Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/6czfaVmJN585hMGGQek367aCJZs.mft
File: 6czfaVmJN585hMGGQek367aCJZs.mft (raw, json)
Hash identifier: T8VlFAzOlTh2AucQNJlSvZXVeRotxc1RqyTS+9yjcc8=
Subject key identifier: 17:83:F4:1A:54:9C:F3:A7:D4:8A:C0:D3:01:01:17:80:0C:5E:E3:19
Authority key identifier: E9:CC:DF:69:59:89:37:9F:39:84:C1:86:41:E9:37:EB:B6:82:25:9B
Certificate issuer: /CN=e9ccdf695989379f3984c18641e937ebb682259b
Certificate serial: 0199FC21382A7E750D856D6D58FA897D0C95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6czfaVmJN585hMGGQek367aCJZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/6czfaVmJN585hMGGQek367aCJZs.mft
Manifest number: 0633
Signing time: Sun 19 Oct 2025 11:00:59 +0000
Manifest this update: Sun 19 Oct 2025 11:00:59 +0000
Manifest next update: Mon 20 Oct 2025 11:00:59 +0000
Files and hashes: 1: 6czfaVmJN585hMGGQek367aCJZs.crl (hash: t+mQwx0Qak6Jgm6Vy2XOnhdl+ziA8Q6ZlAJ76YTOeEg=)
2: UonFdVxRB-HOOyUD446SJsVcabg.roa (hash: 11kZuTKWQH6OP3cuxM8FLHDKW4RaMfeFdGuijw+tO1s=)
3: e2Jeqb9Uzg6EG4YHbxV47PgTWzk.roa (hash: j8o4Nte6arS2S28o9H96r23GZrhvfGEjib56R7pWjcA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/6czfaVmJN585hMGGQek367aCJZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/6czfaVmJN585hMGGQek367aCJZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/6czfaVmJN585hMGGQek367aCJZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:38:2a:7e:75:0d:85:6d:6d:58:fa:89:7d:0c:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9ccdf695989379f3984c18641e937ebb682259b
Validity
Not Before: Oct 19 11:00:59 2025 GMT
Not After : Oct 20 11:00:59 2025 GMT
Subject: CN=1783f41a549cf3a7d48ac0d3010117800c5ee319
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:28:f8:58:1e:38:38:ea:c8:f0:0c:66:1f:9b:
d9:0c:f6:d3:85:40:35:ab:e6:a0:a8:88:98:cc:26:
2f:04:3b:fd:8b:3f:a1:60:d1:5d:14:75:d2:98:9e:
90:c1:18:60:08:9c:d8:08:c9:bb:9e:60:ed:ef:04:
84:fb:39:e2:09:62:7d:34:b9:85:84:96:94:3e:9e:
10:2f:ed:43:17:a7:5c:31:b5:85:00:0e:07:87:8b:
7b:64:6d:e1:3d:c9:55:e8:91:cd:10:c7:53:2b:e7:
8e:07:99:ec:ca:a4:e5:3d:4c:b3:ff:23:e9:02:e7:
9a:90:26:4f:82:56:92:7b:b1:0b:ea:c9:5b:8f:57:
c3:71:de:ee:5b:82:30:0c:a3:6b:73:9b:f3:ac:a4:
22:23:85:ec:74:fb:1e:93:c9:ee:46:16:32:5d:f7:
5b:17:c4:8c:37:93:6e:2e:ca:c0:ac:e3:0d:48:f7:
cc:b7:11:6f:5d:33:47:75:a3:9e:42:c6:07:52:0c:
da:ea:04:ff:6d:c7:11:dd:30:b4:1a:bc:b7:55:6b:
5c:3e:71:2b:ac:5c:7d:3c:17:e3:51:9a:4f:c4:53:
78:8c:46:8b:e8:e0:4e:8f:49:09:fd:55:31:7b:5e:
86:8c:73:8a:a6:3e:c4:88:0e:82:f6:b6:d3:1f:05:
c3:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:83:F4:1A:54:9C:F3:A7:D4:8A:C0:D3:01:01:17:80:0C:5E:E3:19
X509v3 Authority Key Identifier:
keyid:E9:CC:DF:69:59:89:37:9F:39:84:C1:86:41:E9:37:EB:B6:82:25:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6czfaVmJN585hMGGQek367aCJZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/6czfaVmJN585hMGGQek367aCJZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/6czfaVmJN585hMGGQek367aCJZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:b7:f9:9f:bd:3d:cc:8c:f0:3b:1a:3e:fd:02:9b:fa:43:eb:
ab:e7:73:04:b6:dc:6d:2d:3a:ec:b6:22:65:b5:ae:e3:0e:79:
0c:56:c5:f0:21:33:0a:1d:aa:e8:73:0f:65:ba:df:bd:ef:be:
52:07:f3:ab:18:6b:f1:56:de:6b:ef:83:19:33:4e:4c:a1:da:
25:07:89:ee:8f:7d:22:df:24:90:94:69:a4:f3:76:f5:12:8b:
73:df:df:80:41:9d:8b:9e:e6:24:06:7b:3a:62:59:f7:f8:f9:
27:7d:aa:a4:32:48:bd:f4:2d:bd:0f:0b:42:bf:3d:04:59:9b:
08:7a:3a:e3:49:04:95:35:dd:9f:92:64:73:0f:44:ee:3c:40:
c4:5b:2c:59:db:80:90:42:a4:66:fc:e0:60:56:ba:f9:fc:6a:
17:ea:7a:b5:42:12:42:88:41:65:51:d1:72:ce:4b:25:fc:47:
ee:f0:d9:3a:05:bc:96:b4:49:c1:f4:d5:fe:f3:95:45:3c:0f:
bd:7d:ba:e0:8e:1b:ce:13:7c:2e:4a:57:68:33:be:07:4c:d0:
b3:06:2f:5b:ca:22:18:32:a7:cb:76:d2:8d:7e:82:46:37:98:
9e:78:b2:1c:aa:34:4b:ee:16:01:b7:9d:5f:43:fc:0d:63:c8:
ac:d4:e2:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:04 2025 by rpki-client