Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/6oRgBs-LnjiPMUUTWAklAs7METY.mft
File: 6oRgBs-LnjiPMUUTWAklAs7METY.mft (raw, json)
Hash identifier: zPlgwf6JuTj1vR/hM6krqA9cL1E/Nejh/p2C3kMkFoQ=
Subject key identifier: FD:F0:82:A5:60:7A:B0:4E:74:44:21:9C:4F:9F:42:2B:8F:D4:86:13
Authority key identifier: EA:84:60:06:CF:8B:9E:38:8F:31:45:13:58:09:25:02:CE:CC:11:36
Certificate issuer: /CN=ea846006cf8b9e388f31451358092502cecc1136
Certificate serial: 0199FBEBF755F0197401B88B394B1D630DC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6oRgBs-LnjiPMUUTWAklAs7METY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/6oRgBs-LnjiPMUUTWAklAs7METY.mft
Manifest number: 0EE5
Signing time: Sun 19 Oct 2025 10:02:49 +0000
Manifest this update: Sun 19 Oct 2025 10:02:49 +0000
Manifest next update: Mon 20 Oct 2025 10:02:49 +0000
Files and hashes: 1: 1caWY1h99shWYECynlPTo8_1vrA.roa (hash: Aon6FQO3a7yW1GjMXQDU5WdJ0X3x57CSJl9oOPxCpMk=)
2: 6oRgBs-LnjiPMUUTWAklAs7METY.crl (hash: dRiFCD3I29yS6liP4PMhxhQ3J1b2x7yFqRCImptiFqo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/6oRgBs-LnjiPMUUTWAklAs7METY.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/6oRgBs-LnjiPMUUTWAklAs7METY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6oRgBs-LnjiPMUUTWAklAs7METY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:f7:55:f0:19:74:01:b8:8b:39:4b:1d:63:0d:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea846006cf8b9e388f31451358092502cecc1136
Validity
Not Before: Oct 19 10:02:49 2025 GMT
Not After : Oct 20 10:02:49 2025 GMT
Subject: CN=fdf082a5607ab04e7444219c4f9f422b8fd48613
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a8:87:0d:cd:0b:96:50:a1:6d:bc:2f:97:b5:
70:94:0f:e5:2a:a4:20:c2:55:35:da:00:4b:ba:22:
35:f2:59:00:a9:dd:92:ba:01:ea:a7:c7:20:12:a7:
d9:49:bd:f4:b4:47:9a:ac:16:1d:88:67:73:50:52:
22:7e:4f:bf:75:8f:9d:3f:91:66:94:da:26:1d:2b:
1e:98:8c:1a:32:69:d1:b6:15:5c:6b:14:58:ca:37:
81:10:20:92:ed:d3:7d:e3:4a:29:6e:24:ce:eb:4b:
5d:b0:b2:2b:4a:c9:1d:69:54:2d:74:d3:0a:16:d7:
92:ed:5e:4b:a2:17:9d:c1:3f:75:3d:dd:6f:d6:f9:
83:dd:bc:be:48:4d:7a:90:11:cf:15:5b:9f:c1:cd:
9c:fe:c1:2d:e5:f7:f1:dd:df:6a:2f:c0:39:80:fe:
89:df:61:89:94:c2:29:f3:2a:3d:61:fc:4d:95:64:
a6:cb:1c:49:f4:a7:2d:1c:f7:a1:1f:9e:78:3c:1d:
74:ab:6f:3b:aa:b8:93:20:c7:aa:7a:98:88:d2:aa:
02:50:c0:b1:29:7b:d0:85:60:94:c3:a9:8c:23:80:
d9:4e:bc:e8:ce:49:c8:f9:ba:dc:7f:26:ad:5c:ee:
c6:b1:08:e2:12:19:3c:b6:46:25:5a:5e:e5:b3:f8:
82:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:F0:82:A5:60:7A:B0:4E:74:44:21:9C:4F:9F:42:2B:8F:D4:86:13
X509v3 Authority Key Identifier:
keyid:EA:84:60:06:CF:8B:9E:38:8F:31:45:13:58:09:25:02:CE:CC:11:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6oRgBs-LnjiPMUUTWAklAs7METY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/6oRgBs-LnjiPMUUTWAklAs7METY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/6oRgBs-LnjiPMUUTWAklAs7METY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:f4:9d:00:aa:db:92:9c:2c:66:3a:c1:dd:0b:0e:a2:5b:38:
ff:5f:a0:2e:cf:66:ac:df:c9:42:3d:6d:f2:26:21:7a:c7:41:
a1:dd:fc:db:2a:c8:1e:28:40:98:b6:21:34:0f:49:7e:9c:6c:
01:0e:c4:6d:9c:48:2f:e9:c4:47:80:a7:85:2b:c8:c3:a7:a3:
f7:75:55:0f:5c:82:a9:9b:78:9c:a3:c9:85:b1:e2:d3:5a:cc:
81:49:e9:78:0d:68:e5:db:ca:de:50:93:9f:64:43:f0:5c:72:
fd:f1:35:b7:d4:a3:b1:86:7c:d8:65:0b:45:34:f1:73:3b:e6:
84:cd:0c:8d:14:ca:6f:9b:b9:c0:a1:4b:dd:22:1d:00:a0:d1:
8c:a6:95:50:51:e5:29:04:ff:a7:53:4e:bc:c8:d7:e1:7b:b4:
20:a1:d1:b0:70:f8:d5:1c:0a:a2:dc:df:80:e5:3d:fc:8f:34:
09:d9:6e:61:7b:71:4a:32:7e:cc:fd:1f:e7:6d:7b:e2:35:d3:
55:60:8a:ba:02:52:81:7c:87:91:97:a3:24:fb:e5:70:3b:ba:
c5:26:42:12:6f:fe:b2:b2:93:b4:b5:26:38:1c:6c:f4:eb:d0:
9a:1d:b8:b1:46:c6:f3:01:7e:e1:01:42:2f:5d:b0:ef:a0:61:
44:c4:6b:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:33:41 2025 by rpki-client