Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/ca698e-e6a8-41f4-869c-961f437135c6/1/e6dzYuMUWG0NIYhNAaha23dmW3Q.mft
File: e6dzYuMUWG0NIYhNAaha23dmW3Q.mft (raw, json)
Hash identifier: VtpxDT6FswsgxvNKvgSSAgy0y3U3CspfJxo5x1cVN5A=
Subject key identifier: C9:2D:71:17:37:1D:0A:AA:DD:D0:98:DE:C6:9F:DD:30:18:E9:84:4F
Authority key identifier: 7B:A7:73:62:E3:14:58:6D:0D:21:88:4D:01:A8:5A:DB:77:66:5B:74
Certificate issuer: /CN=7ba77362e314586d0d21884d01a85adb77665b74
Certificate serial: 0199FC8F6A3FABD90482FE2EE02F27F06BDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e6dzYuMUWG0NIYhNAaha23dmW3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/ca698e-e6a8-41f4-869c-961f437135c6/1/e6dzYuMUWG0NIYhNAaha23dmW3Q.mft
Manifest number: 16E6
Signing time: Sun 19 Oct 2025 13:01:21 +0000
Manifest this update: Sun 19 Oct 2025 13:01:21 +0000
Manifest next update: Mon 20 Oct 2025 13:01:21 +0000
Files and hashes: 1: A2mB37rJmerIuB24l4Bs4lzgXqo.roa (hash: ndaVFcXFO0lVM0GIop/3BjpE63WSZdctz0XY3LjKsVI=)
2: e6dzYuMUWG0NIYhNAaha23dmW3Q.crl (hash: 8Pr2sPmbwy32Z+zmkLP0dv1+6PTkAvGuW9HOdaIhcco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/ca698e-e6a8-41f4-869c-961f437135c6/1/e6dzYuMUWG0NIYhNAaha23dmW3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/ca698e-e6a8-41f4-869c-961f437135c6/1/e6dzYuMUWG0NIYhNAaha23dmW3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/e6dzYuMUWG0NIYhNAaha23dmW3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:6a:3f:ab:d9:04:82:fe:2e:e0:2f:27:f0:6b:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ba77362e314586d0d21884d01a85adb77665b74
Validity
Not Before: Oct 19 13:01:21 2025 GMT
Not After : Oct 20 13:01:21 2025 GMT
Subject: CN=c92d7117371d0aaaddd098dec69fdd3018e9844f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:52:f7:da:dc:2f:42:53:64:54:cb:04:ee:46:
9f:03:ca:af:85:b5:9a:71:4a:d0:27:47:f1:68:ff:
e5:9c:18:96:13:4d:ea:65:65:ab:2c:e6:1f:23:d4:
3a:a6:8b:4a:5f:48:f7:b6:70:11:22:88:29:2a:7b:
e9:91:0c:13:9c:5c:29:a5:0d:0e:e2:75:ce:56:38:
f7:7d:75:74:23:a9:21:bb:c5:1d:f6:24:7b:0c:8d:
6d:6a:bd:d2:74:ee:4b:67:06:72:a3:f4:5d:e5:ff:
4b:87:0e:0f:fa:bc:c4:61:5c:38:32:a9:1d:52:1a:
57:b1:56:06:7b:39:a9:dd:80:f4:a2:2e:23:3e:08:
a8:77:1e:67:44:b5:39:28:0a:45:cb:b7:a3:73:e8:
8b:f8:e4:44:47:f5:c2:51:a6:74:5a:06:56:76:dd:
7e:62:c8:ce:4a:1b:4b:7c:f6:b7:61:83:ea:bd:07:
4c:8f:94:e9:67:88:35:06:79:3d:19:06:53:d5:1c:
37:89:be:f4:2e:ad:b0:f9:0c:c7:67:b0:b6:1f:46:
bd:7e:a5:55:06:0c:7a:6c:bd:f8:95:13:7b:a6:6b:
16:09:62:a1:3c:10:b8:d0:14:35:1b:24:4d:2f:a5:
82:f2:2c:f6:a3:51:68:49:3d:33:44:72:02:63:6a:
be:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:2D:71:17:37:1D:0A:AA:DD:D0:98:DE:C6:9F:DD:30:18:E9:84:4F
X509v3 Authority Key Identifier:
keyid:7B:A7:73:62:E3:14:58:6D:0D:21:88:4D:01:A8:5A:DB:77:66:5B:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6dzYuMUWG0NIYhNAaha23dmW3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/ca698e-e6a8-41f4-869c-961f437135c6/1/e6dzYuMUWG0NIYhNAaha23dmW3Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/ca698e-e6a8-41f4-869c-961f437135c6/1/e6dzYuMUWG0NIYhNAaha23dmW3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:49:32:5d:d4:59:a5:61:66:90:4b:83:dc:77:62:62:bf:16:
14:77:93:b2:56:b9:55:6e:8b:11:bc:9d:d8:76:af:a2:56:a4:
8c:35:d9:01:b7:ec:85:26:5e:85:f4:bb:dd:e1:f8:86:f9:41:
d9:09:a4:c3:df:58:1f:c5:70:1d:55:17:c8:3d:36:41:8a:5b:
b1:fa:64:e3:f0:be:60:21:8d:21:42:76:ef:b0:7e:39:3e:f9:
c2:bc:df:9c:be:00:3b:33:7f:16:29:44:58:82:90:1f:8a:c6:
90:4f:4a:2b:74:f3:2a:d5:58:a8:28:d7:c2:74:7b:ae:67:48:
f6:2e:19:9c:71:8e:c7:d6:24:a5:a3:14:d2:d0:2c:37:76:4f:
a1:ac:3a:3a:2f:b6:c8:a6:9f:5a:4e:05:26:08:d3:35:1f:d5:
aa:29:9d:bf:25:b0:39:47:da:73:8f:b1:46:59:3e:66:b2:a9:
e1:5d:2b:1a:c0:b1:d7:b7:86:40:30:0b:5a:e5:8e:7b:71:a9:
b0:20:8c:a2:3b:b2:bb:ea:7d:ae:54:62:c9:8c:5b:83:51:e5:
ec:fa:0a:15:fd:b2:b0:11:66:18:50:68:a6:62:d8:4b:b5:03:
8f:8d:db:42:8d:f3:4d:3e:14:c2:91:96:d4:38:5f:f1:1e:4b:
cb:fb:62:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:38:47 2025 by rpki-client