Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/6dd682-2b06-405c-8693-46be79870be8/1/6QOR0kQXPz4aqCHbd0hLGtpTVX8.mft
File: 6QOR0kQXPz4aqCHbd0hLGtpTVX8.mft (raw, json)
Hash identifier: 4KqnDQP05jblRc681C4DxKuCewS1H0zBAoV5YCvbTPU=
Subject key identifier: DC:23:C5:EC:6E:36:B8:3C:AD:FD:51:81:BE:D3:6C:59:F0:FD:2B:3C
Authority key identifier: E9:03:91:D2:44:17:3F:3E:1A:A8:21:DB:77:48:4B:1A:DA:53:55:7F
Certificate issuer: /CN=e90391d244173f3e1aa821db77484b1ada53557f
Certificate serial: 019A0259DAA261462F92F23732A533691F23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6QOR0kQXPz4aqCHbd0hLGtpTVX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/6dd682-2b06-405c-8693-46be79870be8/1/6QOR0kQXPz4aqCHbd0hLGtpTVX8.mft
Manifest number: 0438
Signing time: Mon 20 Oct 2025 16:00:34 +0000
Manifest this update: Mon 20 Oct 2025 16:00:34 +0000
Manifest next update: Tue 21 Oct 2025 16:00:34 +0000
Files and hashes: 1: 6QOR0kQXPz4aqCHbd0hLGtpTVX8.crl (hash: enaQum3n1F/vJZlXwIfxlJLZMoqjCTK7/4UvfFJ9NpU=)
2: ht3KdHbaaKn0dUB9Eygpkn4YA9g.roa (hash: NIfc2tNf/lNxNw/7+fw+tsc47P3faBnMYY6r4SXpFYs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/6dd682-2b06-405c-8693-46be79870be8/1/6QOR0kQXPz4aqCHbd0hLGtpTVX8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/6dd682-2b06-405c-8693-46be79870be8/1/6QOR0kQXPz4aqCHbd0hLGtpTVX8.mft
rsync://rpki.ripe.net/repository/DEFAULT/6QOR0kQXPz4aqCHbd0hLGtpTVX8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:59:da:a2:61:46:2f:92:f2:37:32:a5:33:69:1f:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e90391d244173f3e1aa821db77484b1ada53557f
Validity
Not Before: Oct 20 16:00:34 2025 GMT
Not After : Oct 21 16:00:34 2025 GMT
Subject: CN=dc23c5ec6e36b83cadfd5181bed36c59f0fd2b3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c2:0f:1c:76:70:81:eb:fd:f4:6b:5e:4a:26:
a4:21:e7:ba:c6:4f:1e:1e:75:8e:ca:c3:20:fe:a9:
7a:f8:19:fc:7b:9e:2c:b9:40:05:a0:eb:80:ac:76:
dc:f6:8a:2a:7e:31:56:42:9d:f2:2d:72:31:5d:13:
46:ab:cb:75:8d:a7:f0:6c:cf:c9:92:fb:9b:f9:75:
e1:e8:2c:c2:e1:24:27:3f:17:62:f3:25:61:3e:d5:
63:b6:bc:ca:4b:7d:40:6a:cc:2d:1b:19:65:b6:d0:
a7:0d:4a:e2:59:6f:fa:9a:10:16:37:a6:4d:05:ac:
54:19:f3:8d:28:f3:07:53:f9:34:73:11:11:07:ea:
df:e3:10:fb:2f:7b:8e:8f:e8:35:b8:c2:78:57:42:
5b:56:83:3d:ed:06:e5:19:ea:db:0d:87:e9:fe:e5:
6e:c9:57:64:9e:20:d9:f9:bb:52:37:c9:a1:ec:48:
99:d0:ce:48:c3:a4:0c:d3:0e:6d:18:ae:4d:2e:40:
a2:73:03:50:7a:de:d7:87:65:b6:09:6f:09:0b:5f:
bf:db:bc:84:a8:58:30:07:d5:2b:a0:e1:83:26:66:
fe:db:20:2d:22:f7:ef:66:1e:9e:50:5b:e8:6d:7d:
16:51:89:a3:a9:91:7a:f5:ff:fb:0e:b6:b3:56:67:
63:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:23:C5:EC:6E:36:B8:3C:AD:FD:51:81:BE:D3:6C:59:F0:FD:2B:3C
X509v3 Authority Key Identifier:
keyid:E9:03:91:D2:44:17:3F:3E:1A:A8:21:DB:77:48:4B:1A:DA:53:55:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6QOR0kQXPz4aqCHbd0hLGtpTVX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6dd682-2b06-405c-8693-46be79870be8/1/6QOR0kQXPz4aqCHbd0hLGtpTVX8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6dd682-2b06-405c-8693-46be79870be8/1/6QOR0kQXPz4aqCHbd0hLGtpTVX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:2d:c1:6f:1c:8b:5f:b7:b6:6c:b2:56:cf:1c:de:d8:00:96:
3b:eb:71:89:ba:8d:56:a8:1b:c8:7c:50:ed:38:b3:ef:99:e1:
bc:5c:eb:5b:a0:fb:d6:49:a5:7e:04:a8:c8:8a:b6:71:2e:1f:
51:b2:1c:64:8b:ef:b8:42:5f:b0:0e:c1:83:47:81:6a:0a:36:
08:64:c1:49:f6:d6:bb:59:1e:91:38:b3:e9:48:62:b7:cc:11:
00:fe:5b:74:f6:e6:da:73:38:3e:06:84:16:7f:5c:e4:53:b2:
36:27:b2:44:dd:39:db:81:2d:2b:2c:a2:35:de:c2:f9:d4:89:
68:9f:27:57:eb:74:1f:a2:e9:c9:e4:b2:d6:93:2e:5f:6b:9d:
43:e1:f4:ac:64:cd:13:11:bb:c3:55:41:02:bc:87:43:a5:38:
7d:d0:52:ff:ee:e2:c5:d5:95:f2:1d:2e:77:0c:f5:4b:32:b1:
60:98:7d:71:62:6d:68:79:52:a5:d4:e5:7c:5f:60:53:48:4a:
fe:92:32:60:b0:0e:7d:22:65:76:06:65:03:cd:61:41:a3:33:
4a:6a:67:1b:48:fd:25:b2:01:28:f1:0b:2f:b4:7c:d9:74:bd:
74:d3:28:3a:34:f0:b7:aa:78:9a:5d:57:09:e5:4a:6f:36:62:
38:ac:91:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:39:42 2025 by rpki-client