Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/37930a-288f-42b6-8c64-6603eb54bb3a/1/6QYQQQz4AUrB2-n2q8yBxmGHr74.mft
File: 6QYQQQz4AUrB2-n2q8yBxmGHr74.mft (raw, json)
Hash identifier: 9ayjGNowYBQvkDJBOmr4U6bkhAucsRHZErUiyFYOGz8=
Subject key identifier: 13:04:C7:A3:9A:A7:19:AD:AF:80:D9:BE:2E:1E:79:A5:A7:76:AE:38
Authority key identifier: E9:06:10:41:0C:F8:01:4A:C1:DB:E9:F6:AB:CC:81:C6:61:87:AF:BE
Certificate issuer: /CN=e90610410cf8014ac1dbe9f6abcc81c66187afbe
Certificate serial: 0199FBEBC83A5E8E166D0F56D072B73BCD09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6QYQQQz4AUrB2-n2q8yBxmGHr74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/37930a-288f-42b6-8c64-6603eb54bb3a/1/6QYQQQz4AUrB2-n2q8yBxmGHr74.mft
Manifest number: 07C7
Signing time: Sun 19 Oct 2025 10:02:37 +0000
Manifest this update: Sun 19 Oct 2025 10:02:37 +0000
Manifest next update: Mon 20 Oct 2025 10:02:37 +0000
Files and hashes: 1: 6QYQQQz4AUrB2-n2q8yBxmGHr74.crl (hash: YHJ3fH4wVbclMtgxaeHyHuKvTMU7y0L+VgKT6J77qw8=)
2: QhkomV9_6ceJGU8VKTfbtyRNcXM.roa (hash: OB6SsMliHPSapAri1eb5Zi/y08KLAC6vdxvVZUeAlWU=)
3: gz7px3LCXwdOhvRIWMGfnzsiLoY.roa (hash: F70BUXb5RkAWoSm6MxaywQeDn9WJDpTvkQ2ap1NhBjE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/37930a-288f-42b6-8c64-6603eb54bb3a/1/6QYQQQz4AUrB2-n2q8yBxmGHr74.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/37930a-288f-42b6-8c64-6603eb54bb3a/1/6QYQQQz4AUrB2-n2q8yBxmGHr74.mft
rsync://rpki.ripe.net/repository/DEFAULT/6QYQQQz4AUrB2-n2q8yBxmGHr74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:c8:3a:5e:8e:16:6d:0f:56:d0:72:b7:3b:cd:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e90610410cf8014ac1dbe9f6abcc81c66187afbe
Validity
Not Before: Oct 19 10:02:37 2025 GMT
Not After : Oct 20 10:02:37 2025 GMT
Subject: CN=1304c7a39aa719adaf80d9be2e1e79a5a776ae38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:88:20:4a:9f:a7:63:2c:53:ec:3f:c9:16:9b:
6f:f8:a7:46:2d:22:7b:1f:e2:11:31:81:b1:f0:00:
b2:27:00:67:5e:ce:b4:d0:88:83:a0:f1:5b:0e:b2:
e4:7c:d4:d4:f5:a6:6a:96:3e:e0:99:1c:10:15:fd:
1f:66:17:a8:65:a9:7a:cb:ca:71:86:82:8b:71:9c:
7e:b0:5b:19:c1:5f:f8:a4:34:48:79:0e:e9:c6:dd:
88:ff:35:84:b7:9c:54:77:16:62:59:1f:f9:d7:20:
00:c7:b1:b9:82:ac:00:e8:61:60:45:29:4d:f1:31:
b9:03:98:0a:73:3a:74:bd:3a:dc:75:c4:6b:6e:bd:
25:ac:2b:0b:7d:92:65:f4:4d:0e:ea:fa:7a:0f:33:
c3:2e:ea:fb:ea:9b:79:71:49:f9:94:04:82:a4:79:
70:10:bc:42:f0:24:4d:51:7b:66:33:a5:5e:e0:74:
33:3b:cf:ad:02:c7:70:32:88:7a:c0:ff:62:04:91:
40:af:3a:ed:47:de:a1:a9:18:0f:96:53:e3:5c:e4:
28:90:b5:6b:96:4f:9f:ff:b6:75:d9:17:b9:70:e2:
bf:4f:2a:3a:0b:2f:76:d5:20:8e:0e:43:fb:98:b1:
d0:99:1c:8a:a9:44:26:73:c0:fd:41:a4:31:1f:7d:
c4:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:04:C7:A3:9A:A7:19:AD:AF:80:D9:BE:2E:1E:79:A5:A7:76:AE:38
X509v3 Authority Key Identifier:
keyid:E9:06:10:41:0C:F8:01:4A:C1:DB:E9:F6:AB:CC:81:C6:61:87:AF:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6QYQQQz4AUrB2-n2q8yBxmGHr74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/37930a-288f-42b6-8c64-6603eb54bb3a/1/6QYQQQz4AUrB2-n2q8yBxmGHr74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/37930a-288f-42b6-8c64-6603eb54bb3a/1/6QYQQQz4AUrB2-n2q8yBxmGHr74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:af:f4:41:b0:ab:42:cd:37:ae:1e:24:47:5e:da:d1:3b:bc:
d5:4c:7e:cd:1d:ff:22:a3:1f:b2:05:6f:76:3f:21:da:b6:0c:
5a:e7:49:88:dc:b7:1d:c4:2f:00:a6:65:75:65:0d:67:33:3c:
be:b0:d5:06:d4:d4:f2:b3:61:a7:bc:d8:5d:50:f1:0c:bd:b4:
f1:5c:6a:82:14:62:2a:56:bd:68:fd:09:af:67:89:c8:0b:14:
3d:ba:4b:03:0e:d9:a2:22:cb:14:96:7f:b3:69:c7:6b:21:a3:
fe:a6:4f:6c:44:38:b3:ba:a4:97:0f:fa:5a:a0:3e:d9:cb:47:
80:a8:d4:f4:09:06:70:78:46:67:70:72:ae:a9:6e:48:c2:f3:
f6:84:d6:2a:8b:bd:52:f4:d1:e9:cc:ba:61:05:2c:88:e2:ec:
dc:d9:c5:01:ba:01:2b:39:cd:7f:c4:e6:5a:16:2e:d1:ee:cc:
15:9e:d6:ae:52:00:e3:42:e7:fe:48:64:64:c3:6d:bc:56:b6:
13:15:c0:f2:93:8c:96:13:c6:26:76:c9:e2:2a:14:29:10:6b:
01:37:2f:cb:c3:38:7a:40:86:3b:51:d2:3d:aa:c3:9d:19:d9:
a5:e0:4d:02:7d:ec:27:de:5b:81:70:b5:c1:55:74:a0:e8:35:
60:eb:d8:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:32:14 2025 by rpki-client