Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/331874-7b31-4879-bf0b-0585e9edc330/1/6wK1I7069vxsN93WbN9HmT24Yys.mft
File: 6wK1I7069vxsN93WbN9HmT24Yys.mft (raw, json)
Hash identifier: RXNYHvudaxaiHFmIRIp2rZeNpK7NQ6yPoRhR4QLVVuU=
Subject key identifier: 20:F3:9C:6E:79:89:4D:A8:44:5E:FF:7F:57:20:64:47:86:1F:92:E6
Authority key identifier: EB:02:B5:23:BD:3A:F6:FC:6C:37:DD:D6:6C:DF:47:99:3D:B8:63:2B
Certificate issuer: /CN=eb02b523bd3af6fc6c37ddd66cdf47993db8632b
Certificate serial: 019A0290EEDDD046ABEA6F6D6E4B96207624
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6wK1I7069vxsN93WbN9HmT24Yys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/331874-7b31-4879-bf0b-0585e9edc330/1/6wK1I7069vxsN93WbN9HmT24Yys.mft
Manifest number: 0961
Signing time: Mon 20 Oct 2025 17:00:44 +0000
Manifest this update: Mon 20 Oct 2025 17:00:44 +0000
Manifest next update: Tue 21 Oct 2025 17:00:44 +0000
Files and hashes: 1: 1zUeCNsyUySRrcIIfazZmjAut_s.roa (hash: WXspWFEbktg81y3mrIdyXASjQtA7MBr6Jnt3pUsHMi4=)
2: 6wK1I7069vxsN93WbN9HmT24Yys.crl (hash: hhjX6wc1h/clSrrJse+uOk5I6j3+9ucFOxv/ke0/0yU=)
3: zd1TadsFdkDRbaDn6de93U3QGzg.roa (hash: 3y34pfznptay8iJNHTIdskxBHxaww5H8QXxFU6fcGRk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/331874-7b31-4879-bf0b-0585e9edc330/1/6wK1I7069vxsN93WbN9HmT24Yys.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/331874-7b31-4879-bf0b-0585e9edc330/1/6wK1I7069vxsN93WbN9HmT24Yys.mft
rsync://rpki.ripe.net/repository/DEFAULT/6wK1I7069vxsN93WbN9HmT24Yys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:90:ee:dd:d0:46:ab:ea:6f:6d:6e:4b:96:20:76:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb02b523bd3af6fc6c37ddd66cdf47993db8632b
Validity
Not Before: Oct 20 17:00:44 2025 GMT
Not After : Oct 21 17:00:44 2025 GMT
Subject: CN=20f39c6e79894da8445eff7f57206447861f92e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:44:89:63:8d:c0:c7:84:78:b9:89:2c:cf:27:
f0:b6:8e:42:a9:de:30:08:ca:36:3a:b5:86:20:8d:
85:78:15:3f:9d:6d:29:ae:5c:af:1b:f4:0c:18:4a:
ff:83:db:ec:4e:64:9e:33:dc:17:76:d3:c9:1e:24:
f3:eb:aa:7e:f3:0c:a1:2f:ce:45:3f:83:44:94:8d:
ef:c1:c6:a7:38:66:b4:d3:6b:ea:ac:54:46:23:bc:
cd:03:79:c3:a2:2e:1c:22:96:cb:1a:1a:08:31:48:
cd:ea:06:56:53:6c:b8:03:81:c6:16:5e:5a:d2:3a:
54:8c:25:93:3c:08:0e:4c:6d:50:3a:8c:fe:eb:fe:
91:45:c7:cd:ff:4a:00:dc:4f:df:1c:4d:d3:d6:d5:
a7:92:89:55:0a:ee:f2:79:6e:19:3a:2e:5b:89:ec:
6a:74:64:9d:1e:f1:3c:fb:47:1b:69:2a:72:8d:a2:
64:b0:d7:0b:c8:3d:3f:8d:87:46:e4:11:91:51:c2:
f7:18:40:c4:c9:91:14:3f:46:db:2a:0b:43:58:e1:
81:e6:b1:97:be:4b:90:fd:61:99:a0:0b:93:3c:c7:
85:fa:e2:6b:2e:74:9d:8a:47:c0:e2:4d:41:b0:d9:
f7:8b:82:e5:8b:d2:6b:95:48:f4:30:d9:ac:f5:56:
67:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:F3:9C:6E:79:89:4D:A8:44:5E:FF:7F:57:20:64:47:86:1F:92:E6
X509v3 Authority Key Identifier:
keyid:EB:02:B5:23:BD:3A:F6:FC:6C:37:DD:D6:6C:DF:47:99:3D:B8:63:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6wK1I7069vxsN93WbN9HmT24Yys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/331874-7b31-4879-bf0b-0585e9edc330/1/6wK1I7069vxsN93WbN9HmT24Yys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/331874-7b31-4879-bf0b-0585e9edc330/1/6wK1I7069vxsN93WbN9HmT24Yys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:de:fc:76:38:8f:30:31:6c:73:af:de:f8:5e:09:96:ac:b1:
1b:63:f3:df:95:92:d9:3e:69:c0:1b:bf:5a:b2:b0:e8:f7:cc:
ad:cc:fd:82:21:fb:0e:15:f6:b1:a0:75:19:cd:87:da:ec:0d:
68:de:dd:63:a5:8d:dc:56:3e:bd:09:2e:3a:89:39:16:21:fc:
76:d0:65:74:da:db:91:e0:b6:b3:5c:55:4f:2a:f9:ff:a7:b9:
c4:86:a2:3b:9d:07:9c:95:2f:ec:f4:c9:42:b7:f1:f3:85:23:
87:c2:62:3d:37:41:5f:35:12:99:1c:b1:dc:20:4b:0f:85:55:
ef:3e:68:fd:c9:d5:37:8d:b3:b3:71:8e:09:af:93:8c:fd:37:
86:38:7c:a2:eb:2c:81:c7:09:8c:c5:30:bf:ce:27:01:79:3f:
b8:86:15:62:73:0c:93:b4:89:b6:c4:a7:31:45:3c:5d:46:e9:
e7:5d:0c:97:2a:fd:d5:0e:95:37:40:7e:89:da:9c:4b:c8:b2:
35:bd:8d:8d:15:07:a2:00:9b:b9:52:de:f1:67:93:e1:cf:14:
a7:a0:6e:22:41:ed:fa:ec:3d:ef:66:62:1b:4e:86:ca:a9:49:
da:c9:cf:64:78:ac:4c:89:92:d3:b8:b1:c8:62:3e:c2:c8:61:
88:7e:85:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:40:25 2025 by rpki-client