Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/816cf9-e6a0-43f1-8a3d-5c7c3ad74a32/1/6DGCFvAxEBktn29i_-4ZDrvVxBs.mft
File: 6DGCFvAxEBktn29i_-4ZDrvVxBs.mft (raw, json)
Hash identifier: vDpNYLscOwiVt6eJoeCiBHKbZgkyUll1t8+Xrw4/11M=
Subject key identifier: BD:78:55:F7:57:54:55:1C:D8:B3:DD:81:2A:92:D6:ED:EF:9E:64:31
Authority key identifier: E8:31:82:16:F0:31:10:19:2D:9F:6F:62:FF:EE:19:0E:BB:D5:C4:1B
Certificate issuer: /CN=e8318216f03110192d9f6f62ffee190ebbd5c41b
Certificate serial: 0199FC8F3D42A8501B600C26A068E2CD96A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6DGCFvAxEBktn29i_-4ZDrvVxBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/816cf9-e6a0-43f1-8a3d-5c7c3ad74a32/1/6DGCFvAxEBktn29i_-4ZDrvVxBs.mft
Manifest number: 0127
Signing time: Sun 19 Oct 2025 13:01:09 +0000
Manifest this update: Sun 19 Oct 2025 13:01:09 +0000
Manifest next update: Mon 20 Oct 2025 13:01:09 +0000
Files and hashes: 1: 6DGCFvAxEBktn29i_-4ZDrvVxBs.crl (hash: 194b2+bveQg8qc/OeMFQfFnIoGW2791yFc53Pi5beQA=)
2: 7rHBYtW6X1cejc9TILphrdP_TBk.roa (hash: fyAkynyCTru31PmwyHkLxs5s4xfquOrJnfeQ7K5zOpE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/816cf9-e6a0-43f1-8a3d-5c7c3ad74a32/1/6DGCFvAxEBktn29i_-4ZDrvVxBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/816cf9-e6a0-43f1-8a3d-5c7c3ad74a32/1/6DGCFvAxEBktn29i_-4ZDrvVxBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/6DGCFvAxEBktn29i_-4ZDrvVxBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:3d:42:a8:50:1b:60:0c:26:a0:68:e2:cd:96:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8318216f03110192d9f6f62ffee190ebbd5c41b
Validity
Not Before: Oct 19 13:01:09 2025 GMT
Not After : Oct 20 13:01:09 2025 GMT
Subject: CN=bd7855f75754551cd8b3dd812a92d6edef9e6431
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:23:9a:3c:ed:a1:0d:e3:c1:73:88:8c:86:3f:
34:a2:a3:6d:44:39:78:02:ea:43:2c:43:52:8e:a3:
85:6f:87:39:dd:d0:bb:0d:55:8b:1a:55:c5:c2:27:
36:9f:90:27:dc:a8:6b:c1:43:5c:98:f9:6b:ad:6c:
a4:52:ea:8b:78:fb:29:29:fc:75:c7:97:db:be:58:
c7:4f:69:48:7f:96:d5:17:74:c8:7f:d7:a9:15:9b:
e1:6e:05:41:d1:79:78:d8:4c:16:dd:a8:41:f6:ea:
1d:c6:4b:64:a4:d7:50:b7:ff:13:58:b1:80:cb:d6:
5a:78:66:0e:bc:23:f8:4e:83:f8:78:d8:73:87:f1:
3a:74:05:03:f8:79:61:ba:e1:9d:01:aa:1b:7f:3f:
d7:50:5d:8b:91:ec:5b:d2:c9:a0:14:52:96:0e:83:
33:87:f9:0e:c3:b2:73:1d:06:03:08:68:8f:74:6d:
8e:1f:82:d5:86:94:e3:45:d3:cd:b6:11:f3:b6:2c:
4c:2c:bb:cf:28:fc:ba:9c:a3:02:92:0c:cb:ef:15:
62:67:5d:0e:98:fd:25:26:9b:bd:aa:61:60:49:5e:
d7:c1:79:74:c8:ec:0d:cf:d0:05:4f:62:bc:85:71:
d4:90:68:10:96:59:94:5f:7c:b8:c0:3d:ca:a5:0b:
ee:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:78:55:F7:57:54:55:1C:D8:B3:DD:81:2A:92:D6:ED:EF:9E:64:31
X509v3 Authority Key Identifier:
keyid:E8:31:82:16:F0:31:10:19:2D:9F:6F:62:FF:EE:19:0E:BB:D5:C4:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6DGCFvAxEBktn29i_-4ZDrvVxBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/816cf9-e6a0-43f1-8a3d-5c7c3ad74a32/1/6DGCFvAxEBktn29i_-4ZDrvVxBs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/816cf9-e6a0-43f1-8a3d-5c7c3ad74a32/1/6DGCFvAxEBktn29i_-4ZDrvVxBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:5b:2b:37:41:53:1d:96:d5:0c:30:13:91:40:e2:00:77:a4:
e2:26:33:6b:1c:46:71:4c:33:92:ff:99:6b:6d:d2:c8:51:40:
c7:96:94:2f:c8:52:82:36:4c:cc:7a:11:ea:11:a2:de:84:5a:
4e:30:e3:34:1c:bc:b2:a1:65:e9:2b:a2:6a:41:f8:52:71:30:
42:81:b2:33:e8:af:cf:9a:bc:33:70:96:85:72:47:83:a5:fb:
cf:22:8e:75:5c:68:35:3d:88:c4:eb:12:5d:34:b7:ea:f9:7f:
9d:d4:d8:0d:9a:a6:3e:a5:06:a3:e4:df:60:87:8e:5d:2d:7e:
1d:c0:93:12:15:0c:b8:f2:91:42:f3:c3:12:da:18:f5:db:da:
05:d4:84:92:dc:91:f6:bd:ff:c9:22:5c:bb:66:8f:e8:46:de:
cb:d1:72:b8:fc:cb:20:a1:51:18:fc:c0:55:64:a9:a3:93:28:
2e:5f:1a:b0:c0:6f:f9:db:19:8d:c2:c4:e5:21:83:58:1e:0f:
27:c7:1f:79:ca:00:01:69:6e:19:f6:4e:68:e5:23:c4:f0:df:
87:a9:b6:10:e4:03:60:1e:c7:09:e4:a7:18:0e:b4:19:b5:3e:
85:f0:ab:f1:3c:48:e6:72:d9:0b:b5:58:0a:f1:79:a9:8e:6b:
44:a6:28:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:10 2025 by rpki-client