Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/787a96-fb0d-432a-8428-710ef47732b0/1/6QUkmbAAPqDurqJCYzjDTgv4_c8.mft
File: 6QUkmbAAPqDurqJCYzjDTgv4_c8.mft (raw, json)
Hash identifier: Sn4kaE2xWdwi3Wr2VTaqOJJhr1UwMnLurPaKbXlvBlg=
Subject key identifier: 71:16:DC:F0:25:A2:E6:FC:80:DA:DE:C1:FB:C9:A2:82:8F:9A:23:97
Authority key identifier: E9:05:24:99:B0:00:3E:A0:EE:AE:A2:42:63:38:C3:4E:0B:F8:FD:CF
Certificate issuer: /CN=e9052499b0003ea0eeaea2426338c34e0bf8fdcf
Certificate serial: 0199FC5828C0F2196D5FCF0475F29037C21F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6QUkmbAAPqDurqJCYzjDTgv4_c8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/787a96-fb0d-432a-8428-710ef47732b0/1/6QUkmbAAPqDurqJCYzjDTgv4_c8.mft
Manifest number: 0ACD
Signing time: Sun 19 Oct 2025 12:00:59 +0000
Manifest this update: Sun 19 Oct 2025 12:00:59 +0000
Manifest next update: Mon 20 Oct 2025 12:00:59 +0000
Files and hashes: 1: 53gBiMV-U5T_UTNr_H6y2uJN32c.roa (hash: loF7sBRMOPze87N7XZhvPgafCESVBxbr6i5uTn+lW9k=)
2: 6QUkmbAAPqDurqJCYzjDTgv4_c8.crl (hash: +jU/6bWU1WaUV77dZP01jD/0zs8RJKSz4I6nX3tRw3Y=)
3: lUuN68-IxOYTjJomy5kGo9veb00.roa (hash: IB0rOxo9mML04bmfaPFamlA+rNBljWr4GfuyYt2d/RU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/787a96-fb0d-432a-8428-710ef47732b0/1/6QUkmbAAPqDurqJCYzjDTgv4_c8.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/787a96-fb0d-432a-8428-710ef47732b0/1/6QUkmbAAPqDurqJCYzjDTgv4_c8.mft
rsync://rpki.ripe.net/repository/DEFAULT/6QUkmbAAPqDurqJCYzjDTgv4_c8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:28:c0:f2:19:6d:5f:cf:04:75:f2:90:37:c2:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9052499b0003ea0eeaea2426338c34e0bf8fdcf
Validity
Not Before: Oct 19 12:00:59 2025 GMT
Not After : Oct 20 12:00:59 2025 GMT
Subject: CN=7116dcf025a2e6fc80dadec1fbc9a2828f9a2397
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:4b:a1:57:41:5c:3f:c2:cc:2c:2a:9c:a4:dd:
6a:34:20:9b:54:5b:0f:70:21:ba:31:e5:fe:78:77:
8a:cc:63:8b:8d:e1:87:0a:ed:f3:53:f6:2a:6a:eb:
f3:20:69:1c:4f:da:6a:84:68:06:ce:c4:1b:49:20:
86:4f:be:58:3c:bd:bb:be:36:b6:06:87:56:e8:36:
52:64:c1:e3:69:fc:c3:79:b5:02:61:60:cb:fb:91:
1f:3f:3f:81:5a:c4:ab:36:1b:84:9f:8b:34:c2:9f:
2a:dc:10:52:b2:64:cf:b7:6a:6d:91:95:da:a8:64:
b2:0a:1a:2b:09:36:83:b0:28:74:12:5e:6c:df:3c:
cb:17:34:48:e9:8b:a1:94:bc:3d:a6:71:07:32:f5:
09:87:5f:36:c3:c1:43:5e:0d:05:f2:05:5f:60:f5:
41:43:a2:45:82:51:22:66:fa:c8:ed:e3:b9:1f:8a:
e9:e9:5a:26:b2:3b:18:62:28:4c:5a:df:07:ae:7b:
ca:87:75:7b:07:25:46:5c:d9:02:96:b0:5a:4f:85:
bc:a4:98:99:0e:6f:d4:2b:97:a2:eb:50:9c:2d:54:
99:ce:48:f1:d2:14:e0:a2:29:bb:8c:36:4e:17:51:
62:87:6a:a9:6d:dd:e7:47:a7:1a:6c:15:a1:c3:b4:
b8:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:16:DC:F0:25:A2:E6:FC:80:DA:DE:C1:FB:C9:A2:82:8F:9A:23:97
X509v3 Authority Key Identifier:
keyid:E9:05:24:99:B0:00:3E:A0:EE:AE:A2:42:63:38:C3:4E:0B:F8:FD:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6QUkmbAAPqDurqJCYzjDTgv4_c8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/787a96-fb0d-432a-8428-710ef47732b0/1/6QUkmbAAPqDurqJCYzjDTgv4_c8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/787a96-fb0d-432a-8428-710ef47732b0/1/6QUkmbAAPqDurqJCYzjDTgv4_c8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:60:6e:fb:a3:60:8c:71:93:ff:b8:37:bf:31:98:c1:24:6a:
61:69:53:86:c2:cd:58:5b:98:31:59:f8:b9:c8:5c:b9:7b:69:
8d:ed:af:2e:fe:7a:3d:bc:1d:00:dd:bd:c1:5c:55:b8:ee:00:
fc:81:27:a1:54:97:e3:b3:2c:97:b6:1d:3d:6b:35:57:17:c5:
b7:08:a5:11:65:16:b2:eb:7b:5a:c9:a7:e0:73:9f:e6:76:cf:
d5:08:b5:fa:a8:66:13:21:5c:85:cc:9b:5e:17:c9:1d:18:2e:
ba:b4:e1:ac:a9:63:7b:00:e1:89:34:27:32:7b:ee:57:41:5d:
71:49:5f:03:f4:72:63:64:da:df:8b:a0:fc:db:81:55:49:14:
eb:19:eb:f6:35:3d:17:a1:d3:87:74:6a:b8:d8:93:af:67:6c:
53:49:0b:ab:0e:51:72:42:46:25:c9:b1:7f:c4:65:ca:e4:e0:
21:da:db:92:5c:d4:30:59:cb:61:e6:df:c8:62:36:98:4e:0b:
39:f2:45:d6:b8:83:31:31:c1:3d:d3:10:3c:11:47:9e:f6:06:
b7:31:2b:57:67:86:df:eb:08:b8:f6:15:25:cd:3a:20:dd:f1:
41:42:cc:4a:98:6c:36:53:64:dd:e7:94:9b:d6:f9:c8:1b:22:
76:72:92:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:24:20 2025 by rpki-client