Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/1ba191-a42a-4509-bb28-0bc7e7ef0763/1/6f383DJhtXr63-1zD7Le2yhkn88.mft
File: 6f383DJhtXr63-1zD7Le2yhkn88.mft (raw, json)
Hash identifier: yl5HPFA5txZ77yMtils7Rpg6WnTZEMbe2boEisVd8U8=
Subject key identifier: E1:D8:DE:8C:DF:4F:08:E0:EF:F6:47:71:76:BE:8A:8D:BF:54:A3:9A
Authority key identifier: E9:FD:FC:DC:32:61:B5:7A:FA:DF:ED:73:0F:B2:DE:DB:28:64:9F:CF
Certificate issuer: /CN=e9fdfcdc3261b57afadfed730fb2dedb28649fcf
Certificate serial: 0199FB7CFAE4E19E1D50D84B44B7F8D94D29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6f383DJhtXr63-1zD7Le2yhkn88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/1ba191-a42a-4509-bb28-0bc7e7ef0763/1/6f383DJhtXr63-1zD7Le2yhkn88.mft
Manifest number: 16E8
Signing time: Sun 19 Oct 2025 08:01:35 +0000
Manifest this update: Sun 19 Oct 2025 08:01:35 +0000
Manifest next update: Mon 20 Oct 2025 08:01:35 +0000
Files and hashes: 1: 6f383DJhtXr63-1zD7Le2yhkn88.crl (hash: BPrMp5+4uq41qULcWyiydNgGUt2AUwgMVHJc/drR0Xc=)
2: Tci-duFHvWMEGttKQ92T_aViR_A.roa (hash: TNMB/iEiiWHvlZINV0FtcnUi3rWiLmL/5woKI9WyM90=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/1ba191-a42a-4509-bb28-0bc7e7ef0763/1/6f383DJhtXr63-1zD7Le2yhkn88.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/1ba191-a42a-4509-bb28-0bc7e7ef0763/1/6f383DJhtXr63-1zD7Le2yhkn88.mft
rsync://rpki.ripe.net/repository/DEFAULT/6f383DJhtXr63-1zD7Le2yhkn88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:fa:e4:e1:9e:1d:50:d8:4b:44:b7:f8:d9:4d:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9fdfcdc3261b57afadfed730fb2dedb28649fcf
Validity
Not Before: Oct 19 08:01:35 2025 GMT
Not After : Oct 20 08:01:35 2025 GMT
Subject: CN=e1d8de8cdf4f08e0eff6477176be8a8dbf54a39a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:06:6d:4c:25:35:50:f9:93:cd:3d:e8:a9:b9:
aa:a8:7f:e5:f4:47:b0:8b:49:65:3d:97:a5:42:80:
40:9d:e8:05:c5:5c:b7:d6:60:44:33:13:cc:df:98:
3f:1d:e3:d2:dc:66:33:b5:ed:ac:6d:94:b0:e1:01:
c8:7e:37:5f:9d:6b:23:1a:59:05:56:fc:65:e2:de:
f6:8d:e2:02:74:c6:85:c1:d7:96:11:5a:d2:c6:90:
33:25:c8:83:9f:c7:33:9a:37:73:af:2c:c3:04:7c:
1b:77:6e:e2:35:6a:e7:bc:08:81:0b:7e:61:d9:87:
0e:ed:30:28:f0:79:36:d7:9d:33:8c:0b:38:6c:2c:
5f:7b:fa:73:2f:07:82:09:1d:11:44:dd:ef:31:ec:
17:55:e9:9b:88:f4:5c:db:05:0c:31:30:31:26:0e:
b5:b6:b3:34:99:eb:d2:7c:43:8a:45:7e:43:0c:5d:
cc:22:8f:89:ad:82:80:58:19:26:27:c4:27:12:58:
9e:3e:e9:5d:7b:70:df:2b:17:58:10:c3:ce:77:82:
4f:d0:39:78:8d:22:8e:13:f3:7d:e4:5b:85:c1:a2:
74:0e:76:e3:f8:6f:26:9d:7c:43:d4:d1:a5:07:1e:
e9:ab:59:fc:61:8c:cd:c1:bf:8d:9a:a3:cf:ee:93:
aa:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:D8:DE:8C:DF:4F:08:E0:EF:F6:47:71:76:BE:8A:8D:BF:54:A3:9A
X509v3 Authority Key Identifier:
keyid:E9:FD:FC:DC:32:61:B5:7A:FA:DF:ED:73:0F:B2:DE:DB:28:64:9F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f383DJhtXr63-1zD7Le2yhkn88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/1ba191-a42a-4509-bb28-0bc7e7ef0763/1/6f383DJhtXr63-1zD7Le2yhkn88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/1ba191-a42a-4509-bb28-0bc7e7ef0763/1/6f383DJhtXr63-1zD7Le2yhkn88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:f0:a9:0b:98:6a:f1:0d:e2:8d:e2:f6:78:ea:4e:8b:14:06:
a8:32:10:88:b8:4f:38:2c:ff:59:03:9f:2c:13:ca:3a:3d:21:
9b:5e:89:38:90:5f:c1:a9:18:eb:b1:3f:e3:5e:f0:d0:81:48:
2b:11:81:2b:49:e6:2d:00:6f:35:f0:2d:e3:cb:93:44:77:24:
6d:21:d5:ff:9a:32:4a:6b:da:69:1a:fc:ce:08:b0:72:9c:92:
3c:d4:f5:ef:d7:5a:44:1b:7f:6b:36:dd:29:50:1b:fe:18:4e:
a5:49:5c:c5:51:b8:a5:77:82:85:69:dc:f9:3c:fa:ea:53:0c:
78:7f:c6:93:f0:4e:1c:38:70:01:a6:f4:53:1e:ef:83:0e:b3:
7a:57:e6:b1:03:e3:6c:01:12:2a:8a:7b:ce:aa:15:f5:d9:84:
5d:0e:3f:25:e8:c5:62:a7:8d:19:97:0b:ad:96:8e:f9:53:09:
b9:40:72:8a:69:c6:21:3d:92:79:cb:8d:43:59:de:34:84:b2:
08:b5:22:fa:32:61:b3:70:a0:99:d0:b7:d9:ec:71:ba:36:d0:
d7:dd:2f:d4:be:89:f3:c8:bf:a4:a2:ed:0e:5c:8f:f1:6a:b2:
ae:f9:71:31:c7:3d:c9:b0:e0:3b:8e:f5:f2:0e:49:d9:6b:37:
96:09:f1:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:43:08 2025 by rpki-client