
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/b6409b-1638-4c7a-81f2-94f8fb3009f2/1/6O1gL9DUbTjN4ecyxlLqmVjpdpE.mft
File: 6O1gL9DUbTjN4ecyxlLqmVjpdpE.mft (raw, json)
Hash identifier: 9ZGurMulzo2Vb/kSe/0sLbCa6LXdGpdvZ5QeBKrSzMg=
Subject key identifier: 3B:73:50:24:71:B3:73:B8:AB:7E:0A:4F:E6:E5:80:2B:3D:67:48:BC
Authority key identifier: E8:ED:60:2F:D0:D4:6D:38:CD:E1:E7:32:C6:52:EA:99:58:E9:76:91
Certificate issuer: /CN=e8ed602fd0d46d38cde1e732c652ea9958e97691
Certificate serial: 0199FD349FC0E2F32FCED385C7D89541985A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6O1gL9DUbTjN4ecyxlLqmVjpdpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/b6409b-1638-4c7a-81f2-94f8fb3009f2/1/6O1gL9DUbTjN4ecyxlLqmVjpdpE.mft
Manifest number: 166A
Signing time: Sun 19 Oct 2025 16:01:48 +0000
Manifest this update: Sun 19 Oct 2025 16:01:48 +0000
Manifest next update: Mon 20 Oct 2025 16:01:48 +0000
Files and hashes: 1: 6O1gL9DUbTjN4ecyxlLqmVjpdpE.crl (hash: lqrh+Z+rhYUo5nc77ssX4XXb8fFOtDABaE1K1SUvCOs=)
2: rvzjyC9muvr4migx_xtUIzZ2FRM.roa (hash: 2jsltHZ+YtkUSfR/OVprtu2235QmWCtb64qQWKzazWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/b6409b-1638-4c7a-81f2-94f8fb3009f2/1/6O1gL9DUbTjN4ecyxlLqmVjpdpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/b6409b-1638-4c7a-81f2-94f8fb3009f2/1/6O1gL9DUbTjN4ecyxlLqmVjpdpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/6O1gL9DUbTjN4ecyxlLqmVjpdpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:9f:c0:e2:f3:2f:ce:d3:85:c7:d8:95:41:98:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8ed602fd0d46d38cde1e732c652ea9958e97691
Validity
Not Before: Oct 19 16:01:48 2025 GMT
Not After : Oct 20 16:01:48 2025 GMT
Subject: CN=3b73502471b373b8ab7e0a4fe6e5802b3d6748bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f2:36:67:a4:33:7b:b6:ac:18:9b:cc:91:66:
72:2e:8d:5c:a3:c7:8d:d4:dc:dd:8d:66:2f:c6:92:
52:4b:b8:d7:08:fc:12:d2:ee:95:f3:bf:01:71:55:
ed:ba:31:51:d5:2b:96:e3:3c:41:7b:2a:d9:64:e4:
9d:8a:e6:3e:2e:77:69:f8:04:a4:a9:1d:68:81:a1:
04:d2:06:1d:1d:ae:60:07:5d:62:1e:4a:62:e3:32:
ec:6e:49:21:21:40:2c:f0:dc:18:02:33:7f:07:cc:
9d:37:bb:0f:0e:92:78:b9:f9:f8:19:70:1b:97:e4:
cb:01:dc:bf:85:17:a9:76:c4:4e:67:2b:eb:8b:66:
6a:a9:d1:dd:28:cd:01:9e:4d:79:73:61:12:aa:56:
83:2d:65:86:c6:31:c1:46:ab:64:c3:69:0e:9a:65:
6b:09:d6:7c:bb:e0:aa:db:49:ff:9f:23:09:3f:70:
18:66:d8:5f:9a:e9:d1:f6:4e:aa:35:1c:29:51:a3:
77:98:5b:4a:23:d1:9f:5f:6e:2c:bb:1b:a2:8c:d2:
f6:9e:ff:46:c6:3a:d8:72:cb:88:01:fc:1c:0f:dd:
14:d9:53:ac:99:0a:fc:dd:32:6f:0b:88:59:51:06:
80:01:d7:1b:47:d1:1f:51:79:34:af:89:13:aa:11:
30:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:73:50:24:71:B3:73:B8:AB:7E:0A:4F:E6:E5:80:2B:3D:67:48:BC
X509v3 Authority Key Identifier:
keyid:E8:ED:60:2F:D0:D4:6D:38:CD:E1:E7:32:C6:52:EA:99:58:E9:76:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6O1gL9DUbTjN4ecyxlLqmVjpdpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/b6409b-1638-4c7a-81f2-94f8fb3009f2/1/6O1gL9DUbTjN4ecyxlLqmVjpdpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/b6409b-1638-4c7a-81f2-94f8fb3009f2/1/6O1gL9DUbTjN4ecyxlLqmVjpdpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:62:d5:fa:12:a3:a6:18:36:f7:d9:a3:ea:b3:7b:c2:c9:a5:
33:b0:1f:19:49:80:65:6d:ee:88:74:f1:81:ea:04:e2:20:0e:
84:14:ce:47:5f:50:5b:d4:8e:ba:6a:3c:11:c5:4b:1a:69:74:
c5:f0:75:a9:46:c7:8c:5c:cc:5e:6d:bc:74:9f:48:1a:28:b1:
5c:a1:12:32:aa:6d:30:dd:30:2a:f4:32:2e:18:65:df:d9:42:
3f:01:eb:97:83:0c:0d:57:99:55:41:af:ff:85:cd:56:ff:74:
62:af:e7:65:38:b4:9a:ca:68:39:7e:10:90:e6:38:ce:13:0b:
a5:ae:ca:8e:a8:a4:ba:95:08:fd:89:b5:b9:9d:08:22:e8:c9:
5a:f4:09:84:e5:fa:f6:f3:34:71:b5:91:cd:75:82:51:75:c7:
9b:ac:2a:1c:6f:81:39:de:5a:66:ea:b9:80:6a:da:eb:22:81:
35:5b:c0:dc:ce:f7:c9:81:61:25:3d:12:2d:c0:fd:12:a1:fc:
d5:3a:0a:97:51:da:90:74:7a:fc:e7:cb:6e:ad:bc:f9:82:1e:
c3:3e:00:c9:d5:c8:5a:83:f1:0e:d6:c2:b8:b1:44:0c:e0:1f:
6b:60:5c:68:6b:99:91:c3:92:fa:85:e6:e0:9a:ab:88:b9:8a:
90:c4:d0:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:38:37 2025 by rpki-client