Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/e177f7-6348-4744-ad9c-76189bd4a040/1/6GNg24H1BcXpqbWtEKgcZPSoW9I.mft
File: 6GNg24H1BcXpqbWtEKgcZPSoW9I.mft (raw, json)
Hash identifier: Iij5VB/AS0KZHCYLyuYTN4xk7Rsza0sxbepgLw1nXqQ=
Subject key identifier: 6A:65:B0:DD:2A:A9:20:33:1F:FF:F9:8E:F6:FF:6E:D6:B3:90:60:B6
Authority key identifier: E8:63:60:DB:81:F5:05:C5:E9:A9:B5:AD:10:A8:1C:64:F4:A8:5B:D2
Certificate issuer: /CN=e86360db81f505c5e9a9b5ad10a81c64f4a85bd2
Certificate serial: 0199FA6A550097B5031FAD124561555916C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6GNg24H1BcXpqbWtEKgcZPSoW9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/e177f7-6348-4744-ad9c-76189bd4a040/1/6GNg24H1BcXpqbWtEKgcZPSoW9I.mft
Manifest number: 1670
Signing time: Sun 19 Oct 2025 03:01:36 +0000
Manifest this update: Sun 19 Oct 2025 03:01:36 +0000
Manifest next update: Mon 20 Oct 2025 03:01:36 +0000
Files and hashes: 1: 6GNg24H1BcXpqbWtEKgcZPSoW9I.crl (hash: DjIFKeEeRobkSQ8GW+GJyWSD4JL5A660GoO1DmXNhrg=)
2: uADkX3srvSz7h5-6p6oWNf6171A.roa (hash: JFtPLvs27wHExEiH+3v7Jikl9EHdIYjblSR25Lrk4HQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/e177f7-6348-4744-ad9c-76189bd4a040/1/6GNg24H1BcXpqbWtEKgcZPSoW9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/e177f7-6348-4744-ad9c-76189bd4a040/1/6GNg24H1BcXpqbWtEKgcZPSoW9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/6GNg24H1BcXpqbWtEKgcZPSoW9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 03:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:6a:55:00:97:b5:03:1f:ad:12:45:61:55:59:16:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e86360db81f505c5e9a9b5ad10a81c64f4a85bd2
Validity
Not Before: Oct 19 03:01:36 2025 GMT
Not After : Oct 20 03:01:36 2025 GMT
Subject: CN=6a65b0dd2aa920331ffff98ef6ff6ed6b39060b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:79:32:cd:e5:16:fb:1e:15:ef:6f:8b:74:fa:
6c:c3:ee:30:c2:ca:df:0b:2f:23:9d:6f:a1:b9:99:
d5:01:61:4e:69:cf:1c:d7:70:54:97:40:8b:f5:38:
0a:04:26:e2:e9:01:9a:9f:c4:6c:30:00:18:87:92:
8c:14:f9:6b:2c:4a:30:5d:b1:b3:aa:a1:c6:6e:f9:
d7:cc:2b:1b:23:4f:e5:92:ba:86:ac:e7:1f:3f:2f:
30:72:9b:a6:7a:75:b0:4c:dd:b5:96:e8:9d:76:5e:
1b:95:c0:bd:8b:d0:ca:6d:7f:8f:cb:49:f9:38:01:
c0:9c:24:81:98:cb:b1:86:cd:bd:09:db:eb:ac:97:
38:7c:2e:61:77:0e:d8:f2:24:0e:e0:fc:f0:21:6e:
a2:f3:84:1a:a7:93:56:68:3b:44:b5:4c:c1:2a:9f:
1d:4a:0f:2a:67:99:d8:89:b3:b4:c7:96:be:59:3f:
e7:fd:98:32:2a:fc:b3:5f:08:11:54:8e:27:05:0c:
7d:21:5a:bc:0e:f8:6a:3b:e7:41:48:ee:c3:2c:29:
8f:15:61:fb:ea:5c:c5:6a:0a:02:c9:68:40:d6:a1:
09:f1:f1:e7:ea:bc:5c:58:2e:24:56:af:7c:94:91:
5e:e0:7f:62:74:56:b3:11:e7:94:4a:9a:69:10:ae:
5e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:65:B0:DD:2A:A9:20:33:1F:FF:F9:8E:F6:FF:6E:D6:B3:90:60:B6
X509v3 Authority Key Identifier:
keyid:E8:63:60:DB:81:F5:05:C5:E9:A9:B5:AD:10:A8:1C:64:F4:A8:5B:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6GNg24H1BcXpqbWtEKgcZPSoW9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e177f7-6348-4744-ad9c-76189bd4a040/1/6GNg24H1BcXpqbWtEKgcZPSoW9I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e177f7-6348-4744-ad9c-76189bd4a040/1/6GNg24H1BcXpqbWtEKgcZPSoW9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:1c:cc:eb:e3:9c:d6:a8:d5:87:0b:0a:bc:1d:84:64:80:2a:
55:d6:b7:10:54:1c:5b:1c:ca:25:5f:d6:d3:27:48:62:9a:9d:
dd:58:25:6c:a0:1d:d9:1e:34:12:63:5a:a8:4e:b5:dc:1c:e9:
ea:04:c8:0d:6b:94:73:5a:f3:32:38:c1:00:2f:c2:4f:c8:a3:
72:be:b5:bd:a6:32:17:6f:82:bc:d6:ab:dd:ed:fd:a0:fa:b9:
c4:37:f3:4c:8a:7f:2e:b2:0d:76:f5:f2:7e:9c:3b:c8:c4:2f:
4a:18:11:52:af:d1:be:ff:81:a3:20:38:74:98:01:92:71:21:
f6:8c:c0:95:f5:b0:7c:23:0e:d5:fd:43:14:e2:fa:78:2f:7d:
19:bc:88:24:db:74:93:bc:b5:f8:1f:a5:f2:2b:38:82:ab:63:
4c:db:f0:ff:95:74:a7:9b:eb:73:a0:22:f8:75:14:e9:d7:e3:
87:c6:df:b2:e9:cd:17:01:c7:f7:82:eb:c5:ac:7a:ed:5d:72:
cd:79:3e:62:98:e6:85:e6:10:48:9e:70:b9:b1:2f:f1:09:ee:
87:c9:7e:65:2f:fd:13:de:85:12:f6:29:a2:e3:bb:85:f1:69:
50:36:ac:d2:aa:46:a4:92:29:07:54:45:aa:3a:5b:96:bb:3e:
e7:72:f7:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 12:54:58 2025 by rpki-client