Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/c42160-d6f4-482c-bf62-62140b202eb4/1/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.mft
File: 6nUDuD-gmnW8uRB1QA-DB6ZnuO0.mft (raw, json)
Hash identifier: KXDIPN9EwQ7bWUz0eeNEs9lYtMK38qY5O41tmX5032U=
Subject key identifier: 03:FC:70:19:13:EE:D6:07:9D:06:98:C5:66:15:41:E4:CC:8C:ED:DE
Authority key identifier: EA:75:03:B8:3F:A0:9A:75:BC:B9:10:75:40:0F:83:07:A6:67:B8:ED
Certificate issuer: /CN=ea7503b83fa09a75bcb91075400f8307a667b8ed
Certificate serial: 0199FB0F1DDA65B58E9E632C25CC760F724D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/c42160-d6f4-482c-bf62-62140b202eb4/1/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.mft
Manifest number: 0DD7
Signing time: Sun 19 Oct 2025 06:01:35 +0000
Manifest this update: Sun 19 Oct 2025 06:01:35 +0000
Manifest next update: Mon 20 Oct 2025 06:01:35 +0000
Files and hashes: 1: 534vF5sjkwJDGuUSMSbyeoXyx-w.roa (hash: yaE3+RBNj5kJXWkdpo0vdtCXgmh99gzWa0o0cozuQ7M=)
2: 6nUDuD-gmnW8uRB1QA-DB6ZnuO0.crl (hash: aUbM9/m4hWr8/QkJw1+15cylYd2sVIo1PJV38xrH9HU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/c42160-d6f4-482c-bf62-62140b202eb4/1/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/c42160-d6f4-482c-bf62-62140b202eb4/1/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.mft
rsync://rpki.ripe.net/repository/DEFAULT/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0f:1d:da:65:b5:8e:9e:63:2c:25:cc:76:0f:72:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea7503b83fa09a75bcb91075400f8307a667b8ed
Validity
Not Before: Oct 19 06:01:35 2025 GMT
Not After : Oct 20 06:01:35 2025 GMT
Subject: CN=03fc701913eed6079d0698c5661541e4cc8cedde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e8:a8:e1:8e:26:37:67:8c:29:c0:26:14:f8:
2f:8b:86:d2:90:95:a3:b5:82:3a:16:60:be:6d:fe:
11:e3:eb:c0:ab:09:6a:7a:e9:12:a5:12:1b:1e:ff:
73:f8:8f:59:7a:f6:2f:9d:d7:78:bb:55:a1:5c:cd:
8e:48:f3:d1:3d:3f:69:35:dc:cb:fb:9f:50:05:92:
5a:ba:d6:92:ca:55:8f:c4:80:0b:01:d3:bc:20:9c:
38:3c:00:5a:d8:ec:c9:80:a0:2d:58:71:c0:a1:01:
c6:8f:0e:59:be:73:eb:8b:c5:66:74:ef:94:6e:bd:
42:d8:9f:69:42:16:a6:fe:3e:ca:d1:81:bc:7d:b0:
19:22:42:b7:37:75:50:ec:5f:ed:8d:e2:ae:87:07:
5f:e3:4a:ef:c7:03:44:26:b3:95:0e:cc:4c:c7:b6:
8d:79:c4:04:52:8d:87:c4:fc:c6:ee:a9:62:5f:35:
b5:23:d5:b3:52:f0:c0:94:49:95:ab:03:95:36:8c:
93:13:e7:43:bd:d0:d0:36:1d:bc:e2:0a:e5:7a:05:
99:6a:53:79:75:e9:b1:cd:06:6f:5b:1c:5c:36:0b:
63:9f:77:63:ea:dd:ae:b9:3a:52:dc:94:43:77:ed:
5c:00:ce:b2:cc:ea:9f:a5:c2:c0:a1:4b:e4:7b:fb:
66:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:FC:70:19:13:EE:D6:07:9D:06:98:C5:66:15:41:E4:CC:8C:ED:DE
X509v3 Authority Key Identifier:
keyid:EA:75:03:B8:3F:A0:9A:75:BC:B9:10:75:40:0F:83:07:A6:67:B8:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c42160-d6f4-482c-bf62-62140b202eb4/1/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c42160-d6f4-482c-bf62-62140b202eb4/1/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:6f:34:11:45:32:44:ff:c4:5a:e8:00:3b:72:66:a9:65:10:
2e:4d:48:48:3e:d6:a7:ce:e8:c1:12:20:7e:9d:f6:2a:98:93:
4a:3a:c2:97:f8:1c:2f:96:dc:b8:71:c4:84:f7:92:d9:04:7c:
32:8f:8f:f3:97:13:7e:da:71:c6:f1:e4:e1:88:2f:8e:f3:e3:
f1:94:94:b2:c5:25:6b:22:8c:d6:81:1f:86:b7:a7:82:fe:61:
d0:bc:6a:c8:d5:0d:be:38:c8:d9:ac:36:6c:c0:e8:2e:16:af:
dd:dd:1a:10:9e:35:db:17:d3:3d:d7:92:76:ed:3b:f8:ed:97:
a4:7c:0b:34:d8:b5:41:d9:cd:c2:e3:a1:3a:0e:85:fe:21:49:
e1:0e:86:a9:f4:1c:a6:0b:67:10:7e:d0:47:5b:c8:fe:12:be:
36:96:4f:95:d5:0e:f0:c1:8e:f2:4b:bc:00:4d:3c:53:f1:6b:
fa:ea:d4:1f:de:1a:df:4f:20:b6:c5:74:8f:af:28:89:ee:02:
bb:c9:b1:b4:e9:d4:bb:79:91:6a:ee:71:b4:23:8a:01:58:5a:
d7:12:6e:24:3e:a1:fe:f6:31:02:76:f7:7f:b0:c3:7f:ff:a2:
7a:55:33:da:ed:ec:ca:7a:0d:61:6d:b6:e3:89:6c:1a:49:91:
2d:b5:be:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:32:50 2025 by rpki-client