Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/4db770-d7f5-4bcb-ba44-857712720a35/1/6rmhV-EqLvcX0TIxrwb9hUVLMVE.mft
File: 6rmhV-EqLvcX0TIxrwb9hUVLMVE.mft (raw, json)
Hash identifier: 5/SpaTvUEyInOrVgt3H1gXG5iIzzbYCciaWOfoDJ4A8=
Subject key identifier: 10:3D:5D:CD:58:9F:27:1A:9F:E1:3F:42:06:DC:0B:80:10:C5:81:62
Authority key identifier: EA:B9:A1:57:E1:2A:2E:F7:17:D1:32:31:AF:06:FD:85:45:4B:31:51
Certificate issuer: /CN=eab9a157e12a2ef717d13231af06fd85454b3151
Certificate serial: 019A0222D1AA9477EF105F1E58D498DC48A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6rmhV-EqLvcX0TIxrwb9hUVLMVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/4db770-d7f5-4bcb-ba44-857712720a35/1/6rmhV-EqLvcX0TIxrwb9hUVLMVE.mft
Manifest number: 0FE8
Signing time: Mon 20 Oct 2025 15:00:27 +0000
Manifest this update: Mon 20 Oct 2025 15:00:27 +0000
Manifest next update: Tue 21 Oct 2025 15:00:27 +0000
Files and hashes: 1: 6rmhV-EqLvcX0TIxrwb9hUVLMVE.crl (hash: bxHkuDKIVqIANlIfjmst3fbEDGqxhQxKTYSFDuURh50=)
2: HOKH-4cqRMA_yXERkwbNDzuMfg0.roa (hash: BxrSjj1tg8yper8hXCVO7HyCIeXNMBvlZBpIdnV+E/w=)
3: q-7o-VTmQktM6CANooQxHGpfUPs.roa (hash: nkRO+yCLAt1MadmnWmx2ah2ZlpvxH2J3hDHN33uCuqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/4db770-d7f5-4bcb-ba44-857712720a35/1/6rmhV-EqLvcX0TIxrwb9hUVLMVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/4db770-d7f5-4bcb-ba44-857712720a35/1/6rmhV-EqLvcX0TIxrwb9hUVLMVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/6rmhV-EqLvcX0TIxrwb9hUVLMVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:22:d1:aa:94:77:ef:10:5f:1e:58:d4:98:dc:48:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eab9a157e12a2ef717d13231af06fd85454b3151
Validity
Not Before: Oct 20 15:00:27 2025 GMT
Not After : Oct 21 15:00:27 2025 GMT
Subject: CN=103d5dcd589f271a9fe13f4206dc0b8010c58162
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:77:b5:0a:43:cf:96:ab:93:f4:c7:9d:4c:c3:
77:7b:36:a6:af:b9:88:0a:c1:d2:82:2b:88:ba:c5:
9a:74:df:5a:56:a6:bf:77:9e:94:13:04:99:80:52:
8d:b8:6d:f5:3d:8f:37:3b:2f:a4:24:a8:ad:00:c8:
0a:6b:e7:49:9d:9d:ba:c6:07:a9:13:0b:46:b0:bb:
92:48:44:98:0e:01:80:f7:ef:b5:ef:6a:a4:72:b2:
58:ac:6b:06:18:51:49:9b:57:39:fd:29:f6:86:60:
60:ab:99:be:34:5e:40:88:7f:fa:5e:38:4a:09:3c:
d0:c1:17:29:a8:e8:07:c4:1e:fb:99:c7:48:16:b8:
2d:13:7d:3a:09:70:18:db:a8:06:fe:1e:b6:58:ee:
90:20:c1:e9:ec:c0:5b:f5:49:31:f8:88:4d:8f:2f:
3e:d5:c4:0f:e5:e9:79:b0:51:f8:1a:5c:67:e9:61:
0a:a9:0b:4a:27:45:18:c5:14:86:9b:7b:a6:08:80:
77:29:d0:58:a6:4b:ee:4e:ad:5f:9c:fb:29:3f:53:
49:62:6d:27:28:e4:a1:09:d8:ae:3c:aa:de:fa:42:
29:c4:83:7f:f8:44:35:c6:a1:ad:17:9a:11:45:ef:
0e:99:29:ab:91:57:c2:d3:8b:b6:ce:a4:af:7f:cf:
57:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:3D:5D:CD:58:9F:27:1A:9F:E1:3F:42:06:DC:0B:80:10:C5:81:62
X509v3 Authority Key Identifier:
keyid:EA:B9:A1:57:E1:2A:2E:F7:17:D1:32:31:AF:06:FD:85:45:4B:31:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6rmhV-EqLvcX0TIxrwb9hUVLMVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/4db770-d7f5-4bcb-ba44-857712720a35/1/6rmhV-EqLvcX0TIxrwb9hUVLMVE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/4db770-d7f5-4bcb-ba44-857712720a35/1/6rmhV-EqLvcX0TIxrwb9hUVLMVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:53:2c:9b:7a:b4:13:30:16:92:b3:29:63:ac:20:28:3d:03:
df:4b:b5:7b:cc:cb:a0:bb:bb:83:ec:03:82:c5:65:99:7f:b6:
4b:d4:bc:c1:dd:e0:b9:58:15:17:2a:68:f9:01:37:4f:38:a5:
95:09:a6:c5:44:31:6c:4d:75:b8:e5:37:90:2d:99:a6:2a:59:
6b:3c:bd:f7:84:8f:72:6b:62:70:be:1a:44:72:d4:9d:49:33:
52:d6:80:c4:63:9f:75:83:e3:55:81:0e:88:61:8a:26:48:51:
c8:15:c4:0a:16:5c:c6:97:d5:3b:a0:6a:2e:6a:e7:87:d4:61:
3d:69:82:52:f7:8e:d5:e9:07:5c:44:3a:cd:11:0a:80:84:7f:
54:28:bd:45:8a:60:ad:7a:de:4b:d9:6a:8c:c7:65:dc:da:8f:
4b:b2:df:2e:b8:e5:cd:64:3f:8f:bc:64:5e:a9:90:95:27:4a:
80:ab:26:ad:0b:05:58:ba:c1:83:b4:99:7a:aa:5d:2c:f1:b4:
79:8a:14:56:17:eb:a4:2d:bf:67:d9:0b:18:67:c4:4a:52:37:
4a:c3:0f:27:19:f5:8f:ab:f1:07:3c:ea:e8:b6:de:7c:07:44:
c6:25:90:58:14:bb:fd:51:f3:39:5c:be:84:36:7b:69:7a:9b:
e4:49:63:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:27:57 2025 by rpki-client