Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/8a495d-c435-42dc-9123-ecd7fee7c1b0/1/a6TjY5dLLvkOywU0CvXa9rJBYMs.mft
File: a6TjY5dLLvkOywU0CvXa9rJBYMs.mft (raw, json)
Hash identifier: BFH+lMDvdHM9nx0QzIaSRx4hXGdCkJvOHwxRT7vb2t0=
Subject key identifier: 96:24:0B:6E:D7:EF:1A:E4:7B:A9:0E:F1:80:69:E1:BE:B9:57:FC:D2
Authority key identifier: 6B:A4:E3:63:97:4B:2E:F9:0E:CB:05:34:0A:F5:DA:F6:B2:41:60:CB
Certificate issuer: /CN=6ba4e363974b2ef90ecb05340af5daf6b24160cb
Certificate serial: 0199FBEB225746FC2958D77F88AA7321782E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a6TjY5dLLvkOywU0CvXa9rJBYMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/8a495d-c435-42dc-9123-ecd7fee7c1b0/1/a6TjY5dLLvkOywU0CvXa9rJBYMs.mft
Manifest number: 0C2B
Signing time: Sun 19 Oct 2025 10:01:54 +0000
Manifest this update: Sun 19 Oct 2025 10:01:54 +0000
Manifest next update: Mon 20 Oct 2025 10:01:54 +0000
Files and hashes: 1: 6m7j2x5GGq7W52qf5FgsTL2uZFM.roa (hash: yw3o2fOj27y6FNYr5DEC0pNcsBL8VcXlNTgJH2EfiEg=)
2: a6TjY5dLLvkOywU0CvXa9rJBYMs.crl (hash: pqP7ZhNf2l4dJdZCKhmzpMqVcS7hFXLrcHHBZeYFw2Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/8a495d-c435-42dc-9123-ecd7fee7c1b0/1/a6TjY5dLLvkOywU0CvXa9rJBYMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/8a495d-c435-42dc-9123-ecd7fee7c1b0/1/a6TjY5dLLvkOywU0CvXa9rJBYMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/a6TjY5dLLvkOywU0CvXa9rJBYMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:22:57:46:fc:29:58:d7:7f:88:aa:73:21:78:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ba4e363974b2ef90ecb05340af5daf6b24160cb
Validity
Not Before: Oct 19 10:01:54 2025 GMT
Not After : Oct 20 10:01:54 2025 GMT
Subject: CN=96240b6ed7ef1ae47ba90ef18069e1beb957fcd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:45:b7:38:ff:91:f1:f5:aa:90:ca:98:7c:f9:
b5:79:c1:82:85:2b:01:62:1a:67:d3:7c:ee:df:cb:
cd:4e:cc:0e:0e:db:2b:a3:66:89:2f:3a:04:d9:cf:
09:cd:bf:9f:0c:14:b9:6d:c6:34:67:d6:1f:6b:b0:
8b:e4:56:2d:58:aa:ca:d5:ac:28:10:1b:70:91:5d:
f5:5e:bc:1b:1c:23:c8:2b:ab:19:44:72:91:3a:20:
3c:59:ed:4c:eb:0c:8a:61:18:4e:d7:67:49:2e:a3:
58:e6:3a:a2:01:19:2d:39:39:46:0e:b3:fa:ae:62:
71:b9:dd:42:fc:8a:3e:ac:42:24:a5:82:af:92:dc:
e9:9c:14:3e:75:4e:2b:a9:51:4c:f6:1a:81:14:91:
ff:09:43:46:0b:6c:10:03:69:74:69:5a:db:f8:17:
c3:d3:ab:a6:a2:8a:8f:9b:89:1f:ec:a5:4e:8c:0d:
e3:a5:11:c5:ee:7e:06:9a:00:37:c0:d6:e1:f5:ff:
db:e4:36:09:6b:ae:4f:c8:cd:ef:2c:42:6a:00:4f:
74:48:d9:96:bd:2c:02:19:6b:40:18:fd:c3:fc:f2:
15:05:54:3b:89:97:0d:37:ab:de:89:1c:63:30:90:
9f:2d:46:46:57:f2:8d:47:65:25:57:99:a6:9a:1a:
ed:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:24:0B:6E:D7:EF:1A:E4:7B:A9:0E:F1:80:69:E1:BE:B9:57:FC:D2
X509v3 Authority Key Identifier:
keyid:6B:A4:E3:63:97:4B:2E:F9:0E:CB:05:34:0A:F5:DA:F6:B2:41:60:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6TjY5dLLvkOywU0CvXa9rJBYMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/8a495d-c435-42dc-9123-ecd7fee7c1b0/1/a6TjY5dLLvkOywU0CvXa9rJBYMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/8a495d-c435-42dc-9123-ecd7fee7c1b0/1/a6TjY5dLLvkOywU0CvXa9rJBYMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:ce:c3:50:74:eb:a6:63:e8:03:fd:60:42:db:0b:aa:05:65:
2f:d8:bd:cb:81:c9:78:60:d2:7e:2b:fc:16:74:81:22:76:a8:
58:0f:22:34:c3:8f:6b:a7:a9:16:c5:20:00:7d:4d:6c:a2:79:
2d:47:e7:15:81:fe:a1:4e:c9:13:e1:4b:e5:73:68:3b:16:61:
0a:ad:30:21:99:fb:0e:6a:a2:80:93:ab:bb:d2:31:94:c4:95:
de:0d:17:22:57:61:b3:15:56:7a:5a:43:b2:07:5e:5b:fa:46:
87:c3:e3:c7:b4:f7:f5:9c:22:9c:cb:e0:e1:dc:34:f0:f7:80:
58:85:82:ea:e8:f0:b6:04:ab:5e:18:9d:a5:43:1f:d0:6f:87:
2f:3a:f5:54:35:30:f5:5f:e6:9b:42:7e:28:22:97:1b:b7:97:
5f:e8:e5:08:b7:56:d7:d6:47:89:9b:14:a9:e1:c6:e0:aa:e5:
ee:ee:ef:a3:31:0b:d8:e3:8d:72:38:0e:18:62:6b:9d:a6:f9:
03:03:e1:3d:81:52:37:b9:a9:b4:ef:58:1c:76:78:cc:14:56:
1a:2a:77:0f:63:29:41:a2:4e:c7:72:b2:a3:d5:f8:84:fb:1d:
d7:76:d3:97:27:74:f1:51:99:9e:51:40:5f:97:c7:80:45:94:
e8:2e:ba:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:54:51 2025 by rpki-client