
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b52ae1-09a6-4458-9d06-0b6908737d7f/1/k6P6S3jlD0r5e-KF4ukQpdHtxjk.mft
File: k6P6S3jlD0r5e-KF4ukQpdHtxjk.mft (raw, json)
Hash identifier: 6CjD4ogL4468V9YzdqzDvVbJz4itPBhBE0GMtcC6aM8=
Subject key identifier: 79:CB:2D:C4:5D:EB:51:8D:3E:30:3B:30:92:62:05:2C:B8:FF:2C:9E
Authority key identifier: 93:A3:FA:4B:78:E5:0F:4A:F9:7B:E2:85:E2:E9:10:A5:D1:ED:C6:39
Certificate issuer: /CN=93a3fa4b78e50f4af97be285e2e910a5d1edc639
Certificate serial: 0199FBB37207044C56D1567EF482E5A25B4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k6P6S3jlD0r5e-KF4ukQpdHtxjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b52ae1-09a6-4458-9d06-0b6908737d7f/1/k6P6S3jlD0r5e-KF4ukQpdHtxjk.mft
Manifest number: 0C
Signing time: Sun 19 Oct 2025 09:01:05 +0000
Manifest this update: Sun 19 Oct 2025 09:01:05 +0000
Manifest next update: Mon 20 Oct 2025 09:01:05 +0000
Files and hashes: 1: jj1_6ec2f2AWeD40St3we1tbDXE.roa (hash: dC+bz8YnKwWKOYnAkcDkCn/jxU0wAcfSc4U4fn0FwDs=)
2: k6P6S3jlD0r5e-KF4ukQpdHtxjk.crl (hash: nPCKbaWHrwU5h0Xs/zBPVLK4Lwvx4uCvm8LJv9oLf9Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b52ae1-09a6-4458-9d06-0b6908737d7f/1/k6P6S3jlD0r5e-KF4ukQpdHtxjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b52ae1-09a6-4458-9d06-0b6908737d7f/1/k6P6S3jlD0r5e-KF4ukQpdHtxjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/k6P6S3jlD0r5e-KF4ukQpdHtxjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:b3:72:07:04:4c:56:d1:56:7e:f4:82:e5:a2:5b:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93a3fa4b78e50f4af97be285e2e910a5d1edc639
Validity
Not Before: Oct 19 09:01:05 2025 GMT
Not After : Oct 20 09:01:05 2025 GMT
Subject: CN=79cb2dc45deb518d3e303b309262052cb8ff2c9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:8c:07:6e:4c:aa:48:36:18:71:6b:d7:72:95:
1b:54:ae:e6:44:6f:1c:2b:f3:e5:89:b1:f5:7d:4b:
c8:c6:6b:cc:93:d1:8a:e8:7f:39:0d:34:ff:29:e9:
b0:57:7a:85:f7:99:f2:db:e2:fb:c7:a5:ef:8c:7f:
eb:f5:41:88:d3:22:79:44:db:ee:e7:74:8b:02:e6:
f5:f5:6e:d8:79:9a:f3:a5:f7:41:cb:bd:dc:8b:db:
39:1f:3c:4c:ba:12:c6:fd:48:fd:5f:5e:73:26:46:
e3:92:d7:da:3b:b1:d2:dd:30:6f:8f:c7:f2:97:f9:
e5:71:31:01:ee:e9:cf:5c:d2:af:22:c9:29:66:53:
ee:f0:fd:f2:0c:b0:c3:45:c2:01:e4:a7:55:dd:4a:
40:8a:5e:48:c9:ec:fb:49:ee:3e:5f:b9:0d:8c:3b:
3d:23:fa:8f:88:7f:24:02:99:46:74:2a:75:cd:23:
9c:3c:86:eb:51:4c:cd:28:84:27:15:54:05:e8:cb:
17:a6:26:12:98:75:16:02:07:5f:13:7e:ac:f7:00:
8b:fd:6c:b4:28:38:37:3d:81:91:75:a4:ad:0a:c1:
5d:79:72:f8:2a:e5:f9:1c:00:98:d5:98:75:b3:6b:
48:26:4e:a0:48:18:88:de:fe:a7:64:72:12:14:fe:
4d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:CB:2D:C4:5D:EB:51:8D:3E:30:3B:30:92:62:05:2C:B8:FF:2C:9E
X509v3 Authority Key Identifier:
keyid:93:A3:FA:4B:78:E5:0F:4A:F9:7B:E2:85:E2:E9:10:A5:D1:ED:C6:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k6P6S3jlD0r5e-KF4ukQpdHtxjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b52ae1-09a6-4458-9d06-0b6908737d7f/1/k6P6S3jlD0r5e-KF4ukQpdHtxjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b52ae1-09a6-4458-9d06-0b6908737d7f/1/k6P6S3jlD0r5e-KF4ukQpdHtxjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:e5:06:58:40:22:e1:3b:f9:58:78:b8:fe:e8:17:0d:ae:35:
c4:bc:18:48:59:c5:dc:a6:b5:e7:8c:5e:21:9f:0e:17:72:32:
6b:16:44:7e:8d:35:c3:a2:20:c5:1e:75:ba:51:a7:1b:91:60:
2d:af:2e:fe:04:61:26:8e:e7:fe:76:e8:29:48:48:64:04:62:
25:38:f6:8d:bb:66:2d:03:e9:0c:cc:0a:96:e2:cd:b3:d1:4c:
a6:cd:88:d7:21:87:51:10:c1:0a:67:aa:91:e6:36:91:c4:9d:
f1:c2:70:c0:b5:9d:b6:05:80:cc:43:09:5b:41:9c:bb:3e:14:
22:7f:81:25:85:22:0c:88:be:e3:e2:91:c9:e8:49:31:6c:12:
07:ee:22:65:1b:84:e9:76:7f:ea:c7:2a:19:c2:bc:cf:e7:7a:
38:1c:f7:24:ac:e0:8f:7d:d4:06:9a:bd:47:d2:47:98:f4:d5:
c0:d0:57:46:e1:a7:ae:dc:3c:b3:d6:f4:ce:52:e5:9d:9d:a9:
ed:12:d3:a4:3e:f5:ff:26:d4:59:ee:53:78:5b:10:d3:6e:e2:
2a:f9:28:94:dd:47:89:3b:46:8b:9b:2d:f4:8e:4c:d3:5d:c3:
fa:6f:9e:82:e8:7f:9d:47:97:89:66:41:29:22:ec:9a:5a:d1:
fc:6c:19:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:05:04 2025 by rpki-client