Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/6g8I1O4flPmESTtGe9isoq36KGY.mft
File: 6g8I1O4flPmESTtGe9isoq36KGY.mft (raw, json)
Hash identifier: xHueNSAdGI0OK0eiQ5tBAB7mwTbTAR6k8scd2MfZ+bU=
Subject key identifier: 17:93:6E:0D:08:35:29:8A:6C:AA:79:63:90:3C:69:A0:8A:53:3A:A2
Authority key identifier: EA:0F:08:D4:EE:1F:94:F9:84:49:3B:46:7B:D8:AC:A2:AD:FA:28:66
Certificate issuer: /CN=ea0f08d4ee1f94f984493b467bd8aca2adfa2866
Certificate serial: 0199FDD8D23F0685EA4DA1DE1744B114E8B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6g8I1O4flPmESTtGe9isoq36KGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/6g8I1O4flPmESTtGe9isoq36KGY.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 19:01:09 +0000
Manifest this update: Sun 19 Oct 2025 19:01:09 +0000
Manifest next update: Mon 20 Oct 2025 19:01:09 +0000
Files and hashes: 1: 6g8I1O4flPmESTtGe9isoq36KGY.crl (hash: +lHsovnlddYZq4bA6iJ49zPCPN79YJ++BznKMD1AI7Q=)
2: EdM8mT-itEKC9G8RLMrDLsNcS3o.roa (hash: aC1rODFSDGloRhxUO+L4zBSj1xyAZL+tlsZ8+nVllOY=)
3: LKntu7OdIVDRUeVXjemgx5JdRkc.roa (hash: kna/rCNXXypoDbewR/02DlClr5ejgsrzdo1XT3WKJ6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/6g8I1O4flPmESTtGe9isoq36KGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/6g8I1O4flPmESTtGe9isoq36KGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6g8I1O4flPmESTtGe9isoq36KGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d8:d2:3f:06:85:ea:4d:a1:de:17:44:b1:14:e8:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea0f08d4ee1f94f984493b467bd8aca2adfa2866
Validity
Not Before: Oct 19 19:01:09 2025 GMT
Not After : Oct 20 19:01:09 2025 GMT
Subject: CN=17936e0d0835298a6caa7963903c69a08a533aa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:19:76:07:c5:12:1d:b8:71:61:a0:76:54:8a:
b6:6b:f7:3b:60:0e:04:28:a1:fa:98:02:51:ce:d2:
00:d7:ae:7c:06:76:94:4b:9d:67:cb:ab:35:c1:82:
2d:74:a7:d0:a8:20:e2:68:b4:23:d1:8d:34:4b:17:
e6:9e:6e:38:2a:24:9f:30:50:42:8d:f5:04:e7:5f:
f1:2d:99:a3:5b:20:5c:b7:2b:f0:1f:c8:0c:ab:60:
26:83:73:5f:5a:4e:21:01:a2:ca:e3:a3:1e:b0:34:
bd:fe:73:5f:36:e8:3d:8c:fc:47:ae:24:c2:d6:e8:
8b:1d:11:92:a5:23:eb:3b:d6:39:0c:c4:a6:7f:59:
86:75:1f:46:6a:0c:e0:e9:d4:79:94:f3:91:97:4f:
a9:f6:56:d4:38:13:af:6e:d7:9c:38:b7:aa:10:3f:
85:74:02:b2:95:02:00:f6:c9:7e:cf:d6:41:b5:7f:
5d:ee:5a:f3:b1:93:9c:a0:fd:ed:2c:de:e5:88:c0:
2a:50:4d:16:f5:ee:5b:1a:63:11:3c:43:33:49:46:
20:4e:99:aa:80:d5:b2:12:c7:b8:64:97:5d:1c:d8:
b0:45:a6:5b:ba:e7:ad:4f:a0:dd:d4:48:cf:d4:fc:
1f:0f:4f:26:fc:49:57:68:0f:64:29:8d:50:34:8b:
62:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:93:6E:0D:08:35:29:8A:6C:AA:79:63:90:3C:69:A0:8A:53:3A:A2
X509v3 Authority Key Identifier:
keyid:EA:0F:08:D4:EE:1F:94:F9:84:49:3B:46:7B:D8:AC:A2:AD:FA:28:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6g8I1O4flPmESTtGe9isoq36KGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/6g8I1O4flPmESTtGe9isoq36KGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/6g8I1O4flPmESTtGe9isoq36KGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:5b:00:56:e0:6f:5d:5d:39:32:98:87:37:fa:54:68:39:83:
b5:41:79:dd:1a:3c:c0:bb:14:55:00:da:8b:26:ad:b5:ae:c6:
ad:0d:77:c1:cd:2f:be:c1:ae:bc:7f:22:74:24:1c:ff:30:0c:
51:08:9f:e6:71:b2:71:3d:0a:2f:cc:90:1c:ac:4e:05:d2:48:
15:53:cd:ae:ea:d7:43:e8:13:10:b7:ae:a9:1c:55:5a:08:5c:
d8:93:48:f1:9f:87:c4:4c:7b:c4:f4:59:fd:14:89:68:d4:91:
93:ed:39:b4:7d:95:ef:6e:2d:be:18:f8:35:3e:4b:d3:be:11:
a9:12:af:79:8f:1e:c5:b6:34:7b:e2:db:03:22:5b:6f:50:59:
2e:09:2b:dc:5c:5d:a5:c5:76:8c:6f:4a:f7:04:48:91:58:e3:
b5:fd:46:0e:97:de:ad:e5:0d:23:e6:e4:49:50:a8:df:76:8b:
a9:dd:e0:c0:45:10:5d:75:f7:62:fb:7e:86:70:17:18:90:ef:
20:5e:71:30:08:3f:c3:83:db:c3:fc:9d:ca:71:f5:bc:aa:2e:
25:43:5a:5b:64:9f:17:a0:6d:b3:a1:2d:fc:ea:53:cd:74:67:
92:e7:b8:79:43:dc:55:a6:c3:fc:42:6b:9d:63:71:9f:0d:2b:
a5:f8:30:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:11:23 2025 by rpki-client