Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.mft
File: p6TiNIImhHXBuTVjfQACwv0pk7g.mft (raw, json)
Hash identifier: vyEkuLLm8TkMEypJvqE8mcr8Qhjgn5jfE/IYCx7hRnU=
Subject key identifier: DF:FF:DF:72:38:C7:54:2B:50:71:FF:49:0A:21:5A:33:CB:67:0E:7F
Authority key identifier: A7:A4:E2:34:82:26:84:75:C1:B9:35:63:7D:00:02:C2:FD:29:93:B8
Certificate issuer: /CN=a7a4e23482268475c1b935637d0002c2fd2993b8
Certificate serial: 0199FBB360BDD5DD0542A0C6AE5118B9B35B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.mft
Manifest number: 02DA
Signing time: Sun 19 Oct 2025 09:01:00 +0000
Manifest this update: Sun 19 Oct 2025 09:01:00 +0000
Manifest next update: Mon 20 Oct 2025 09:01:00 +0000
Files and hashes: 1: AF5LwWg1dao3w02VHECRUerpukU.roa (hash: Ncs14Dy32ScG4H2HyXyIY4G9gDsZB0rdLa7JZ2atlmg=)
2: GNg5qyh_Im4ovVZo43PZo0cIDgk.roa (hash: JsYstEOr/RnKzA1W+dKnW/zW5VDgHcUDQlKG6Iu9Xvk=)
3: Gzw1ArufvsV7lun_0Q-rUPOXBGM.roa (hash: t/o+neptKVKiKxJpFxuQvJ/wrQhsyyO3eWWynGJs2d0=)
4: H6KJXCzsVKBCex8bdjdpcPzKj4k.roa (hash: ayVcJHTWFx5ebEEYZQnqngJlO1dTOXNsn34hSHck390=)
5: VsI_AW9EylW2fiJ1YDcH0sZTdk4.roa (hash: 66hyyMtNTHFirc0cG1RdPc+2uiQi7LyhRHEQCng1VvU=)
6: WhSTApE7RFBAMmW_xVnPdgMAiWQ.roa (hash: Bd3C/960PK8QK60Tck52Vy8z1GDbIMwLZtVlP2UrssE=)
7: moO5Ks17ZAWVDkWAO-sZOL7jYGk.roa (hash: vNDGafiza1LZ3cM48PDM+kPW+0J6IrOV2MqoIZsseo4=)
8: p6TiNIImhHXBuTVjfQACwv0pk7g.crl (hash: ZJPPtY4ULdTCvpBOfUzfh9OrqEHuitL3dhKMD/dD4+g=)
9: tAUwOh7-bFAje0ge2CsLFBhij_I.roa (hash: wxXEKUHCbWw2dnlts0k+6en+iFwSRN99/5HuuqUJ79U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:b3:60:bd:d5:dd:05:42:a0:c6:ae:51:18:b9:b3:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7a4e23482268475c1b935637d0002c2fd2993b8
Validity
Not Before: Oct 19 09:01:00 2025 GMT
Not After : Oct 20 09:01:00 2025 GMT
Subject: CN=dfffdf7238c7542b5071ff490a215a33cb670e7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:46:59:db:ff:b3:4d:9c:34:97:c5:56:dd:99:
6d:d1:2f:dd:c9:2d:eb:74:73:1f:92:39:78:fb:0e:
57:af:80:ed:5d:5c:be:6e:43:cd:93:cc:79:8e:ce:
ee:b6:3c:93:17:44:80:1d:1c:d0:ba:14:47:f2:5d:
89:65:c4:cf:c1:6c:5b:fd:62:7b:a3:0d:2f:5c:86:
8d:68:75:ca:19:01:45:0b:e3:a1:e3:b7:15:2c:1a:
73:4a:fb:0f:f6:4a:ca:eb:0e:c6:11:af:d2:51:07:
4d:cd:8b:a3:21:03:59:8a:b7:34:3c:8b:86:47:e6:
3e:4f:47:0a:af:93:db:d3:62:c8:9e:47:02:ca:6b:
e1:00:92:b6:ca:55:bc:3f:81:7b:8d:08:0c:4e:a4:
2b:4c:9b:42:5b:e7:73:91:12:60:73:70:ce:d1:6a:
ee:0a:c6:11:22:d5:51:38:f1:05:ad:45:b2:da:31:
49:64:4f:f3:16:fc:81:38:c1:9c:c3:fb:72:36:68:
6d:5d:0b:49:fb:90:61:2a:db:31:5f:d0:1f:44:c0:
38:97:7f:f5:32:45:c5:b2:88:94:0c:95:80:c5:74:
96:5e:87:c3:03:cb:31:b2:46:2c:b8:48:73:5f:62:
5d:fd:b8:b9:a7:ab:89:11:f8:bc:51:60:99:e2:7f:
dd:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:FF:DF:72:38:C7:54:2B:50:71:FF:49:0A:21:5A:33:CB:67:0E:7F
X509v3 Authority Key Identifier:
keyid:A7:A4:E2:34:82:26:84:75:C1:B9:35:63:7D:00:02:C2:FD:29:93:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:b9:8e:6e:b8:5e:42:37:e1:e3:c1:cb:b7:4d:03:f2:75:b7:
a7:5d:96:fa:f4:46:58:f8:5d:11:d0:6a:0b:11:2f:63:b1:43:
8a:ce:e1:58:1c:90:f9:e4:b7:84:69:d2:f1:d3:25:66:19:54:
fb:b4:7e:9d:c2:87:3f:bf:2e:1d:10:a1:e1:77:05:cb:f2:4f:
ca:df:6f:b6:9e:e8:1e:ce:cd:84:89:9d:eb:d9:11:9f:a5:5b:
8f:b6:ce:27:67:10:ca:3a:5e:cc:78:20:c6:43:5d:a7:2d:3a:
1f:07:54:52:dc:ca:6a:01:a5:d2:f5:13:4e:25:7d:30:da:0e:
e0:4c:e5:5b:dd:7b:37:2b:d6:2f:a9:5b:f6:84:ca:f8:8e:80:
85:c9:9a:5b:61:a1:fa:f6:b3:9b:ce:10:40:ee:2d:1e:4c:86:
84:87:75:21:a7:33:8c:16:a3:1b:f8:e1:8d:a5:b4:4e:53:76:
d0:ef:71:1a:d8:bc:36:08:1a:67:01:d9:de:54:26:24:bc:4f:
9b:bb:c0:ef:7b:d0:f4:9c:21:08:c6:d0:83:7a:30:50:d8:f0:
83:6c:a1:54:51:6d:2e:42:0c:e6:07:74:c0:60:01:cf:8c:8f:
d0:b6:9f:31:df:42:91:c0:ef:8a:7f:fc:63:87:35:ca:eb:f9:
4e:34:f4:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:11:08 2025 by rpki-client