Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.mft
File: 6rR29nfNDDKY0oEeYPSOGymzr-8.mft (raw, json)
Hash identifier: +lPb9Nf6Z5mbhxJKn//vkYLkMNZajNljd0UK9k/jUFU=
Subject key identifier: 9E:D3:37:DE:83:4F:29:AF:1D:18:51:33:3A:96:32:A3:88:39:9E:A3
Authority key identifier: EA:B4:76:F6:77:CD:0C:32:98:D2:81:1E:60:F4:8E:1B:29:B3:AF:EF
Certificate issuer: /CN=eab476f677cd0c3298d2811e60f48e1b29b3afef
Certificate serial: 0199FC213A5326B7B30840FCD6288A4BA1BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6rR29nfNDDKY0oEeYPSOGymzr-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.mft
Manifest number: 1526
Signing time: Sun 19 Oct 2025 11:00:59 +0000
Manifest this update: Sun 19 Oct 2025 11:00:59 +0000
Manifest next update: Mon 20 Oct 2025 11:00:59 +0000
Files and hashes: 1: 0UzsGme_k2nP3xmC23x_NIyPI4I.roa (hash: 9GCcsHrAPMsxEip94efAnxBNP67TuW3l3gu24kwBziA=)
2: 6rR29nfNDDKY0oEeYPSOGymzr-8.crl (hash: ZL4lh8/5VK97FTiONQKikuB9qT2ih0NxIi8uaKP1PSw=)
3: QhX-bY8Pyu0IVpXlU-objdMMYgU.roa (hash: AtV/TPeQmqPYNR6TwwiivnQLG1K0ZguaxSrJsKzoymM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/6rR29nfNDDKY0oEeYPSOGymzr-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:3a:53:26:b7:b3:08:40:fc:d6:28:8a:4b:a1:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eab476f677cd0c3298d2811e60f48e1b29b3afef
Validity
Not Before: Oct 19 11:00:59 2025 GMT
Not After : Oct 20 11:00:59 2025 GMT
Subject: CN=9ed337de834f29af1d1851333a9632a388399ea3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ff:fe:12:27:17:36:0f:b3:ee:6c:33:bc:25:
aa:25:16:32:53:cf:be:18:80:a1:c6:7e:bc:65:c7:
c9:cf:6e:94:5c:35:1f:7d:e5:c3:de:77:2d:a5:27:
4d:17:e5:87:fa:d9:d9:9c:1c:1e:72:a4:12:46:68:
3c:a9:e2:f2:42:60:a6:1f:3c:19:e5:6f:15:55:af:
33:f8:75:f1:96:f8:7a:5c:d9:60:c5:a4:01:e2:be:
88:e4:46:5d:f1:c6:85:ed:8c:be:81:6f:65:3f:9a:
7d:a7:49:6d:e8:d1:b9:51:86:9a:16:61:aa:dd:71:
aa:53:47:88:3c:d2:8f:66:6b:71:af:54:b5:08:53:
cb:29:9a:24:f7:ed:6b:f8:ae:4d:4f:db:8b:88:a8:
b0:e4:8c:a1:72:79:bb:4c:47:2e:10:1a:72:7c:bf:
d1:30:0c:50:39:8b:3b:69:25:b8:7e:b6:6d:89:be:
29:8e:a4:0c:7c:7a:a0:03:e0:f9:d7:4e:87:c4:bb:
69:43:fb:47:c1:62:5c:d6:36:a5:eb:20:51:47:c6:
77:88:3a:76:f4:fc:04:52:23:05:f0:b9:45:0d:cb:
21:fb:d6:e3:3b:5a:77:e8:80:44:c7:c3:b3:b7:87:
53:9f:12:39:33:87:fa:38:25:74:ba:49:1a:d9:ae:
22:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:D3:37:DE:83:4F:29:AF:1D:18:51:33:3A:96:32:A3:88:39:9E:A3
X509v3 Authority Key Identifier:
keyid:EA:B4:76:F6:77:CD:0C:32:98:D2:81:1E:60:F4:8E:1B:29:B3:AF:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6rR29nfNDDKY0oEeYPSOGymzr-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:08:6d:37:db:99:89:fb:7b:65:99:4f:d3:bd:8f:a2:05:d1:
62:71:3b:1b:5a:10:25:bf:33:30:65:8e:83:d7:1d:96:98:95:
9d:bf:44:e7:b3:52:99:bb:f0:be:4d:86:c1:81:ce:87:c7:6c:
14:31:78:a3:a9:9e:3a:10:20:70:d8:21:59:77:56:63:6d:0a:
70:ec:2a:f1:a7:ed:81:55:97:cc:c9:b1:e5:f5:08:2e:45:e4:
ab:ee:e6:49:c1:82:49:5e:2c:e4:3f:e0:bb:ff:86:cb:c2:b8:
bb:c0:db:10:ae:1e:0f:d7:cb:9d:f8:3e:df:4d:33:15:81:0f:
4f:92:ba:66:94:e3:88:c3:26:99:2c:29:9d:12:49:d4:1c:d2:
e1:70:3e:7f:05:dd:83:41:fd:6c:55:db:d9:aa:bc:ee:18:fe:
1b:5a:d6:06:30:29:a7:7b:22:ea:3a:30:3b:b5:5b:54:ef:0b:
34:56:b5:57:d8:78:06:b1:70:48:33:1c:24:53:1c:c1:de:c3:
f8:0f:ef:da:53:4e:32:d2:91:dd:e2:77:3c:92:c5:98:0e:b9:
c8:e4:c1:14:d2:3c:35:66:6a:6c:ad:12:4e:65:28:29:c4:2a:
68:0a:38:97:89:db:fc:18:9f:a7:9b:b9:25:67:c0:9a:f2:88:
7d:2f:56:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:30:10 2025 by rpki-client