Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/fb2aa1-004b-49c4-aa41-c9de22b916ca/1/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.mft
File: 6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.mft (raw, json)
Hash identifier: yi1IDHjEC5Hl1eCWmbMkY1lSewPeF2hm2MAG4fWhrUw=
Subject key identifier: 52:EE:AD:9C:CB:BB:51:69:C2:26:CA:FE:70:A6:67:89:7A:F0:02:B3
Authority key identifier: EA:A5:AB:E9:F7:30:43:83:19:8B:A1:FF:A5:92:79:0E:CF:2C:3C:EB
Certificate issuer: /CN=eaa5abe9f7304383198ba1ffa592790ecf2c3ceb
Certificate serial: 0199FF594F5D6990C227E45535C38E2D2AA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/fb2aa1-004b-49c4-aa41-c9de22b916ca/1/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.mft
Manifest number: 0B9C
Signing time: Mon 20 Oct 2025 02:01:06 +0000
Manifest this update: Mon 20 Oct 2025 02:01:06 +0000
Manifest next update: Tue 21 Oct 2025 02:01:06 +0000
Files and hashes: 1: 6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.crl (hash: wvt6atqCFLAYBkT/eiLyWOiIHdrAA7tmcERKcpCai50=)
2: LdRBYy0Dc5TAEL5DjhgBeOrbOd4.roa (hash: DqAe52Zea4wwRHNsVvBEFGj53/XE1pCKy+2JNBHlZFI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/fb2aa1-004b-49c4-aa41-c9de22b916ca/1/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/fb2aa1-004b-49c4-aa41-c9de22b916ca/1/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:59:4f:5d:69:90:c2:27:e4:55:35:c3:8e:2d:2a:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaa5abe9f7304383198ba1ffa592790ecf2c3ceb
Validity
Not Before: Oct 20 02:01:06 2025 GMT
Not After : Oct 21 02:01:06 2025 GMT
Subject: CN=52eead9ccbbb5169c226cafe70a667897af002b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:33:b7:0a:98:73:86:38:70:0e:3a:78:22:d4:
6a:d4:3c:57:8e:06:05:f2:1d:b4:ff:4d:67:22:c7:
10:c8:40:a5:bc:5a:2f:49:c5:20:b2:3b:9a:4f:e5:
23:61:44:d2:77:dc:c3:63:b2:07:b3:f1:39:d1:0e:
e8:43:f5:12:ef:34:91:d1:3b:3e:43:a9:5a:0b:c0:
8e:a0:79:82:02:7e:5a:07:36:5f:e8:71:3d:61:b6:
1a:89:8d:15:68:cc:f9:66:c7:0f:c0:00:d9:5a:16:
1e:1f:ec:f8:4e:01:98:3e:e8:3e:3e:18:70:a5:25:
f5:0d:7a:33:81:41:3d:ca:6b:32:5e:31:2c:fe:ef:
2c:be:3f:83:3d:4c:85:7f:3f:e7:e0:db:03:fd:d0:
2d:73:b4:fc:8c:a2:b4:5d:36:2b:45:a0:2d:cf:03:
d4:ce:0c:5a:b2:53:ed:48:01:14:be:ea:ff:bc:47:
0e:74:12:cc:e2:3b:30:a6:8a:9c:89:87:94:de:18:
11:e8:dd:33:f6:21:1d:bd:ff:e8:98:8f:d0:c6:fd:
61:83:93:58:61:2c:0c:6a:9f:dd:06:d0:d5:51:de:
c3:35:08:f0:ff:f6:cc:b5:c2:96:22:0b:31:dc:10:
5e:b9:8d:64:43:ce:7c:42:43:b1:f3:2e:d5:bf:bd:
e1:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:EE:AD:9C:CB:BB:51:69:C2:26:CA:FE:70:A6:67:89:7A:F0:02:B3
X509v3 Authority Key Identifier:
keyid:EA:A5:AB:E9:F7:30:43:83:19:8B:A1:FF:A5:92:79:0E:CF:2C:3C:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/fb2aa1-004b-49c4-aa41-c9de22b916ca/1/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/fb2aa1-004b-49c4-aa41-c9de22b916ca/1/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:46:cf:54:32:cf:9d:02:0f:9f:6f:cd:d1:7e:56:34:87:22:
12:ce:26:99:23:4c:b7:8b:71:c2:ce:7e:11:82:02:41:91:85:
8b:0c:a0:52:fc:ed:6e:80:c9:12:cc:fe:51:2b:93:e0:b5:8a:
e6:e6:4a:e9:cc:11:63:63:b7:d9:b7:4d:9f:d6:3a:f7:4b:5a:
84:03:77:6f:56:5b:41:3f:d0:f4:c2:bb:fa:00:17:6d:de:41:
1c:e7:f3:89:ff:21:dc:49:6d:39:8b:b4:c3:7f:db:fc:9f:42:
7f:ef:bd:fd:64:82:8e:d9:77:ae:86:fc:a9:dd:6d:0e:31:75:
5a:c8:99:2d:f6:0e:de:06:82:1a:74:f1:57:41:93:de:9b:0c:
b4:ff:cd:5f:18:4b:7a:bb:59:09:17:fd:bc:0b:fc:72:66:c9:
b3:b3:a9:97:a6:66:69:13:f5:9b:ad:80:26:a2:00:9d:63:7f:
eb:29:dd:2a:aa:9e:fb:f3:7d:5a:20:49:3c:b9:e9:d0:b0:1f:
b3:c3:86:93:f8:83:fe:cb:c6:7b:fd:cc:34:d3:33:c8:24:1b:
47:8d:62:3f:33:c2:36:af:20:7f:f3:2d:3e:b8:00:d2:fd:2e:
50:b6:11:fa:eb:2b:92:f3:a6:8e:cc:07:ee:d6:17:a5:b3:38:
a6:a6:fd:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:06:53 2025 by rpki-client