Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/1b9202-4869-4d45-9521-eb11b4954f33/1/6ZQF7o9djnZOkL1mvdHomsEoCeg.mft
File: 6ZQF7o9djnZOkL1mvdHomsEoCeg.mft (raw, json)
Hash identifier: M7z9pFlk2BfMDjkCAQgAIMFFUQs/mPoPXnCH35Xm5vE=
Subject key identifier: 5D:07:D3:C3:FA:DB:E4:4C:A2:5D:C4:42:02:5A:54:DE:E4:67:C2:28
Authority key identifier: E9:94:05:EE:8F:5D:8E:76:4E:90:BD:66:BD:D1:E8:9A:C1:28:09:E8
Certificate issuer: /CN=e99405ee8f5d8e764e90bd66bdd1e89ac12809e8
Certificate serial: 0199FCFD54A0E39FA8B1FDE63C12D08C38A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6ZQF7o9djnZOkL1mvdHomsEoCeg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/1b9202-4869-4d45-9521-eb11b4954f33/1/6ZQF7o9djnZOkL1mvdHomsEoCeg.mft
Manifest number: 0A39
Signing time: Sun 19 Oct 2025 15:01:24 +0000
Manifest this update: Sun 19 Oct 2025 15:01:24 +0000
Manifest next update: Mon 20 Oct 2025 15:01:24 +0000
Files and hashes: 1: 6ZQF7o9djnZOkL1mvdHomsEoCeg.crl (hash: wTV92AiN2R4/36vueAAkBkj4kyHdHYyO3F4jnBytFrE=)
2: vDzT1MfGHy3qiiGgUF2NvHG69NY.roa (hash: /QoWZln+ZcMlohGoxqm79B+9B4Oq5GX6wiGGVl8wkGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/1b9202-4869-4d45-9521-eb11b4954f33/1/6ZQF7o9djnZOkL1mvdHomsEoCeg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/1b9202-4869-4d45-9521-eb11b4954f33/1/6ZQF7o9djnZOkL1mvdHomsEoCeg.mft
rsync://rpki.ripe.net/repository/DEFAULT/6ZQF7o9djnZOkL1mvdHomsEoCeg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:54:a0:e3:9f:a8:b1:fd:e6:3c:12:d0:8c:38:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e99405ee8f5d8e764e90bd66bdd1e89ac12809e8
Validity
Not Before: Oct 19 15:01:24 2025 GMT
Not After : Oct 20 15:01:24 2025 GMT
Subject: CN=5d07d3c3fadbe44ca25dc442025a54dee467c228
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:da:46:ef:6e:35:ee:cc:85:70:70:59:02:64:
1b:4b:1b:91:6b:53:df:f3:06:d3:d7:5f:90:38:57:
75:e2:30:94:ae:55:87:47:3b:cd:71:21:4d:14:49:
00:12:e3:6e:81:14:7f:da:15:20:43:2b:e4:32:55:
31:af:5d:a7:e1:f0:d0:75:30:80:7d:a9:fe:80:7f:
28:9f:dd:0a:fd:9d:9f:52:ad:2b:5a:68:c3:3d:9c:
45:61:64:1b:6a:ea:b0:41:ee:ad:54:2b:dc:82:a7:
47:8a:a7:48:78:4f:8c:db:d4:c1:91:2e:19:19:c9:
82:8a:47:b9:28:72:5f:01:4b:a0:2f:bc:cb:17:5f:
63:87:33:79:80:c8:59:25:64:5b:32:1e:ea:4f:d5:
de:75:e4:d6:e3:a8:5c:d5:0d:0b:f9:67:32:8b:34:
5e:0b:d9:dd:4a:b9:24:70:d3:34:20:b7:3e:a0:51:
d7:b6:de:39:e8:c1:8b:3f:be:8a:55:b4:89:03:40:
c5:ff:27:dd:85:8b:29:b2:da:0f:d7:45:b7:56:95:
3d:90:59:95:3e:43:02:d3:fb:4e:3d:c8:06:a6:21:
15:f2:ca:da:3e:84:a5:7d:8e:9f:22:9a:57:0d:eb:
e7:95:c7:7e:14:e9:9c:a2:40:b0:35:92:04:98:85:
d4:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:07:D3:C3:FA:DB:E4:4C:A2:5D:C4:42:02:5A:54:DE:E4:67:C2:28
X509v3 Authority Key Identifier:
keyid:E9:94:05:EE:8F:5D:8E:76:4E:90:BD:66:BD:D1:E8:9A:C1:28:09:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ZQF7o9djnZOkL1mvdHomsEoCeg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1b9202-4869-4d45-9521-eb11b4954f33/1/6ZQF7o9djnZOkL1mvdHomsEoCeg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1b9202-4869-4d45-9521-eb11b4954f33/1/6ZQF7o9djnZOkL1mvdHomsEoCeg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:8e:e8:44:16:d9:fb:31:cb:aa:43:a4:e7:b1:a1:c1:6d:b9:
94:13:df:1b:5c:99:b7:a4:ea:3e:10:58:04:1e:e8:91:ba:41:
1e:a1:c3:d2:42:bd:1d:dc:0f:7b:d5:12:44:b7:4a:81:f5:f0:
90:cf:e7:4d:ba:9b:bd:c9:e7:d1:db:35:39:ad:11:49:e5:5f:
f4:5a:63:69:7f:ff:f0:63:11:0e:8b:87:1e:27:30:a7:7a:4b:
f6:04:a3:80:b2:3a:60:c2:26:7a:8f:15:63:35:81:90:10:c2:
6e:84:bb:dd:ee:d2:ca:5b:c3:46:4f:b0:91:b5:62:89:d6:1b:
85:ee:53:ab:94:fa:c2:65:2a:7d:ba:fc:0e:d4:b0:70:00:22:
cc:8c:48:e9:95:6d:ca:9a:5e:61:40:5c:1c:d2:22:b7:67:d7:
8b:d9:67:b9:16:8e:6a:b3:64:8d:9d:f5:13:1d:3d:54:68:54:
1d:b8:cf:e0:20:ea:c5:53:da:ae:cf:18:75:dc:22:f3:53:19:
35:c7:5d:3f:da:86:ab:0a:90:52:6e:e8:0e:a7:14:de:ad:cb:
87:05:71:7c:36:6b:13:85:5c:84:10:91:9e:ba:a1:1b:c6:fb:
63:10:97:ba:f6:4f:f5:89:44:a7:c4:90:ea:9d:af:17:a7:10:
b6:d4:d3:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:17:32 2025 by rpki-client