Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/067837-baa0-4085-aa23-8023d945497a/1/v6yXEHYmO92w7s9b6mV0pAW5hd4.mft
File: v6yXEHYmO92w7s9b6mV0pAW5hd4.mft (raw, json)
Hash identifier: EGiVgnP92fF5LshY3/R0byPiGtaKM1C4AmU3R4DpO7Y=
Subject key identifier: C0:E2:EF:AB:FE:7E:81:0F:E4:12:F8:1E:DB:A4:82:79:41:B5:B0:D9
Authority key identifier: BF:AC:97:10:76:26:3B:DD:B0:EE:CF:5B:EA:65:74:A4:05:B9:85:DE
Certificate issuer: /CN=bfac971076263bddb0eecf5bea6574a405b985de
Certificate serial: 0199FB7CBA33DE73C60742B3F088E976B1DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v6yXEHYmO92w7s9b6mV0pAW5hd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/067837-baa0-4085-aa23-8023d945497a/1/v6yXEHYmO92w7s9b6mV0pAW5hd4.mft
Manifest number: 0626
Signing time: Sun 19 Oct 2025 08:01:19 +0000
Manifest this update: Sun 19 Oct 2025 08:01:19 +0000
Manifest next update: Mon 20 Oct 2025 08:01:19 +0000
Files and hashes: 1: OCppJhYZMyX6DOiNlHQEp5iC5Sc.roa (hash: 5wyl6ad1af6VUZiYn8oNG7NUkEBKw7TV7cvjfjqNGSY=)
2: v6yXEHYmO92w7s9b6mV0pAW5hd4.crl (hash: D2d4johHJjC+EjINAABUkPZY8M8iHAj+/7XM0GxX77o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/067837-baa0-4085-aa23-8023d945497a/1/v6yXEHYmO92w7s9b6mV0pAW5hd4.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/067837-baa0-4085-aa23-8023d945497a/1/v6yXEHYmO92w7s9b6mV0pAW5hd4.mft
rsync://rpki.ripe.net/repository/DEFAULT/v6yXEHYmO92w7s9b6mV0pAW5hd4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:ba:33:de:73:c6:07:42:b3:f0:88:e9:76:b1:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfac971076263bddb0eecf5bea6574a405b985de
Validity
Not Before: Oct 19 08:01:19 2025 GMT
Not After : Oct 20 08:01:19 2025 GMT
Subject: CN=c0e2efabfe7e810fe412f81edba4827941b5b0d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:0a:87:45:f8:b7:be:66:86:cf:f5:72:c7:75:
4c:e7:39:6a:55:6a:7f:4f:53:e0:ba:45:3a:e0:b2:
a6:cf:f7:44:c2:36:bd:61:1d:1f:c7:55:18:81:5f:
f3:08:47:9e:48:aa:57:99:1d:86:cd:2e:dc:e9:84:
9e:f4:f5:41:fc:59:0e:44:5e:5e:b3:fe:7f:76:71:
6d:a3:d8:f3:60:92:0f:f9:3d:53:2c:6b:7f:24:70:
44:69:b8:1a:7a:42:87:c7:0b:01:50:8b:fe:5d:70:
d4:20:cb:70:e4:33:a4:86:be:50:6f:e9:a4:b5:fc:
67:83:b5:11:0d:3c:6f:1f:69:72:89:20:72:71:71:
71:3e:db:be:b1:91:0b:f0:ff:51:e8:af:c0:79:06:
df:95:5f:69:64:f1:a7:36:e3:75:18:3a:05:6e:9d:
70:3d:8c:8b:03:56:50:0e:2b:03:ea:e4:5d:d3:44:
43:72:b7:59:7e:8b:fb:f4:ae:2a:64:78:9f:32:d9:
bf:90:87:77:11:f9:f1:37:17:b2:29:9a:d4:c8:90:
5e:ad:12:26:98:48:0d:91:90:c4:69:df:6a:a4:0c:
96:74:28:03:95:c9:5e:f6:24:36:26:85:3f:7a:bd:
5e:fc:33:43:a8:29:07:dd:99:98:e1:32:59:9d:82:
df:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:E2:EF:AB:FE:7E:81:0F:E4:12:F8:1E:DB:A4:82:79:41:B5:B0:D9
X509v3 Authority Key Identifier:
keyid:BF:AC:97:10:76:26:3B:DD:B0:EE:CF:5B:EA:65:74:A4:05:B9:85:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v6yXEHYmO92w7s9b6mV0pAW5hd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/067837-baa0-4085-aa23-8023d945497a/1/v6yXEHYmO92w7s9b6mV0pAW5hd4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/067837-baa0-4085-aa23-8023d945497a/1/v6yXEHYmO92w7s9b6mV0pAW5hd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:2f:ef:23:c6:a1:a3:10:c7:69:cc:ca:ff:ac:21:c0:b8:1b:
6c:5d:28:2b:c3:fd:48:d7:f5:22:0d:76:0e:b7:a8:75:59:79:
0e:56:5b:45:d0:9e:0c:bf:78:55:ee:e9:fe:6f:67:be:44:da:
5f:8a:f4:47:8a:2f:cd:c3:e3:8a:f6:2c:92:cb:f2:03:e0:29:
5c:b8:be:a6:c4:3a:54:d3:e7:4b:5e:be:2f:d9:b3:c1:e4:6d:
d9:9b:f0:b1:98:90:b2:d4:b9:b6:20:81:cd:97:92:b9:6c:79:
3f:fb:f7:66:bc:af:43:e1:9b:41:44:3b:e0:c9:84:e7:ea:1d:
3c:05:b2:07:12:6c:57:db:9b:1e:e9:1a:2e:5a:d7:96:f0:25:
e1:3a:bf:7a:42:4c:dc:ca:e7:27:97:95:fd:dd:09:2a:ac:30:
63:65:60:fa:61:93:92:ae:44:6c:c6:52:c0:19:4b:90:96:f3:
bf:f8:49:af:66:61:5d:55:18:5c:95:e7:9a:e2:b1:27:a8:d2:
d9:70:2b:aa:0f:0a:26:85:ea:a5:ee:32:2c:89:5d:c4:ba:49:
8a:c5:c1:18:9c:e2:60:67:f4:e0:6c:e1:2e:fd:47:a8:92:0c:
0d:2e:15:13:55:34:a2:31:28:7a:59:39:66:e9:2c:86:8f:59:
b2:ba:28:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:23:17 2025 by rpki-client