Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/528de1-8f68-4cb9-b6ce-ffaaa299af61/1/azT6U9HYTbq-aY1bvMrt8QnRV64.mft
File: azT6U9HYTbq-aY1bvMrt8QnRV64.mft (raw, json)
Hash identifier: 5DRJYvRcJ8H0Z4OveMGp4qS0FlEWr0TVIkmjePISMJI=
Subject key identifier: 6D:FD:37:34:F0:9B:4E:A1:19:58:B0:AF:15:48:07:C0:89:7E:68:B3
Authority key identifier: 6B:34:FA:53:D1:D8:4D:BA:BE:69:8D:5B:BC:CA:ED:F1:09:D1:57:AE
Certificate issuer: /CN=6b34fa53d1d84dbabe698d5bbccaedf109d157ae
Certificate serial: 0199FC583DAA02EB9608BC684733348133B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/azT6U9HYTbq-aY1bvMrt8QnRV64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/528de1-8f68-4cb9-b6ce-ffaaa299af61/1/azT6U9HYTbq-aY1bvMrt8QnRV64.mft
Manifest number: 16E6
Signing time: Sun 19 Oct 2025 12:01:05 +0000
Manifest this update: Sun 19 Oct 2025 12:01:05 +0000
Manifest next update: Mon 20 Oct 2025 12:01:05 +0000
Files and hashes: 1: azT6U9HYTbq-aY1bvMrt8QnRV64.crl (hash: rmAfom0ngYC/tjVIWI/7rUaYTB0aRpEl/e2PQctpZAI=)
2: yFAScqy1SZnNR2xfePl0FenNN0g.roa (hash: vURxboeBcUQDk9P166WC/cJAnLRENen5C6McIffi+y4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/528de1-8f68-4cb9-b6ce-ffaaa299af61/1/azT6U9HYTbq-aY1bvMrt8QnRV64.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/528de1-8f68-4cb9-b6ce-ffaaa299af61/1/azT6U9HYTbq-aY1bvMrt8QnRV64.mft
rsync://rpki.ripe.net/repository/DEFAULT/azT6U9HYTbq-aY1bvMrt8QnRV64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:3d:aa:02:eb:96:08:bc:68:47:33:34:81:33:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b34fa53d1d84dbabe698d5bbccaedf109d157ae
Validity
Not Before: Oct 19 12:01:05 2025 GMT
Not After : Oct 20 12:01:05 2025 GMT
Subject: CN=6dfd3734f09b4ea11958b0af154807c0897e68b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:fc:2a:2c:63:3c:60:51:81:e9:09:7e:e8:b0:
d3:7b:e2:ec:00:9b:67:40:45:ba:bd:7e:ca:ca:18:
43:0a:6b:d7:0c:25:a3:cb:7b:a3:17:a2:dc:9e:0f:
b3:f9:2c:1f:ef:7d:24:6b:d4:55:a5:9d:35:7c:dd:
c3:47:95:15:a3:d2:9c:ef:43:c0:0a:84:bc:a3:c3:
ec:a5:62:2b:ba:25:b9:00:f1:35:27:21:f3:58:fd:
7e:fe:fe:83:59:30:49:ac:60:57:dd:86:e4:5f:84:
77:d4:5a:73:f7:96:99:a7:fe:80:f1:23:00:4e:94:
15:ea:97:2e:f4:dc:3a:28:c4:84:a7:84:c0:ee:87:
c4:8f:0d:b9:62:2c:33:be:08:bc:3f:0b:0b:fc:87:
15:d1:12:6d:5f:84:a5:91:3c:2b:17:53:44:5f:3e:
82:bc:c7:4d:f7:49:7c:9e:40:dd:54:15:d8:3e:84:
2e:49:8b:c5:48:cc:e1:b0:e1:a0:68:bc:e0:c7:83:
dd:1f:bf:34:30:99:f1:7e:be:f0:97:a0:61:29:2e:
b3:4e:a9:43:24:d6:9d:7a:4b:f0:3b:ed:d6:db:74:
e6:75:36:da:59:9d:7f:77:2d:3a:5a:f9:d2:1a:5f:
16:8a:a2:de:bf:40:8a:07:31:66:28:e6:30:40:db:
70:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:FD:37:34:F0:9B:4E:A1:19:58:B0:AF:15:48:07:C0:89:7E:68:B3
X509v3 Authority Key Identifier:
keyid:6B:34:FA:53:D1:D8:4D:BA:BE:69:8D:5B:BC:CA:ED:F1:09:D1:57:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/azT6U9HYTbq-aY1bvMrt8QnRV64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/528de1-8f68-4cb9-b6ce-ffaaa299af61/1/azT6U9HYTbq-aY1bvMrt8QnRV64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/528de1-8f68-4cb9-b6ce-ffaaa299af61/1/azT6U9HYTbq-aY1bvMrt8QnRV64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:84:91:33:b0:e7:b7:df:10:c3:f9:c9:ca:9f:67:05:52:8d:
c3:69:63:82:c9:a3:65:74:85:9a:b4:9c:79:96:76:a7:c1:c7:
de:fe:00:e0:09:67:da:8e:45:43:ea:aa:f3:90:c8:3a:84:55:
84:36:2a:39:d2:c0:5c:c0:9c:23:93:b4:8b:62:f2:05:90:03:
44:39:6c:e4:7a:8d:31:87:4c:23:9b:53:7e:c0:d5:16:cf:2e:
be:43:af:23:69:cc:8e:79:09:c6:b7:e8:2d:61:b6:d2:ef:7c:
71:e5:28:9a:ec:18:c9:bc:89:b0:26:29:d6:6f:c6:9f:24:b6:
92:33:c1:b3:75:b8:82:65:08:28:d5:ea:a9:44:3f:02:87:51:
df:8c:fc:41:a0:b2:e5:af:b5:6a:df:64:3e:58:28:25:9e:42:
a1:59:2e:ba:23:ce:59:7b:11:8f:54:8b:31:5f:6b:29:2e:5c:
bc:1b:b6:27:46:a9:3a:4e:ef:aa:db:37:68:33:60:38:cf:7e:
61:fb:0d:de:4b:0c:85:a2:22:aa:a4:14:70:08:59:56:95:ad:
de:99:42:c6:10:7a:e7:6c:2a:c8:70:47:0d:3a:37:ed:4e:8d:
73:58:e2:cc:17:e2:a0:0b:07:00:10:0c:12:c5:60:96:1f:b0:
b4:8c:b6:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:06:50 2025 by rpki-client