Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.mft
File: 6KhR3a5aZMw4glOVvppQfalat88.mft (raw, json)
Hash identifier: ve/QASJNccUeil33r4xwz2rcMbaZG36wlzfSH7aE7QQ=
Subject key identifier: 43:2F:E4:89:F6:49:FB:2E:3D:C4:46:5D:FE:B4:9B:0F:9E:BD:0F:26
Authority key identifier: E8:A8:51:DD:AE:5A:64:CC:38:82:53:95:BE:9A:50:7D:A9:5A:B7:CF
Certificate issuer: /CN=e8a851ddae5a64cc38825395be9a507da95ab7cf
Certificate serial: 0199FBB3710CCDA6D8888DF88F1F37C79AD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6KhR3a5aZMw4glOVvppQfalat88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.mft
Manifest number: 16F9
Signing time: Sun 19 Oct 2025 09:01:04 +0000
Manifest this update: Sun 19 Oct 2025 09:01:04 +0000
Manifest next update: Mon 20 Oct 2025 09:01:04 +0000
Files and hashes: 1: 6KhR3a5aZMw4glOVvppQfalat88.crl (hash: gUpNmyjpCNscF09uf+O07x5w7wdyT4E0sLLd2prREdI=)
2: JeUrUwbFpGu8iDqDZmLLtLX07Uo.roa (hash: AF4y3k0K4M29JKvnm3WAi9rM2wiDZSTI7KiQY/+WwGQ=)
3: LMOHIG2uLaY6GZHZHZ2LuvxqzKM.roa (hash: 4NroWDI/8Q2pwsJ7z2O+ja04jrPKvPKyJQ0j1cEhZ+Q=)
4: mYE47vke1hjpHVD-2YaC3kbzfC4.roa (hash: IHXH42+InuoAtBenPBQ/Vi7KNQwkeqEHI6dQSLTGpPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.mft
rsync://rpki.ripe.net/repository/DEFAULT/6KhR3a5aZMw4glOVvppQfalat88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:b3:71:0c:cd:a6:d8:88:8d:f8:8f:1f:37:c7:9a:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8a851ddae5a64cc38825395be9a507da95ab7cf
Validity
Not Before: Oct 19 09:01:04 2025 GMT
Not After : Oct 20 09:01:04 2025 GMT
Subject: CN=432fe489f649fb2e3dc4465dfeb49b0f9ebd0f26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:61:bc:93:c5:6a:0a:da:d7:15:f9:a6:c6:d8:
80:a5:9a:a9:7d:8a:4b:43:33:c9:54:03:43:8a:f1:
a8:3e:54:7e:cf:41:5d:be:49:27:49:89:1f:d7:8c:
cf:c7:58:93:35:8b:dc:2a:32:69:19:90:72:6f:b1:
83:66:45:4c:ed:57:26:c7:61:25:d4:98:dd:07:c1:
e1:7b:42:f4:5a:27:12:98:1c:3c:a4:0f:fa:fa:c5:
a8:43:95:6e:6c:7b:06:aa:22:4f:3a:ba:c8:0d:d4:
60:a6:ca:f3:5c:5d:f2:de:c8:7c:12:12:b2:a5:e3:
38:a8:9a:48:61:96:b7:7e:7c:1f:7d:42:34:62:63:
63:3a:53:0b:48:16:7d:f7:76:45:21:04:66:a6:a7:
be:05:ed:08:d8:39:c9:3f:99:b5:1d:75:02:4b:e1:
6f:4b:ca:06:b1:19:4f:16:d6:c2:de:36:28:81:6d:
37:7f:9d:ab:07:d7:e7:98:5d:17:90:08:5b:4f:7d:
92:96:0c:93:d3:60:88:bd:df:70:0e:30:ba:21:c5:
e6:86:46:4b:01:91:2f:2b:c5:5a:3e:e1:1e:7d:88:
a4:4d:8c:52:a7:f8:b0:a8:40:d6:6d:91:70:d4:16:
10:25:41:67:44:a4:9c:d0:e3:9e:b9:23:06:f9:d6:
71:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:2F:E4:89:F6:49:FB:2E:3D:C4:46:5D:FE:B4:9B:0F:9E:BD:0F:26
X509v3 Authority Key Identifier:
keyid:E8:A8:51:DD:AE:5A:64:CC:38:82:53:95:BE:9A:50:7D:A9:5A:B7:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6KhR3a5aZMw4glOVvppQfalat88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:4c:60:68:3e:d1:7c:3e:ff:0e:f5:34:82:ba:7c:b1:2c:7b:
5f:40:68:09:d0:23:d1:4b:64:0c:8f:ce:dd:a2:2b:ed:05:04:
fc:f0:dd:e8:40:f9:ca:7b:1c:39:89:7c:5c:ac:a9:d0:7a:4a:
7d:99:3d:be:af:0e:29:86:4d:42:46:16:99:aa:2b:75:d4:17:
19:73:3c:dc:de:82:7e:91:81:59:9e:b4:93:89:9c:c3:02:26:
5b:67:74:86:07:e8:73:fb:18:92:ac:88:05:64:f9:7b:51:38:
38:18:38:f6:9b:3f:ee:30:cb:bd:df:f5:c5:e8:40:ee:c8:b6:
5b:3a:a1:cc:28:db:f8:9a:b0:72:3c:8a:8a:87:55:70:25:3f:
1b:99:14:ad:45:f0:ba:11:63:c7:56:b5:e8:3f:26:1d:73:5a:
12:4b:c8:c1:0f:e4:63:78:7b:52:f6:0b:d5:ac:76:6f:96:db:
4d:35:2a:b6:aa:76:7b:08:c5:56:bd:63:99:28:0c:27:f8:a5:
04:42:a6:69:c6:cf:bd:e1:2d:d4:e4:80:71:43:f2:e1:fc:2a:
f9:9e:36:4b:9b:56:7d:51:1e:37:ce:7c:bf:da:de:75:23:53:
ad:13:47:ff:50:78:87:0d:69:15:a4:5f:7d:64:26:d8:ad:d5:
18:12:57:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:01:21 2025 by rpki-client