Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/57889a-50df-4abf-81e5-1b12641f493b/1/b6rlVhP8iVhve9beDtygl7hhWmo.mft
File: b6rlVhP8iVhve9beDtygl7hhWmo.mft (raw, json)
Hash identifier: Oydym/ZXFfdVIUSe5UyjhYslLnEojQ+a9SgEVves7Uk=
Subject key identifier: E9:73:F0:30:D0:FF:10:65:28:5A:39:1E:0B:DA:69:CF:75:6E:15:CC
Authority key identifier: 6F:AA:E5:56:13:FC:89:58:6F:7B:D6:DE:0E:DC:A0:97:B8:61:5A:6A
Certificate issuer: /CN=6faae55613fc89586f7bd6de0edca097b8615a6a
Certificate serial: 0199FEEC254C7228183DA322B06DCB9A6A77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b6rlVhP8iVhve9beDtygl7hhWmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/57889a-50df-4abf-81e5-1b12641f493b/1/b6rlVhP8iVhve9beDtygl7hhWmo.mft
Manifest number: 0A4E
Signing time: Mon 20 Oct 2025 00:01:52 +0000
Manifest this update: Mon 20 Oct 2025 00:01:52 +0000
Manifest next update: Tue 21 Oct 2025 00:01:52 +0000
Files and hashes: 1: aOtm6U59mShACrUP4z50hrZCIxk.roa (hash: 8fQIVCesiryqBUIZoQ97a4j4i55DYNAa5i2DNRlMQ5M=)
2: b6rlVhP8iVhve9beDtygl7hhWmo.crl (hash: 1uQKQfuul+FRvvfIH1zcpGA8HG71zb5D1fK7oQIzWwc=)
3: y4zgX7Lvz7a-J26BXsPiVoxb_IM.roa (hash: NtJpJ4/+lfRrM4AtabmrS2+ljg+xewyFLniZOgVUMdA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/57889a-50df-4abf-81e5-1b12641f493b/1/b6rlVhP8iVhve9beDtygl7hhWmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/57889a-50df-4abf-81e5-1b12641f493b/1/b6rlVhP8iVhve9beDtygl7hhWmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/b6rlVhP8iVhve9beDtygl7hhWmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:ec:25:4c:72:28:18:3d:a3:22:b0:6d:cb:9a:6a:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6faae55613fc89586f7bd6de0edca097b8615a6a
Validity
Not Before: Oct 20 00:01:52 2025 GMT
Not After : Oct 21 00:01:52 2025 GMT
Subject: CN=e973f030d0ff1065285a391e0bda69cf756e15cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:69:a6:d5:48:69:a7:f3:e1:66:e3:36:50:44:
95:3d:9a:cc:ae:bf:b8:d8:f0:01:8a:1b:60:72:74:
9f:e6:d2:75:ea:d5:f2:79:ea:c4:e4:7b:4f:c8:56:
34:bf:43:46:0d:22:34:25:1a:dc:a8:d8:31:c9:b1:
85:be:70:1c:63:e8:b5:f4:02:03:e1:48:de:8b:8b:
88:a6:3a:04:42:82:47:45:c9:ce:17:a5:57:98:c5:
4d:29:e9:fc:48:00:25:af:a0:a2:21:2a:93:b3:31:
7b:c6:32:b4:12:97:2a:5f:b1:fa:f4:66:37:69:ae:
8a:5d:70:59:b6:d9:5e:39:b9:0d:52:30:d2:18:91:
ff:5c:91:a6:a2:69:c3:28:5c:f7:bc:0a:ea:ae:d9:
8b:76:30:72:25:b8:40:ea:9c:2a:7e:2f:f6:5e:56:
37:3f:ff:e3:be:3a:33:84:05:3b:26:df:5c:89:eb:
4c:24:b5:20:fa:97:1b:0a:45:60:a0:90:9a:4b:77:
b4:d7:5d:27:ab:ef:b0:5b:52:53:30:cb:df:54:0d:
fb:97:00:8b:92:e5:a6:95:da:6c:3f:53:da:1d:59:
04:ec:73:32:a4:bb:b2:be:f3:20:ca:a8:7a:be:03:
e8:fa:9b:41:bf:07:02:fc:e1:4a:a7:12:c1:7a:2e:
c1:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:73:F0:30:D0:FF:10:65:28:5A:39:1E:0B:DA:69:CF:75:6E:15:CC
X509v3 Authority Key Identifier:
keyid:6F:AA:E5:56:13:FC:89:58:6F:7B:D6:DE:0E:DC:A0:97:B8:61:5A:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6rlVhP8iVhve9beDtygl7hhWmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/57889a-50df-4abf-81e5-1b12641f493b/1/b6rlVhP8iVhve9beDtygl7hhWmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/57889a-50df-4abf-81e5-1b12641f493b/1/b6rlVhP8iVhve9beDtygl7hhWmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:29:ee:01:9e:12:dd:84:19:2f:5d:cb:98:e8:e8:1d:99:d9:
38:04:da:11:94:97:45:46:a9:18:32:79:57:6a:f4:61:74:f8:
01:c8:e4:fd:61:24:aa:9f:af:16:89:ba:82:96:a2:48:33:01:
c2:93:a2:e2:69:9e:a1:64:72:80:f9:8c:3f:cf:fe:ae:69:9f:
a2:48:8b:23:56:f5:cd:b3:66:07:d7:bf:a0:f6:bd:5b:46:9d:
67:b8:6c:d0:33:a7:bb:98:75:c1:18:af:dc:35:8d:b3:52:5a:
ab:c0:08:87:2e:72:2e:a0:dd:93:99:f4:63:ff:16:b0:b8:a6:
ac:17:8c:60:a9:69:85:51:4c:c1:1d:7e:8b:57:81:b4:a4:07:
e2:25:c0:f7:a9:c8:68:eb:33:3c:43:db:97:d2:c5:d0:e1:df:
d2:11:06:cf:55:7a:92:de:9e:09:e5:e3:66:05:0c:55:cc:40:
03:aa:31:a7:78:08:68:fd:16:9f:66:52:5e:f0:c8:db:34:63:
16:6e:da:f6:e7:63:bb:de:d8:ce:ba:15:ad:fd:81:e0:b8:32:
43:15:59:58:a9:77:ae:ce:09:1e:59:bb:bb:61:83:1f:14:31:
df:1a:1b:97:59:71:c3:b7:86:f2:b3:93:7f:b9:85:f2:01:dc:
6d:80:2d:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:56:26 2025 by rpki-client