Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b903e9-6d09-4e20-b926-3692f96e33a9/1/a6JrVs7pf2AglBuxfGp8bOoPgUo.mft
File: a6JrVs7pf2AglBuxfGp8bOoPgUo.mft (raw, json)
Hash identifier: JrKDjdNLra7omE8/iOI8uTC3GhJraA+jFOrwIebGfP4=
Subject key identifier: C1:C2:C1:CF:99:76:A7:9B:D7:27:7C:CE:F3:B6:E5:09:2D:9B:C3:6F
Authority key identifier: 6B:A2:6B:56:CE:E9:7F:60:20:94:1B:B1:7C:6A:7C:6C:EA:0F:81:4A
Certificate issuer: /CN=6ba26b56cee97f6020941bb17c6a7c6cea0f814a
Certificate serial: 019A668FEA034ACAD4767A237F1489C4E342
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a6JrVs7pf2AglBuxfGp8bOoPgUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/b903e9-6d09-4e20-b926-3692f96e33a9/1/a6JrVs7pf2AglBuxfGp8bOoPgUo.mft
Manifest number: 13D9
Signing time: Sun 09 Nov 2025 03:01:38 +0000
Manifest this update: Sun 09 Nov 2025 03:01:38 +0000
Manifest next update: Mon 10 Nov 2025 03:01:38 +0000
Files and hashes: 1: Xv_k9B_Ol6KMXiDbnDdwE9msKgI.roa (hash: o2br+mpVDRPvcRh8PVchKStcPAlc6/q+ycf8CdzuWcA=)
2: a6JrVs7pf2AglBuxfGp8bOoPgUo.crl (hash: K4jg+4ybHyFzsA96HeS6KuGJR+8Z/rCYurIfkZEsC7U=)
3: j0LzYUhIgfi314lRG-UPK6juSV4.roa (hash: OB2pKs0VeSqp3qXLCAeqefAg0imNyv8nfRlrTm7jRsg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/b903e9-6d09-4e20-b926-3692f96e33a9/1/a6JrVs7pf2AglBuxfGp8bOoPgUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/b903e9-6d09-4e20-b926-3692f96e33a9/1/a6JrVs7pf2AglBuxfGp8bOoPgUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/a6JrVs7pf2AglBuxfGp8bOoPgUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 10 Nov 2025 03:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:66:8f:ea:03:4a:ca:d4:76:7a:23:7f:14:89:c4:e3:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ba26b56cee97f6020941bb17c6a7c6cea0f814a
Validity
Not Before: Nov 9 03:01:38 2025 GMT
Not After : Nov 10 03:01:38 2025 GMT
Subject: CN=c1c2c1cf9976a79bd7277ccef3b6e5092d9bc36f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:9a:19:19:3a:c9:3b:f7:7c:95:cb:76:e7:f0:
0f:2c:9d:d6:4e:67:43:1a:3b:17:df:53:72:b3:7c:
38:dd:69:ea:ee:40:68:7d:8a:86:5b:a2:04:f5:e7:
71:ad:ac:c8:f7:bc:66:b1:8a:c7:c5:73:42:e1:d9:
b2:55:5c:cd:19:59:e1:13:95:d5:79:45:03:7a:75:
10:64:2b:06:f1:7d:5e:88:36:ee:ae:1b:da:c1:50:
f0:e7:f0:b3:4d:af:4e:e1:27:18:9a:41:8f:bc:14:
fe:03:98:76:33:40:7c:db:b2:f2:e0:e7:81:1b:61:
22:ab:3a:cd:97:38:be:52:dc:5b:5b:fe:1d:a4:38:
06:63:c0:81:82:bc:85:cd:7d:9a:c9:bc:b1:61:57:
08:f6:da:17:fc:55:30:ad:ec:19:4b:4f:81:4f:5a:
1c:e5:5b:62:32:45:e6:95:ac:ca:68:97:aa:8f:51:
3b:96:ba:26:6b:2e:8b:fe:6e:78:db:32:fd:8b:01:
1a:9e:1c:f4:82:0a:75:a9:de:f6:31:af:80:b4:fd:
93:b1:df:7c:b6:03:e7:71:c2:61:ad:08:4a:03:92:
d7:4f:b5:79:9b:94:7e:02:32:51:8f:86:80:02:f8:
b3:29:7a:ed:7a:29:d6:9b:c8:ba:83:7d:76:17:aa:
f4:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:C2:C1:CF:99:76:A7:9B:D7:27:7C:CE:F3:B6:E5:09:2D:9B:C3:6F
X509v3 Authority Key Identifier:
keyid:6B:A2:6B:56:CE:E9:7F:60:20:94:1B:B1:7C:6A:7C:6C:EA:0F:81:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6JrVs7pf2AglBuxfGp8bOoPgUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b903e9-6d09-4e20-b926-3692f96e33a9/1/a6JrVs7pf2AglBuxfGp8bOoPgUo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b903e9-6d09-4e20-b926-3692f96e33a9/1/a6JrVs7pf2AglBuxfGp8bOoPgUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:39:09:14:46:f5:32:ff:0e:55:21:69:a1:f4:cb:0b:53:70:
f3:de:51:3a:d2:1a:55:bb:f2:f2:f8:f6:9e:1b:2b:4d:80:14:
ee:10:cd:9a:cb:e9:27:a5:f1:52:1a:19:57:e2:dc:b9:4f:ce:
8a:d5:7c:ce:b7:27:c7:36:7a:08:0f:36:96:bd:92:5f:cb:a5:
95:03:cd:21:04:67:32:3e:14:87:09:a9:86:ac:e7:65:0e:4f:
54:c9:22:22:5b:ac:83:6d:63:8f:d9:45:75:60:7e:a2:67:66:
4a:43:6f:32:09:dc:09:6b:aa:c8:b7:11:8f:80:f8:87:98:0c:
a4:67:c0:7e:db:b6:02:97:f0:5f:35:de:3b:40:2a:41:95:74:
d7:71:7f:2e:cc:7d:19:8b:b7:a3:83:5f:28:50:b6:f3:31:9f:
b3:f2:04:b4:41:e0:3a:75:ae:fe:ad:f6:2e:17:2d:57:44:29:
26:6b:3b:01:47:b2:c9:8c:8d:e6:5f:d3:c5:83:e5:13:21:0d:
f5:93:91:37:a8:88:5b:b4:7a:c4:84:29:d5:f2:b3:de:36:f5:
a9:07:7e:fb:9a:c8:36:2d:03:95:dc:74:eb:28:2e:e4:91:a4:
78:62:36:2f:b2:57:fc:47:38:f9:78:ab:56:93:ef:93:6a:41:
3a:8c:ae:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 9 10:01:49 2025 by rpki-client