Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/303a8f-367f-4cfa-9a78-e81621b61d65/1/6XlAPNaMmN9zjjEGKQOgsyJgC1k.mft
File: 6XlAPNaMmN9zjjEGKQOgsyJgC1k.mft (raw, json)
Hash identifier: WokOwnVrP/LKoqNTv5zZZNLDkAa6MQ3cOnYiIEncnqM=
Subject key identifier: 13:53:BE:A7:D2:39:D3:CD:4A:F3:28:7E:06:F8:AE:93:83:E5:B1:B0
Authority key identifier: E9:79:40:3C:D6:8C:98:DF:73:8E:31:06:29:03:A0:B3:22:60:0B:59
Certificate issuer: /CN=e979403cd68c98df738e31062903a0b322600b59
Certificate serial: 0199FC58CCAA73B51C0D0ED9CD4BC7899E2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XlAPNaMmN9zjjEGKQOgsyJgC1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/303a8f-367f-4cfa-9a78-e81621b61d65/1/6XlAPNaMmN9zjjEGKQOgsyJgC1k.mft
Manifest number: 028A
Signing time: Sun 19 Oct 2025 12:01:41 +0000
Manifest this update: Sun 19 Oct 2025 12:01:41 +0000
Manifest next update: Mon 20 Oct 2025 12:01:41 +0000
Files and hashes: 1: 6XlAPNaMmN9zjjEGKQOgsyJgC1k.crl (hash: 4nzpswmy/AknyhTaLCat8gJAbYXaxfmECbqJFThkC7w=)
2: F2xZ9QgRce67ga9Jmar4OMuLjGo.roa (hash: bnt8ZsENPOXky7xH9NrByc19Ki/WFnxkHvhWkRdi1JQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/303a8f-367f-4cfa-9a78-e81621b61d65/1/6XlAPNaMmN9zjjEGKQOgsyJgC1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/303a8f-367f-4cfa-9a78-e81621b61d65/1/6XlAPNaMmN9zjjEGKQOgsyJgC1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/6XlAPNaMmN9zjjEGKQOgsyJgC1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:cc:aa:73:b5:1c:0d:0e:d9:cd:4b:c7:89:9e:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e979403cd68c98df738e31062903a0b322600b59
Validity
Not Before: Oct 19 12:01:41 2025 GMT
Not After : Oct 20 12:01:41 2025 GMT
Subject: CN=1353bea7d239d3cd4af3287e06f8ae9383e5b1b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:07:ff:de:3e:f4:d2:18:ac:92:bc:c0:97:d2:
b0:53:9f:ea:68:4a:31:a1:70:2f:35:c4:a1:51:74:
58:4f:9a:f3:f0:b3:81:0b:01:51:b0:6e:40:5b:98:
3d:48:7a:d2:32:b9:3b:14:c9:a1:ba:ef:90:76:14:
9d:cb:24:55:77:14:91:c1:e4:ca:a9:15:e0:79:34:
e4:e4:ef:50:24:cf:17:96:84:77:b8:e3:92:7d:7c:
ae:e5:96:9a:9b:23:af:c5:71:a6:c1:11:33:f3:68:
4a:89:7d:ca:7a:c4:45:91:ce:6d:18:49:a9:9a:0f:
df:ba:fe:3e:0b:06:1c:e7:63:1c:40:bf:cf:dd:cd:
f3:af:e7:f9:3a:4b:2a:8d:4c:f2:cd:c1:a6:03:7b:
96:79:0e:f3:9f:42:3c:29:5b:25:ed:5e:be:74:bc:
e2:72:db:7f:86:87:ed:67:df:6a:e8:ef:e7:27:33:
32:46:16:9a:fb:36:e9:b2:8c:33:ef:2c:6a:e7:03:
0a:e1:35:09:87:86:70:90:e9:64:21:3e:69:1b:12:
14:a3:9d:e9:a5:51:bf:9a:ac:db:bd:f4:db:7c:51:
84:ae:34:eb:e9:f9:c9:3d:7b:63:cc:b8:8e:97:20:
55:ef:8c:ac:4d:f4:f9:fa:ef:f8:c8:e2:1a:51:5f:
f5:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:53:BE:A7:D2:39:D3:CD:4A:F3:28:7E:06:F8:AE:93:83:E5:B1:B0
X509v3 Authority Key Identifier:
keyid:E9:79:40:3C:D6:8C:98:DF:73:8E:31:06:29:03:A0:B3:22:60:0B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XlAPNaMmN9zjjEGKQOgsyJgC1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/303a8f-367f-4cfa-9a78-e81621b61d65/1/6XlAPNaMmN9zjjEGKQOgsyJgC1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/303a8f-367f-4cfa-9a78-e81621b61d65/1/6XlAPNaMmN9zjjEGKQOgsyJgC1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:f7:ff:27:88:8f:2d:a6:66:a6:a9:ee:7d:0b:6d:97:78:b2:
09:ca:49:14:99:2c:4e:c3:51:f3:fc:46:fa:5b:85:79:f7:c5:
8b:4b:ce:83:23:60:32:b5:6d:8f:36:87:3d:fe:b1:2d:4a:ae:
47:54:37:58:48:8b:df:c9:46:5e:84:ad:37:9d:f3:2c:27:aa:
da:3b:1d:f4:77:5a:30:62:23:b8:09:03:2b:3d:24:aa:75:b1:
82:a9:3a:f1:6c:14:a2:1f:50:6b:68:89:fd:26:34:c3:4c:06:
18:c5:ec:d0:42:ab:0f:60:23:07:f9:f8:b8:6a:47:61:1b:b6:
93:bc:3b:04:6a:c4:7c:7a:91:b3:e6:42:45:23:af:b0:3e:82:
08:3a:13:74:bb:9b:d3:f4:ea:eb:1b:d4:10:64:90:87:ac:8b:
6b:fc:68:df:58:b8:16:28:d8:68:8a:20:56:70:7f:bf:2d:4d:
9b:ac:e0:fc:ef:d0:96:b6:a4:84:18:2e:3c:51:04:8a:68:35:
87:7a:a2:4c:61:9d:f4:54:4f:a2:24:6d:39:d2:77:f8:8b:61:
29:c1:28:42:af:c7:fd:90:a4:fd:0b:f8:d3:b6:ae:fe:4b:09:
9b:4e:44:2c:49:65:fb:e7:9d:a8:31:83:e6:d6:10:bc:b5:e9:
14:3e:78:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:06:43 2025 by rpki-client