Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/7e51b4-0ab4-4719-b330-bdc5ae8abdb1/1/DL6R62OkTx6fGoPt0hih7HXCXpE.mft
File: DL6R62OkTx6fGoPt0hih7HXCXpE.mft (raw, json)
Hash identifier: qPuqVLCIGJ9YMz7oVgNKu3i5ml56qVIkbXl+WRNgV2A=
Subject key identifier: 6B:13:79:5D:41:8F:97:66:DC:AC:34:CA:F7:EB:28:16:1E:51:EF:8B
Authority key identifier: 0C:BE:91:EB:63:A4:4F:1E:9F:1A:83:ED:D2:18:A1:EC:75:C2:5E:91
Certificate issuer: /CN=0cbe91eb63a44f1e9f1a83edd218a1ec75c25e91
Certificate serial: 0199FDDA1B11400D8FBD48512C599E520DE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DL6R62OkTx6fGoPt0hih7HXCXpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/7e51b4-0ab4-4719-b330-bdc5ae8abdb1/1/DL6R62OkTx6fGoPt0hih7HXCXpE.mft
Manifest number: 08A7
Signing time: Sun 19 Oct 2025 19:02:33 +0000
Manifest this update: Sun 19 Oct 2025 19:02:33 +0000
Manifest next update: Mon 20 Oct 2025 19:02:33 +0000
Files and hashes: 1: Abi5pH7cUtL8rs9zrgavPjQRxnI.roa (hash: 7ApJuHPbwwQ8ZW2QLt3m10DbTaxlvMl9pvX3Esbaw0s=)
2: DL6R62OkTx6fGoPt0hih7HXCXpE.crl (hash: wM2Y9GAqkdKa6f71vm6m+/Add7DkQ/BD7yBAqSsacoA=)
3: rub7QgF_m8ViZ2zh8TifmWsv33k.roa (hash: D3MkLEEj8OyFp5olxebWk6+e8+j7slJr87cSCNkpbeI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/7e51b4-0ab4-4719-b330-bdc5ae8abdb1/1/DL6R62OkTx6fGoPt0hih7HXCXpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/7e51b4-0ab4-4719-b330-bdc5ae8abdb1/1/DL6R62OkTx6fGoPt0hih7HXCXpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DL6R62OkTx6fGoPt0hih7HXCXpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:02:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:1b:11:40:0d:8f:bd:48:51:2c:59:9e:52:0d:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cbe91eb63a44f1e9f1a83edd218a1ec75c25e91
Validity
Not Before: Oct 19 19:02:33 2025 GMT
Not After : Oct 20 19:02:33 2025 GMT
Subject: CN=6b13795d418f9766dcac34caf7eb28161e51ef8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:af:e9:da:ea:68:f2:51:dd:55:57:03:c5:90:
53:0f:ad:08:6d:66:d7:da:14:2d:4f:fe:0c:38:43:
17:ea:31:7f:be:fb:ff:41:63:2e:05:dd:e8:67:11:
39:3f:92:56:8e:b3:79:ac:8f:d5:22:c8:74:3c:a3:
b1:e0:11:0f:d3:17:8e:1e:cd:00:cc:6c:be:a9:91:
d0:75:53:c1:b9:f5:66:97:72:a4:49:74:2a:ec:b4:
f6:62:b2:50:7d:84:f0:40:09:ff:d9:f1:2d:0d:8f:
e6:37:cf:12:90:a8:70:9d:0f:7c:a0:46:2d:d6:7e:
64:f8:b7:bb:e4:12:3b:6e:fe:7f:b2:b2:a1:48:b9:
18:b3:75:0a:3a:e6:3d:38:be:ce:e6:a6:e5:3a:c1:
4b:e4:16:cf:07:82:40:8d:1d:06:dc:91:5a:7e:de:
3e:be:93:a2:ba:7f:c3:f7:14:80:3b:38:62:ab:f7:
15:6e:a4:2f:04:10:aa:34:c9:bc:cd:49:b5:fa:29:
a1:c9:5b:57:f4:e2:91:b1:a3:78:dc:fb:c0:2f:9f:
0d:5d:70:7f:cd:d4:18:60:69:22:ce:97:e1:43:e7:
70:3d:98:c1:84:39:ec:78:e2:bf:be:2b:16:2c:b0:
3b:fe:0e:71:1f:51:20:03:f5:f0:85:67:d3:8a:da:
5f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:13:79:5D:41:8F:97:66:DC:AC:34:CA:F7:EB:28:16:1E:51:EF:8B
X509v3 Authority Key Identifier:
keyid:0C:BE:91:EB:63:A4:4F:1E:9F:1A:83:ED:D2:18:A1:EC:75:C2:5E:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DL6R62OkTx6fGoPt0hih7HXCXpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/7e51b4-0ab4-4719-b330-bdc5ae8abdb1/1/DL6R62OkTx6fGoPt0hih7HXCXpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/7e51b4-0ab4-4719-b330-bdc5ae8abdb1/1/DL6R62OkTx6fGoPt0hih7HXCXpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:08:c5:ab:a2:91:c8:c4:6c:5a:44:81:66:3c:d2:15:bb:71:
a7:3e:42:7b:ee:6d:8a:19:f9:d1:66:2f:1e:02:fe:84:94:2f:
9c:7d:d9:5e:be:75:6d:8b:9a:c0:28:0f:1b:d8:9c:34:4c:6e:
e3:e0:14:82:e9:9a:ff:dd:76:fc:62:35:8d:77:f1:60:e3:8c:
78:ec:b4:26:a7:bc:0f:5e:53:f6:18:28:e7:88:4b:73:70:50:
7f:97:87:bb:78:98:94:34:12:3f:e6:51:f5:66:e3:75:bc:b7:
87:49:81:f8:4a:6f:67:af:a2:27:57:6e:56:67:dc:69:1e:21:
79:ce:ce:11:8e:54:6f:d6:ac:00:3f:38:68:9b:b9:75:01:83:
58:a4:df:12:f8:71:c1:d3:e3:45:01:ba:be:62:0e:60:16:53:
3c:82:4b:39:03:74:0a:02:69:7c:35:f6:98:b0:33:60:e1:d3:
4e:92:8f:be:74:e0:43:47:56:f5:8c:9a:87:4b:3a:02:cc:32:
b2:5c:12:31:dd:a1:d0:db:1b:53:e5:ca:cc:21:4a:82:cf:58:
a4:2d:e1:e7:c1:45:c1:26:ee:bd:7a:f8:61:8f:14:39:c5:69:
78:e0:df:59:4e:bb:f5:99:07:8c:14:de:56:ee:6c:b4:e3:4d:
9f:9a:20:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:01:23 2025 by rpki-client