Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.mft
File: 6EA7XkXNWL5fbF0z-lZatJIj49s.mft (raw, json)
Hash identifier: zZ81YdMABmjsPbBjfPLXqxOO37U7Bvs3oWE24MSQxMo=
Subject key identifier: 16:91:7B:41:7A:32:FA:8F:D6:D1:FC:BE:0D:40:B7:37:87:6D:ED:33
Authority key identifier: E8:40:3B:5E:45:CD:58:BE:5F:6C:5D:33:FA:56:5A:B4:92:23:E3:DB
Certificate issuer: /CN=e8403b5e45cd58be5f6c5d33fa565ab49223e3db
Certificate serial: 0199FBEB00EDD6397F5D8AA43BACB9EAF67D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6EA7XkXNWL5fbF0z-lZatJIj49s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.mft
Manifest number: 16F7
Signing time: Sun 19 Oct 2025 10:01:46 +0000
Manifest this update: Sun 19 Oct 2025 10:01:46 +0000
Manifest next update: Mon 20 Oct 2025 10:01:46 +0000
Files and hashes: 1: 6EA7XkXNWL5fbF0z-lZatJIj49s.crl (hash: cky5YIonCuAogh3nTJMk47dO45yQhjxOV+thNUZuiVA=)
2: 8ifx7KKJ18pryNHwF1j4-Fc64gM.roa (hash: VaIkHBJSp4yitHY1eixtkQXqBMvBgkd5WICUJNcd2K8=)
3: BO1ltB2867u60oaiDsy_-XsvL88.roa (hash: N3BRFXxAhwO4FPIhN2IGyHjmICRkpQTCZFJQ4I0pqRI=)
4: FoWNQ1gpwJC_vJTYQPjNq4EOPsk.roa (hash: y3YmRhUlwwI5SoZwTRIclzEsG8VBx6W5icxmsvJXHic=)
5: Q_XBBiAk4qHgl5xyRFCeUl8e3VE.roa (hash: sADh7knGI+0KPR0TD0XBdBdTNm9tN3/eGMw1gHZe2VI=)
6: cPczL7BSG5C-UOorLa44AbTPVd4.roa (hash: iC/fXBJJkXo1CbjOzv3JUUnSB7oUYt0rT8G7YWmNXm4=)
7: jIQE6oG-USVQsaVIsuMgVZrbPS8.roa (hash: tj3eChM7EThfXzNYj4xO6MKRf71fqyAWWs5gIA5ClkU=)
8: nCj-HurrM8I6ZuYeTftMdm0Nisw.roa (hash: f4dhcwMgx6vMMDpRWe3qOH6ZusltLaqZhMj8z/Gm8hQ=)
9: wPWSAuQLoLC84i_wxl8zAMN7M_I.roa (hash: AX93UGQS0hHBTCeSbLVGxtGmi8vpmUf8TykhODf8ipI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.mft
rsync://rpki.ripe.net/repository/DEFAULT/6EA7XkXNWL5fbF0z-lZatJIj49s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:00:ed:d6:39:7f:5d:8a:a4:3b:ac:b9:ea:f6:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8403b5e45cd58be5f6c5d33fa565ab49223e3db
Validity
Not Before: Oct 19 10:01:46 2025 GMT
Not After : Oct 20 10:01:46 2025 GMT
Subject: CN=16917b417a32fa8fd6d1fcbe0d40b737876ded33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:66:3f:d1:86:27:e2:67:52:11:1f:83:ef:18:
7e:14:96:4e:77:62:e3:aa:ff:92:7a:43:38:cc:e6:
f6:ea:3e:9b:ca:23:3c:29:4f:eb:e7:90:3c:48:00:
7a:95:30:83:af:b1:67:f8:c9:dd:16:70:74:dc:78:
87:99:43:8f:e6:3b:8e:b7:d6:1b:99:5c:c9:ac:35:
42:e3:70:6d:81:07:44:44:db:4a:0f:0c:2f:58:dd:
3b:27:47:b0:29:19:f3:30:04:0b:0f:15:e7:94:2b:
8a:5b:19:49:91:e1:da:05:d6:de:e0:ac:ce:1d:c1:
d3:00:fc:5f:e6:7c:18:da:42:ec:3c:65:20:d7:6d:
ff:14:09:a1:ec:bf:90:06:32:63:c8:02:73:fa:ac:
7f:ed:24:0f:30:ad:3b:bb:ae:b5:18:e2:29:11:4b:
2e:89:c5:c1:da:bd:0f:11:f2:7a:9f:45:47:15:57:
4d:be:58:c7:7a:f7:8e:dd:cd:4f:59:e2:3c:7f:25:
d5:ae:65:41:30:3c:86:43:2e:32:49:8b:2f:07:b2:
27:3f:d1:ae:7b:e8:5d:11:b0:27:d9:bd:17:a0:91:
a2:85:b1:a3:ec:e7:2b:fc:9e:6f:e9:82:ba:2b:7a:
be:74:ce:c6:b2:8c:9a:78:c3:25:c1:cc:6e:56:37:
75:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:91:7B:41:7A:32:FA:8F:D6:D1:FC:BE:0D:40:B7:37:87:6D:ED:33
X509v3 Authority Key Identifier:
keyid:E8:40:3B:5E:45:CD:58:BE:5F:6C:5D:33:FA:56:5A:B4:92:23:E3:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EA7XkXNWL5fbF0z-lZatJIj49s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:c2:d1:f7:33:54:c0:65:1e:b2:67:b3:af:8f:28:2b:23:4e:
6e:1f:b8:a7:9f:b0:d7:2e:cf:3b:fe:8c:14:67:57:52:6d:8b:
aa:f0:18:27:de:47:71:0e:8d:02:31:b1:7f:c4:bd:de:ec:88:
30:ba:22:2c:d3:e1:7f:01:9d:16:2b:5f:0b:eb:5e:df:58:e3:
53:3e:6a:df:21:1c:c9:5c:9b:1b:ed:06:0b:d2:26:60:ed:a4:
e9:ae:5d:82:24:37:b8:c9:54:95:86:7c:a1:b6:5d:e4:2f:e1:
d8:bc:74:ae:30:38:5c:41:cc:d5:41:ac:30:de:4c:04:aa:95:
0e:d4:ce:ab:72:1b:76:c2:d9:0c:6a:10:fd:46:88:b7:32:68:
c5:26:5c:33:ae:71:b2:c5:2c:03:23:3b:3d:15:6a:21:94:ff:
ec:d2:41:ed:a3:19:f9:7a:ca:f2:d3:6a:52:b2:ab:ae:f7:78:
81:83:4b:de:3e:80:f9:3e:ce:74:28:26:07:a5:4a:bd:a0:75:
3e:ca:1f:e6:78:71:ff:ef:e9:53:5e:a6:4b:a0:80:f4:60:b7:
9d:0b:bb:cd:52:a1:b9:d3:1b:49:a5:60:73:82:b9:de:6c:92:
46:92:b8:3f:d9:86:fa:b8:a6:0f:b4:fd:0e:99:7d:91:c3:eb:
ba:83:24:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:33:11 2025 by rpki-client