
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/6f2886-2ff7-40b0-9673-75b684f890b4/1/6azP0hq9f-P6DWuzHfSCC_taQYg.mft
File: 6azP0hq9f-P6DWuzHfSCC_taQYg.mft (raw, json)
Hash identifier: WSUzoFlEmWWLkKiemvOuNBOGe1xd71Db9jD7qpqBOOo=
Subject key identifier: FD:3F:54:B2:45:A2:41:4A:D6:EF:98:E3:04:B6:DF:2B:98:4C:59:17
Authority key identifier: E9:AC:CF:D2:1A:BD:7F:E3:FA:0D:6B:B3:1D:F4:82:0B:FB:5A:41:88
Certificate issuer: /CN=e9accfd21abd7fe3fa0d6bb31df4820bfb5a4188
Certificate serial: 0199FBEC71C431C85C827736F41DEBBB0E98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6azP0hq9f-P6DWuzHfSCC_taQYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/6f2886-2ff7-40b0-9673-75b684f890b4/1/6azP0hq9f-P6DWuzHfSCC_taQYg.mft
Manifest number: 099F
Signing time: Sun 19 Oct 2025 10:03:20 +0000
Manifest this update: Sun 19 Oct 2025 10:03:20 +0000
Manifest next update: Mon 20 Oct 2025 10:03:20 +0000
Files and hashes: 1: 6azP0hq9f-P6DWuzHfSCC_taQYg.crl (hash: L5c1B4LUSJOA7FxwT1u586C/vbJkWQGmJor/gMDqaf8=)
2: _MxMNpyNBthjBmfib_9uhPuqPf0.roa (hash: EolAt4dLQVvdwjyApcTjs0rowC2XcqD4wINaXLiU8UM=)
3: qtuqIB5CtIi31UAhEs4p3pi5c2Y.roa (hash: /hLyLmNfmw61h29Ovfaz4hXm3fgjqU+pple47V8gAy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/6f2886-2ff7-40b0-9673-75b684f890b4/1/6azP0hq9f-P6DWuzHfSCC_taQYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/6f2886-2ff7-40b0-9673-75b684f890b4/1/6azP0hq9f-P6DWuzHfSCC_taQYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/6azP0hq9f-P6DWuzHfSCC_taQYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:71:c4:31:c8:5c:82:77:36:f4:1d:eb:bb:0e:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9accfd21abd7fe3fa0d6bb31df4820bfb5a4188
Validity
Not Before: Oct 19 10:03:20 2025 GMT
Not After : Oct 20 10:03:20 2025 GMT
Subject: CN=fd3f54b245a2414ad6ef98e304b6df2b984c5917
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b0:b7:c7:56:a7:b1:c4:2a:23:1e:79:d4:40:
c2:e1:70:d9:05:13:8d:ab:83:be:5a:ae:e6:79:11:
35:85:00:5b:23:16:5a:a7:73:e0:bb:2e:6d:dc:57:
29:4e:0e:eb:fd:a1:58:78:61:00:8f:e7:c2:74:31:
cf:4f:5c:c7:01:e6:d6:70:d5:db:f5:7a:8c:d7:55:
9e:31:d6:89:22:27:20:b1:59:9e:17:7b:7d:23:a3:
a0:d6:56:d4:18:fa:aa:d9:22:0e:53:a6:cf:72:23:
27:6d:86:5f:fc:20:1d:6d:84:dd:dc:cc:12:15:da:
77:34:07:ef:3a:55:7c:98:c2:e0:56:fb:e1:8d:43:
bb:5e:c4:b8:aa:2c:cf:c4:a1:6c:5c:7a:39:c9:ec:
1d:04:ba:f2:9a:d5:d2:7d:a3:0c:bb:75:a5:0b:cd:
2d:f1:6c:c4:d9:9f:ba:4d:ae:91:e1:d3:9a:53:e3:
6b:34:37:e5:30:29:10:6b:d6:10:ef:bb:5d:78:20:
2d:57:e6:89:c6:07:70:00:40:6f:c0:4a:62:ed:73:
eb:f5:ec:3a:32:f4:e6:db:b5:99:ca:28:07:ae:3d:
94:74:2b:fe:aa:0c:72:da:f0:a7:1d:8b:4a:a6:30:
d7:46:c4:e3:2a:d5:4a:79:6c:85:00:3a:92:a7:3a:
15:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:3F:54:B2:45:A2:41:4A:D6:EF:98:E3:04:B6:DF:2B:98:4C:59:17
X509v3 Authority Key Identifier:
keyid:E9:AC:CF:D2:1A:BD:7F:E3:FA:0D:6B:B3:1D:F4:82:0B:FB:5A:41:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6azP0hq9f-P6DWuzHfSCC_taQYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/6f2886-2ff7-40b0-9673-75b684f890b4/1/6azP0hq9f-P6DWuzHfSCC_taQYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/6f2886-2ff7-40b0-9673-75b684f890b4/1/6azP0hq9f-P6DWuzHfSCC_taQYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:27:04:a3:d1:f2:d7:04:ee:0d:6d:ed:4f:7e:85:a4:5e:b1:
35:e1:8d:3a:51:4e:97:ad:87:00:69:28:c2:96:7c:c3:61:c3:
80:f0:e9:f5:ff:30:f0:94:89:39:df:1e:d3:08:d3:c9:a5:14:
de:4b:d9:3e:ea:be:3d:b1:3d:cf:8b:43:f5:b2:ae:37:3e:98:
62:00:56:aa:49:8c:d4:bc:42:02:c1:0a:6f:b6:67:9c:4b:26:
9b:37:1a:24:b3:a8:a4:58:dd:17:2e:54:83:a0:e3:e9:cd:9f:
71:15:23:55:ce:b1:99:cf:69:dd:ae:fa:43:9e:28:5b:1d:18:
b8:75:84:80:41:74:9e:2e:8a:16:df:9a:dc:da:46:c3:09:7e:
65:02:2a:a4:32:26:ce:c3:35:e7:b4:f1:24:a9:23:3c:36:c3:
41:bb:77:04:4d:07:84:35:13:5a:9d:82:59:4d:74:74:bd:09:
2f:e2:8f:73:17:f9:42:3c:78:fc:6a:a8:05:91:fc:ec:08:b5:
c7:0c:45:11:2f:2f:ce:b8:65:99:89:07:35:68:94:e6:22:94:
51:77:5c:74:52:d1:da:66:73:19:26:ea:86:65:38:7f:45:42:
0f:2d:bb:98:c6:e7:2e:db:43:86:60:d6:04:1b:ee:90:a8:f1:
43:b8:85:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:52 2025 by rpki-client