Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/0aa9b7-0073-4685-aa7b-70771b55c2ab/1/6W790RLajZdctZOq0f6IQNbwiuM.mft
File: 6W790RLajZdctZOq0f6IQNbwiuM.mft (raw, json)
Hash identifier: pa6DyVqbulwzKU/CzL37Ng6XRJ9foL0oI9vADWWti48=
Subject key identifier: B1:F0:1B:97:4C:34:44:18:A5:D5:5F:03:75:4D:FC:6D:A0:7D:45:40
Authority key identifier: E9:6E:FD:D1:12:DA:8D:97:5C:B5:93:AA:D1:FE:88:40:D6:F0:8A:E3
Certificate issuer: /CN=e96efdd112da8d975cb593aad1fe8840d6f08ae3
Certificate serial: 0199FD6B723DEF91A2B45A92A8AC8EDDCA81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6W790RLajZdctZOq0f6IQNbwiuM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/0aa9b7-0073-4685-aa7b-70771b55c2ab/1/6W790RLajZdctZOq0f6IQNbwiuM.mft
Manifest number: 02AB
Signing time: Sun 19 Oct 2025 17:01:41 +0000
Manifest this update: Sun 19 Oct 2025 17:01:41 +0000
Manifest next update: Mon 20 Oct 2025 17:01:41 +0000
Files and hashes: 1: 6W790RLajZdctZOq0f6IQNbwiuM.crl (hash: REAU7ijKNbHOSvyZQm+SkA6DMNIZfqNiLx9M9UyJ92o=)
2: Nn9zvns-9MxxIXjn8JIbpmV34s8.roa (hash: 7A6j8hAQUIpmUDd+lagtKalWuiGm1he97we0iFCchhc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/0aa9b7-0073-4685-aa7b-70771b55c2ab/1/6W790RLajZdctZOq0f6IQNbwiuM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/0aa9b7-0073-4685-aa7b-70771b55c2ab/1/6W790RLajZdctZOq0f6IQNbwiuM.mft
rsync://rpki.ripe.net/repository/DEFAULT/6W790RLajZdctZOq0f6IQNbwiuM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:72:3d:ef:91:a2:b4:5a:92:a8:ac:8e:dd:ca:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e96efdd112da8d975cb593aad1fe8840d6f08ae3
Validity
Not Before: Oct 19 17:01:41 2025 GMT
Not After : Oct 20 17:01:41 2025 GMT
Subject: CN=b1f01b974c344418a5d55f03754dfc6da07d4540
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:bb:f2:38:8f:66:e7:91:d4:cc:45:86:a8:84:
25:df:49:67:dc:0e:e2:e0:7f:ef:9e:89:d2:f6:9b:
65:6b:de:d8:68:b0:13:05:28:fd:fa:00:6a:03:5d:
e7:f3:a7:06:52:4c:ee:8c:45:18:6b:00:0b:51:77:
27:62:7e:7c:74:7a:cc:56:bd:41:80:4a:e6:2f:83:
aa:1d:3b:86:86:71:8f:df:07:4c:ab:61:bb:f6:37:
ca:89:0e:36:d7:39:7c:bb:5a:b5:cc:90:7b:70:86:
05:96:36:48:e3:59:bf:55:56:85:1a:23:ed:1c:b4:
f6:c0:8a:25:98:4b:8e:20:6d:32:dc:96:b6:9a:34:
bd:7b:21:1d:31:f6:20:84:97:6e:83:3f:12:81:2f:
3a:d6:00:33:15:18:be:6c:63:47:d9:b3:50:5f:94:
40:c8:fb:6e:58:7f:78:04:2a:b9:08:8e:89:91:8f:
06:53:11:d5:33:88:99:a5:c4:72:53:9b:f7:b0:81:
fc:a4:11:d0:8b:59:ff:69:d7:43:a5:b5:93:54:5c:
17:e3:42:df:95:56:35:0c:f1:ff:a2:f6:17:9a:af:
f0:e0:71:68:c5:a8:5f:78:be:d8:9e:3c:62:dd:36:
04:4e:5d:44:dc:84:8e:e5:44:4e:07:e6:75:89:bb:
62:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:F0:1B:97:4C:34:44:18:A5:D5:5F:03:75:4D:FC:6D:A0:7D:45:40
X509v3 Authority Key Identifier:
keyid:E9:6E:FD:D1:12:DA:8D:97:5C:B5:93:AA:D1:FE:88:40:D6:F0:8A:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6W790RLajZdctZOq0f6IQNbwiuM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/0aa9b7-0073-4685-aa7b-70771b55c2ab/1/6W790RLajZdctZOq0f6IQNbwiuM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/0aa9b7-0073-4685-aa7b-70771b55c2ab/1/6W790RLajZdctZOq0f6IQNbwiuM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:3d:4f:46:ab:60:08:30:b1:ca:1a:65:4c:b0:58:89:cd:5c:
84:c8:ce:88:52:84:4e:86:0f:03:cb:52:2f:9e:ae:27:e7:58:
57:b3:b0:99:a9:37:22:a1:1c:f6:3f:4a:c7:15:70:22:51:78:
3b:b9:49:20:70:a6:cc:d8:16:f9:b8:21:da:47:45:7d:65:06:
b1:97:ce:3f:e4:15:29:fe:cd:3b:3c:f6:0f:73:ef:9b:7c:4a:
89:5c:7a:8e:ad:f2:d5:e5:d6:bf:bd:5c:55:d9:a8:bd:f3:bb:
98:16:8d:db:26:c1:34:ad:4b:10:ff:a5:26:aa:8e:4e:00:e1:
25:ef:c6:68:80:00:ff:ed:41:98:dc:e5:6f:24:d1:f8:03:b5:
25:be:62:1a:f9:c5:40:76:26:fe:8a:df:13:05:5a:9c:12:b2:
08:1d:36:bd:89:77:1d:31:b7:40:d4:c5:01:51:57:a1:4b:2b:
88:39:26:3e:31:6e:09:82:92:fd:75:1b:95:b6:6a:dd:89:24:
7c:6d:e7:49:27:6e:08:05:c0:4b:5c:30:51:ad:17:c7:71:a3:
17:c5:19:bc:a3:e4:a3:4c:f3:c0:15:a6:35:b3:44:7c:9b:6a:
53:9f:41:69:5d:e8:2d:b6:36:13:ca:fe:9b:03:2c:b7:02:de:
36:90:af:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:50:16 2025 by rpki-client