Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/8e7e1d-158f-4c6e-aba3-39f13e76afa3/1/6ixOp53bewA94B8dBfbb9xaxEzY.mft
File: 6ixOp53bewA94B8dBfbb9xaxEzY.mft (raw, json)
Hash identifier: 8YjOHGl9+wWt0wwyQh71V1xrNhw6mIxsrh+oVPKF5nA=
Subject key identifier: 1B:48:8E:3F:DD:AB:31:43:45:F8:0C:7A:E4:57:02:2D:EF:4B:8E:26
Authority key identifier: EA:2C:4E:A7:9D:DB:7B:00:3D:E0:1F:1D:05:F6:DB:F7:16:B1:13:36
Certificate issuer: /CN=ea2c4ea79ddb7b003de01f1d05f6dbf716b11336
Certificate serial: 019A0592D7C2FE5DA9316E82193D35481491
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6ixOp53bewA94B8dBfbb9xaxEzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/8e7e1d-158f-4c6e-aba3-39f13e76afa3/1/6ixOp53bewA94B8dBfbb9xaxEzY.mft
Manifest number: 1679
Signing time: Tue 21 Oct 2025 07:01:40 +0000
Manifest this update: Tue 21 Oct 2025 07:01:40 +0000
Manifest next update: Wed 22 Oct 2025 07:01:40 +0000
Files and hashes: 1: 6ixOp53bewA94B8dBfbb9xaxEzY.crl (hash: 9fVtRmYrvY6uT/RBsUm6s8xzpXN+/ClAqeZq4VwcfAs=)
2: UBg5H2PYYwmFwtuuB5TxJD258zc.roa (hash: mETMUQGm3Ge4vPrABQSGfrYWzYlfLqVqloDe3yUr+lM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/8e7e1d-158f-4c6e-aba3-39f13e76afa3/1/6ixOp53bewA94B8dBfbb9xaxEzY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/8e7e1d-158f-4c6e-aba3-39f13e76afa3/1/6ixOp53bewA94B8dBfbb9xaxEzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6ixOp53bewA94B8dBfbb9xaxEzY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 07:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:05:92:d7:c2:fe:5d:a9:31:6e:82:19:3d:35:48:14:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea2c4ea79ddb7b003de01f1d05f6dbf716b11336
Validity
Not Before: Oct 21 07:01:40 2025 GMT
Not After : Oct 22 07:01:40 2025 GMT
Subject: CN=1b488e3fddab314345f80c7ae457022def4b8e26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:f7:6c:db:ca:7a:77:6d:ad:cd:42:b6:86:36:
e9:b9:89:ee:9d:6f:83:cf:2c:41:1f:3c:81:80:b8:
51:c5:4b:fc:65:05:b6:a8:4f:3b:e4:20:50:24:4f:
4c:41:fe:11:84:51:c9:5c:bd:bd:6b:da:d3:d9:1a:
d1:69:a9:35:90:1f:c0:06:9a:f5:85:45:06:1c:1c:
13:57:97:18:08:a2:0a:cf:d8:63:80:2b:36:fb:f7:
73:1a:cb:11:57:68:bd:55:46:ea:b4:ae:dd:b9:b8:
d9:39:5c:b3:13:fe:8d:b5:53:e3:7c:b5:a4:30:aa:
db:9c:d5:0a:22:57:24:6d:6d:3a:a4:db:17:39:dd:
c0:bb:12:fa:ba:10:0e:ae:e5:46:cb:a5:34:80:0f:
86:8d:97:ee:f9:a5:28:d3:7e:2d:00:2c:51:18:38:
9f:00:fd:c1:48:b1:b6:06:66:8c:4c:47:59:f1:50:
5d:da:fc:93:2b:b2:32:c2:bc:1c:b9:26:45:d6:e1:
69:7b:ed:d9:8e:ed:ba:98:52:d8:1d:c9:1d:a0:43:
ad:78:d9:dc:2b:fc:9e:73:48:3d:3a:41:2f:35:1f:
1f:e1:ad:67:79:98:86:43:fa:fe:9b:b3:98:0d:c3:
5b:54:e8:a4:97:44:87:4f:d0:9d:01:9b:4f:15:17:
c5:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:48:8E:3F:DD:AB:31:43:45:F8:0C:7A:E4:57:02:2D:EF:4B:8E:26
X509v3 Authority Key Identifier:
keyid:EA:2C:4E:A7:9D:DB:7B:00:3D:E0:1F:1D:05:F6:DB:F7:16:B1:13:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ixOp53bewA94B8dBfbb9xaxEzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/8e7e1d-158f-4c6e-aba3-39f13e76afa3/1/6ixOp53bewA94B8dBfbb9xaxEzY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/8e7e1d-158f-4c6e-aba3-39f13e76afa3/1/6ixOp53bewA94B8dBfbb9xaxEzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:b2:5c:4e:85:5a:e4:74:6f:70:ca:6f:cb:63:d8:98:33:57:
cc:05:a3:21:ca:2b:de:06:52:d5:fb:46:9f:5a:cf:e8:17:3b:
bb:4d:2f:f5:c0:c8:f6:79:cf:4f:ea:ff:98:4e:d6:bd:32:b2:
70:f4:50:ac:69:17:a0:e4:5e:77:86:70:cf:88:33:3a:cb:49:
0d:5a:52:1c:ce:d4:66:a8:66:35:d0:fe:96:55:e3:84:3f:d9:
09:20:26:48:38:da:83:93:73:72:e7:a7:15:e6:43:b4:84:2a:
a4:84:13:29:50:6a:ac:d8:39:dd:09:ea:dd:38:5d:87:ac:0f:
b3:bf:2f:14:d5:00:ff:9b:82:1d:e3:04:6b:6b:98:ac:ef:55:
0e:a2:78:36:83:4e:4d:c9:6d:37:96:b2:d4:b4:c3:df:46:c5:
58:ee:55:e2:d7:6a:79:30:27:52:02:85:04:52:10:26:2b:24:
f8:de:0c:8a:be:5c:1f:9b:71:ae:85:06:a5:08:e1:b6:35:f6:
9f:5b:98:07:81:16:c2:26:c2:d8:ea:a9:fc:60:59:d6:0b:78:
2a:e2:d3:f1:31:eb:4b:47:17:d3:da:5f:1e:90:74:f4:de:04:
26:2c:33:cb:e2:f0:b3:0c:5e:2e:14:fa:25:b1:8f:38:6e:75:
a8:a0:74:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 10:58:49 2025 by rpki-client