Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/e487da-4d2a-4b4d-bfe5-57c7e6199b12/1/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.mft
File: 6CcUQ5BflAsTjZ1LSjSHy_vQIeM.mft (raw, json)
Hash identifier: MgZ7uheVY6yK7ncg7HOwt0E1GKvOc0FerB1s+3COLfg=
Subject key identifier: 85:F8:58:44:B7:11:69:17:27:0B:5F:97:8D:CD:AD:5B:B3:51:A2:6B
Authority key identifier: E8:27:14:43:90:5F:94:0B:13:8D:9D:4B:4A:34:87:CB:FB:D0:21:E3
Certificate issuer: /CN=e8271443905f940b138d9d4b4a3487cbfbd021e3
Certificate serial: 0199FBEBD42A34692099C046619BBDE02310
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/e487da-4d2a-4b4d-bfe5-57c7e6199b12/1/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.mft
Manifest number: 0DB2
Signing time: Sun 19 Oct 2025 10:02:40 +0000
Manifest this update: Sun 19 Oct 2025 10:02:40 +0000
Manifest next update: Mon 20 Oct 2025 10:02:40 +0000
Files and hashes: 1: 6CcUQ5BflAsTjZ1LSjSHy_vQIeM.crl (hash: GOKdzdfTbwO14ehS8NvQ02+kNKUYj4dk7cROxFtCKpE=)
2: r3X5pk5U2Z-5txOYvpcZbvrFurQ.roa (hash: 87QkeU5ku+ENNSsEiVa7il+EqGwoFRelcSgk+xC7ai4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/e487da-4d2a-4b4d-bfe5-57c7e6199b12/1/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/e487da-4d2a-4b4d-bfe5-57c7e6199b12/1/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.mft
rsync://rpki.ripe.net/repository/DEFAULT/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:d4:2a:34:69:20:99:c0:46:61:9b:bd:e0:23:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8271443905f940b138d9d4b4a3487cbfbd021e3
Validity
Not Before: Oct 19 10:02:40 2025 GMT
Not After : Oct 20 10:02:40 2025 GMT
Subject: CN=85f85844b7116917270b5f978dcdad5bb351a26b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:1f:cd:d3:bc:4e:8c:7b:f8:a3:41:67:68:d4:
3d:22:6a:94:4e:f4:47:d5:63:bf:0d:e4:81:cd:a3:
92:e6:6b:d3:dd:ab:b1:63:93:1d:4e:3f:a2:96:6f:
ea:8b:e8:fa:cd:a3:bf:c8:c2:db:54:b3:56:d9:ca:
e0:2d:54:70:e0:c0:5d:59:2b:00:ae:c0:42:8b:94:
ce:7b:68:62:97:bf:84:bb:a5:58:a6:82:29:4d:1f:
0c:70:11:7f:cf:e7:ab:e1:ef:bf:3d:6f:ba:6f:68:
8e:dc:67:cb:02:32:41:e3:07:df:54:d3:83:7b:67:
e3:2a:05:19:60:62:93:a9:e6:66:b3:b3:54:22:35:
49:cb:51:35:06:28:70:2c:9c:ab:6c:5e:e2:86:f7:
5e:5f:85:24:b3:61:b5:b4:fc:6b:1c:9a:b2:c5:5f:
77:6f:b8:43:2e:91:74:c6:f4:ad:99:09:49:09:b8:
73:35:dc:75:f5:58:7d:67:ac:b0:f6:06:da:21:26:
25:1a:f7:84:64:35:a4:45:b9:2a:7f:92:4b:4b:9b:
21:7c:d0:0b:77:0c:89:08:24:2c:05:3a:4d:90:b7:
99:91:f6:2c:c8:16:7b:9b:4c:33:b0:50:89:2e:83:
52:d2:aa:4f:c2:c4:ad:29:cc:d0:3e:73:20:dd:e6:
9a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:F8:58:44:B7:11:69:17:27:0B:5F:97:8D:CD:AD:5B:B3:51:A2:6B
X509v3 Authority Key Identifier:
keyid:E8:27:14:43:90:5F:94:0B:13:8D:9D:4B:4A:34:87:CB:FB:D0:21:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/e487da-4d2a-4b4d-bfe5-57c7e6199b12/1/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/e487da-4d2a-4b4d-bfe5-57c7e6199b12/1/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:a1:88:30:ed:55:a2:ae:80:c5:77:e2:c5:ff:6d:ef:cf:ed:
56:60:37:c1:7f:76:8a:4f:56:a2:ab:21:b2:dd:d9:4e:08:85:
72:2e:d5:e8:69:da:ce:a8:e2:a4:6c:68:72:83:c1:fb:d0:08:
e1:ea:77:71:9f:83:9f:07:b1:23:11:94:39:d1:75:25:a2:c2:
ca:79:5d:b4:b8:65:be:5c:32:39:dc:b6:bf:34:6f:d0:76:ad:
ff:06:ee:79:6e:0a:b8:fa:b1:76:a7:98:36:ed:d1:79:6e:f3:
b2:06:f4:03:1b:a0:9d:54:67:2b:f3:00:bf:17:7a:09:b5:5f:
d6:81:d8:10:7d:81:22:f4:1c:92:07:c6:fc:e0:a9:ca:b2:42:
a8:3a:18:2b:62:34:2f:41:1a:13:fe:7e:3a:2e:13:01:73:e7:
06:f0:ed:ad:55:ff:08:24:7a:dc:33:a4:6d:8b:d0:aa:0a:d3:
57:81:ef:81:e1:eb:fa:cb:64:91:8d:4f:27:77:39:5c:4f:76:
e8:0e:7d:2c:d1:12:77:c7:81:5d:0b:8a:4e:09:6d:43:ca:7e:
0d:95:d7:2d:93:ca:95:00:aa:dd:81:e0:bf:38:39:c8:b7:7b:
b9:03:7a:6f:32:f0:bd:43:ad:84:3e:7d:47:82:29:59:13:16:
dd:05:3a:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:33:53 2025 by rpki-client