Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/3f7da4-3631-4b03-ba84-6cb2d3b4437c/1/6cTNQRjd_-5W6IVmN5VUeh3j-Yo.mft
File: 6cTNQRjd_-5W6IVmN5VUeh3j-Yo.mft (raw, json)
Hash identifier: 5RzOmNEmyfjRlvnQxZZbxF/EwCMXcjGVPCynqFy8THE=
Subject key identifier: 87:FF:54:8D:A0:3F:42:D3:A8:09:16:C1:07:C7:4A:63:50:43:89:A9
Authority key identifier: E9:C4:CD:41:18:DD:FF:EE:56:E8:85:66:37:95:54:7A:1D:E3:F9:8A
Certificate issuer: /CN=e9c4cd4118ddffee56e885663795547a1de3f98a
Certificate serial: 019A0147E95F786A7CE85AFDEF1793075014
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6cTNQRjd_-5W6IVmN5VUeh3j-Yo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/3f7da4-3631-4b03-ba84-6cb2d3b4437c/1/6cTNQRjd_-5W6IVmN5VUeh3j-Yo.mft
Manifest number: 16E3
Signing time: Mon 20 Oct 2025 11:01:21 +0000
Manifest this update: Mon 20 Oct 2025 11:01:21 +0000
Manifest next update: Tue 21 Oct 2025 11:01:21 +0000
Files and hashes: 1: 6cTNQRjd_-5W6IVmN5VUeh3j-Yo.crl (hash: bYKfPpUGfAhkypB286OUgPC53vpOS6byY2w/p4SDfr8=)
2: yQp3lf1OVxhMQ-si3fJCgBiD3so.roa (hash: 2hMAD2c5ISOXJtDVu0nTlgQQryv7G6wnTPw6jHWepts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/3f7da4-3631-4b03-ba84-6cb2d3b4437c/1/6cTNQRjd_-5W6IVmN5VUeh3j-Yo.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/3f7da4-3631-4b03-ba84-6cb2d3b4437c/1/6cTNQRjd_-5W6IVmN5VUeh3j-Yo.mft
rsync://rpki.ripe.net/repository/DEFAULT/6cTNQRjd_-5W6IVmN5VUeh3j-Yo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 11:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:47:e9:5f:78:6a:7c:e8:5a:fd:ef:17:93:07:50:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9c4cd4118ddffee56e885663795547a1de3f98a
Validity
Not Before: Oct 20 11:01:21 2025 GMT
Not After : Oct 21 11:01:21 2025 GMT
Subject: CN=87ff548da03f42d3a80916c107c74a63504389a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:22:fd:bc:9e:84:74:a9:42:02:71:e0:c4:2d:
76:88:f2:69:56:fa:07:fe:cf:f5:7c:68:b9:f1:cf:
c9:09:cb:65:0e:54:0a:c2:2b:25:1b:5d:ba:0f:08:
9b:5d:ee:46:43:f3:e1:c8:20:8b:09:bb:57:fa:d4:
22:0e:42:10:94:ae:3a:bf:03:a7:3e:e8:e4:a1:62:
94:aa:3e:4c:cc:40:31:ec:de:e3:0b:30:4a:a0:80:
58:32:f7:b0:fd:26:5f:23:37:cb:9e:d6:87:83:97:
98:ab:bb:17:48:e4:06:9a:67:55:4c:6d:6f:0d:4b:
a6:f7:76:7a:d6:30:ba:b6:a7:19:35:6d:6f:5f:bc:
a0:54:dc:a7:65:32:c4:96:4a:f2:d0:38:a2:c6:a0:
6d:bd:f8:1e:a0:94:d4:71:0b:8c:b9:39:f2:a4:b7:
2a:41:36:f2:18:d9:90:9a:70:27:53:73:b0:d7:c7:
8b:0e:ad:35:99:fb:03:50:59:75:6c:2a:07:e0:83:
aa:c8:56:8f:a0:a8:3c:7d:4b:10:d5:73:9f:8a:2a:
ab:d3:28:2d:fc:a9:98:8e:3d:1c:8b:21:b7:0b:84:
93:3b:4e:52:63:ab:38:87:4a:87:c3:c6:50:74:b8:
2e:5a:55:a8:59:77:95:3e:33:2e:46:89:b6:26:10:
76:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:FF:54:8D:A0:3F:42:D3:A8:09:16:C1:07:C7:4A:63:50:43:89:A9
X509v3 Authority Key Identifier:
keyid:E9:C4:CD:41:18:DD:FF:EE:56:E8:85:66:37:95:54:7A:1D:E3:F9:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6cTNQRjd_-5W6IVmN5VUeh3j-Yo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3f7da4-3631-4b03-ba84-6cb2d3b4437c/1/6cTNQRjd_-5W6IVmN5VUeh3j-Yo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3f7da4-3631-4b03-ba84-6cb2d3b4437c/1/6cTNQRjd_-5W6IVmN5VUeh3j-Yo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:95:86:23:4b:e7:cc:be:17:5b:4e:88:b0:aa:fc:5f:42:3f:
3d:24:1f:94:f2:be:48:f6:df:b1:59:ba:83:9f:0f:54:68:6b:
37:f7:92:b9:a6:58:32:c3:bb:2e:77:de:05:3a:9f:7a:7a:30:
d9:12:34:9b:1d:b5:41:d8:54:cb:10:04:e5:c5:72:79:60:7a:
d7:15:57:38:d6:9c:f2:1b:5a:94:ba:e6:40:48:9a:c9:4b:23:
18:55:0d:59:ed:dc:0c:9a:b1:e1:68:25:c9:c6:00:a6:c9:7f:
7b:7f:ff:c7:71:87:87:de:dd:f6:a7:c6:ed:61:80:16:3f:66:
22:e8:fa:11:fb:a5:42:f9:9b:db:bc:45:33:02:55:32:75:21:
02:e1:53:35:71:a8:2a:8a:c0:a7:b2:a1:92:3a:f4:45:93:3c:
05:57:be:64:1b:8a:f6:5d:64:3e:ca:b4:00:0e:50:d1:3f:3d:
27:a4:2d:b7:29:93:7b:07:7c:0d:7a:d7:14:58:b0:f7:34:69:
38:5c:da:4b:82:fe:e4:52:28:1d:c4:db:57:a1:eb:17:a0:18:
1b:9b:4c:e3:60:dc:90:e3:d8:a0:12:ae:5c:d8:83:18:69:d0:
50:2f:63:52:83:2a:3a:98:94:9a:63:7b:81:1f:97:f6:37:72:
c1:20:70:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:53:41 2025 by rpki-client