Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.mft
File: 06fDvga8RcPxK5CxhSeK1OyRl1Y.mft (raw, json)
Hash identifier: zah6FXZkl/FiYMMpYODsDmC41Jg2BnMK/mv1msE9sm8=
Subject key identifier: EF:EF:A5:0B:92:21:0A:77:73:BA:19:9E:D6:52:9C:D1:0D:FA:4C:DE
Authority key identifier: D3:A7:C3:BE:06:BC:45:C3:F1:2B:90:B1:85:27:8A:D4:EC:91:97:56
Certificate issuer: /CN=d3a7c3be06bc45c3f12b90b185278ad4ec919756
Certificate serial: 0199FBEAF811BA4945FEBD6048E3B398EBD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/06fDvga8RcPxK5CxhSeK1OyRl1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.mft
Manifest number: 1502
Signing time: Sun 19 Oct 2025 10:01:43 +0000
Manifest this update: Sun 19 Oct 2025 10:01:43 +0000
Manifest next update: Mon 20 Oct 2025 10:01:43 +0000
Files and hashes: 1: 06fDvga8RcPxK5CxhSeK1OyRl1Y.crl (hash: kdf722JD4jcT7PvsiEWRCR2yKjJukRz/r0v+2g+7fRI=)
2: tbW3C2BxGOP8RipICwkXorNWMa0.roa (hash: sAyggufTAiW8TAkDGmUgXEYrufIqSzYFIzTOlTIqneg=)
3: u1VhcVTy354RLIy1HL3zp9mHr4s.roa (hash: bTXjEk3aPbxZmee9JV98PLXefqyqj+KHu6+Sm9Lnq+0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/06fDvga8RcPxK5CxhSeK1OyRl1Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:f8:11:ba:49:45:fe:bd:60:48:e3:b3:98:eb:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3a7c3be06bc45c3f12b90b185278ad4ec919756
Validity
Not Before: Oct 19 10:01:43 2025 GMT
Not After : Oct 20 10:01:43 2025 GMT
Subject: CN=efefa50b92210a7773ba199ed6529cd10dfa4cde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8f:35:ff:ce:eb:f9:0e:d3:78:4e:01:1a:63:
88:f9:25:bd:e3:73:3c:b8:73:40:81:51:53:ca:6c:
02:f2:c3:a1:53:6e:bc:8a:d5:b7:7c:a6:d5:ea:fa:
be:a7:65:cf:8c:a6:f3:b5:e9:96:f9:ed:40:88:95:
c7:16:f8:ae:85:e6:1c:b4:1c:dd:fa:a0:fe:1e:9a:
c4:f3:73:ac:77:bf:0b:5f:5c:a2:dd:51:ca:ce:11:
42:54:72:2e:81:8d:f0:b1:0f:42:e4:e8:9c:10:18:
1f:23:50:92:9b:c0:9f:e8:b4:bc:73:a1:71:3b:e3:
49:52:64:ed:09:30:dc:ab:f6:6b:8f:fa:d3:69:7a:
b6:01:91:f5:52:2e:7c:41:e1:d3:f7:f1:35:03:3b:
8b:07:19:03:50:28:12:e8:95:0d:45:81:bb:8b:e0:
4c:81:cd:41:65:e8:a0:ae:ac:78:f6:ad:8d:23:e8:
e2:5f:7a:84:dd:b0:a1:bf:27:7b:ca:b3:c3:c3:0e:
cb:da:6b:1b:65:49:01:e3:44:de:7e:73:2d:d8:ef:
1a:1f:d2:68:9d:56:85:66:fb:74:4d:9c:9a:77:4a:
d1:99:96:18:7d:6d:05:4a:e7:cd:06:f6:91:52:c7:
20:53:dc:b0:2b:a9:cb:af:d1:f5:48:cb:af:f0:37:
0f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:EF:A5:0B:92:21:0A:77:73:BA:19:9E:D6:52:9C:D1:0D:FA:4C:DE
X509v3 Authority Key Identifier:
keyid:D3:A7:C3:BE:06:BC:45:C3:F1:2B:90:B1:85:27:8A:D4:EC:91:97:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/06fDvga8RcPxK5CxhSeK1OyRl1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:df:e5:36:1b:2f:ff:a4:0c:ae:ca:ba:11:aa:1b:79:c1:73:
91:e5:6d:61:21:be:28:05:f4:b3:34:ae:6f:18:f2:45:c3:15:
20:bf:13:c7:8d:1d:e7:9a:5b:19:d4:63:d6:ea:99:33:11:82:
98:dd:c2:cf:f7:43:7c:a9:99:32:d2:8b:01:08:65:c7:ba:8e:
ee:29:11:fb:0f:29:93:4f:dc:b7:9e:d6:a7:b6:0c:0e:cf:0b:
6f:14:e4:e4:73:3e:f8:15:57:52:a8:af:19:69:0f:7c:d8:c6:
4c:94:7e:9f:c4:27:bc:ec:33:80:ec:f8:21:fa:2b:84:85:d6:
2e:0c:a0:37:30:53:87:4f:68:1f:da:25:20:55:a2:2b:49:0c:
8f:1e:5c:f3:c9:b7:e1:a7:a3:8d:da:b7:69:3b:0c:de:8c:8e:
5c:44:df:d8:fe:fc:aa:5e:4a:a1:78:a1:97:ab:73:79:83:98:
9c:86:de:5f:77:d9:bb:be:13:5e:2f:94:27:62:54:d5:63:51:
c3:11:82:c8:04:f3:42:48:87:6c:47:0b:40:69:4d:ef:30:06:
0f:2e:9e:af:58:38:3f:57:49:38:5c:cc:ab:2a:b1:c9:1f:0b:
22:50:ca:fc:21:83:52:b5:dd:53:d8:92:26:08:7c:49:fd:70:
ca:9c:49:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:40 2025 by rpki-client