Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/1da070-509e-4297-a035-43fb70b4c13f/1/F6JcQ-cNH0HZiQ11U2GgyhdZB1Q.mft
File: F6JcQ-cNH0HZiQ11U2GgyhdZB1Q.mft (raw, json)
Hash identifier: l60vDl+ac9vTz+2roTlslYa+XYcd6qmkQSvGCUKpupQ=
Subject key identifier: 17:FD:F1:EB:D0:E8:E8:BC:F1:0E:91:06:68:D1:E2:7C:46:65:88:4F
Authority key identifier: 17:A2:5C:43:E7:0D:1F:41:D9:89:0D:75:53:61:A0:CA:17:59:07:54
Certificate issuer: /CN=17a25c43e70d1f41d9890d755361a0ca17590754
Certificate serial: 0199FC2195B7B9C58D003A46B0E48E37CDD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F6JcQ-cNH0HZiQ11U2GgyhdZB1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/1da070-509e-4297-a035-43fb70b4c13f/1/F6JcQ-cNH0HZiQ11U2GgyhdZB1Q.mft
Manifest number: 6B
Signing time: Sun 19 Oct 2025 11:01:23 +0000
Manifest this update: Sun 19 Oct 2025 11:01:23 +0000
Manifest next update: Mon 20 Oct 2025 11:01:23 +0000
Files and hashes: 1: F6JcQ-cNH0HZiQ11U2GgyhdZB1Q.crl (hash: w/NacgTszh6ik8ZoGDdNc7dM/8bZsUKWULZ5eRbGEOI=)
2: USUsZRSzJhQ4nbQlDk_Bak85cuY.roa (hash: xa3ZR5XAkS/+Z+9YWXUdvjxG49GLyLBv4EvvnE1arws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/1da070-509e-4297-a035-43fb70b4c13f/1/F6JcQ-cNH0HZiQ11U2GgyhdZB1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/1da070-509e-4297-a035-43fb70b4c13f/1/F6JcQ-cNH0HZiQ11U2GgyhdZB1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/F6JcQ-cNH0HZiQ11U2GgyhdZB1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:95:b7:b9:c5:8d:00:3a:46:b0:e4:8e:37:cd:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17a25c43e70d1f41d9890d755361a0ca17590754
Validity
Not Before: Oct 19 11:01:23 2025 GMT
Not After : Oct 20 11:01:23 2025 GMT
Subject: CN=17fdf1ebd0e8e8bcf10e910668d1e27c4665884f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0b:a5:b8:54:91:2e:e4:0f:4e:42:ed:40:08:
95:67:c2:fd:cc:b8:4b:92:23:13:0d:98:78:80:4a:
8c:3f:47:10:8e:e7:1a:82:74:eb:dc:4b:5c:36:fe:
de:8e:92:41:87:07:8f:d5:7a:c9:31:27:ca:86:cb:
b4:b7:77:27:a1:b5:a9:e3:18:5d:56:f5:ec:4c:84:
40:1d:d0:3d:f7:7d:ff:5e:35:80:6c:59:e2:62:5f:
72:d4:0a:6c:5d:ff:7e:65:e9:cf:08:c0:c5:d0:44:
f6:03:45:a6:02:4c:4f:af:96:28:e5:06:35:e5:b8:
dc:f0:a1:79:dd:20:31:1b:d8:29:0f:ba:45:f1:7f:
5d:96:f7:db:4b:f6:f4:50:67:c4:ab:1a:a3:94:e5:
dc:5f:9f:33:74:32:03:3f:ea:65:37:15:0a:05:16:
24:3f:eb:a5:cf:17:b7:b0:22:e1:87:fa:13:59:5d:
f6:f1:f8:51:7e:a2:2f:7e:c5:6a:41:55:14:c3:f6:
ca:ed:7d:2a:b6:44:f7:38:a9:b1:af:ac:51:e7:17:
70:c2:c8:82:5f:4c:d3:4b:f0:e0:f0:91:b7:29:dc:
24:bd:69:d1:16:17:8b:6f:a1:dc:c7:c5:90:37:dc:
a9:11:85:e9:00:46:23:43:10:e6:b2:b0:64:c3:2a:
ed:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:FD:F1:EB:D0:E8:E8:BC:F1:0E:91:06:68:D1:E2:7C:46:65:88:4F
X509v3 Authority Key Identifier:
keyid:17:A2:5C:43:E7:0D:1F:41:D9:89:0D:75:53:61:A0:CA:17:59:07:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F6JcQ-cNH0HZiQ11U2GgyhdZB1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1da070-509e-4297-a035-43fb70b4c13f/1/F6JcQ-cNH0HZiQ11U2GgyhdZB1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1da070-509e-4297-a035-43fb70b4c13f/1/F6JcQ-cNH0HZiQ11U2GgyhdZB1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:33:6d:78:a2:d3:f4:70:fe:5d:b9:7d:e4:ef:bd:80:07:1f:
c7:4a:a2:f7:81:00:b7:96:9b:55:6b:f6:12:40:83:4c:04:83:
0b:c8:8d:be:69:ae:53:af:e5:86:b3:9f:0b:6d:e7:81:fb:b2:
d4:4c:63:c4:ab:17:18:74:89:64:66:fe:52:50:4f:33:44:17:
91:23:f1:ce:34:97:f9:06:6b:f5:aa:9c:63:bc:ee:87:9e:79:
de:7c:57:8c:47:3a:6e:20:30:3e:52:e7:eb:be:73:af:78:2f:
97:9f:9f:8f:d9:71:f2:ca:55:7b:8f:28:a8:08:ae:6c:31:60:
d9:85:1c:89:e8:13:61:3c:f2:9e:71:b5:1b:a5:dc:64:e4:86:
19:5a:3b:09:34:05:99:8f:33:b0:ad:75:40:8d:7c:9f:37:e3:
88:63:77:9f:6d:52:9b:1a:65:2a:2a:7b:61:d9:4c:35:08:c5:
e0:4b:5c:6e:bd:ec:25:b8:42:7c:bc:bd:99:c6:2c:e9:f4:a2:
9e:0a:30:56:ea:6e:41:4b:97:e5:88:17:ea:f0:27:c7:43:d1:
98:64:00:9c:8a:81:91:62:f2:98:b8:3b:b2:e7:41:37:8b:43:
1a:41:24:ec:9d:6f:f0:4d:99:ce:d0:58:72:f1:bc:80:11:c2:
c0:71:00:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:04:08 2025 by rpki-client