Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/b62878-ccc8-4d57-9fe0-7a104b80cd71/1/Cu6u4IY9HcpiT2HzmyGBx9tsuj8.mft
File: Cu6u4IY9HcpiT2HzmyGBx9tsuj8.mft (raw, json)
Hash identifier: pXpebUAuG1P9zHpfxXa034WqbRdMgE7bt+LfqnhG9hE=
Subject key identifier: 61:7B:4C:35:89:A5:55:41:8D:18:FE:70:2C:6E:40:90:2F:83:D9:3D
Authority key identifier: 0A:EE:AE:E0:86:3D:1D:CA:62:4F:61:F3:9B:21:81:C7:DB:6C:BA:3F
Certificate issuer: /CN=0aeeaee0863d1dca624f61f39b2181c7db6cba3f
Certificate serial: 0199FB7CEFDF08BCC47DB5C2432ACF528D6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cu6u4IY9HcpiT2HzmyGBx9tsuj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/b62878-ccc8-4d57-9fe0-7a104b80cd71/1/Cu6u4IY9HcpiT2HzmyGBx9tsuj8.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 08:01:33 +0000
Manifest this update: Sun 19 Oct 2025 08:01:33 +0000
Manifest next update: Mon 20 Oct 2025 08:01:33 +0000
Files and hashes: 1: Cu6u4IY9HcpiT2HzmyGBx9tsuj8.crl (hash: bzXatljIWTw8k+ebIcnNtWGQNQJzukbqo3n2wTe4cCg=)
2: jNQsNrl4OFuXyBApJXCWmUTjpZk.roa (hash: N8A4PApBA9zWi0+/3/LkUNmVkYXpRd84xcIjX23MSx8=)
3: sZIsfl2SHxbYgBp6wBGthOfYd7Q.roa (hash: XDzfTTG5ZalMDxihCFcFH9odfMn9DlFUshPNduKnlps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/b62878-ccc8-4d57-9fe0-7a104b80cd71/1/Cu6u4IY9HcpiT2HzmyGBx9tsuj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/b62878-ccc8-4d57-9fe0-7a104b80cd71/1/Cu6u4IY9HcpiT2HzmyGBx9tsuj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cu6u4IY9HcpiT2HzmyGBx9tsuj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:ef:df:08:bc:c4:7d:b5:c2:43:2a:cf:52:8d:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0aeeaee0863d1dca624f61f39b2181c7db6cba3f
Validity
Not Before: Oct 19 08:01:33 2025 GMT
Not After : Oct 20 08:01:33 2025 GMT
Subject: CN=617b4c3589a555418d18fe702c6e40902f83d93d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:73:7e:b2:93:27:8b:02:79:b7:4e:77:5c:ec:
01:00:3f:f2:9a:96:7f:bb:01:91:8a:94:47:12:b7:
0b:8e:e6:15:0b:dc:e2:52:09:ab:54:9c:b2:85:10:
b7:4c:f4:57:6f:d7:79:f7:aa:a7:7a:97:ce:4d:91:
da:41:db:aa:27:d7:78:88:c1:8f:af:63:e3:b3:30:
60:5c:aa:7d:43:85:fb:14:4e:ac:07:f0:ca:a4:0e:
d2:2c:b8:48:04:c0:0a:cd:99:f9:2a:2a:2f:a8:e8:
27:ed:64:b2:6e:5f:5a:4b:7c:49:38:79:52:09:08:
bf:87:39:54:99:68:5a:14:a3:ab:db:1c:2b:28:9e:
3c:79:f4:a0:fd:05:85:8f:fc:29:17:4e:08:18:26:
43:43:55:65:75:32:57:0a:73:f7:00:43:33:05:66:
39:70:09:28:45:96:9b:84:c8:6e:35:df:fc:8c:a4:
c1:13:22:70:eb:7f:15:23:b1:3b:c7:f2:bb:6e:24:
16:85:98:00:21:24:cb:aa:95:4b:6d:dd:34:22:9d:
19:20:56:1b:df:81:f0:18:04:07:40:16:08:a1:b7:
b8:61:f0:61:b9:a4:27:b7:46:85:4b:d0:7b:6d:96:
fb:6a:ab:2a:08:20:d1:a6:5d:9f:2c:a8:77:90:ef:
b7:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:7B:4C:35:89:A5:55:41:8D:18:FE:70:2C:6E:40:90:2F:83:D9:3D
X509v3 Authority Key Identifier:
keyid:0A:EE:AE:E0:86:3D:1D:CA:62:4F:61:F3:9B:21:81:C7:DB:6C:BA:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cu6u4IY9HcpiT2HzmyGBx9tsuj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/b62878-ccc8-4d57-9fe0-7a104b80cd71/1/Cu6u4IY9HcpiT2HzmyGBx9tsuj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/b62878-ccc8-4d57-9fe0-7a104b80cd71/1/Cu6u4IY9HcpiT2HzmyGBx9tsuj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:cf:0a:17:aa:d4:c7:1c:fe:14:45:43:1b:31:5e:1e:28:9c:
99:e9:a9:b1:cd:84:86:85:46:6e:e5:e8:6d:79:cd:77:06:f1:
22:de:71:b6:7c:97:0d:c5:90:f7:79:04:0f:6b:80:ab:67:02:
c1:7d:e6:87:27:b8:cb:b0:18:4b:4a:fa:10:d1:26:62:4c:90:
65:e4:72:f9:67:15:0d:29:1d:91:2e:7d:50:a4:29:fc:72:b6:
0a:91:b4:c3:13:f4:db:f8:2d:b6:39:fd:32:0f:61:45:3f:a8:
a8:d2:6f:10:92:28:c4:44:cb:fb:fd:0a:47:af:a5:95:68:78:
38:7d:9f:0a:1e:39:80:6d:b9:20:ec:fa:39:97:68:a3:ea:1d:
ea:34:0e:0d:f3:54:fb:eb:ab:e6:6b:63:5f:9a:e3:f7:5a:48:
84:4e:58:12:81:aa:27:57:f1:a7:93:ad:95:e7:05:84:e4:5c:
69:4e:2d:38:09:97:d3:5a:50:06:86:5f:82:86:9a:3c:dc:fb:
b3:25:a7:2b:6e:85:ff:20:1a:70:be:34:ca:ee:13:4f:6f:ee:
c5:b5:80:ce:c4:fb:9d:fd:43:ba:23:31:57:9f:69:0b:e2:5a:
48:2e:e9:d8:53:65:ae:13:a1:43:95:d2:1f:1a:9c:9c:be:46:
21:ac:a8:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:07:42 2025 by rpki-client