Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/H6isN_lpUWlif3XgmJYzlt6WOMw.mft
File: H6isN_lpUWlif3XgmJYzlt6WOMw.mft (raw, json)
Hash identifier: rRyHmvkagolbkv1uB6ZPp4ojRdKp6J1r49nc3A35uKc=
Subject key identifier: 6A:8F:F1:DC:9D:CC:8E:CC:A2:BA:8C:89:29:ED:CC:7A:EE:5F:A6:61
Authority key identifier: 1F:A8:AC:37:F9:69:51:69:62:7F:75:E0:98:96:33:96:DE:96:38:CC
Certificate issuer: /CN=1fa8ac37f9695169627f75e098963396de9638cc
Certificate serial: 0199FD6AE0B87B10A968A10B248A20500881
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H6isN_lpUWlif3XgmJYzlt6WOMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/H6isN_lpUWlif3XgmJYzlt6WOMw.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 17:01:03 +0000
Manifest this update: Sun 19 Oct 2025 17:01:03 +0000
Manifest next update: Mon 20 Oct 2025 17:01:03 +0000
Files and hashes: 1: EV_VJQ7znLLT_4jLuRQdPiIqgco.roa (hash: D3X5PT8yDu7pN/mU+PmRQS2ADQ706uf76HlBQmopR6o=)
2: H6isN_lpUWlif3XgmJYzlt6WOMw.crl (hash: qxE5sFM6ypW6khScZCAmxgYP9QPmVMcKOYciQTKMWaQ=)
3: _A233dG0OsivwYkQExiSR967RqA.roa (hash: W1a0C5qkdasTQfph8n3hvMTYG6/PIGL4cSCJYs2ipZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/H6isN_lpUWlif3XgmJYzlt6WOMw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/H6isN_lpUWlif3XgmJYzlt6WOMw.mft
rsync://rpki.ripe.net/repository/DEFAULT/H6isN_lpUWlif3XgmJYzlt6WOMw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6a:e0:b8:7b:10:a9:68:a1:0b:24:8a:20:50:08:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fa8ac37f9695169627f75e098963396de9638cc
Validity
Not Before: Oct 19 17:01:03 2025 GMT
Not After : Oct 20 17:01:03 2025 GMT
Subject: CN=6a8ff1dc9dcc8ecca2ba8c8929edcc7aee5fa661
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e0:09:a0:0b:89:84:44:f8:aa:7c:86:2b:90:
07:fa:b0:71:a7:11:53:cb:62:e1:3d:56:42:ee:76:
bb:b8:d0:11:43:39:8a:a3:c7:08:7c:61:55:59:3e:
ca:ee:65:1f:c2:15:cf:f4:1a:69:b9:7a:f4:02:35:
de:02:e9:a2:61:61:82:2b:3c:e3:8c:14:bd:72:da:
f1:3b:cd:e1:ad:09:94:c7:4d:1e:a8:10:0f:0c:dc:
3a:a0:48:39:be:e4:42:aa:65:3e:75:03:60:0c:a8:
92:62:08:e2:fd:71:40:70:48:46:ce:03:16:0e:9a:
a9:ef:34:f1:ef:c2:6c:99:f9:31:4d:5d:90:d1:94:
8a:2e:2b:36:eb:0c:bc:5d:32:91:ce:45:5b:6a:87:
80:c7:3a:c1:69:df:26:79:b3:71:11:98:73:98:11:
d4:67:fd:ae:ec:7f:de:04:53:91:8e:37:2b:ad:ad:
0a:41:31:59:ee:a2:7a:20:1a:a1:20:bd:f9:65:81:
5e:c9:05:a0:61:5b:b9:d6:11:40:51:22:3d:89:73:
33:dc:fe:c8:7a:7e:2c:19:14:74:75:29:ef:f3:ae:
0e:36:5e:60:ff:86:b1:83:4e:55:9b:43:10:8e:8e:
08:27:09:9b:13:3a:e6:1a:fa:64:eb:b3:84:4e:ad:
bf:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:8F:F1:DC:9D:CC:8E:CC:A2:BA:8C:89:29:ED:CC:7A:EE:5F:A6:61
X509v3 Authority Key Identifier:
keyid:1F:A8:AC:37:F9:69:51:69:62:7F:75:E0:98:96:33:96:DE:96:38:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H6isN_lpUWlif3XgmJYzlt6WOMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/H6isN_lpUWlif3XgmJYzlt6WOMw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/H6isN_lpUWlif3XgmJYzlt6WOMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:12:c0:bc:01:03:e3:b0:3a:7b:01:60:89:73:ca:e3:fb:b3:
40:69:d7:4e:9b:13:a7:37:7d:a0:76:6d:62:c7:23:01:aa:39:
7b:37:61:f9:07:e3:8c:fa:ad:42:9a:91:a9:e9:9d:ce:07:25:
b1:9c:54:c3:9c:ae:01:98:a0:ff:6e:94:a3:74:d0:6f:97:ae:
b6:c6:32:35:35:30:b4:6e:ba:87:de:ea:ad:d5:42:81:39:9d:
5d:ad:a7:61:1c:f8:de:7c:e1:a1:61:24:7c:8f:2f:0b:3b:1f:
fb:e1:68:02:83:cd:63:88:2f:40:04:0d:ae:43:43:1b:b5:72:
3e:5a:bc:d2:ef:67:06:0b:18:e3:7f:8b:de:84:c1:c0:48:ac:
bf:f4:dd:52:32:5c:bd:c6:15:75:ab:d0:ce:39:61:7f:03:72:
de:68:cb:ed:2a:e6:f6:e2:46:b5:a5:ca:9c:f3:b8:1e:3f:5b:
19:56:bc:b1:df:98:1d:b7:2b:bd:82:ca:d9:79:c0:d7:d3:c8:
b3:41:71:39:98:5a:47:b7:16:ec:9a:bf:81:81:ad:27:13:68:
fc:ff:45:78:80:f7:3c:24:24:4d:84:b9:0e:1f:d7:b8:a6:0c:
a8:27:a2:51:74:0a:a9:eb:aa:5a:2b:7d:a0:b3:e3:7a:03:fa:
9e:54:ac:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:40:27 2025 by rpki-client