Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/ab5500-f623-4a54-9ae2-ffe21ef98674/1/6yOl9H7GfpJakkkauZskujcRg_E.mft
File: 6yOl9H7GfpJakkkauZskujcRg_E.mft (raw, json)
Hash identifier: zvvpDfEERjNoh3g925KVHUeNU+kuBlTxQAYU50ue2ks=
Subject key identifier: 5F:E8:D6:03:89:03:8A:DE:3C:7D:47:A4:64:CF:30:5C:A6:F3:ED:C6
Authority key identifier: EB:23:A5:F4:7E:C6:7E:92:5A:92:49:1A:B9:9B:24:BA:37:11:83:F1
Certificate issuer: /CN=eb23a5f47ec67e925a92491ab99b24ba371183f1
Certificate serial: 019A03DA850E8E79E392F5B83F9EF7ABEE75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6yOl9H7GfpJakkkauZskujcRg_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/ab5500-f623-4a54-9ae2-ffe21ef98674/1/6yOl9H7GfpJakkkauZskujcRg_E.mft
Manifest number: 09B2
Signing time: Mon 20 Oct 2025 23:00:43 +0000
Manifest this update: Mon 20 Oct 2025 23:00:43 +0000
Manifest next update: Tue 21 Oct 2025 23:00:43 +0000
Files and hashes: 1: 0_VEKJrftYI-EHvTCLarg2lwsBA.roa (hash: kfpPpXA7rFVv7oH2r9JbqI4VMxVD5WROc79GogJD5qg=)
2: 1KHRlfAmZCjgdchpsV2t_4c1OSE.roa (hash: WCQTHOW/Hv3m0ge62Xw1HCKv223lQ6k0GOEHqDCZYTs=)
3: 6yOl9H7GfpJakkkauZskujcRg_E.crl (hash: JnOtW++fF4cbEtww8LLU38Pdfh4j0eWiV0vYP1bzYLc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/ab5500-f623-4a54-9ae2-ffe21ef98674/1/6yOl9H7GfpJakkkauZskujcRg_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/ab5500-f623-4a54-9ae2-ffe21ef98674/1/6yOl9H7GfpJakkkauZskujcRg_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/6yOl9H7GfpJakkkauZskujcRg_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 15:16:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:03:da:85:0e:8e:79:e3:92:f5:b8:3f:9e:f7:ab:ee:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb23a5f47ec67e925a92491ab99b24ba371183f1
Validity
Not Before: Oct 20 23:00:43 2025 GMT
Not After : Oct 21 23:00:43 2025 GMT
Subject: CN=5fe8d60389038ade3c7d47a464cf305ca6f3edc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:20:bb:23:c6:0d:d8:03:cb:aa:d7:70:b8:d1:
4c:96:e9:b0:46:24:42:33:50:57:48:53:e3:3e:41:
c1:67:7a:28:1d:57:e6:13:90:e8:7f:f3:3e:0e:4f:
50:2a:02:f0:1c:b8:67:9e:c8:9e:20:d1:48:ff:5a:
82:88:62:a5:4a:b9:a0:bf:ab:6b:83:4c:61:d0:e0:
89:99:22:a6:4d:10:8b:16:2b:32:1c:00:4e:5f:7a:
01:39:8c:bb:f3:48:be:34:21:04:22:e2:25:d6:48:
59:38:c7:78:1a:2a:65:02:1f:71:04:84:78:d6:97:
ac:4d:ad:b9:b1:53:7b:5c:86:30:cd:10:c6:38:c4:
69:aa:05:bc:d1:08:db:61:45:81:9a:cf:06:84:92:
de:b5:ce:ea:eb:9f:1f:02:fb:43:51:76:f0:9c:95:
e0:32:7f:e9:72:33:45:24:65:5e:1e:ac:fe:50:ad:
48:d2:f7:c5:3f:dc:dd:c3:55:a1:0d:ea:c4:b0:59:
81:d9:e7:cd:0d:d4:89:f9:1a:8e:5b:e8:31:ce:c0:
16:bb:54:03:ab:6d:99:14:89:0b:b8:64:9d:1d:81:
ae:12:80:8e:02:40:1d:53:e6:8e:61:f5:17:97:50:
e1:be:78:2e:bf:54:b1:d8:e7:e8:d3:c6:7e:5d:74:
c8:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:E8:D6:03:89:03:8A:DE:3C:7D:47:A4:64:CF:30:5C:A6:F3:ED:C6
X509v3 Authority Key Identifier:
keyid:EB:23:A5:F4:7E:C6:7E:92:5A:92:49:1A:B9:9B:24:BA:37:11:83:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6yOl9H7GfpJakkkauZskujcRg_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ab5500-f623-4a54-9ae2-ffe21ef98674/1/6yOl9H7GfpJakkkauZskujcRg_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ab5500-f623-4a54-9ae2-ffe21ef98674/1/6yOl9H7GfpJakkkauZskujcRg_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:72:aa:b1:c7:28:d1:af:30:67:b6:dd:9e:e1:3b:0c:27:12:
e1:95:9b:ce:10:41:4f:c6:a8:c9:dc:41:e6:0e:6f:da:1b:37:
5e:77:24:aa:ab:cd:4f:dd:8d:83:db:a3:d7:ce:65:32:91:e4:
3c:81:5a:e0:70:10:f4:f1:fe:0a:f6:a0:22:4b:87:29:ea:8f:
69:20:0c:a6:95:44:78:5e:c3:47:3a:3b:30:dc:cf:5a:ac:1e:
fb:5d:64:0c:d9:74:4a:9d:f2:77:c3:2a:c1:b4:6c:b8:fe:2a:
b0:41:bd:2e:5a:40:77:f1:97:60:0f:4e:5a:6f:c4:99:58:ba:
e5:f8:04:f9:f6:f4:b2:b2:71:74:1f:b2:58:f6:a4:84:bc:fb:
0b:5e:9f:7b:e9:89:c4:1a:94:05:59:fa:bb:97:4b:5f:cd:00:
ea:35:1f:ca:1e:bd:ce:0c:3f:b4:8f:a7:6d:3b:3c:ed:96:a2:
c9:03:f6:1a:66:a1:4a:dd:bc:6d:df:67:51:0e:fe:85:1b:30:
b7:3a:db:05:7c:7d:5a:f4:fb:ec:e7:a0:c0:54:ee:92:8c:84:
55:7d:e1:d4:4c:6d:be:3d:c4:50:07:a6:f5:00:53:c4:d6:9f:
32:89:9b:00:de:50:b6:ce:5c:dd:4a:2b:73:2f:8d:06:c3:e6:
50:e0:89:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 00:50:33 2025 by rpki-client