Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/a83337-6e16-4cd9-921a-87b010ea6235/1/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.mft
File: p6U4qsM3eEYOGXAaq1lSx6ol8Fw.mft (raw, json)
Hash identifier: luzp3L4upfpPvtUqGc2SQQun2tqHTIaWVkhvGQS36kY=
Subject key identifier: 45:BC:6C:3C:EF:4F:5A:3F:1C:55:23:59:D1:79:3F:01:4E:79:C7:92
Authority key identifier: A7:A5:38:AA:C3:37:78:46:0E:19:70:1A:AB:59:52:C7:AA:25:F0:5C
Certificate issuer: /CN=a7a538aac33778460e19701aab5952c7aa25f05c
Certificate serial: 0199FBEB1A343A7095B83D4EB40C24E216B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/a83337-6e16-4cd9-921a-87b010ea6235/1/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.mft
Manifest number: 07DF
Signing time: Sun 19 Oct 2025 10:01:52 +0000
Manifest this update: Sun 19 Oct 2025 10:01:52 +0000
Manifest next update: Mon 20 Oct 2025 10:01:52 +0000
Files and hashes: 1: casId6bSRHTNn5PL96DuG2TJvlE.roa (hash: L+JMLEBjCTLo3pT1VkKD/pB+PbvKkE5XXjy3KroLN1g=)
2: kqpQozJYbiOeF5Yf2auzSJ7PAQw.roa (hash: 1P+cwreujhRRyFPgrb8zcY4I1d2u+NU9now7YdN+EEs=)
3: p6U4qsM3eEYOGXAaq1lSx6ol8Fw.crl (hash: yGMolvSYw5j5qPGC+dq2oYLVg4ip2+5nXzWipj1ofS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/a83337-6e16-4cd9-921a-87b010ea6235/1/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/a83337-6e16-4cd9-921a-87b010ea6235/1/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.mft
rsync://rpki.ripe.net/repository/DEFAULT/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:1a:34:3a:70:95:b8:3d:4e:b4:0c:24:e2:16:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7a538aac33778460e19701aab5952c7aa25f05c
Validity
Not Before: Oct 19 10:01:52 2025 GMT
Not After : Oct 20 10:01:52 2025 GMT
Subject: CN=45bc6c3cef4f5a3f1c552359d1793f014e79c792
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:af:d1:c1:46:eb:7e:48:0a:1c:f7:0e:a4:2e:
07:fa:aa:75:3d:a1:c0:99:40:66:31:cc:64:98:1c:
5e:b3:5d:ab:8a:b4:3a:df:c7:d1:66:54:18:81:17:
c7:1e:4b:b6:e5:21:5c:92:86:9a:51:d0:7e:c5:c1:
11:1b:15:3d:32:60:0b:1c:75:3e:d7:6c:0e:2e:fb:
b8:2d:4c:19:27:ef:b0:61:18:e4:ba:44:0a:21:e4:
ef:92:c1:b7:04:93:f0:96:ab:a8:a5:ae:ec:82:95:
7f:fc:ed:34:c0:43:6a:6e:22:c2:66:c0:18:fc:f0:
7a:00:db:c6:d8:16:f7:b9:9d:09:e9:3e:61:87:fe:
19:00:c3:4f:e0:3b:b1:1f:f0:3a:99:1b:9f:5a:a1:
66:45:e1:99:ac:2c:a0:4d:97:06:ec:05:6d:2d:2f:
46:60:9e:93:c7:5b:12:0f:20:22:3c:74:19:ee:60:
eb:b7:c0:de:9a:b0:e1:31:40:70:08:70:c5:88:46:
dd:80:c0:bb:cb:f8:c9:4f:83:1d:2b:d2:fe:31:7b:
af:af:80:5b:73:d1:df:65:72:0e:06:5c:2a:d5:0a:
e6:01:5e:0b:d6:ef:1e:e2:0c:a6:04:22:75:c9:1e:
4d:15:68:ea:f5:bb:d3:e5:2a:61:fa:40:d3:f0:1b:
29:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:BC:6C:3C:EF:4F:5A:3F:1C:55:23:59:D1:79:3F:01:4E:79:C7:92
X509v3 Authority Key Identifier:
keyid:A7:A5:38:AA:C3:37:78:46:0E:19:70:1A:AB:59:52:C7:AA:25:F0:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a83337-6e16-4cd9-921a-87b010ea6235/1/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a83337-6e16-4cd9-921a-87b010ea6235/1/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:a6:2a:a7:24:fa:85:34:e8:e3:c1:5a:56:f6:ea:2c:49:fe:
30:fa:a0:94:5e:c9:61:03:19:b9:38:22:54:ee:07:66:41:6b:
44:43:08:3c:d1:94:df:c4:93:78:16:37:6b:eb:31:fa:88:26:
fa:e4:a5:39:19:82:e7:e4:3c:fd:fe:38:dd:4d:17:b7:57:0b:
9c:57:75:c4:ba:03:d1:61:c6:d9:0c:23:32:0e:84:89:e3:c5:
3f:e7:6b:c0:50:21:74:7f:be:27:ae:d8:cb:5e:b8:28:f7:f1:
9d:9a:14:c9:71:ca:0c:9b:25:cc:7d:ba:90:15:c7:4f:6b:31:
80:d8:99:1a:de:f8:f4:f5:07:7f:45:c4:23:81:f4:ad:fe:f2:
ea:da:ac:49:79:4e:a0:8d:86:93:0d:48:f3:92:87:7b:7a:78:
42:42:7b:24:d9:d3:9c:cf:80:a3:8d:84:c8:7f:48:95:91:c2:
d5:b6:32:2a:24:e2:e3:38:da:3f:b9:de:11:9d:54:08:c4:07:
d0:9d:3e:a4:3f:8e:3b:7f:6f:d6:5f:13:a4:2b:77:b4:80:ce:
fa:f3:61:c2:60:59:8f:c4:8e:e8:a8:7f:b5:95:9d:a0:e7:56:
da:24:c4:49:d2:f0:2b:a6:05:fc:68:0d:2e:20:54:a6:ab:aa:
9a:f1:ce:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:31:14 2025 by rpki-client