Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/f24885-a4db-4fa1-a72d-86d6c1305357/1/exSNtC-Q6WRHvX9j7dinzL7qqEI.mft
File: exSNtC-Q6WRHvX9j7dinzL7qqEI.mft (raw, json)
Hash identifier: Dxv7yhxPSqWPKYKo9O2G8JY7G1LKy38qI9af4ahlHCc=
Subject key identifier: 95:D8:9A:E0:2B:2B:63:43:3E:87:F9:04:30:AF:4F:43:BE:B3:24:FF
Authority key identifier: 7B:14:8D:B4:2F:90:E9:64:47:BD:7F:63:ED:D8:A7:CC:BE:EA:A8:42
Certificate issuer: /CN=7b148db42f90e96447bd7f63edd8a7ccbeeaa842
Certificate serial: 0199FB0F4772EB4AD4BB1611E73E07F7A2A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/exSNtC-Q6WRHvX9j7dinzL7qqEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/f24885-a4db-4fa1-a72d-86d6c1305357/1/exSNtC-Q6WRHvX9j7dinzL7qqEI.mft
Manifest number: 16E6
Signing time: Sun 19 Oct 2025 06:01:46 +0000
Manifest this update: Sun 19 Oct 2025 06:01:46 +0000
Manifest next update: Mon 20 Oct 2025 06:01:46 +0000
Files and hashes: 1: 4RKif-sVDnQcBzYwPxTkoab85KM.roa (hash: SrOlgyMeJ89vYHgpHfX8GmpEUx/qSwc8CkZHX0V14Kg=)
2: exSNtC-Q6WRHvX9j7dinzL7qqEI.crl (hash: /2uSQKEQixkaj5KZ5PmkHxwM5SJ7RHgVskixcH4IM2s=)
3: xPN9YjQh6cWbiBVSRMvIJ-yRdfQ.roa (hash: NF3FvBakkmVr+pBAEq+awbP4Tn7Z+Cmnixhp8Jn6OBo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/f24885-a4db-4fa1-a72d-86d6c1305357/1/exSNtC-Q6WRHvX9j7dinzL7qqEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/f24885-a4db-4fa1-a72d-86d6c1305357/1/exSNtC-Q6WRHvX9j7dinzL7qqEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/exSNtC-Q6WRHvX9j7dinzL7qqEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0f:47:72:eb:4a:d4:bb:16:11:e7:3e:07:f7:a2:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b148db42f90e96447bd7f63edd8a7ccbeeaa842
Validity
Not Before: Oct 19 06:01:46 2025 GMT
Not After : Oct 20 06:01:46 2025 GMT
Subject: CN=95d89ae02b2b63433e87f90430af4f43beb324ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:81:71:b0:07:0d:90:c5:db:ed:60:b6:8f:e4:
06:e0:cd:23:a4:cb:10:a0:fc:3a:16:c6:6e:df:5d:
4d:59:b8:6b:9d:6e:39:bb:69:71:d6:7d:5d:c9:20:
82:3a:0e:4f:84:ed:15:5c:cc:08:1e:ee:16:21:66:
af:b0:91:84:08:61:83:f0:d6:12:87:25:ac:93:6f:
ed:f6:69:e0:80:9f:02:d6:94:23:fd:04:8e:5f:5a:
11:30:7e:dd:16:1b:66:b7:42:ca:3a:2b:fd:3b:67:
80:8a:7a:f4:84:b4:2a:ad:80:38:ac:91:4f:e3:00:
c8:dd:b8:e3:19:4d:55:d1:8a:92:da:e4:9f:cc:9b:
a8:a4:8f:72:c4:62:c3:8a:53:1a:55:0c:a3:d0:32:
5a:c4:13:ee:ed:74:03:fe:f0:68:fe:bd:11:70:74:
37:4e:2a:c4:35:19:36:31:35:2d:9b:f9:a3:76:12:
a7:69:b9:48:a9:2c:47:8a:57:9a:cf:e1:d6:0a:89:
4d:57:d9:da:42:aa:e2:ef:88:14:ad:4c:aa:fc:f6:
f4:74:80:00:f2:44:bf:b9:23:93:36:f1:5d:70:fb:
0a:bf:20:6f:cc:72:89:5e:da:53:b1:e5:2f:ae:df:
24:9a:12:62:26:60:a1:0c:77:d7:0d:72:dc:ba:9b:
4b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:D8:9A:E0:2B:2B:63:43:3E:87:F9:04:30:AF:4F:43:BE:B3:24:FF
X509v3 Authority Key Identifier:
keyid:7B:14:8D:B4:2F:90:E9:64:47:BD:7F:63:ED:D8:A7:CC:BE:EA:A8:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/exSNtC-Q6WRHvX9j7dinzL7qqEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f24885-a4db-4fa1-a72d-86d6c1305357/1/exSNtC-Q6WRHvX9j7dinzL7qqEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f24885-a4db-4fa1-a72d-86d6c1305357/1/exSNtC-Q6WRHvX9j7dinzL7qqEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:76:60:69:0b:2d:01:80:ff:fa:17:3e:e2:f0:7c:6d:00:c1:
03:da:87:1f:1e:7a:21:59:e7:b3:59:50:78:15:fc:c1:df:49:
05:3f:6a:7a:be:35:19:a7:57:22:a0:fb:15:b9:21:c9:83:4d:
90:1f:ce:ea:1e:f9:51:73:c2:70:52:03:78:c5:4b:8d:9a:00:
e2:93:2e:78:96:fd:7a:0b:75:df:31:f8:4c:62:21:c0:8d:8c:
e5:a0:ca:d3:99:89:84:36:e0:72:21:ca:c3:d7:c6:5d:a7:2a:
7e:23:a5:30:47:d0:fd:9a:d8:b1:a5:7c:2c:4c:cc:e1:53:f1:
8f:e0:a1:72:cb:c1:cc:6b:fc:60:3b:dd:54:54:b6:36:ef:e7:
d4:fd:0e:d0:d3:ae:ae:ed:47:09:26:62:6f:20:ce:57:9f:73:
df:85:d4:65:a0:3b:e7:bc:c6:28:39:fe:20:04:6c:82:64:7a:
f4:49:ec:86:48:ee:eb:a9:f9:6a:b0:58:75:49:da:14:49:02:
ac:3f:9a:c6:c8:f6:4d:1f:40:a8:af:9c:7c:eb:f1:02:aa:c9:
2a:89:1b:5c:f9:ea:51:d0:50:e0:95:c2:d1:ae:c7:5c:7e:f5:
be:76:91:44:a0:32:6e:d1:27:91:fc:66:73:49:df:f7:a6:13:
c3:e6:b0:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 12:53:13 2025 by rpki-client