Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/91d629-7d1f-45bd-a1e1-931cf798e412/1/6rBmxuGACj9b0uQG6aYg0qD29lM.mft
File: 6rBmxuGACj9b0uQG6aYg0qD29lM.mft (raw, json)
Hash identifier: YsLKSeYM7ZRnWnPk5wL7LZs6NYgv1fTjayKsmBzIkks=
Subject key identifier: A3:E0:D5:B7:A2:D6:AF:89:CD:3B:77:F3:A1:8A:C8:D3:5A:A7:D9:EE
Authority key identifier: EA:B0:66:C6:E1:80:0A:3F:5B:D2:E4:06:E9:A6:20:D2:A0:F6:F6:53
Certificate issuer: /CN=eab066c6e1800a3f5bd2e406e9a620d2a0f6f653
Certificate serial: 019A00355B91EB48AA65DCBEDB78FF534B3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6rBmxuGACj9b0uQG6aYg0qD29lM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/91d629-7d1f-45bd-a1e1-931cf798e412/1/6rBmxuGACj9b0uQG6aYg0qD29lM.mft
Manifest number: 0D78
Signing time: Mon 20 Oct 2025 06:01:28 +0000
Manifest this update: Mon 20 Oct 2025 06:01:28 +0000
Manifest next update: Tue 21 Oct 2025 06:01:28 +0000
Files and hashes: 1: 6rBmxuGACj9b0uQG6aYg0qD29lM.crl (hash: Amf2X2utljhum7JsY+0AxjmyZ8lABDB930CALooIJjY=)
2: 9uvjekcau3PbfLrEyZwNzBwQO7Q.roa (hash: mH0HAaOf2X0fWHcxqJaO7mLzzy3VZpb8eqMe7h725z0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/91d629-7d1f-45bd-a1e1-931cf798e412/1/6rBmxuGACj9b0uQG6aYg0qD29lM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/91d629-7d1f-45bd-a1e1-931cf798e412/1/6rBmxuGACj9b0uQG6aYg0qD29lM.mft
rsync://rpki.ripe.net/repository/DEFAULT/6rBmxuGACj9b0uQG6aYg0qD29lM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:5b:91:eb:48:aa:65:dc:be:db:78:ff:53:4b:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eab066c6e1800a3f5bd2e406e9a620d2a0f6f653
Validity
Not Before: Oct 20 06:01:28 2025 GMT
Not After : Oct 21 06:01:28 2025 GMT
Subject: CN=a3e0d5b7a2d6af89cd3b77f3a18ac8d35aa7d9ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d8:92:41:39:6c:03:78:44:1c:ca:17:77:e8:
a4:e5:06:58:56:db:a8:97:32:f4:4e:df:83:8c:f2:
5f:48:7d:5c:a3:ac:16:16:dd:88:7e:b3:74:17:91:
98:ba:b0:c9:29:c3:ff:6a:7f:a4:61:f8:e8:d8:cb:
4c:90:09:c1:5c:58:20:0c:c6:cb:e8:07:11:a5:43:
2e:34:fc:a8:f5:d1:3c:f3:ce:a4:78:57:5d:32:c9:
ca:6b:66:37:e0:31:50:5c:55:3c:be:05:9c:50:3d:
02:f9:99:db:be:5f:bc:22:51:a5:f5:bd:08:27:47:
83:81:d3:27:95:0a:fc:2a:53:fd:62:65:70:a7:1d:
8c:b9:ec:a3:ba:e2:72:02:b1:b6:cc:51:1a:4f:af:
52:78:c3:ff:2e:7b:47:33:69:de:8a:59:65:b6:57:
5d:cc:ad:b2:5c:b4:ca:74:a4:4d:d4:1b:7b:94:96:
02:a9:de:3e:99:94:31:b0:65:fe:f1:0b:fa:8a:34:
a1:d5:30:71:b5:88:29:82:ea:bf:0c:51:1e:ee:85:
15:01:11:84:76:2a:4f:92:71:88:b1:fa:c0:24:0e:
79:8d:11:12:68:88:87:c8:55:7f:f6:04:a4:06:28:
eb:bb:a4:01:5e:30:2a:39:1f:ce:02:67:92:d2:49:
78:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:E0:D5:B7:A2:D6:AF:89:CD:3B:77:F3:A1:8A:C8:D3:5A:A7:D9:EE
X509v3 Authority Key Identifier:
keyid:EA:B0:66:C6:E1:80:0A:3F:5B:D2:E4:06:E9:A6:20:D2:A0:F6:F6:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6rBmxuGACj9b0uQG6aYg0qD29lM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/91d629-7d1f-45bd-a1e1-931cf798e412/1/6rBmxuGACj9b0uQG6aYg0qD29lM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/91d629-7d1f-45bd-a1e1-931cf798e412/1/6rBmxuGACj9b0uQG6aYg0qD29lM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:b6:99:fb:50:91:23:ab:13:ce:c5:48:35:cb:64:7c:0a:7a:
65:d1:f5:cf:9d:18:c6:76:8c:e5:6d:d3:8b:00:7c:95:aa:db:
59:17:23:25:36:dc:eb:16:71:57:c9:c8:9b:dd:02:6e:dc:3c:
71:9a:6e:08:3e:65:32:02:19:7d:9d:52:2c:9b:fa:d7:a2:a1:
1c:29:3a:6f:73:5c:8f:fa:52:e3:d8:c3:0b:8e:73:df:28:00:
ee:a6:12:e7:83:6a:4d:01:8e:c2:68:88:fd:0e:95:c3:c6:b4:
a2:dd:9b:a5:86:2d:95:dc:da:ca:a8:e8:29:12:be:63:0c:d9:
4d:7a:26:4e:08:cd:72:6e:96:88:35:5d:a7:d5:b0:8b:3e:e3:
55:36:09:fa:7a:24:2e:c4:75:a4:41:3d:b4:a7:c5:fa:18:0c:
a8:04:db:a8:a7:c1:72:d4:c1:83:cf:32:5b:2f:f9:a4:d9:89:
e6:a9:93:54:c9:18:ae:81:91:1f:4c:34:b0:13:9f:51:9a:8d:
44:fe:47:8a:8f:4b:d9:5d:ed:12:37:dc:ed:2f:05:05:fe:92:
5b:81:c8:83:59:99:dc:61:08:99:a5:94:05:f6:bc:c5:90:c5:
f7:4e:79:ac:11:2d:cf:57:20:35:41:36:31:89:69:0b:0f:b4:
d5:9b:9b:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:49:36 2025 by rpki-client