27:a1:a0:11:02:95:51:
fd:e2:b4:09:20:4c:b7:94:c7:79:16:fe:9f:72:11:be:86:e2:
ca:a7:4f:30:69:cc:c0:7c:4b:3f:2d:7a:f2:a6:0c:6c:94:cc:
34:8b:8b:44:13:54:45:d9:8b:f4:c2:1e:58:6b:e6:4a:fc:3a:
e6:8a:f0:26:47:ef:98:52:e5:4c:37:fc:a1:1e:e2:fd:8d:2a:
f7:c5:da:a9:2f:f9:a1:a0:04:a9:04:5d:93:dd:16:68:a8:2e:
45:d9:bd:5b:d8:f1:53:11:ce:06:1f:ce:3c:7a:fd:75:4a:17:
08:60:85:7e:1c:96:b6:17:f2:d6:38:ab:4d:dc:49:4d:cc:e0:
2e:43:9e:80:8e:23:26:a7:07:04:41:e9:97:a2:b7:f1:25:68:
b2:e2:2f:f3:e1:dc:bb:fb:68:cd:b4:0d:a1:7d:ff:0e:d6:31:
3a:75:2d:cf:2c:30:01:d8:84:66:d1:1f:b0:46:19:55:e5:a3:
69:66:09:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:56:46 2025 by rpki-client