Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/5ab585-b29b-4e71-8038-90e21df01e91/1/6x3AD9LB4-qvzszBtLofj9CkqYw.mft
File: 6x3AD9LB4-qvzszBtLofj9CkqYw.mft (raw, json)
Hash identifier: 720m7FAprz+hhaKLEAa7LUYrQhbl+SWLRAUcUl2DpIc=
Subject key identifier: 86:BB:79:A7:0B:09:D9:68:AE:9D:B7:67:84:67:57:B4:7D:51:DB:2B
Authority key identifier: EB:1D:C0:0F:D2:C1:E3:EA:AF:CE:CC:C1:B4:BA:1F:8F:D0:A4:A9:8C
Certificate issuer: /CN=eb1dc00fd2c1e3eaafceccc1b4ba1f8fd0a4a98c
Certificate serial: 019A006BDF8E1C7A06F3709A9CCAE35D97C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6x3AD9LB4-qvzszBtLofj9CkqYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/5ab585-b29b-4e71-8038-90e21df01e91/1/6x3AD9LB4-qvzszBtLofj9CkqYw.mft
Manifest number: 16E7
Signing time: Mon 20 Oct 2025 07:01:00 +0000
Manifest this update: Mon 20 Oct 2025 07:01:00 +0000
Manifest next update: Tue 21 Oct 2025 07:01:00 +0000
Files and hashes: 1: 6x3AD9LB4-qvzszBtLofj9CkqYw.crl (hash: J4IJ8RAArdWZpyyxl/1/BOHMFVwvLDGLtabJJhykqZw=)
2: Om5FJ2saBdYhhGOS3f3FISumZqg.roa (hash: Fu3JRt/JCmRX1P55XNbPmEdky96U0142N0aVN3A+m0w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/5ab585-b29b-4e71-8038-90e21df01e91/1/6x3AD9LB4-qvzszBtLofj9CkqYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/5ab585-b29b-4e71-8038-90e21df01e91/1/6x3AD9LB4-qvzszBtLofj9CkqYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/6x3AD9LB4-qvzszBtLofj9CkqYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:6b:df:8e:1c:7a:06:f3:70:9a:9c:ca:e3:5d:97:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb1dc00fd2c1e3eaafceccc1b4ba1f8fd0a4a98c
Validity
Not Before: Oct 20 07:01:00 2025 GMT
Not After : Oct 21 07:01:00 2025 GMT
Subject: CN=86bb79a70b09d968ae9db767846757b47d51db2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c1:0c:19:e6:ba:4a:4a:41:78:55:76:09:a4:
8b:c9:bd:32:8e:3c:be:e9:cc:98:bc:26:21:31:85:
8e:69:b9:26:58:02:4f:c2:65:c0:9b:78:58:a8:ff:
04:9c:e5:df:40:81:36:7d:cf:71:f0:b3:60:b7:49:
01:47:34:e7:05:d3:74:a5:73:21:6e:f1:45:f5:59:
4f:97:1b:61:c1:04:68:da:41:bf:55:2f:9f:22:1e:
57:d1:9b:ae:3d:fc:e3:56:be:6e:82:46:e0:60:14:
6a:d9:40:23:6f:df:4b:31:94:31:00:54:9a:35:45:
d1:1e:43:e7:d9:2a:95:96:7e:1d:03:37:dd:40:11:
c4:5e:c2:04:6c:c6:2b:16:e1:15:b1:1e:83:26:3b:
7e:d0:63:8e:92:40:81:9c:2b:f2:5a:66:c3:07:d8:
11:9f:bb:7a:2c:1f:46:9b:ff:04:61:e7:ec:e0:6a:
55:3d:ea:81:0e:fc:68:a1:bc:41:00:51:f5:42:d9:
1d:5e:f2:17:af:77:28:fc:4e:5e:42:71:67:ac:d0:
17:05:8c:b5:3b:de:27:0d:04:f4:ee:3f:22:36:f7:
89:77:f5:d5:e7:e0:74:67:20:58:37:91:2c:61:81:
9a:14:ff:22:34:8f:a6:c7:f7:59:4b:f6:a9:79:cb:
34:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:BB:79:A7:0B:09:D9:68:AE:9D:B7:67:84:67:57:B4:7D:51:DB:2B
X509v3 Authority Key Identifier:
keyid:EB:1D:C0:0F:D2:C1:E3:EA:AF:CE:CC:C1:B4:BA:1F:8F:D0:A4:A9:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6x3AD9LB4-qvzszBtLofj9CkqYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5ab585-b29b-4e71-8038-90e21df01e91/1/6x3AD9LB4-qvzszBtLofj9CkqYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5ab585-b29b-4e71-8038-90e21df01e91/1/6x3AD9LB4-qvzszBtLofj9CkqYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:dc:4e:d7:cb:35:a2:86:0c:06:fe:8d:5d:9f:ad:ed:92:4d:
99:a3:c4:4e:dd:b4:ef:89:e6:be:1c:80:f1:00:4d:67:1e:0d:
00:5f:00:21:91:03:1d:92:3c:01:0c:e8:cc:9b:e9:0c:20:dc:
84:ff:14:9e:85:45:4f:36:6b:06:e0:59:07:87:ba:bb:e5:0d:
c0:6c:00:70:14:b7:c6:f9:b9:54:70:8b:9e:7c:78:37:33:de:
1f:d5:2d:aa:84:8f:20:ff:54:17:28:f9:31:61:b6:7f:8a:57:
de:54:4e:e7:52:da:76:eb:15:63:32:09:12:67:78:b5:b7:75:
01:62:65:bb:ea:bb:ce:0a:d2:69:60:e5:40:6d:83:b0:a7:be:
2d:4f:2b:cb:25:61:60:b5:04:4f:1b:e5:90:c4:c1:47:f4:1c:
5b:6d:78:b5:c4:5e:68:39:7f:b1:56:0e:0d:70:88:bd:37:5a:
a5:f9:b1:96:b7:e0:d8:5b:7b:08:cb:0d:47:0c:93:d4:a4:f5:
b5:38:29:83:96:a6:42:d2:63:be:76:2a:10:ef:52:db:27:df:
81:23:cf:87:4f:bc:5a:05:00:5f:94:8a:74:2a:7a:37:1b:14:
fa:d7:d0:b6:aa:62:12:c9:69:cf:c5:98:7a:0a:24:70:62:f0:
30:e0:6e:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:49:56 2025 by rpki-client