Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/6c0e22-fb61-49db-b065-993cd8388fd5/1/DG8YKAS1blCKo3LAPM63PvjCxos.mft
File: DG8YKAS1blCKo3LAPM63PvjCxos.mft (raw, json)
Hash identifier: PDQu8BhGlDvzDyAecMi4AHGGCEtj8M0P8VXjwQlT8Bk=
Subject key identifier: AC:2A:0E:C0:C3:69:76:29:7D:CA:A9:A9:67:A5:09:E5:45:46:03:0B
Authority key identifier: 0C:6F:18:28:04:B5:6E:50:8A:A3:72:C0:3C:CE:B7:3E:F8:C2:C6:8B
Certificate issuer: /CN=0c6f182804b56e508aa372c03cceb73ef8c2c68b
Certificate serial: 019A00A31F4AF2C426E7AC291F9CF73D7DA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DG8YKAS1blCKo3LAPM63PvjCxos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/6c0e22-fb61-49db-b065-993cd8388fd5/1/DG8YKAS1blCKo3LAPM63PvjCxos.mft
Manifest number: 16EC
Signing time: Mon 20 Oct 2025 08:01:21 +0000
Manifest this update: Mon 20 Oct 2025 08:01:21 +0000
Manifest next update: Tue 21 Oct 2025 08:01:21 +0000
Files and hashes: 1: CboN5GI28SiyUWI4MOyyBBarnSE.roa (hash: IuQeN17ie/CZAm40U/UBsK+jP36giHzi+QWUvQDTrTI=)
2: DG8YKAS1blCKo3LAPM63PvjCxos.crl (hash: +/CpGwRwzK3DHDTTtqJnhtPcEseP1oFZLuWOxZ78xJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/6c0e22-fb61-49db-b065-993cd8388fd5/1/DG8YKAS1blCKo3LAPM63PvjCxos.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/6c0e22-fb61-49db-b065-993cd8388fd5/1/DG8YKAS1blCKo3LAPM63PvjCxos.mft
rsync://rpki.ripe.net/repository/DEFAULT/DG8YKAS1blCKo3LAPM63PvjCxos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 08:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:a3:1f:4a:f2:c4:26:e7:ac:29:1f:9c:f7:3d:7d:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c6f182804b56e508aa372c03cceb73ef8c2c68b
Validity
Not Before: Oct 20 08:01:21 2025 GMT
Not After : Oct 21 08:01:21 2025 GMT
Subject: CN=ac2a0ec0c36976297dcaa9a967a509e54546030b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8a:66:72:fb:2e:bd:a8:0f:e8:26:ca:68:3a:
12:20:2d:a2:8e:f3:09:bf:91:30:29:44:cd:26:19:
c4:77:4b:b2:80:3a:f7:cb:16:f7:03:de:02:26:4d:
00:80:68:22:83:39:a9:26:80:6e:57:49:83:31:50:
95:f8:51:45:9a:bf:6c:7f:07:80:58:cc:34:65:39:
ed:5a:23:67:58:41:1e:c4:5a:2a:73:9c:76:8f:46:
e5:d9:16:82:37:1e:51:47:1b:f5:f0:3c:18:15:24:
44:fb:8e:66:0c:e7:ea:6d:61:0c:e2:43:3d:0b:27:
ae:5a:c0:f6:fa:06:6a:35:e3:a8:45:d5:1d:65:1f:
02:ac:4d:f0:3e:6f:25:ad:8e:fd:96:ad:1c:57:8e:
a6:a0:b0:98:1c:db:2f:ff:49:a5:6b:8a:b8:b3:9f:
48:66:aa:d0:e7:0d:dd:b9:9e:a9:32:36:1a:01:f7:
24:f1:3c:58:7c:98:95:2f:16:aa:bc:77:5c:b9:82:
24:0e:f4:99:96:ba:7e:ba:99:12:fc:11:8b:22:7f:
92:96:29:43:8f:63:61:a4:b8:10:51:e5:41:d6:af:
0f:4c:6f:51:31:c8:71:1e:a4:d7:2c:75:30:35:d6:
42:2c:8e:13:a9:12:c0:03:e5:8d:59:8a:05:1b:e8:
eb:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:2A:0E:C0:C3:69:76:29:7D:CA:A9:A9:67:A5:09:E5:45:46:03:0B
X509v3 Authority Key Identifier:
keyid:0C:6F:18:28:04:B5:6E:50:8A:A3:72:C0:3C:CE:B7:3E:F8:C2:C6:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DG8YKAS1blCKo3LAPM63PvjCxos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/6c0e22-fb61-49db-b065-993cd8388fd5/1/DG8YKAS1blCKo3LAPM63PvjCxos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/6c0e22-fb61-49db-b065-993cd8388fd5/1/DG8YKAS1blCKo3LAPM63PvjCxos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:11:f1:53:98:7c:da:79:d5:c9:8d:da:ff:e1:00:ae:33:c0:
fd:7d:28:d2:e2:b2:91:df:60:af:06:30:cb:fd:1b:81:f0:67:
42:4b:b1:dd:ba:94:62:89:cb:e5:0d:17:ca:60:b0:a5:c6:0b:
b3:57:22:65:ec:76:53:be:b1:d6:0c:c4:d4:92:1b:52:67:14:
3e:90:b5:a1:66:c5:1e:3a:ca:c8:da:ca:25:04:12:aa:60:b5:
b6:d1:e1:30:f6:3a:b4:94:2b:46:62:d3:6c:dd:5a:52:a9:27:
a0:c7:a0:bb:17:6c:b0:90:cf:99:f3:98:1f:db:df:d6:b0:e1:
1b:f3:98:85:f6:fb:cc:58:cc:1f:ad:55:81:5f:c4:f6:64:28:
67:78:3a:98:74:b7:be:36:d7:ca:6e:3e:30:e8:3f:ce:43:32:
e6:e4:3c:2f:e9:e5:dc:41:a4:47:65:9a:7d:aa:dd:46:c4:e0:
f7:97:2f:de:41:61:77:8d:f9:8d:10:b8:d1:b1:9a:e0:ff:2e:
9a:cd:53:4a:7d:95:c8:7d:ff:d4:8f:b8:e6:ca:64:51:3f:5b:
59:d1:96:b2:a2:cc:b4:a4:47:e4:34:60:9e:55:29:b4:92:f7:
1b:1d:ff:d6:da:79:54:e0:e7:44:ec:a2:2a:b2:b9:91:e7:0f:
c7:2a:61:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:32:43 2025 by rpki-client