Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/021f6b-6fd0-4365-92f7-4de47b80440a/1/p6dweK84e0jXCBDrFgTfCt4Rj9o.mft
File: p6dweK84e0jXCBDrFgTfCt4Rj9o.mft (raw, json)
Hash identifier: xtxD3UES6uMYAT3WZSjTLmmtY8DbL+OhS1XaYyIveL0=
Subject key identifier: 7E:A6:95:A1:CB:AB:28:4E:10:FB:24:42:04:36:DA:A4:04:6E:34:13
Authority key identifier: A7:A7:70:78:AF:38:7B:48:D7:08:10:EB:16:04:DF:0A:DE:11:8F:DA
Certificate issuer: /CN=a7a77078af387b48d70810eb1604df0ade118fda
Certificate serial: 0199FDDA3E7496F53BEFE7DED4C07476E360
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p6dweK84e0jXCBDrFgTfCt4Rj9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/021f6b-6fd0-4365-92f7-4de47b80440a/1/p6dweK84e0jXCBDrFgTfCt4Rj9o.mft
Manifest number: 1323
Signing time: Sun 19 Oct 2025 19:02:42 +0000
Manifest this update: Sun 19 Oct 2025 19:02:42 +0000
Manifest next update: Mon 20 Oct 2025 19:02:42 +0000
Files and hashes: 1: 9xMeWe1NRlriC37gII2JZoSHiUQ.roa (hash: v9S3o8GCSV8SJhwMOSoO5rVmagcl/wlT4/BQbEi4mBI=)
2: p6dweK84e0jXCBDrFgTfCt4Rj9o.crl (hash: ZtZ6NRzjdqe/qxILhJGjZpqcKmoFQ/u9XpMuV9o1f/E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/021f6b-6fd0-4365-92f7-4de47b80440a/1/p6dweK84e0jXCBDrFgTfCt4Rj9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/021f6b-6fd0-4365-92f7-4de47b80440a/1/p6dweK84e0jXCBDrFgTfCt4Rj9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/p6dweK84e0jXCBDrFgTfCt4Rj9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:3e:74:96:f5:3b:ef:e7:de:d4:c0:74:76:e3:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7a77078af387b48d70810eb1604df0ade118fda
Validity
Not Before: Oct 19 19:02:42 2025 GMT
Not After : Oct 20 19:02:42 2025 GMT
Subject: CN=7ea695a1cbab284e10fb24420436daa4046e3413
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:15:9e:0c:08:3b:96:71:2d:70:1e:b7:8f:54:
d3:c1:37:e2:86:6f:91:a6:c2:de:9e:9b:d2:c7:d4:
f0:2d:a9:c8:0d:a5:48:2e:f3:95:ed:5d:15:d5:f5:
a4:8c:92:fa:63:7b:4b:d2:00:47:e3:c4:0e:10:c3:
80:f8:6c:58:9b:bd:39:9a:c9:be:2d:13:85:16:74:
c7:55:2d:49:cf:a0:de:74:b3:5d:ad:06:2d:1f:02:
dd:7c:87:95:ec:f7:36:c2:01:77:31:7e:43:41:48:
43:73:27:9c:ed:d2:57:46:01:46:b8:37:10:48:91:
0c:9c:29:2f:95:33:1d:9d:af:53:32:0b:9b:7c:cc:
a7:df:00:d6:31:fe:ec:c7:76:4e:a3:4e:e0:61:ea:
c0:48:f3:8b:df:98:43:e4:95:a0:c4:b7:9b:91:5d:
11:c7:c3:43:eb:53:d0:9e:63:2e:3b:8a:38:4a:b0:
b9:6a:26:8f:36:91:85:51:dd:73:6e:6e:c6:54:00:
8f:29:1b:d4:8f:3f:79:9f:00:42:53:df:03:d5:81:
86:bf:ac:99:05:5b:ab:fa:95:db:47:b3:8f:43:20:
9d:86:4c:64:b0:da:ee:60:a2:c1:67:0a:39:65:91:
6a:3f:0e:d7:bb:f6:3a:6d:c4:6e:b7:df:a1:f0:4b:
f4:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:A6:95:A1:CB:AB:28:4E:10:FB:24:42:04:36:DA:A4:04:6E:34:13
X509v3 Authority Key Identifier:
keyid:A7:A7:70:78:AF:38:7B:48:D7:08:10:EB:16:04:DF:0A:DE:11:8F:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p6dweK84e0jXCBDrFgTfCt4Rj9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/021f6b-6fd0-4365-92f7-4de47b80440a/1/p6dweK84e0jXCBDrFgTfCt4Rj9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/021f6b-6fd0-4365-92f7-4de47b80440a/1/p6dweK84e0jXCBDrFgTfCt4Rj9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:d5:9c:90:56:50:e0:f3:ba:ff:5d:b6:08:96:8a:08:76:d4:
04:3e:e7:8f:fc:60:2f:b8:1a:22:a2:e7:4f:82:eb:18:33:f9:
c9:43:0f:94:ab:2e:0b:03:b0:dc:5c:28:20:e7:76:93:4f:64:
74:5b:06:a7:0e:73:c9:ef:17:88:40:24:a7:40:78:2b:4e:f6:
b7:38:6c:73:20:db:d2:90:5e:20:75:c5:5e:18:9b:2f:8a:57:
d5:05:cf:96:9f:9c:67:28:85:ea:84:37:bd:3a:48:71:05:55:
92:6b:57:81:09:7b:36:d9:9c:a5:4f:e3:a8:98:57:43:5e:bf:
30:c4:e6:30:c6:4b:b8:4d:2f:87:b0:ed:4c:f5:c2:95:86:86:
64:e7:32:39:b8:5c:21:fe:bc:66:33:da:4d:70:51:66:82:10:
f1:d5:e5:6f:3f:27:a8:cb:b9:33:53:98:7d:85:95:3f:6f:e0:
7b:c9:a0:dd:52:fd:ae:01:39:b0:9f:47:74:b2:15:f1:cd:e7:
c1:20:71:01:81:d1:59:fb:ed:bf:2a:fd:e2:ae:17:f4:bb:aa:
af:8e:5b:61:68:e4:b3:6c:80:97:4c:b5:5c:21:c1:d4:d6:5e:
44:7c:1d:62:c0:b9:3d:9c:a2:09:65:d8:d1:cc:45:58:d7:dc:
bf:05:3f:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:59:04 2025 by rpki-client