Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/228efe-ff30-4328-a915-0f3b6f96990b/1/6BWbaM5BNoqZ_hB57FTDbJuxv5Q.mft
File: 6BWbaM5BNoqZ_hB57FTDbJuxv5Q.mft (raw, json)
Hash identifier: IaBBefiK3Rbnms8Ot730r7zi1nHPsmKjt788jHWl5Ww=
Subject key identifier: A5:E1:AD:C6:2C:B2:BF:2D:B2:57:48:A9:59:36:AB:62:13:48:65:4C
Authority key identifier: E8:15:9B:68:CE:41:36:8A:99:FE:10:79:EC:54:C3:6C:9B:B1:BF:94
Certificate issuer: /CN=e8159b68ce41368a99fe1079ec54c36c9bb1bf94
Certificate serial: 0199FBEAD8523098B9CEE41E8874616AD469
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6BWbaM5BNoqZ_hB57FTDbJuxv5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/228efe-ff30-4328-a915-0f3b6f96990b/1/6BWbaM5BNoqZ_hB57FTDbJuxv5Q.mft
Manifest number: 118E
Signing time: Sun 19 Oct 2025 10:01:35 +0000
Manifest this update: Sun 19 Oct 2025 10:01:35 +0000
Manifest next update: Mon 20 Oct 2025 10:01:35 +0000
Files and hashes: 1: 6BWbaM5BNoqZ_hB57FTDbJuxv5Q.crl (hash: MGxYn8ctjc43QBvRMYuGAYD8kVnQ2+VeIV01cih65ig=)
2: YgG0lEHEtjr1mC92HjSEXF6DaCY.roa (hash: U16htSk1oaeIqosXWc0EGaYjohQFI01/iP1fxjLlYZE=)
3: mF0VnTUC-VE7tOehsB99pmMnMp4.roa (hash: qBC6VjnyODjzw3i+7pIjQeMUTdYeihdx4axoA9L+eAk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/228efe-ff30-4328-a915-0f3b6f96990b/1/6BWbaM5BNoqZ_hB57FTDbJuxv5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/228efe-ff30-4328-a915-0f3b6f96990b/1/6BWbaM5BNoqZ_hB57FTDbJuxv5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/6BWbaM5BNoqZ_hB57FTDbJuxv5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:d8:52:30:98:b9:ce:e4:1e:88:74:61:6a:d4:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8159b68ce41368a99fe1079ec54c36c9bb1bf94
Validity
Not Before: Oct 19 10:01:35 2025 GMT
Not After : Oct 20 10:01:35 2025 GMT
Subject: CN=a5e1adc62cb2bf2db25748a95936ab621348654c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:eb:45:41:ab:89:37:63:32:c9:69:c5:f1:a6:
87:d6:94:67:e5:eb:db:ac:f1:02:ca:15:d5:a1:9e:
b4:e4:78:e0:6c:6f:10:6b:67:48:ec:57:2f:7e:81:
4c:aa:d0:04:e1:ac:ae:ba:48:f8:b7:c1:d0:46:14:
c1:5c:73:df:f9:68:87:39:bb:06:44:22:c1:54:c8:
00:2d:86:1d:c4:0f:91:74:bf:0c:01:18:56:17:a0:
d3:39:38:40:b7:67:40:c3:34:3b:39:2b:7c:97:6e:
1a:0d:4b:30:80:fa:70:4f:59:f5:fe:89:1b:b1:24:
bc:6d:2f:8b:e4:41:24:aa:fb:aa:ce:c2:a7:91:79:
4c:2d:42:cf:86:70:9a:45:e8:d1:5e:2c:67:43:86:
5a:59:98:08:20:29:c6:8b:9e:d2:48:6b:ac:93:a8:
a6:2b:52:c8:a0:de:8b:52:fb:08:e6:8c:76:67:90:
b1:63:56:ec:eb:e4:b7:93:25:bf:76:d8:fd:55:50:
cb:5a:cd:f5:47:76:03:2b:61:76:44:93:71:d3:2f:
06:d7:46:d4:31:0e:6d:8a:18:14:e3:c8:7f:c5:4a:
88:50:1a:5b:da:8b:d5:08:9f:0f:0c:67:f5:f5:d6:
52:93:59:3b:08:28:6f:76:44:f0:07:d6:ed:8a:b3:
d7:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:E1:AD:C6:2C:B2:BF:2D:B2:57:48:A9:59:36:AB:62:13:48:65:4C
X509v3 Authority Key Identifier:
keyid:E8:15:9B:68:CE:41:36:8A:99:FE:10:79:EC:54:C3:6C:9B:B1:BF:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6BWbaM5BNoqZ_hB57FTDbJuxv5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/228efe-ff30-4328-a915-0f3b6f96990b/1/6BWbaM5BNoqZ_hB57FTDbJuxv5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/228efe-ff30-4328-a915-0f3b6f96990b/1/6BWbaM5BNoqZ_hB57FTDbJuxv5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:c9:72:2c:8f:f1:bd:0c:57:e4:b9:63:76:92:33:b6:31:9c:
3c:7a:7f:e9:d3:49:0a:2b:cb:99:ef:f5:bd:b3:41:98:b0:e3:
fe:db:b0:18:26:f2:68:3f:1b:6e:bb:42:69:8c:a6:e8:93:a7:
dd:cc:9b:75:9a:55:12:7b:af:1d:7b:df:79:89:f6:4e:ad:c0:
d6:50:b9:9f:2d:1c:49:30:84:d3:72:0e:6b:e8:71:c2:a9:86:
7d:f1:90:11:41:2a:04:f9:4e:ee:b8:e8:52:de:e8:48:7d:6b:
d8:8e:e7:fa:75:8e:87:5e:b4:6c:ce:7e:eb:6c:af:22:6e:d0:
68:2f:d4:ed:5f:de:31:34:8d:b2:10:f3:57:ae:01:f9:3e:5d:
88:ee:a1:ad:d3:19:c5:95:62:32:f8:32:ff:f6:b7:9f:79:ad:
8f:6b:2a:d7:99:c1:dd:b3:b8:23:97:09:ef:38:eb:b0:47:73:
d3:75:49:6d:20:cc:63:89:59:77:39:e2:6b:78:24:0e:3f:f9:
4d:85:f4:91:01:c4:3c:7b:ee:4b:f4:68:78:02:ba:54:46:52:
2c:33:69:bc:d7:b8:49:9d:39:79:27:96:8c:81:d8:c0:da:93:
b5:33:ec:03:b4:ca:3c:36:98:80:19:68:7e:ca:4c:7c:d5:28:
5f:36:39:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:30:57 2025 by rpki-client