Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/82d824-4e02-46d4-854a-bd0512ce4905/1/_6QdNBPdrMkf4PRCaoKGgc8w4Pw.mft
File: _6QdNBPdrMkf4PRCaoKGgc8w4Pw.mft (raw, json)
Hash identifier: k+XETAnfzYlJ2BHJ6INdksszMLyQP5JQz4YG1uHyR+g=
Subject key identifier: AB:04:70:52:4C:1B:8C:83:41:D0:38:73:99:F4:8C:0A:42:69:31:2E
Authority key identifier: FF:A4:1D:34:13:DD:AC:C9:1F:E0:F4:42:6A:82:86:81:CF:30:E0:FC
Certificate issuer: /CN=ffa41d3413ddacc91fe0f4426a828681cf30e0fc
Certificate serial: 0199FC58E110C47D180948704DAF57F736A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_6QdNBPdrMkf4PRCaoKGgc8w4Pw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/82d824-4e02-46d4-854a-bd0512ce4905/1/_6QdNBPdrMkf4PRCaoKGgc8w4Pw.mft
Manifest number: 0DC7
Signing time: Sun 19 Oct 2025 12:01:47 +0000
Manifest this update: Sun 19 Oct 2025 12:01:47 +0000
Manifest next update: Mon 20 Oct 2025 12:01:47 +0000
Files and hashes: 1: 8eIa-4UA2fnyQQyLs8y9bQIaWAM.roa (hash: SYGKUkvXI/obgdGVYKiFu2OylosInlCBmN7hXgRUyO8=)
2: _6QdNBPdrMkf4PRCaoKGgc8w4Pw.crl (hash: vhNpSYgeViFq68km8PjYpoZv5Irwhu2LUlFel6FECSk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/82d824-4e02-46d4-854a-bd0512ce4905/1/_6QdNBPdrMkf4PRCaoKGgc8w4Pw.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/82d824-4e02-46d4-854a-bd0512ce4905/1/_6QdNBPdrMkf4PRCaoKGgc8w4Pw.mft
rsync://rpki.ripe.net/repository/DEFAULT/_6QdNBPdrMkf4PRCaoKGgc8w4Pw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:e1:10:c4:7d:18:09:48:70:4d:af:57:f7:36:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffa41d3413ddacc91fe0f4426a828681cf30e0fc
Validity
Not Before: Oct 19 12:01:47 2025 GMT
Not After : Oct 20 12:01:47 2025 GMT
Subject: CN=ab0470524c1b8c8341d0387399f48c0a4269312e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:04:69:48:93:84:82:0a:1a:23:9f:ed:fd:97:
5e:bc:c5:bf:19:41:1b:6f:43:61:e2:1f:d5:2f:b0:
d4:b2:d0:15:e2:19:e7:b0:75:d7:20:56:42:fe:6c:
05:f3:f1:67:73:2c:00:19:6d:32:7a:6b:1a:1c:5f:
6c:f6:b9:61:2e:9e:95:b1:ee:f9:43:c4:d9:4f:63:
62:86:1d:6a:94:05:97:65:76:e5:62:0a:fa:d2:87:
ef:82:8f:82:0b:29:b7:b8:94:3b:68:9a:fa:f7:ef:
f2:31:ac:bf:a2:67:d3:3f:d0:f6:27:cb:83:c0:c1:
39:18:1e:3d:13:85:90:86:97:f4:b8:45:0a:4c:dd:
d0:52:e1:9c:ab:91:bb:54:7f:bb:21:da:e8:b7:ac:
f4:44:71:51:10:66:f3:a9:94:45:9a:82:3f:b3:ba:
83:ba:14:db:37:ca:1f:45:86:6d:e3:13:e5:95:20:
c4:ce:19:c5:c3:04:ab:73:ae:b8:7e:78:21:af:4d:
a2:e2:8c:9f:6b:e7:6e:f8:82:f3:c9:4f:f2:b0:d1:
81:b4:23:a9:6f:46:9b:07:59:34:29:0b:a6:de:ba:
45:27:4d:8b:e9:a1:7c:cd:d8:e5:2e:ad:34:99:41:
fb:1f:df:90:16:2a:e8:77:f2:04:60:11:38:8d:cf:
84:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:04:70:52:4C:1B:8C:83:41:D0:38:73:99:F4:8C:0A:42:69:31:2E
X509v3 Authority Key Identifier:
keyid:FF:A4:1D:34:13:DD:AC:C9:1F:E0:F4:42:6A:82:86:81:CF:30:E0:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_6QdNBPdrMkf4PRCaoKGgc8w4Pw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/82d824-4e02-46d4-854a-bd0512ce4905/1/_6QdNBPdrMkf4PRCaoKGgc8w4Pw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/82d824-4e02-46d4-854a-bd0512ce4905/1/_6QdNBPdrMkf4PRCaoKGgc8w4Pw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:40:f1:2e:1e:bd:6f:22:bd:0d:ef:33:5d:b5:c1:59:8a:18:
dc:15:10:57:6b:4e:c4:48:0f:09:a9:b0:73:e4:b7:47:12:3a:
0d:ea:fc:c4:02:90:ed:c2:5e:63:16:25:fa:ac:7b:6a:18:b9:
fc:f2:d7:76:84:2e:8c:a6:13:91:bd:b0:fe:82:c0:d3:41:9e:
0a:3a:00:cb:95:12:4e:64:7a:68:01:aa:10:ba:a3:17:b8:d1:
9a:bf:bb:9b:9b:47:80:dc:12:bd:a0:f2:0f:3e:32:f4:57:01:
47:34:c1:60:c4:8a:10:18:85:9c:f8:be:d9:fa:c8:20:49:74:
c0:00:fb:35:ce:57:d6:4b:21:3d:d5:18:e9:0b:30:89:83:c3:
a2:03:de:f1:98:1c:e6:69:7c:aa:02:c7:86:ca:e4:26:ce:ce:
54:d6:a9:c2:21:7f:b4:5f:42:a8:5a:a2:c2:50:0e:0a:81:fc:
c4:c3:b6:03:cb:3b:c7:15:10:f8:14:6b:c3:5d:90:0f:d0:62:
b9:0b:41:5c:00:49:54:12:4c:50:da:7a:7f:99:be:08:8c:72:
63:1a:2a:eb:70:fb:78:b5:60:3d:7b:47:0e:48:3a:21:50:72:
8a:74:d4:28:fd:0a:52:b4:a0:8a:1a:1c:4a:5b:68:5c:7a:d1:
a8:34:a5:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:29:55 2025 by rpki-client