Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/ab5500-f623-4a54-9ae2-ffe21ef98674/1/6yOl9H7GfpJakkkauZskujcRg_E.mft
File: 6yOl9H7GfpJakkkauZskujcRg_E.mft (raw, json)
Hash identifier: 4kd9btX3q7rjnf+i4FtVzQsjTPJv4eHrMX1z3lEmkh4=
Subject key identifier: FA:B4:A7:94:0A:D6:22:D7:54:16:F0:4B:38:35:13:FE:AB:77:DE:CD
Authority key identifier: EB:23:A5:F4:7E:C6:7E:92:5A:92:49:1A:B9:9B:24:BA:37:11:83:F1
Certificate issuer: /CN=eb23a5f47ec67e925a92491ab99b24ba371183f1
Certificate serial: 019A01EC199A42B653E4E586167FB0CFA507
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6yOl9H7GfpJakkkauZskujcRg_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/ab5500-f623-4a54-9ae2-ffe21ef98674/1/6yOl9H7GfpJakkkauZskujcRg_E.mft
Manifest number: 09B1
Signing time: Mon 20 Oct 2025 14:00:41 +0000
Manifest this update: Mon 20 Oct 2025 14:00:41 +0000
Manifest next update: Tue 21 Oct 2025 14:00:41 +0000
Files and hashes: 1: 0_VEKJrftYI-EHvTCLarg2lwsBA.roa (hash: kfpPpXA7rFVv7oH2r9JbqI4VMxVD5WROc79GogJD5qg=)
2: 1KHRlfAmZCjgdchpsV2t_4c1OSE.roa (hash: WCQTHOW/Hv3m0ge62Xw1HCKv223lQ6k0GOEHqDCZYTs=)
3: 6yOl9H7GfpJakkkauZskujcRg_E.crl (hash: hxi4SeG2d9CtIitPIQ5wGZC1XMWh4mH0I7A2uOvvim4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/ab5500-f623-4a54-9ae2-ffe21ef98674/1/6yOl9H7GfpJakkkauZskujcRg_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/ab5500-f623-4a54-9ae2-ffe21ef98674/1/6yOl9H7GfpJakkkauZskujcRg_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/6yOl9H7GfpJakkkauZskujcRg_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:ec:19:9a:42:b6:53:e4:e5:86:16:7f:b0:cf:a5:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb23a5f47ec67e925a92491ab99b24ba371183f1
Validity
Not Before: Oct 20 14:00:41 2025 GMT
Not After : Oct 21 14:00:41 2025 GMT
Subject: CN=fab4a7940ad622d75416f04b383513feab77decd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:03:a0:27:b9:68:f9:46:b6:01:39:64:2e:10:
61:26:fb:b5:de:8a:38:d2:b8:cc:b0:98:71:84:8f:
ec:61:80:15:6e:de:62:a4:c5:d9:34:5e:e5:da:a3:
52:9d:bf:75:65:23:8e:ce:b3:36:cb:fd:6a:95:96:
81:b3:36:a1:5d:8c:0e:84:41:10:53:3e:8d:15:3f:
47:05:68:14:a1:ed:91:91:61:bd:44:90:fd:e6:13:
47:29:d7:0b:5a:23:aa:64:b3:fb:d3:43:d8:70:53:
1a:86:48:da:2f:60:23:4a:1e:63:04:89:fe:75:23:
64:7e:62:a9:3d:47:a8:11:1c:a1:b5:58:76:6a:8d:
8e:4c:81:c0:1e:a9:23:81:2f:f2:9b:f5:b5:b7:3d:
47:fc:0b:85:f8:27:5b:3f:5f:23:b0:f6:25:2c:4b:
b9:07:4c:01:6a:23:58:0f:b4:46:4b:61:d3:ce:ed:
33:18:27:f6:b2:ff:2e:35:fc:6a:ee:eb:85:d4:ea:
57:2f:d8:f5:e9:31:67:27:54:99:19:f6:7c:c2:0b:
d5:bd:b8:64:99:40:c6:c7:3e:4b:92:c3:9e:1f:16:
58:ef:c2:18:fd:21:10:9e:e0:eb:be:11:65:25:67:
ee:2e:1d:e3:9c:79:6c:db:16:ae:ef:66:0c:16:c1:
bf:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:B4:A7:94:0A:D6:22:D7:54:16:F0:4B:38:35:13:FE:AB:77:DE:CD
X509v3 Authority Key Identifier:
keyid:EB:23:A5:F4:7E:C6:7E:92:5A:92:49:1A:B9:9B:24:BA:37:11:83:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6yOl9H7GfpJakkkauZskujcRg_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ab5500-f623-4a54-9ae2-ffe21ef98674/1/6yOl9H7GfpJakkkauZskujcRg_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ab5500-f623-4a54-9ae2-ffe21ef98674/1/6yOl9H7GfpJakkkauZskujcRg_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:a8:aa:cc:4c:74:da:9e:d8:64:4f:a2:ff:14:a6:96:81:df:
c9:d6:47:25:80:05:b4:07:11:e3:91:98:31:f4:72:64:20:7e:
d5:19:32:e3:6a:81:12:f9:1c:9d:fb:d1:84:05:a7:1b:00:0a:
29:97:2d:3f:27:23:89:bc:02:71:5d:f0:09:aa:ca:47:e3:17:
cd:c1:f9:92:56:0f:9b:dd:67:fe:7f:6b:4e:80:e6:e1:12:06:
e5:23:22:67:4f:69:8d:9d:09:be:6c:fa:8d:1c:a5:2f:90:5f:
c3:49:bb:eb:28:ad:ee:11:0d:7e:25:21:50:80:d8:bd:6b:26:
dd:3f:e0:7c:fa:5a:2f:5c:36:95:27:03:f7:6f:81:e6:41:f9:
e6:cf:b6:b4:fa:6f:88:8c:1d:b8:29:90:a9:92:83:41:e9:2b:
af:2d:31:a5:41:6a:06:1e:83:40:99:08:04:1d:22:19:18:b1:
a3:fd:c8:e5:d7:de:09:ab:5f:76:f0:de:24:53:1e:ac:bf:f6:
2c:24:46:8c:a8:06:3e:0b:c8:b8:6e:e0:e6:d7:25:0f:52:86:
d7:8d:43:b8:68:24:ca:56:7f:f1:ad:79:cf:de:97:7d:3a:81:
7a:c3:68:4b:33:eb:d1:17:2e:d9:d4:a0:05:5e:1b:d1:77:a9:
b5:9a:0c:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:41:15 2025 by rpki-client