Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/42217e-ead0-46be-8ad0-05f90ad24f3e/1/6XWS8etB1siTzQ3XK2P8NO5VNTM.mft
File: 6XWS8etB1siTzQ3XK2P8NO5VNTM.mft (raw, json)
Hash identifier: 64nJeLAIvkrKFPBxfgNUt8hsugC0UfCAZhspHCb3ZZo=
Subject key identifier: A1:ED:61:68:ED:E4:DF:50:1D:68:EC:BC:CB:2E:AD:40:53:BD:00:0F
Authority key identifier: E9:75:92:F1:EB:41:D6:C8:93:CD:0D:D7:2B:63:FC:34:EE:55:35:33
Certificate issuer: /CN=e97592f1eb41d6c893cd0dd72b63fc34ee553533
Certificate serial: 0199FBEB4F609C8C0E3A0C9D51133BD08CC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XWS8etB1siTzQ3XK2P8NO5VNTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/42217e-ead0-46be-8ad0-05f90ad24f3e/1/6XWS8etB1siTzQ3XK2P8NO5VNTM.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 10:02:06 +0000
Manifest this update: Sun 19 Oct 2025 10:02:06 +0000
Manifest next update: Mon 20 Oct 2025 10:02:06 +0000
Files and hashes: 1: 6XWS8etB1siTzQ3XK2P8NO5VNTM.crl (hash: fuxN59eN1uQPVt9u535MzBo5sc967+HJicsLajnCnoE=)
2: r6T3XlH0NydhUiVntY08YEEt0HY.roa (hash: j+28xx5Rq8KrtlCf807KmCTOzzUVWhkp01bXOIcVWSo=)
3: wPTagVR3pNusa3J3LbaZykmYrdM.roa (hash: k0uAisbBEgTj7/x2tEyMYhIzPLODPGtJvKxV+pOGuVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/42217e-ead0-46be-8ad0-05f90ad24f3e/1/6XWS8etB1siTzQ3XK2P8NO5VNTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/42217e-ead0-46be-8ad0-05f90ad24f3e/1/6XWS8etB1siTzQ3XK2P8NO5VNTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/6XWS8etB1siTzQ3XK2P8NO5VNTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:4f:60:9c:8c:0e:3a:0c:9d:51:13:3b:d0:8c:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e97592f1eb41d6c893cd0dd72b63fc34ee553533
Validity
Not Before: Oct 19 10:02:06 2025 GMT
Not After : Oct 20 10:02:06 2025 GMT
Subject: CN=a1ed6168ede4df501d68ecbccb2ead4053bd000f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:34:a9:3a:f7:6b:8d:2a:f5:ef:52:b2:50:f9:
34:0f:b6:84:19:98:83:58:15:c5:e6:3e:83:9c:bc:
ce:12:63:e1:df:7b:6c:dd:e2:ee:ef:d0:57:a1:97:
a5:23:55:92:38:e8:1e:fc:9d:ca:c1:03:ef:55:41:
3c:9d:ff:c0:76:98:02:9a:4d:72:8e:09:04:27:ab:
c0:63:df:89:05:59:ec:61:5f:d0:f4:72:80:1f:f9:
ee:27:f9:e7:82:94:d0:10:c2:39:fc:6c:28:59:e4:
ed:19:26:9f:d7:24:5e:2b:24:85:42:23:06:68:d0:
7d:3c:66:84:b6:17:1d:c6:a3:6b:dd:69:4f:f9:06:
8d:f2:52:76:c8:1a:99:fe:ae:55:f4:2c:71:0d:9c:
36:a4:82:62:33:bf:57:97:9d:a6:5f:af:60:90:76:
71:b2:65:89:0b:a7:37:30:64:c2:12:39:85:49:da:
2d:a5:ab:fb:7e:12:a7:d5:c3:aa:9a:24:79:f5:b4:
96:1d:10:8d:dd:a4:0d:d3:53:73:f3:cb:a1:64:65:
88:f0:32:ae:68:ad:20:da:18:2d:0e:5c:19:13:e2:
3a:35:ef:26:d8:97:c2:84:e2:6c:18:4f:dd:f7:0d:
bd:7c:4d:22:f7:26:f8:18:8b:d5:87:0c:90:6d:4c:
92:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:ED:61:68:ED:E4:DF:50:1D:68:EC:BC:CB:2E:AD:40:53:BD:00:0F
X509v3 Authority Key Identifier:
keyid:E9:75:92:F1:EB:41:D6:C8:93:CD:0D:D7:2B:63:FC:34:EE:55:35:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XWS8etB1siTzQ3XK2P8NO5VNTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/42217e-ead0-46be-8ad0-05f90ad24f3e/1/6XWS8etB1siTzQ3XK2P8NO5VNTM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/42217e-ead0-46be-8ad0-05f90ad24f3e/1/6XWS8etB1siTzQ3XK2P8NO5VNTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:a9:40:05:2b:9c:00:6c:d1:a4:01:f3:4e:41:13:a7:43:80:
27:9e:30:04:46:fb:32:fd:61:c2:17:92:f9:42:74:05:36:dc:
d5:ae:5d:69:23:e1:78:e2:5e:55:a1:53:7d:fe:9e:cb:91:84:
9e:9f:0c:41:18:c3:3e:1b:d5:e6:df:2f:ee:5a:90:5a:18:f9:
fa:be:b8:79:45:f3:8d:1d:5e:4c:15:37:33:86:d9:1b:ec:f3:
00:17:83:cd:bf:64:a8:ce:44:7c:87:50:5a:98:0e:92:19:1b:
fd:00:bb:af:2d:88:96:bb:f5:42:ef:80:4d:99:2e:25:ba:fd:
87:15:63:ca:b9:bd:a4:b5:ed:4c:b0:36:ad:f9:9c:bc:e7:6a:
5c:c3:ba:b6:ec:ae:03:79:b4:36:3f:82:94:ec:94:0e:d4:b7:
cb:cf:88:31:89:c3:86:51:af:ab:3b:6b:36:c8:50:6d:b2:b6:
55:75:1c:12:dc:e8:5d:e8:e9:d7:e7:04:06:48:6b:db:a7:25:
a7:86:89:c9:40:9a:af:0a:cf:76:2e:d8:38:c3:7a:2b:37:a5:
92:6f:0c:f8:5c:5f:31:f4:9f:fc:cc:7d:e1:f4:d6:3f:ae:e2:
de:f7:aa:45:35:21:d6:17:5d:db:99:c9:4e:0c:c5:c5:27:70:
74:af:2f:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:41:22 2025 by rpki-client