Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/85ca8e-d74b-4c05-81b6-770f0572c0e7/1/b6MuZYEYPyxIl6dlIzOQH39b7nM.mft
File: b6MuZYEYPyxIl6dlIzOQH39b7nM.mft (raw, json)
Hash identifier: 64z4Og2My3c5jiykDik0IHLJKrswTnZOuZMbXSu9cng=
Subject key identifier: 89:00:9C:C4:75:DB:8D:63:86:92:4F:04:43:A9:5E:39:8E:7C:A8:EA
Authority key identifier: 6F:A3:2E:65:81:18:3F:2C:48:97:A7:65:23:33:90:1F:7F:5B:EE:73
Certificate issuer: /CN=6fa32e6581183f2c4897a7652333901f7f5bee73
Certificate serial: 019A041195A754A43BC625D7E88A49B41C7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b6MuZYEYPyxIl6dlIzOQH39b7nM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/85ca8e-d74b-4c05-81b6-770f0572c0e7/1/b6MuZYEYPyxIl6dlIzOQH39b7nM.mft
Manifest number: 094B
Signing time: Tue 21 Oct 2025 00:00:52 +0000
Manifest this update: Tue 21 Oct 2025 00:00:52 +0000
Manifest next update: Wed 22 Oct 2025 00:00:52 +0000
Files and hashes: 1: 6C-l-Krcx9diUb3Zftv9sijenyA.roa (hash: 8qEJJSdL4/1lUqWVRQzqlshhqS0031IQa9tDeTSS/GA=)
2: PHw1GAOmBnBvGouxlCLHPCg3QCo.roa (hash: M7Tf/O06Ds+1gFag6lHjuDXeoUB2izemcywbR990N8U=)
3: b6MuZYEYPyxIl6dlIzOQH39b7nM.crl (hash: vBcxC4vXVNyxbgV2SYlGp2LNYFqPx1EwMJZz4JfxbhQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/85ca8e-d74b-4c05-81b6-770f0572c0e7/1/b6MuZYEYPyxIl6dlIzOQH39b7nM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/85ca8e-d74b-4c05-81b6-770f0572c0e7/1/b6MuZYEYPyxIl6dlIzOQH39b7nM.mft
rsync://rpki.ripe.net/repository/DEFAULT/b6MuZYEYPyxIl6dlIzOQH39b7nM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 22:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:04:11:95:a7:54:a4:3b:c6:25:d7:e8:8a:49:b4:1c:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fa32e6581183f2c4897a7652333901f7f5bee73
Validity
Not Before: Oct 21 00:00:52 2025 GMT
Not After : Oct 22 00:00:52 2025 GMT
Subject: CN=89009cc475db8d6386924f0443a95e398e7ca8ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:6f:0e:46:0d:7a:a8:58:b4:2d:d8:ae:15:3a:
06:42:ee:b3:59:dd:f4:57:5f:0c:74:53:9f:33:4a:
f0:04:03:50:09:3a:30:22:2b:1a:74:c9:c3:3a:9c:
bf:97:33:41:e1:ea:41:0c:e5:b9:8b:35:19:ae:84:
87:56:a2:60:31:89:4d:02:f0:1f:bd:90:07:31:34:
33:43:dc:47:c0:4e:3f:21:6e:6b:81:74:7c:59:2a:
6b:ab:56:90:b5:4f:df:93:92:07:40:10:da:03:f0:
3c:0e:8e:8d:9c:77:4b:42:bd:d7:a7:2f:b4:2f:a0:
27:99:fe:fa:f8:5b:ec:e0:c9:e6:67:ae:ce:d0:6a:
f3:f9:a5:d0:78:d7:97:10:30:a7:b2:34:c7:2c:b6:
fc:d5:24:c6:00:ff:2e:b7:5e:db:18:db:8e:02:a6:
16:c7:5c:8c:2e:3b:70:e7:9c:39:8b:41:ea:00:06:
c6:a1:e7:88:91:5e:06:e4:ba:8e:9f:63:96:c9:f7:
1a:2a:6f:fc:85:f1:8f:8f:dc:6d:0e:71:fb:5b:1b:
87:fe:cc:8a:d1:4d:58:98:20:49:2d:cc:02:5b:a2:
1f:9d:d2:96:cc:1c:97:c9:06:c9:f1:7a:f9:06:fa:
48:9c:4c:c2:0b:3b:94:d9:11:d4:ac:d1:ea:7c:9f:
6d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:00:9C:C4:75:DB:8D:63:86:92:4F:04:43:A9:5E:39:8E:7C:A8:EA
X509v3 Authority Key Identifier:
keyid:6F:A3:2E:65:81:18:3F:2C:48:97:A7:65:23:33:90:1F:7F:5B:EE:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6MuZYEYPyxIl6dlIzOQH39b7nM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/85ca8e-d74b-4c05-81b6-770f0572c0e7/1/b6MuZYEYPyxIl6dlIzOQH39b7nM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/85ca8e-d74b-4c05-81b6-770f0572c0e7/1/b6MuZYEYPyxIl6dlIzOQH39b7nM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:b6:9c:f1:9a:ac:c7:b5:23:9c:59:d5:f5:49:5d:60:12:a5:
b0:7c:3b:5c:28:18:06:ef:9b:19:ad:f4:4d:25:6a:a7:be:dc:
0c:4b:b3:eb:c3:c0:da:d2:9c:7f:24:8a:ff:86:51:36:59:74:
59:5b:60:dd:21:f5:e9:bc:a6:18:ca:86:15:65:74:59:61:59:
1b:e5:6f:be:68:e9:d4:fc:0f:c8:7a:d7:05:a5:43:79:39:53:
68:aa:13:95:fb:3d:ec:a5:a4:bc:88:04:79:39:a7:48:85:c9:
35:57:81:48:e0:f1:09:aa:68:87:4a:c0:ab:8f:51:01:e0:62:
b0:3b:11:be:c3:fc:29:02:eb:00:d8:c4:b2:d7:95:32:02:7e:
3a:50:7c:8c:46:16:8d:6e:c0:2f:76:d3:92:d4:23:f7:67:fa:
f5:49:e1:9b:54:c1:ef:ca:9a:2d:67:4a:49:0e:df:f7:b0:ee:
51:83:a0:e4:ba:83:68:6b:94:9e:56:c5:45:be:e1:34:7c:e9:
1a:a5:d7:21:f4:96:97:61:68:49:bc:f7:58:ff:78:c4:ae:e5:
51:cf:76:d1:b6:2f:01:1a:01:ac:11:83:ed:94:fc:b4:a5:d3:
20:e6:53:0d:ab:82:d0:e1:37:3e:1c:ae:13:1b:5e:4f:87:91:
4c:4d:c3:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 05:18:19 2025 by rpki-client