Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/1de86c-5f1e-402e-9ef4-637b261ab179/1/k6mJwXstoMUUMVWCDrxWv-c6Ot8.mft
File: k6mJwXstoMUUMVWCDrxWv-c6Ot8.mft (raw, json)
Hash identifier: 1dbQiPy3T71Q0fl+IPayFKXauXPgHnAsyFQT51G4nQY=
Subject key identifier: 0E:97:84:EC:1C:67:B5:99:BB:F3:1D:42:D9:80:F0:9F:23:D0:0C:BE
Authority key identifier: 93:A9:89:C1:7B:2D:A0:C5:14:31:55:82:0E:BC:56:BF:E7:3A:3A:DF
Certificate issuer: /CN=93a989c17b2da0c5143155820ebc56bfe73a3adf
Certificate serial: 0199FC8F1B9A333095AB7ED898A99D24A975
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k6mJwXstoMUUMVWCDrxWv-c6Ot8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/1de86c-5f1e-402e-9ef4-637b261ab179/1/k6mJwXstoMUUMVWCDrxWv-c6Ot8.mft
Manifest number: 0657
Signing time: Sun 19 Oct 2025 13:01:01 +0000
Manifest this update: Sun 19 Oct 2025 13:01:01 +0000
Manifest next update: Mon 20 Oct 2025 13:01:01 +0000
Files and hashes: 1: k6mJwXstoMUUMVWCDrxWv-c6Ot8.crl (hash: E7dW9obb8KerhB/S04XHK/zB8FrVyfBjVU1qfoT8TRc=)
2: rbPUmPqkKgwyzbr9KUKLWQwPFN4.roa (hash: q/Zy1zhtJFPNtR3NeMdcOz6lj9MRNn8je4kBturksZ0=)
3: tQFFGYfebId9C-wg4RS84BnFaNo.roa (hash: nMK/gVKD2fq6p/yTSA4UB4aZvcBtj7xYtsaQACWORBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/1de86c-5f1e-402e-9ef4-637b261ab179/1/k6mJwXstoMUUMVWCDrxWv-c6Ot8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/1de86c-5f1e-402e-9ef4-637b261ab179/1/k6mJwXstoMUUMVWCDrxWv-c6Ot8.mft
rsync://rpki.ripe.net/repository/DEFAULT/k6mJwXstoMUUMVWCDrxWv-c6Ot8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:1b:9a:33:30:95:ab:7e:d8:98:a9:9d:24:a9:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93a989c17b2da0c5143155820ebc56bfe73a3adf
Validity
Not Before: Oct 19 13:01:01 2025 GMT
Not After : Oct 20 13:01:01 2025 GMT
Subject: CN=0e9784ec1c67b599bbf31d42d980f09f23d00cbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:52:8f:27:e9:ad:42:2d:85:f9:1c:0a:19:7b:
34:f9:16:3c:5d:60:c2:b4:c4:d1:ab:a1:26:d4:d4:
bf:9f:b0:c8:f2:fb:1c:39:1b:bf:96:30:70:b8:63:
ab:37:16:be:15:8f:20:58:af:18:ca:1b:02:8b:e3:
b5:84:25:4f:d9:40:e7:05:45:93:0f:92:a9:0a:93:
34:11:f4:7e:f8:c9:83:bd:96:0c:58:6f:67:4d:1f:
99:da:2a:5c:88:22:91:9c:09:12:2d:3e:d0:72:80:
ba:53:67:5a:3f:a2:0d:33:34:13:20:07:54:d4:04:
3e:7f:1f:c9:85:eb:2c:39:87:c8:56:0a:ea:87:fb:
99:ac:c2:63:df:3e:f0:97:b8:11:95:20:cd:54:0b:
e5:3f:7c:a1:c7:b9:0b:ea:3e:24:3e:4f:a6:91:fd:
e7:32:bd:a9:2f:50:bc:79:0c:8c:22:cb:f0:f6:06:
d2:b7:4d:86:ae:84:dc:25:0b:a9:56:59:cd:c9:3a:
70:fc:5e:1e:62:1f:a6:0c:6f:48:59:8c:47:7e:ba:
c5:f0:24:72:56:cc:cb:ad:a9:81:d8:e9:ed:d4:da:
70:ef:ed:50:62:0c:3f:3e:14:dd:01:6b:50:55:16:
dc:3d:19:8b:f8:1a:b6:f5:4a:07:6b:f7:3e:cf:37:
f0:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:97:84:EC:1C:67:B5:99:BB:F3:1D:42:D9:80:F0:9F:23:D0:0C:BE
X509v3 Authority Key Identifier:
keyid:93:A9:89:C1:7B:2D:A0:C5:14:31:55:82:0E:BC:56:BF:E7:3A:3A:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k6mJwXstoMUUMVWCDrxWv-c6Ot8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1de86c-5f1e-402e-9ef4-637b261ab179/1/k6mJwXstoMUUMVWCDrxWv-c6Ot8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1de86c-5f1e-402e-9ef4-637b261ab179/1/k6mJwXstoMUUMVWCDrxWv-c6Ot8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:c3:c2:05:a7:09:b6:0a:b7:18:b2:77:41:48:60:7a:a1:c7:
c8:5f:a1:fa:bf:6f:b1:c1:b7:92:d9:54:22:15:db:bd:50:f4:
a2:fc:d6:2b:13:e6:3f:fd:fd:d0:6f:c4:cd:bd:37:9a:d0:a6:
57:70:4a:b3:ed:4c:87:0c:97:cd:ec:96:35:c0:48:f3:ba:19:
65:1d:20:7d:59:5d:e7:28:31:77:c7:11:6b:31:81:51:f7:4b:
d2:8b:a1:1e:f4:79:b5:5d:89:ec:e3:35:ac:59:0e:6e:a2:49:
96:8f:0c:f8:4d:d8:9d:c5:a0:2d:0c:a0:25:ae:4c:3c:bd:92:
5a:9e:1f:30:89:e3:fa:79:e0:9f:ae:97:f8:30:55:e2:fb:d1:
e6:9a:ea:46:75:20:ef:33:64:42:a9:e1:1d:4f:5e:4c:a7:99:
86:a1:77:db:48:df:dc:30:3d:9a:ea:c5:e7:83:b7:15:95:c3:
d2:3b:5c:e1:b2:e4:ab:c2:4e:15:3d:35:b8:a0:21:ef:11:7b:
f3:92:25:b4:5f:35:8e:80:f6:c7:84:53:fe:03:1b:98:82:66:
98:86:e2:3c:b7:3d:2e:9f:de:1c:02:06:2a:12:c0:71:43:c7:
44:3e:e0:4f:be:9e:8b:c7:a3:11:45:86:f7:ff:33:2c:c3:d5:
e0:41:3f:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:50:06 2025 by rpki-client