Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/a9916a-13bf-4770-8e44-58b6a5784ab7/1/6NBiqWnSFCu4UGpXEYC0W9D6uTQ.mft
File: 6NBiqWnSFCu4UGpXEYC0W9D6uTQ.mft (raw, json)
Hash identifier: jOMpU46m4vHRQ6AcwU9s50Rv6KvEN+5OSJNluiJqWbg=
Subject key identifier: 83:42:3A:4D:E6:AE:95:D7:DD:79:E1:CB:52:05:CD:F5:41:80:E1:CE
Authority key identifier: E8:D0:62:A9:69:D2:14:2B:B8:50:6A:57:11:80:B4:5B:D0:FA:B9:34
Certificate issuer: /CN=e8d062a969d2142bb8506a571180b45bd0fab934
Certificate serial: 019A0259A4CE00797BFD649DCA8D431C282B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6NBiqWnSFCu4UGpXEYC0W9D6uTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/a9916a-13bf-4770-8e44-58b6a5784ab7/1/6NBiqWnSFCu4UGpXEYC0W9D6uTQ.mft
Manifest number: 16EA
Signing time: Mon 20 Oct 2025 16:00:20 +0000
Manifest this update: Mon 20 Oct 2025 16:00:20 +0000
Manifest next update: Tue 21 Oct 2025 16:00:20 +0000
Files and hashes: 1: 6NBiqWnSFCu4UGpXEYC0W9D6uTQ.crl (hash: Xe2JQEQryjj4LqE37qECLqZ+IOrbYhhjYFbFNGq+R/M=)
2: rLcT__1y2Z0MCSBiT6_-YE4Q91I.roa (hash: 0aZ57+4HyGjyCi96NHu8lhNftEY/9TGUygRLm0qsl7Q=)
3: wTZUnAUsUUhPr2sXpZ8wRWxEN9c.roa (hash: /FD/PFrkkMvE4jKcijgxG0y9RWdd1hzm3r0Kxcyvp8o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/a9916a-13bf-4770-8e44-58b6a5784ab7/1/6NBiqWnSFCu4UGpXEYC0W9D6uTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/a9916a-13bf-4770-8e44-58b6a5784ab7/1/6NBiqWnSFCu4UGpXEYC0W9D6uTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/6NBiqWnSFCu4UGpXEYC0W9D6uTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:59:a4:ce:00:79:7b:fd:64:9d:ca:8d:43:1c:28:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8d062a969d2142bb8506a571180b45bd0fab934
Validity
Not Before: Oct 20 16:00:20 2025 GMT
Not After : Oct 21 16:00:20 2025 GMT
Subject: CN=83423a4de6ae95d7dd79e1cb5205cdf54180e1ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a1:dc:56:3c:8b:ce:5a:cd:69:91:4d:d1:94:
7d:16:ee:fe:63:4f:6a:57:68:ce:f0:be:ef:a5:93:
91:d6:74:c8:cf:a8:80:2b:25:7c:6b:37:5a:16:77:
03:78:ab:33:5f:4b:0b:7d:05:1c:3b:00:2c:a6:6f:
79:a9:a3:90:63:ed:04:75:85:c3:02:db:c2:88:98:
65:2d:7e:fc:33:62:90:4f:65:37:74:d0:3e:0d:2d:
13:a6:41:44:27:48:5b:30:e9:a6:b4:d4:da:f9:75:
19:4e:21:f4:f5:e2:ac:d7:a6:4f:52:88:6d:08:61:
35:fc:df:5b:b0:83:a7:1e:48:a7:c1:54:33:5e:42:
a4:cf:9f:8f:20:88:09:0d:c6:19:21:e9:2a:7e:06:
85:c3:27:5b:d2:2d:b9:47:e7:68:63:67:c6:a1:c4:
2c:3c:07:5f:dd:4d:15:c3:2b:af:c1:8e:ee:5c:4f:
e0:ce:1f:48:38:dd:0b:3c:de:b1:38:03:cd:1c:6e:
be:4f:3c:b8:03:64:53:81:ea:23:24:47:1b:70:af:
97:87:bc:ea:f1:34:10:fa:3d:d2:52:3f:4b:4b:bf:
d2:f9:7e:33:93:5a:f3:98:70:34:80:c6:e4:48:b1:
52:d4:7a:62:0a:d2:75:4a:07:d6:0a:1e:36:06:96:
0b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:42:3A:4D:E6:AE:95:D7:DD:79:E1:CB:52:05:CD:F5:41:80:E1:CE
X509v3 Authority Key Identifier:
keyid:E8:D0:62:A9:69:D2:14:2B:B8:50:6A:57:11:80:B4:5B:D0:FA:B9:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6NBiqWnSFCu4UGpXEYC0W9D6uTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/a9916a-13bf-4770-8e44-58b6a5784ab7/1/6NBiqWnSFCu4UGpXEYC0W9D6uTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/a9916a-13bf-4770-8e44-58b6a5784ab7/1/6NBiqWnSFCu4UGpXEYC0W9D6uTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:2f:65:31:3f:85:df:1a:33:1c:35:91:42:a8:cf:ff:3c:81:
c1:1c:46:2c:cb:36:d7:38:6b:79:da:6c:b9:bf:78:e5:c0:31:
50:68:7a:f8:3d:ae:d4:2c:4b:1a:d6:42:3a:64:89:3c:6c:c6:
cc:43:d9:e5:01:bb:e3:0d:f6:bf:35:1a:70:f2:f0:bb:50:df:
8b:5c:e1:03:aa:07:3f:39:01:ad:15:e9:55:71:b5:0f:10:e6:
9e:54:25:a9:17:5c:6a:e9:6a:ba:e6:af:85:1d:e7:a7:a8:82:
75:82:2c:92:a2:6b:01:c5:91:fa:2d:34:ea:38:e1:09:cc:34:
30:50:c2:3b:4b:b7:21:89:be:99:6c:88:92:d4:d6:2f:27:f4:
02:68:16:50:b0:5c:1d:a6:7f:e7:cd:b4:fc:20:c0:fb:0b:9b:
30:59:00:2a:1e:a7:5d:16:ca:ee:28:9f:75:c8:45:49:73:a5:
25:78:dc:9e:dc:2a:e2:2e:04:05:fd:83:0e:e5:95:cf:25:f8:
2e:26:c9:9d:99:40:34:95:2a:af:0d:ea:90:e3:54:d2:85:86:
5c:30:01:38:dd:ac:54:b8:b6:56:19:5d:2f:2a:f4:97:9b:6d:
05:a3:47:ab:98:db:07:94:05:c1:36:b8:6c:33:89:89:b2:30:
2a:c5:6d:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:34:54 2025 by rpki-client