Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/4505ee-5fe0-448c-b621-8924850d95d6/1/6MNGnR5zWuTWCDe3cJwz_0J8joQ.mft
File: 6MNGnR5zWuTWCDe3cJwz_0J8joQ.mft (raw, json)
Hash identifier: WzTH4SbLryONQXkpsVtmAtEWGT5b++FXw1WXnBE7Wu0=
Subject key identifier: 88:B3:07:FA:DD:F1:3F:36:E4:38:20:60:C5:35:E0:4A:C9:88:83:34
Authority key identifier: E8:C3:46:9D:1E:73:5A:E4:D6:08:37:B7:70:9C:33:FF:42:7C:8E:84
Certificate issuer: /CN=e8c3469d1e735ae4d60837b7709c33ff427c8e84
Certificate serial: 0199FBEB673D69F295C9A79F4A7091E985E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6MNGnR5zWuTWCDe3cJwz_0J8joQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/4505ee-5fe0-448c-b621-8924850d95d6/1/6MNGnR5zWuTWCDe3cJwz_0J8joQ.mft
Manifest number: 0B1D
Signing time: Sun 19 Oct 2025 10:02:12 +0000
Manifest this update: Sun 19 Oct 2025 10:02:12 +0000
Manifest next update: Mon 20 Oct 2025 10:02:12 +0000
Files and hashes: 1: 6MNGnR5zWuTWCDe3cJwz_0J8joQ.crl (hash: Vexvo8QvZfA5E8sPTkrBoGZM+HSiVIzRw3obartHCok=)
2: ClZdr1wg9-gyvQ2UI0rc36Tkqn8.roa (hash: kpxqL73T43lKVSu7/H7qyZ0Ta1r2r6Ekr0F6N2fIhsk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/4505ee-5fe0-448c-b621-8924850d95d6/1/6MNGnR5zWuTWCDe3cJwz_0J8joQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/4505ee-5fe0-448c-b621-8924850d95d6/1/6MNGnR5zWuTWCDe3cJwz_0J8joQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/6MNGnR5zWuTWCDe3cJwz_0J8joQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:67:3d:69:f2:95:c9:a7:9f:4a:70:91:e9:85:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8c3469d1e735ae4d60837b7709c33ff427c8e84
Validity
Not Before: Oct 19 10:02:12 2025 GMT
Not After : Oct 20 10:02:12 2025 GMT
Subject: CN=88b307faddf13f36e4382060c535e04ac9888334
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:87:74:c9:d3:fe:7c:cd:be:6b:bd:b5:61:00:
28:49:55:13:88:de:d2:f1:cd:4e:d0:ff:67:d9:f1:
26:cf:55:ef:6d:30:af:64:6b:c7:00:1f:ae:e5:d8:
ae:a1:e7:1b:77:fd:9d:45:65:1f:a6:2b:92:13:4b:
c9:3b:04:bd:cd:af:d6:4d:b9:c2:52:36:6a:c5:31:
4d:c5:53:b5:7c:7e:01:33:64:ad:5c:9d:c1:96:aa:
b5:55:2f:37:4f:73:1f:79:e5:c9:50:85:03:d9:3a:
e9:67:6c:a3:91:f3:3f:d2:35:b5:ff:d7:26:77:cb:
f6:b4:27:0e:a2:df:55:97:bc:e5:8c:bb:5b:26:db:
11:81:ac:8a:6a:73:7e:fc:88:5d:43:8a:9c:b5:3c:
9a:99:7c:33:9e:32:97:c6:b5:71:67:33:0e:39:8c:
46:67:d4:11:86:18:44:34:54:b0:b2:de:bd:dd:31:
62:1c:43:40:27:e4:5e:ee:fc:18:13:9e:79:54:ee:
ae:39:3b:52:74:51:2d:53:ae:16:13:d6:65:9c:4e:
5c:21:4a:55:4e:61:32:65:b9:93:52:66:62:88:65:
b3:eb:41:ab:50:c6:10:0d:c5:cf:ed:17:10:83:dc:
5b:ed:29:c6:03:41:a2:31:14:75:72:e6:1a:0e:43:
7c:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:B3:07:FA:DD:F1:3F:36:E4:38:20:60:C5:35:E0:4A:C9:88:83:34
X509v3 Authority Key Identifier:
keyid:E8:C3:46:9D:1E:73:5A:E4:D6:08:37:B7:70:9C:33:FF:42:7C:8E:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6MNGnR5zWuTWCDe3cJwz_0J8joQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/4505ee-5fe0-448c-b621-8924850d95d6/1/6MNGnR5zWuTWCDe3cJwz_0J8joQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/4505ee-5fe0-448c-b621-8924850d95d6/1/6MNGnR5zWuTWCDe3cJwz_0J8joQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:a8:ff:60:da:04:87:b5:ee:80:be:35:6a:a1:c5:54:c5:c3:
d8:3d:3d:65:97:44:6d:75:b3:d0:5d:31:25:87:72:27:23:ba:
73:c1:f9:ee:fb:62:52:b4:3e:a3:a5:ec:cd:42:be:fc:4c:09:
66:c6:41:f6:45:50:9f:45:df:7a:77:93:5a:90:2a:ef:9c:dc:
b3:95:90:c7:ab:78:f2:0d:14:da:01:58:d9:04:4e:e2:e9:ec:
b4:92:63:69:4a:24:33:6a:8c:a6:20:64:45:aa:1b:15:cc:20:
f5:6f:8b:4b:00:b9:0f:27:f6:da:6b:5d:68:3e:e4:72:15:8a:
5f:02:0e:49:f3:29:b1:4b:81:97:0d:57:cb:b3:66:5a:67:22:
fc:91:d0:71:fc:2e:f0:37:2a:48:3f:fa:05:b6:8c:7c:86:7c:
2c:f7:ff:0d:09:45:38:f8:23:5c:21:73:0b:5c:ff:e0:6f:fd:
b1:11:cb:b8:15:d0:62:3b:12:6c:66:2d:f8:d1:c3:db:2b:4c:
ba:64:c2:19:5b:45:c5:10:a0:bd:6c:be:e1:09:8c:91:6c:f8:
d8:cd:29:52:b7:2e:82:74:bd:b9:e6:75:87:06:80:c5:ce:51:
3d:2c:42:e3:1f:af:31:c6:50:6f:b1:0a:c2:b2:74:bb:fe:4a:
5a:79:48:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:00 2025 by rpki-client