Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.mft
File: t6nDTT-EPNsDW3wws-hOIkElIsU.mft (raw, json)
Hash identifier: kgkbslu9mxR06CTg0Ah823jVVPPmjSsT/UesN7GeZuw=
Subject key identifier: 5B:07:AC:D8:A2:95:FC:67:8B:96:59:8C:79:2A:EB:6B:F0:DC:A0:F2
Authority key identifier: B7:A9:C3:4D:3F:84:3C:DB:03:5B:7C:30:B3:E8:4E:22:41:25:22:C5
Certificate issuer: /CN=b7a9c34d3f843cdb035b7c30b3e84e22412522c5
Certificate serial: 0199FD33E4B0EDE32596EB826D571FED39CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t6nDTT-EPNsDW3wws-hOIkElIsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.mft
Manifest number: 0F53
Signing time: Sun 19 Oct 2025 16:01:00 +0000
Manifest this update: Sun 19 Oct 2025 16:01:00 +0000
Manifest next update: Mon 20 Oct 2025 16:01:00 +0000
Files and hashes: 1: StPgXcpmiy5JYaEeTseShVrOOPw.roa (hash: 2TP419yQVLSPbiDET0BATqZqoaVVJJbtbUq/1dj+vY4=)
2: t6nDTT-EPNsDW3wws-hOIkElIsU.crl (hash: pobcslDo3ieGACCsi06e9UUQtIVK/FprCS0tKGul7KM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/t6nDTT-EPNsDW3wws-hOIkElIsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:33:e4:b0:ed:e3:25:96:eb:82:6d:57:1f:ed:39:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7a9c34d3f843cdb035b7c30b3e84e22412522c5
Validity
Not Before: Oct 19 16:01:00 2025 GMT
Not After : Oct 20 16:01:00 2025 GMT
Subject: CN=5b07acd8a295fc678b96598c792aeb6bf0dca0f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:41:85:8e:7c:66:3f:f8:e1:c2:7d:00:a3:24:
df:c1:00:ac:3e:29:a8:ad:da:b9:fc:02:27:a9:97:
73:47:f1:37:fe:f8:c3:3b:fe:b5:8c:3f:cc:a7:82:
b4:81:bf:c7:c2:a1:76:07:39:be:65:99:b2:7d:61:
2c:dc:be:fd:ca:a0:9c:b1:af:e0:ca:94:a0:61:64:
c1:72:41:08:c5:da:9c:b6:c4:a2:c7:20:51:ff:e7:
14:81:c1:8b:7f:c3:1d:23:73:49:3a:31:ff:db:af:
9a:53:61:20:34:c6:10:7a:18:a1:e7:8b:ac:cb:70:
21:55:c5:cd:3b:b9:6d:05:65:63:50:4a:71:88:b7:
ba:52:19:06:12:7c:45:c5:3b:7a:13:a1:09:41:1e:
40:2d:9c:a3:5e:a5:69:4a:23:29:60:6d:8c:88:0f:
2c:5b:aa:6c:ae:b0:77:95:0f:d3:6d:7d:49:4d:43:
d5:24:8a:1f:86:62:b4:53:31:4a:fa:99:b2:27:79:
ea:36:72:c3:5f:f4:b6:66:f9:5c:a2:8e:6a:b8:53:
fe:7e:34:f8:34:7f:9f:53:28:6d:36:8d:c8:10:6d:
03:10:ab:8a:d7:38:aa:8f:90:66:58:32:39:95:e8:
7a:1e:80:38:2a:08:ac:76:1d:39:71:1a:f4:3c:94:
07:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:07:AC:D8:A2:95:FC:67:8B:96:59:8C:79:2A:EB:6B:F0:DC:A0:F2
X509v3 Authority Key Identifier:
keyid:B7:A9:C3:4D:3F:84:3C:DB:03:5B:7C:30:B3:E8:4E:22:41:25:22:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6nDTT-EPNsDW3wws-hOIkElIsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:17:56:aa:a5:54:e0:c0:dc:a0:d4:65:74:5f:88:37:27:f8:
0e:4a:90:ad:8d:2a:c0:ab:42:8d:a6:c5:f3:a8:06:29:26:0a:
35:25:84:8d:12:af:02:3a:8c:4f:90:22:79:f4:e5:7f:fe:9d:
f2:fe:41:d1:73:c3:c1:b6:46:91:eb:db:12:4b:7c:c7:5a:b9:
32:ca:21:9f:aa:f8:c0:48:fd:47:0a:8c:de:11:89:72:20:a4:
36:33:aa:e5:c8:89:87:01:91:31:cd:6b:e4:fd:10:85:06:a2:
a0:b7:ca:6c:43:5a:b5:1b:63:bb:56:40:3e:cf:b9:41:68:4f:
b7:cc:56:04:5f:11:59:c5:31:79:01:53:47:b7:cd:c0:5b:ad:
34:dd:e6:c1:40:7f:46:3d:3d:46:13:08:de:1c:5c:69:5a:a4:
2d:76:f8:b3:8e:c5:37:61:74:f9:82:10:ba:13:71:c7:17:55:
6b:5c:6c:00:6c:64:a0:37:b7:89:b3:eb:3e:e7:a7:9c:0d:b3:
bc:2b:ef:7e:11:30:d7:4d:37:17:34:ab:ba:f5:9c:40:1c:22:
01:36:6f:6b:de:cf:85:8a:9a:2e:25:3e:9f:96:40:56:f4:69:
92:c4:0b:bf:a7:44:67:90:24:bb:76:57:a6:97:1d:96:6b:26:
4f:a4:df:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:18:42 2025 by rpki-client