Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/a5969f-c016-4533-9cba-696703736621/1/6-T90XLfhZdWyoUd3eE2cPSBfuA.mft
File: 6-T90XLfhZdWyoUd3eE2cPSBfuA.mft (raw, json)
Hash identifier: 68tq2AwNIxUFcwTDMcKi96sFkXd0oINUWTckpxMKP+s=
Subject key identifier: 17:0F:9C:3F:0F:BB:02:1C:E8:AF:5F:B5:6A:C5:94:5B:AE:70:2D:EF
Authority key identifier: EB:E4:FD:D1:72:DF:85:97:56:CA:85:1D:DD:E1:36:70:F4:81:7E:E0
Certificate issuer: /CN=ebe4fdd172df859756ca851ddde13670f4817ee0
Certificate serial: 019A0335ABC5716785E7CC27960B0D86DBDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6-T90XLfhZdWyoUd3eE2cPSBfuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/a5969f-c016-4533-9cba-696703736621/1/6-T90XLfhZdWyoUd3eE2cPSBfuA.mft
Manifest number: 16E6
Signing time: Mon 20 Oct 2025 20:00:40 +0000
Manifest this update: Mon 20 Oct 2025 20:00:40 +0000
Manifest next update: Tue 21 Oct 2025 20:00:40 +0000
Files and hashes: 1: 6-T90XLfhZdWyoUd3eE2cPSBfuA.crl (hash: L3uvBxFhxeii8r8N3Ft7LfX+QvvL75WbwgfwciP1DJE=)
2: Z9aXtfZOLHLUJRH7QqPi1mqGj3U.roa (hash: pwgtrLZ9ZWVWEXXmTENsA08mvoGu1JfrrcaBMhazJW4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/a5969f-c016-4533-9cba-696703736621/1/6-T90XLfhZdWyoUd3eE2cPSBfuA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/a5969f-c016-4533-9cba-696703736621/1/6-T90XLfhZdWyoUd3eE2cPSBfuA.mft
rsync://rpki.ripe.net/repository/DEFAULT/6-T90XLfhZdWyoUd3eE2cPSBfuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 20:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:03:35:ab:c5:71:67:85:e7:cc:27:96:0b:0d:86:db:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebe4fdd172df859756ca851ddde13670f4817ee0
Validity
Not Before: Oct 20 20:00:40 2025 GMT
Not After : Oct 21 20:00:40 2025 GMT
Subject: CN=170f9c3f0fbb021ce8af5fb56ac5945bae702def
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d7:fc:c0:52:f3:e3:80:fc:e0:35:27:5b:e4:
2f:13:8b:53:4a:62:c6:e7:9d:de:0d:7b:14:9b:25:
1b:5c:5b:44:fc:d7:c9:39:42:1c:dd:a0:86:69:26:
17:7f:ac:81:ed:33:7b:45:ee:e5:05:4c:6c:8c:3e:
57:b4:f2:62:02:4d:1f:46:f5:26:81:11:46:6f:1d:
a6:d1:2c:bc:60:25:81:8a:83:cc:56:3d:8d:0d:4d:
d5:14:63:41:8c:59:06:cf:b8:62:12:a8:d6:4a:02:
96:4f:dc:00:23:58:44:be:53:a9:77:28:c2:62:38:
80:86:df:fd:b7:47:d4:91:93:67:79:08:45:e3:55:
49:83:e2:56:46:7f:e8:dd:c0:e3:d0:92:71:3a:3a:
fe:4c:ea:e6:db:b9:86:6c:34:fc:8b:ff:2f:de:c5:
b6:9f:cb:b7:c9:07:08:6d:07:ec:3f:bf:57:40:53:
5f:bb:77:45:50:15:03:2e:20:92:d3:16:4e:58:bd:
9c:f9:a0:36:63:12:c5:c5:cb:6d:9a:44:dd:da:f3:
63:29:2b:8c:75:97:ce:13:c7:90:4b:50:f6:c8:be:
92:b7:f2:04:4e:7e:86:70:8c:f7:0d:d1:2c:1f:5a:
c1:74:76:c9:29:0a:b0:a1:7d:6e:e4:a1:1a:25:83:
d3:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:0F:9C:3F:0F:BB:02:1C:E8:AF:5F:B5:6A:C5:94:5B:AE:70:2D:EF
X509v3 Authority Key Identifier:
keyid:EB:E4:FD:D1:72:DF:85:97:56:CA:85:1D:DD:E1:36:70:F4:81:7E:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-T90XLfhZdWyoUd3eE2cPSBfuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/a5969f-c016-4533-9cba-696703736621/1/6-T90XLfhZdWyoUd3eE2cPSBfuA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/a5969f-c016-4533-9cba-696703736621/1/6-T90XLfhZdWyoUd3eE2cPSBfuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:89:6e:89:8d:b6:09:06:b8:af:2b:84:25:55:63:4d:48:0b:
6b:8a:10:b6:5c:87:3a:b8:78:65:ab:47:c7:8e:30:e4:b9:f9:
8e:db:ed:bd:53:67:dc:95:fa:32:fd:04:f1:1d:fe:28:eb:77:
8d:40:aa:12:e7:ce:1b:d9:cf:dd:0e:63:2c:e5:29:81:41:11:
07:15:c7:a8:86:8e:74:34:5d:7c:67:77:ac:6c:53:92:ad:c9:
88:34:60:c6:c4:8c:0d:9c:a3:35:be:50:91:d2:7a:61:95:64:
bc:a5:59:7e:34:66:84:72:be:dd:c4:a6:62:5e:0a:0a:88:e5:
3b:ca:44:4b:32:81:a3:5a:1f:f2:34:af:20:7d:a1:dd:95:56:
cd:b5:8f:0b:b2:34:cb:96:01:85:b3:63:c1:a9:81:7b:6e:8c:
66:70:e7:bd:61:67:06:1d:d2:50:7c:27:e6:67:32:43:8e:91:
9b:6e:2d:72:17:4a:bf:4c:7f:21:34:e6:49:4d:49:4d:4f:c7:
1a:c9:9d:fc:81:b2:da:a8:eb:56:95:5a:69:5f:a4:7a:5f:6a:
89:63:1e:d6:f6:cf:a9:d7:89:31:fc:b9:25:7c:56:94:cc:b4:
18:29:64:db:06:05:34:51:05:75:1f:3c:ac:05:fc:ca:89:ea:
e6:a7:6c:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 04:43:53 2025 by rpki-client