Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/f95298-f909-45c9-9104-8a4f63ea9bf1/1/6lPzPM38X-hLhMFfBDIpBpka-ec.mft
File: 6lPzPM38X-hLhMFfBDIpBpka-ec.mft (raw, json)
Hash identifier: LUC+OU5eq3PP8s5+VNZoxaPiRPNrMq0OON3d20bs8Co=
Subject key identifier: 47:8E:7B:10:E2:A1:5D:E6:BC:DB:59:71:4D:EB:D3:A6:59:24:EE:EB
Authority key identifier: EA:53:F3:3C:CD:FC:5F:E8:4B:84:C1:5F:04:32:29:06:99:1A:F9:E7
Certificate issuer: /CN=ea53f33ccdfc5fe84b84c15f04322906991af9e7
Certificate serial: 019A01B6476FA7B397108D6226312147F53D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6lPzPM38X-hLhMFfBDIpBpka-ec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/f95298-f909-45c9-9104-8a4f63ea9bf1/1/6lPzPM38X-hLhMFfBDIpBpka-ec.mft
Manifest number: 16E4
Signing time: Mon 20 Oct 2025 13:01:54 +0000
Manifest this update: Mon 20 Oct 2025 13:01:54 +0000
Manifest next update: Tue 21 Oct 2025 13:01:54 +0000
Files and hashes: 1: 6lPzPM38X-hLhMFfBDIpBpka-ec.crl (hash: h+gRk6oY4RX+UXucy1ePhwhd1OiIyx8bqgkybOv+mLk=)
2: xNXvRwm0cFi8tLLdb2nvNopZe5s.roa (hash: Ek+ehf6lVos9XeTSOdvg4+GzfPP9fwac2An5Jv96Lm0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/f95298-f909-45c9-9104-8a4f63ea9bf1/1/6lPzPM38X-hLhMFfBDIpBpka-ec.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/f95298-f909-45c9-9104-8a4f63ea9bf1/1/6lPzPM38X-hLhMFfBDIpBpka-ec.mft
rsync://rpki.ripe.net/repository/DEFAULT/6lPzPM38X-hLhMFfBDIpBpka-ec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:b6:47:6f:a7:b3:97:10:8d:62:26:31:21:47:f5:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea53f33ccdfc5fe84b84c15f04322906991af9e7
Validity
Not Before: Oct 20 13:01:54 2025 GMT
Not After : Oct 21 13:01:54 2025 GMT
Subject: CN=478e7b10e2a15de6bcdb59714debd3a65924eeeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:a4:97:d0:83:05:d9:ad:ec:4b:05:02:a7:c4:
b5:03:b4:dd:52:40:8d:39:bd:85:ad:57:ea:4d:7b:
44:54:d3:8d:94:da:54:e2:81:99:68:f7:a9:8b:df:
a7:70:55:73:6c:87:96:12:9f:bd:e0:80:29:fd:76:
d2:81:54:06:bb:08:cc:63:23:ef:fb:9b:bb:7f:11:
79:a6:fd:a3:d7:b2:cb:8c:06:aa:ec:e6:a1:45:ec:
77:4d:6f:cc:b8:02:74:83:09:31:b4:20:87:ff:3a:
a0:3d:7d:0f:c2:a2:35:cd:10:a4:f3:27:54:b8:ae:
ca:72:2d:43:f3:72:4a:1f:6e:f1:f3:04:1d:f2:a1:
56:33:d8:16:67:0f:6a:57:92:02:20:38:b0:ac:6b:
e2:3a:43:4f:38:b5:c0:e5:ce:7c:7a:b4:0a:15:bc:
45:cc:3e:26:6f:5e:0e:fb:ad:e0:01:bf:56:0c:2e:
76:8d:4d:2d:49:18:b0:dd:a2:ad:1c:b1:25:09:01:
81:6a:bf:af:7e:87:eb:3f:95:ed:4d:99:54:e7:19:
44:1e:13:bf:1e:1e:fd:5c:07:83:67:9d:2d:78:2b:
4d:66:36:f3:2e:15:d6:4e:1c:65:33:6f:9a:15:d0:
3a:de:fc:6c:e1:91:86:68:9a:2d:10:1b:48:66:1d:
52:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:8E:7B:10:E2:A1:5D:E6:BC:DB:59:71:4D:EB:D3:A6:59:24:EE:EB
X509v3 Authority Key Identifier:
keyid:EA:53:F3:3C:CD:FC:5F:E8:4B:84:C1:5F:04:32:29:06:99:1A:F9:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6lPzPM38X-hLhMFfBDIpBpka-ec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f95298-f909-45c9-9104-8a4f63ea9bf1/1/6lPzPM38X-hLhMFfBDIpBpka-ec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f95298-f909-45c9-9104-8a4f63ea9bf1/1/6lPzPM38X-hLhMFfBDIpBpka-ec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:8d:34:f9:da:d5:f7:44:77:17:68:cd:30:3f:d6:fd:f9:36:
17:32:b4:d7:45:59:14:d8:c5:ed:8b:39:f8:21:45:14:1c:0f:
59:bb:df:31:3c:68:28:43:49:6d:dc:f4:4c:6f:3b:9f:6b:96:
4d:b8:10:36:da:69:3b:84:2b:5a:9e:85:c1:c1:78:d9:1f:a6:
0f:c3:95:42:b4:12:d2:cc:af:a3:4e:14:78:cd:39:21:ab:dc:
ed:8f:42:95:82:b0:7c:73:75:9e:00:0d:c5:55:c9:c4:b3:70:
65:6a:a1:9e:bb:71:8d:dc:fa:01:ed:bc:90:72:1b:82:62:73:
4a:b0:15:05:86:40:52:41:cd:7e:ce:33:77:aa:fa:47:f0:50:
43:35:56:7e:13:c3:c5:b6:8d:7a:59:6a:ae:c3:65:38:7c:fc:
a1:14:8e:7c:aa:08:b2:00:7a:90:7b:32:f8:9c:2e:ff:f9:9f:
f0:74:ad:a0:f5:7f:55:c6:0a:c4:46:2f:0c:c1:81:e5:48:25:
fe:3d:e1:15:13:30:eb:bc:ca:18:9b:57:22:4b:3e:f9:0d:b8:
2c:20:12:92:ef:80:e6:92:cb:f6:d0:45:f3:e2:f7:3f:2b:e7:
f6:b8:84:dd:52:28:f3:e4:a8:00:8a:39:01:9e:57:07:e3:3f:
17:d2:c4:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:08:55 2025 by rpki-client