Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/f03ca1-726b-4de9-b419-f9a1bbc36845/1/x6TS9okT6s5sn1CSvcfdIPV09Dg.mft
File: x6TS9okT6s5sn1CSvcfdIPV09Dg.mft (raw, json)
Hash identifier: pUM60MuQIEZumnYMmWNKb5RL3dGeiw00cF50wc13MXo=
Subject key identifier: FF:8F:6E:32:C6:74:97:FE:00:74:24:63:31:43:1C:8C:6E:A9:AB:66
Authority key identifier: C7:A4:D2:F6:89:13:EA:CE:6C:9F:50:92:BD:C7:DD:20:F5:74:F4:38
Certificate issuer: /CN=c7a4d2f68913eace6c9f5092bdc7dd20f574f438
Certificate serial: 0199FDD9B59E10499D94A0F6C67457CDA379
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x6TS9okT6s5sn1CSvcfdIPV09Dg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/f03ca1-726b-4de9-b419-f9a1bbc36845/1/x6TS9okT6s5sn1CSvcfdIPV09Dg.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 19:02:07 +0000
Manifest this update: Sun 19 Oct 2025 19:02:07 +0000
Manifest next update: Mon 20 Oct 2025 19:02:07 +0000
Files and hashes: 1: U9d60iaXFQDxSrHcLdT4ojLheZE.roa (hash: Gjhqz3LOzFes4JptTfh+vWteSpqEom7uInck02Q9Ins=)
2: x6TS9okT6s5sn1CSvcfdIPV09Dg.crl (hash: OlWoVx1H7LtxsSzIksq72Oz7nlr57u4DhZJi+n4R9LE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/f03ca1-726b-4de9-b419-f9a1bbc36845/1/x6TS9okT6s5sn1CSvcfdIPV09Dg.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/f03ca1-726b-4de9-b419-f9a1bbc36845/1/x6TS9okT6s5sn1CSvcfdIPV09Dg.mft
rsync://rpki.ripe.net/repository/DEFAULT/x6TS9okT6s5sn1CSvcfdIPV09Dg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:b5:9e:10:49:9d:94:a0:f6:c6:74:57:cd:a3:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7a4d2f68913eace6c9f5092bdc7dd20f574f438
Validity
Not Before: Oct 19 19:02:07 2025 GMT
Not After : Oct 20 19:02:07 2025 GMT
Subject: CN=ff8f6e32c67497fe0074246331431c8c6ea9ab66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:e8:ae:6b:5f:30:32:25:05:c3:d3:a3:bf:14:
e7:e1:89:c4:8b:f6:09:3e:6c:46:37:84:02:70:e0:
4e:22:41:ee:83:41:43:6e:34:ad:bb:8d:58:90:74:
07:ea:f5:4b:00:15:31:e1:c3:0c:d6:b8:91:e1:69:
c6:ef:06:03:e7:9d:69:85:21:19:f5:1a:45:a2:93:
98:02:17:0e:32:be:ec:11:a7:c9:05:f6:1b:ad:4a:
78:2e:e1:13:79:23:ad:23:85:6d:24:6e:d5:03:d6:
6c:71:41:62:44:f0:aa:df:92:e3:a4:42:4d:90:e0:
55:8a:68:2b:ff:31:c6:0c:cb:76:46:f6:c7:85:67:
aa:2c:e5:5c:62:f7:ef:73:73:4e:9d:ef:e1:13:b1:
9b:18:fa:dc:cf:8f:d1:2d:1e:10:b0:fe:dc:64:46:
94:4c:46:c1:c5:1c:b2:f1:bc:87:aa:22:1d:a8:ac:
71:7b:ab:f4:cf:13:44:e2:58:16:ef:fb:8a:aa:4b:
53:8e:4a:d8:62:f3:3b:7b:c8:63:55:a6:28:66:e6:
96:ec:87:43:36:32:13:4e:2f:f1:a1:e5:c3:39:e7:
d3:c4:6d:86:31:0f:80:eb:64:ba:e8:72:fa:d2:d0:
36:4b:8c:00:68:f8:db:db:98:80:49:15:ae:ed:e0:
87:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:8F:6E:32:C6:74:97:FE:00:74:24:63:31:43:1C:8C:6E:A9:AB:66
X509v3 Authority Key Identifier:
keyid:C7:A4:D2:F6:89:13:EA:CE:6C:9F:50:92:BD:C7:DD:20:F5:74:F4:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x6TS9okT6s5sn1CSvcfdIPV09Dg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/f03ca1-726b-4de9-b419-f9a1bbc36845/1/x6TS9okT6s5sn1CSvcfdIPV09Dg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/f03ca1-726b-4de9-b419-f9a1bbc36845/1/x6TS9okT6s5sn1CSvcfdIPV09Dg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:83:7e:17:93:80:9e:f4:cc:2d:42:29:d2:0a:98:43:6a:f3:
3d:ac:95:33:3f:ce:60:a8:2e:4a:90:95:a1:20:df:93:24:04:
60:03:15:9f:ec:ba:15:56:a5:af:b9:36:8a:37:f9:60:18:ca:
1a:f3:ad:63:1e:b3:97:58:da:80:5d:b2:5b:7a:fa:7d:9b:0a:
28:03:6b:11:ab:de:bb:3a:85:7f:ff:dd:c4:0d:f3:27:07:92:
74:51:5d:20:15:b6:4a:94:59:8b:41:72:ba:d3:34:f2:ee:17:
f0:5d:c4:d8:ab:0c:f9:4c:80:72:b3:81:ed:bc:66:93:34:df:
78:03:8c:a0:0d:6c:fd:cc:0e:e2:fa:88:cf:73:9c:38:f0:c7:
a4:f6:de:66:b5:4b:2a:f9:38:08:bf:c8:45:f4:ae:c9:f6:9f:
e3:38:31:8c:df:6d:98:69:07:53:a9:26:55:56:54:65:d9:2e:
7f:d1:03:72:19:be:ac:3a:89:bb:7a:7f:53:74:a5:cf:c0:f8:
c3:1f:cb:3d:62:47:89:24:77:1f:a3:f9:cd:fe:4b:45:b4:a6:
ea:78:61:16:26:3a:bd:75:f3:ab:18:00:67:cb:0b:92:67:a5:
76:4e:d5:b8:c5:6c:08:b8:2b:54:a9:7c:2c:7b:96:14:6a:80:
07:68:cf:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:45:17 2025 by rpki-client