Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.mft
File: X6OG6XZW1kirU4GylmZBQIGwAIQ.mft (raw, json)
Hash identifier: v3aaiI58GgnS7iif/7s5ADgzCWff2vi2kVl43XAv054=
Subject key identifier: 6A:C7:91:56:E0:7D:82:AB:1F:65:86:A9:D3:1E:AB:93:3F:B9:24:62
Authority key identifier: 5F:A3:86:E9:76:56:D6:48:AB:53:81:B2:96:66:41:40:81:B0:00:84
Certificate issuer: /CN=5fa386e97656d648ab5381b29666414081b00084
Certificate serial: 0199FEEC07EBC47604CB199270A272FAE785
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X6OG6XZW1kirU4GylmZBQIGwAIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.mft
Manifest number: 066A
Signing time: Mon 20 Oct 2025 00:01:45 +0000
Manifest this update: Mon 20 Oct 2025 00:01:45 +0000
Manifest next update: Tue 21 Oct 2025 00:01:45 +0000
Files and hashes: 1: X6OG6XZW1kirU4GylmZBQIGwAIQ.crl (hash: eJJeWqZKuCL19a+TByGwdjiRG9I1sTEvN05Eb+0vMiw=)
2: u-lGXvBrrOtS45APR_Waw4axrTc.roa (hash: W3bOvfQ0kiPnMkAC0M/+bR7qhmdbihjJm/WhE44sz9U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/X6OG6XZW1kirU4GylmZBQIGwAIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:ec:07:eb:c4:76:04:cb:19:92:70:a2:72:fa:e7:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fa386e97656d648ab5381b29666414081b00084
Validity
Not Before: Oct 20 00:01:45 2025 GMT
Not After : Oct 21 00:01:45 2025 GMT
Subject: CN=6ac79156e07d82ab1f6586a9d31eab933fb92462
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:37:97:f5:39:82:92:37:6a:5a:d4:cc:3b:ea:
e3:ec:6f:01:45:e5:c9:a7:f2:ea:50:8b:93:c2:8a:
52:9e:d0:40:1a:75:18:c1:7d:0d:d6:60:71:36:4d:
a1:e9:f4:e9:75:9e:2c:e3:ee:99:3c:95:10:97:f9:
57:e4:24:71:55:ab:57:4b:b0:12:8f:91:e3:32:a6:
6c:f0:72:9b:86:07:e4:01:4a:18:0a:13:4d:61:8f:
d0:18:95:52:fa:25:08:3f:79:67:ad:9a:00:dc:07:
92:03:f9:b9:23:18:c9:b4:ca:04:99:13:3b:fb:6d:
af:20:c4:20:b7:f3:4c:74:c3:4e:b5:91:f5:67:c7:
73:06:84:e6:01:7a:03:28:d1:03:90:30:39:72:fa:
7a:46:12:94:0d:1e:12:45:84:7b:da:63:93:dc:60:
d3:e2:b6:ef:d5:14:4a:d8:4b:b2:24:b1:ab:f0:24:
ca:a3:f1:08:33:42:70:bd:bf:af:a6:a6:de:26:f2:
9e:16:97:66:6e:0b:34:4d:fa:a3:5a:d3:76:1f:fb:
ac:88:56:1a:9c:9d:67:dd:20:fb:0a:8f:7b:fd:a7:
8c:5f:da:b1:27:4c:bd:58:0e:2c:3e:5a:40:64:29:
76:95:05:42:24:6f:a0:3f:a3:7f:df:a7:db:77:f8:
b2:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:C7:91:56:E0:7D:82:AB:1F:65:86:A9:D3:1E:AB:93:3F:B9:24:62
X509v3 Authority Key Identifier:
keyid:5F:A3:86:E9:76:56:D6:48:AB:53:81:B2:96:66:41:40:81:B0:00:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X6OG6XZW1kirU4GylmZBQIGwAIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:66:8e:0e:7d:0d:5e:71:ea:17:16:2e:77:05:56:8a:af:e6:
6e:e5:79:cb:31:f3:5e:5f:f5:ff:c5:3a:48:ce:9b:0d:71:a9:
1c:62:ce:fc:07:22:65:a0:e6:01:bb:75:fc:d5:4a:37:dd:e0:
30:3e:68:6e:e2:a7:24:45:d5:ae:b9:c2:90:58:d5:78:37:c4:
43:9d:dc:3b:a2:3f:1d:51:78:4b:bf:50:dc:fc:cc:68:09:2d:
75:ac:bb:34:5d:d9:71:dc:18:b3:58:67:30:30:39:36:28:32:
11:42:35:9d:da:83:19:f0:78:a7:bd:8a:c0:93:93:78:4b:84:
5c:36:00:c7:a1:b6:4b:d6:7b:29:c7:b8:61:20:dd:2c:f8:85:
23:1f:7a:ef:24:c3:9d:52:35:94:9e:43:b2:b9:bb:9b:51:ce:
6c:01:27:a6:fe:bd:b5:b6:ca:93:f5:ff:11:25:3f:12:16:c3:
db:f0:04:40:4b:ef:29:61:de:0b:4a:a5:98:30:8a:5e:97:bd:
23:25:af:77:9d:b6:09:b5:e9:c6:ae:2b:3b:61:fe:8b:1d:68:
47:08:a1:f0:90:7a:3a:63:98:7e:5e:fb:50:60:ab:60:1a:3f:
2c:32:5f:0d:84:69:13:1d:a4:36:22:ab:5f:82:d1:80:c2:af:
6e:12:52:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:30:48 2025 by rpki-client