Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/1af4a5-0d6c-4776-be5c-be852f644201/1/6RbcnbTknecbL9CBna6FOusFOwY.mft
File: 6RbcnbTknecbL9CBna6FOusFOwY.mft (raw, json)
Hash identifier: XZAOgKNJiT6BqILUTH9peVID1No6DlcGdFCy8+cXgJU=
Subject key identifier: 04:5C:3F:4E:05:01:12:B5:22:6F:13:98:A1:8D:34:6F:1F:AA:6D:E4
Authority key identifier: E9:16:DC:9D:B4:E4:9D:E7:1B:2F:D0:81:9D:AE:85:3A:EB:05:3B:06
Certificate issuer: /CN=e916dc9db4e49de71b2fd0819dae853aeb053b06
Certificate serial: 0199FE46FA8ABEFEE04F39592AD615A8A102
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6RbcnbTknecbL9CBna6FOusFOwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/1af4a5-0d6c-4776-be5c-be852f644201/1/6RbcnbTknecbL9CBna6FOusFOwY.mft
Manifest number: 09D8
Signing time: Sun 19 Oct 2025 21:01:28 +0000
Manifest this update: Sun 19 Oct 2025 21:01:28 +0000
Manifest next update: Mon 20 Oct 2025 21:01:28 +0000
Files and hashes: 1: 6RbcnbTknecbL9CBna6FOusFOwY.crl (hash: RMIz8M0e4IuEa0pgUw99tL5JwfM8sGOoLQb0rebsKqo=)
2: KcWyo6HDH_f-Oalgo-AMzFyAZhU.roa (hash: lf0GIwDADpEwI5JyEJwH/aQKBfcwZ4TLIhoTMR/zw40=)
3: tjyIf3oxCMR8zuV3qyPRgoZFUCA.roa (hash: OCg1Zwo9+MN1J/jSL9tu7iFmbPA/CvM7f/+7TVzMxhg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/1af4a5-0d6c-4776-be5c-be852f644201/1/6RbcnbTknecbL9CBna6FOusFOwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/1af4a5-0d6c-4776-be5c-be852f644201/1/6RbcnbTknecbL9CBna6FOusFOwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6RbcnbTknecbL9CBna6FOusFOwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:46:fa:8a:be:fe:e0:4f:39:59:2a:d6:15:a8:a1:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e916dc9db4e49de71b2fd0819dae853aeb053b06
Validity
Not Before: Oct 19 21:01:28 2025 GMT
Not After : Oct 20 21:01:28 2025 GMT
Subject: CN=045c3f4e050112b5226f1398a18d346f1faa6de4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a1:a8:11:cb:3d:3f:22:be:2c:4b:2d:e1:d4:
80:68:5b:98:a4:2c:5a:87:2d:9f:c5:76:9b:3e:80:
d1:1a:8a:72:16:bd:23:fd:4e:1a:40:65:6e:94:bf:
99:33:1f:d8:ef:bc:fd:d6:82:87:86:32:44:7b:b0:
b7:b0:67:0c:46:fb:26:79:4e:6f:d5:26:f1:88:de:
8e:31:2b:03:4f:2c:ba:8f:a3:2b:7b:dd:41:73:d3:
ea:b1:1e:32:c2:11:28:46:eb:a2:e6:2b:c5:c7:6b:
0d:ae:03:8c:9d:53:6f:9c:9f:39:de:18:48:87:5f:
80:bb:5f:55:18:c2:c5:76:f8:d7:5f:72:98:f2:41:
7d:81:38:11:f8:15:24:72:00:ab:91:68:4b:e7:2b:
8c:e8:93:c6:ef:51:1d:72:78:dc:a2:42:00:34:9d:
a2:62:3b:df:fd:34:d4:be:1f:4e:14:67:9c:ad:3b:
c3:d4:2f:d6:5c:50:2b:75:80:1c:54:a0:58:78:fb:
a0:53:bd:14:f8:ac:67:28:78:22:e9:13:23:84:57:
bc:c2:09:91:70:e4:1e:fe:f5:c6:18:ba:e3:7c:fa:
63:73:68:bb:34:5d:41:09:60:6b:23:0c:f4:bb:49:
fa:40:ee:a7:fe:97:08:8c:9d:68:d4:f1:e8:15:4d:
bc:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:5C:3F:4E:05:01:12:B5:22:6F:13:98:A1:8D:34:6F:1F:AA:6D:E4
X509v3 Authority Key Identifier:
keyid:E9:16:DC:9D:B4:E4:9D:E7:1B:2F:D0:81:9D:AE:85:3A:EB:05:3B:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6RbcnbTknecbL9CBna6FOusFOwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/1af4a5-0d6c-4776-be5c-be852f644201/1/6RbcnbTknecbL9CBna6FOusFOwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/1af4a5-0d6c-4776-be5c-be852f644201/1/6RbcnbTknecbL9CBna6FOusFOwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:2e:77:e8:4e:af:81:01:68:17:f7:4a:fe:e6:6e:b7:04:6f:
e9:d4:08:87:97:50:96:e6:40:6b:6a:f5:90:6e:c2:09:85:10:
77:01:38:11:94:5d:2a:1a:e4:77:ed:e3:c9:33:b7:a7:05:75:
87:4b:11:1f:e9:8f:16:fc:61:4b:cb:ae:da:90:6e:45:d7:c5:
2a:e8:43:2b:05:09:2d:29:79:c2:29:34:6b:a0:33:a9:73:1b:
8f:f5:bd:32:6b:81:aa:43:6d:32:27:4e:05:c8:94:37:bd:6c:
b6:00:c0:2b:e4:5f:dc:f3:72:1f:65:e5:e9:8e:27:37:79:70:
f0:cd:d6:47:af:71:8d:ba:4d:6a:23:51:ea:3b:a7:fa:a9:69:
e1:5f:d0:eb:5e:25:91:7e:b3:cd:a1:6c:15:0e:7f:33:a5:a7:
cb:e0:42:9a:a1:46:de:af:0f:a6:86:f2:ae:67:bb:c2:da:71:
66:4d:de:7f:ff:b7:c5:d4:39:3b:fa:2b:d4:7f:74:56:12:72:
f2:d0:64:d0:b4:31:a0:90:a6:a2:2e:a0:b3:d4:7c:97:25:17:
74:a7:95:9c:62:1f:79:93:90:13:61:31:e3:fa:5a:dd:8b:df:
33:5c:2d:32:bf:f9:a4:e5:ef:bd:36:4c:6c:4b:3a:d2:47:3d:
8f:66:1c:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:32:10 2025 by rpki-client