Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/1rK8tCptf9Y9TwrFk-n4BzYvMhs.mft
File: 1rK8tCptf9Y9TwrFk-n4BzYvMhs.mft (raw, json)
Hash identifier: i9Wh5KRHGzDtqhqdpPqbJXUcCre3XAuhjSXrIJPVSXg=
Subject key identifier: 33:7F:94:A1:8B:72:66:B4:B0:D3:35:2E:BE:8B:06:EB:78:21:98:A7
Authority key identifier: D6:B2:BC:B4:2A:6D:7F:D6:3D:4F:0A:C5:93:E9:F8:07:36:2F:32:1B
Certificate issuer: /CN=d6b2bcb42a6d7fd63d4f0ac593e9f807362f321b
Certificate serial: 019A04483B9F555C15200ECD0E3AA0D68AAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1rK8tCptf9Y9TwrFk-n4BzYvMhs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/1rK8tCptf9Y9TwrFk-n4BzYvMhs.mft
Manifest number: 06A6
Signing time: Tue 21 Oct 2025 01:00:33 +0000
Manifest this update: Tue 21 Oct 2025 01:00:33 +0000
Manifest next update: Wed 22 Oct 2025 01:00:33 +0000
Files and hashes: 1: 1rK8tCptf9Y9TwrFk-n4BzYvMhs.crl (hash: devp+0pybMtYIHuK42c9Ec8818ixWxLlDtrR8hwCR7I=)
2: ghDhm4VYeRYSti6uTmC3gk8HU3Q.roa (hash: G+P2vluMfyw3HQMk6YBkLL9/sRExJnIDxuRwVWm8Dr4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/1rK8tCptf9Y9TwrFk-n4BzYvMhs.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/1rK8tCptf9Y9TwrFk-n4BzYvMhs.mft
rsync://rpki.ripe.net/repository/DEFAULT/1rK8tCptf9Y9TwrFk-n4BzYvMhs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 01:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:04:48:3b:9f:55:5c:15:20:0e:cd:0e:3a:a0:d6:8a:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6b2bcb42a6d7fd63d4f0ac593e9f807362f321b
Validity
Not Before: Oct 21 01:00:33 2025 GMT
Not After : Oct 22 01:00:33 2025 GMT
Subject: CN=337f94a18b7266b4b0d3352ebe8b06eb782198a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:97:41:8f:01:62:42:6b:f5:29:74:f8:b4:24:
be:bc:c4:8a:a3:24:55:b3:f8:13:8d:fa:c3:6b:2f:
76:40:d1:3d:dd:d1:88:5d:3c:a4:22:77:e3:42:7c:
47:39:59:c2:8c:04:5b:c2:aa:54:fd:de:d1:fd:db:
00:c1:19:70:0d:65:28:9d:24:bb:87:91:10:4b:be:
3c:9c:59:0e:93:55:f4:8b:95:9b:6e:ee:2b:27:41:
60:ef:a7:88:14:7e:9b:bb:c4:5c:27:c3:96:9e:74:
2e:5f:7e:9f:71:57:a6:0c:44:17:13:1d:b3:57:0f:
6a:b7:55:71:4a:93:ff:95:1b:5b:ab:6b:35:fe:a4:
1a:63:a7:f1:78:ce:a7:48:ad:eb:a2:98:49:11:2e:
19:c1:ff:64:31:f0:75:fe:90:75:51:ee:10:e2:98:
70:40:47:a2:d5:92:51:da:1a:59:2a:ad:93:53:cb:
3e:11:a6:ea:88:69:d3:e6:56:5f:3f:63:d2:3b:66:
67:12:e5:f5:be:b4:15:85:4f:89:69:87:d0:55:5d:
c3:12:76:7e:1b:21:3b:fa:a8:e9:2e:dc:0a:78:f9:
28:05:3e:e6:b7:78:00:40:e9:36:23:f8:5e:20:a9:
7f:85:9c:a5:f5:8e:2c:4e:30:5d:e2:40:b8:04:8f:
96:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:7F:94:A1:8B:72:66:B4:B0:D3:35:2E:BE:8B:06:EB:78:21:98:A7
X509v3 Authority Key Identifier:
keyid:D6:B2:BC:B4:2A:6D:7F:D6:3D:4F:0A:C5:93:E9:F8:07:36:2F:32:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1rK8tCptf9Y9TwrFk-n4BzYvMhs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/1rK8tCptf9Y9TwrFk-n4BzYvMhs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/1rK8tCptf9Y9TwrFk-n4BzYvMhs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:54:ee:ff:2c:d5:e1:91:27:22:14:96:05:f5:f2:b9:44:01:
03:5f:4a:6d:6e:2e:85:91:5f:52:69:b2:9a:8b:59:0a:6c:83:
e5:e0:6b:d1:fc:5b:a9:f4:33:49:0a:0d:de:78:2e:ac:fa:91:
25:02:85:e3:2e:44:9f:86:7c:85:72:1a:82:1f:f5:af:5d:bc:
75:3c:9f:0b:e1:da:58:43:71:a9:74:1c:cf:1b:a1:f1:a0:aa:
7e:77:ca:08:99:a4:c6:1a:b7:be:d3:00:40:64:2d:a4:3c:41:
fc:39:11:e3:0f:a4:1e:ec:c7:f0:76:3a:8a:fa:0d:79:be:db:
2e:d7:eb:27:e0:d1:aa:f9:de:97:4a:72:3e:40:1b:51:5d:92:
26:0b:5b:f3:e2:04:b7:2f:65:c7:53:ed:eb:42:b4:ec:6a:ab:
1e:a5:7d:90:4e:de:e6:39:09:17:5e:c1:5d:ad:b5:3b:80:90:
d7:61:1a:04:de:4f:9d:b2:f8:01:a0:96:e5:1c:67:e5:0f:72:
f5:2d:91:29:d3:eb:03:b7:15:44:14:8f:7d:20:94:d7:44:93:
ff:16:82:51:41:88:77:4a:73:18:0b:f3:e2:eb:f2:4f:e1:a0:
77:07:9b:47:78:48:58:dc:67:93:3e:5e:15:80:44:b5:d5:20:
ab:ec:42:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 09:47:07 2025 by rpki-client