Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/9c1e83-e714-4c45-8685-586b6d047878/1/6pDtaEipyh7yAQ5jTOIbbJrd62I.mft
File: 6pDtaEipyh7yAQ5jTOIbbJrd62I.mft (raw, json)
Hash identifier: DVREFESqNK7aciEJoP29dD6okZiBz3U/0bjtj1r+NqQ=
Subject key identifier: 33:C3:37:06:14:02:B7:53:E7:1E:31:FB:7B:EB:48:B8:F6:CD:64:74
Authority key identifier: EA:90:ED:68:48:A9:CA:1E:F2:01:0E:63:4C:E2:1B:6C:9A:DD:EB:62
Certificate issuer: /CN=ea90ed6848a9ca1ef2010e634ce21b6c9addeb62
Certificate serial: 0199FF22B152B590DB4F3F2D0426E085718B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6pDtaEipyh7yAQ5jTOIbbJrd62I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/9c1e83-e714-4c45-8685-586b6d047878/1/6pDtaEipyh7yAQ5jTOIbbJrd62I.mft
Manifest number: 03A6
Signing time: Mon 20 Oct 2025 01:01:27 +0000
Manifest this update: Mon 20 Oct 2025 01:01:27 +0000
Manifest next update: Tue 21 Oct 2025 01:01:27 +0000
Files and hashes: 1: 6pDtaEipyh7yAQ5jTOIbbJrd62I.crl (hash: kwxA5/+n40KYwPV9zxf2dUZcPFupfIEQO05jdLrQwPk=)
2: Ph-U5dqNHzdXtAC4s8SqLkw0HnU.roa (hash: Useq54Tz9psDJFY8ug181fsHtAqbkZCsf85Cmb59VeM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/9c1e83-e714-4c45-8685-586b6d047878/1/6pDtaEipyh7yAQ5jTOIbbJrd62I.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/9c1e83-e714-4c45-8685-586b6d047878/1/6pDtaEipyh7yAQ5jTOIbbJrd62I.mft
rsync://rpki.ripe.net/repository/DEFAULT/6pDtaEipyh7yAQ5jTOIbbJrd62I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:22:b1:52:b5:90:db:4f:3f:2d:04:26:e0:85:71:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea90ed6848a9ca1ef2010e634ce21b6c9addeb62
Validity
Not Before: Oct 20 01:01:27 2025 GMT
Not After : Oct 21 01:01:27 2025 GMT
Subject: CN=33c337061402b753e71e31fb7beb48b8f6cd6474
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:fa:c3:39:1c:21:bd:ab:6c:2e:50:00:c8:b5:
dd:60:f8:1d:dc:b1:e4:92:61:d8:69:d6:51:a9:e6:
4c:bc:7d:9d:ee:ed:7f:ab:f7:22:f4:b6:c2:90:93:
76:6e:5a:79:ee:72:e3:25:13:b6:67:bb:a4:bc:cf:
9c:8f:6f:a4:9c:97:f3:b1:34:40:b8:61:39:23:97:
6d:74:1a:90:f4:24:12:d4:d3:c4:66:b5:dc:a5:1c:
3b:98:36:24:1f:4a:31:3a:d4:a4:51:b0:d4:f2:fa:
2e:c5:fe:3f:55:4f:cd:7a:14:02:d7:fb:19:b9:4a:
52:96:a7:26:41:5f:a7:d6:ea:9f:2e:a8:fd:82:61:
c2:cb:04:3f:a6:78:81:bc:44:2d:9a:ee:8d:9b:c1:
ed:0e:d3:21:df:fd:66:e9:b4:11:6d:16:1e:00:9b:
76:7d:5b:49:ee:2e:50:4e:2e:db:42:1e:87:16:00:
28:0a:08:3e:7c:c7:0d:25:1f:81:ad:55:b5:ab:af:
11:b9:7a:dc:0e:e9:82:23:cb:95:bc:ca:d1:50:6e:
59:e3:df:20:db:cd:e3:5a:da:7a:ae:59:66:aa:02:
aa:d0:ce:66:7c:20:32:20:d3:b5:f9:68:39:13:a9:
85:0d:d9:48:37:8c:6e:5e:53:bc:b0:e3:13:45:19:
63:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:C3:37:06:14:02:B7:53:E7:1E:31:FB:7B:EB:48:B8:F6:CD:64:74
X509v3 Authority Key Identifier:
keyid:EA:90:ED:68:48:A9:CA:1E:F2:01:0E:63:4C:E2:1B:6C:9A:DD:EB:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6pDtaEipyh7yAQ5jTOIbbJrd62I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/9c1e83-e714-4c45-8685-586b6d047878/1/6pDtaEipyh7yAQ5jTOIbbJrd62I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/9c1e83-e714-4c45-8685-586b6d047878/1/6pDtaEipyh7yAQ5jTOIbbJrd62I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:ff:7b:b2:6b:5f:e8:e8:2e:ca:35:9e:14:de:4e:b8:bd:19:
05:5b:68:71:b6:2f:a2:22:f3:b6:d8:24:b8:e2:56:17:f5:48:
e0:54:1e:22:c4:95:b3:c1:91:03:42:32:d7:59:49:bb:c8:5b:
12:81:e6:88:37:38:09:e6:4d:8c:c0:ee:bb:86:60:b2:cf:16:
fd:4e:3f:55:43:ef:00:32:86:44:b7:3e:20:ff:6e:34:38:f7:
b6:8a:2c:de:ad:b6:29:be:ee:cb:d4:a0:19:82:4f:dc:da:e5:
1d:c1:ed:ad:5a:bb:65:08:42:3f:45:e7:aa:47:a9:f6:15:db:
77:f6:7d:24:13:d2:42:d6:5a:06:70:fa:9a:c5:f3:29:60:76:
51:61:45:5f:2d:14:74:14:87:1d:4e:ab:9f:bd:5e:3f:22:30:
22:05:9c:46:23:f5:9a:88:df:9c:6c:9c:8e:de:06:de:62:ec:
87:47:88:f8:d6:21:60:01:02:2b:a2:c8:2f:7b:55:de:84:43:
ec:f6:bc:f6:30:f1:78:5b:f3:aa:ac:e0:3f:91:e5:e9:19:dd:
f2:05:0d:c0:33:ba:58:18:3c:70:c9:4c:fd:c4:e9:f1:fa:3a:
8e:b6:d4:d4:62:e6:64:45:bf:43:54:9e:05:7f:b2:78:25:b2:
8a:f4:f6:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:46:58 2025 by rpki-client