Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/d16b46-b8cc-4456-a450-27e27c163102/1/6w649Uh9dBqMxtbfOzkhke0-7T8.mft
File: 6w649Uh9dBqMxtbfOzkhke0-7T8.mft (raw, json)
Hash identifier: 4QX045zqURETSd8IyGju+SenZel61n5nYMH0CX0JPSQ=
Subject key identifier: 00:4A:2C:5D:62:61:7E:2B:5A:09:E8:0E:6A:4A:67:46:49:E3:BD:9B
Authority key identifier: EB:0E:B8:F5:48:7D:74:1A:8C:C6:D6:DF:3B:39:21:91:ED:3E:ED:3F
Certificate issuer: /CN=eb0eb8f5487d741a8cc6d6df3b392191ed3eed3f
Certificate serial: 0199FC21448413EE78FB1F35C913E83BB27D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6w649Uh9dBqMxtbfOzkhke0-7T8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/d16b46-b8cc-4456-a450-27e27c163102/1/6w649Uh9dBqMxtbfOzkhke0-7T8.mft
Manifest number: 0C8E
Signing time: Sun 19 Oct 2025 11:01:02 +0000
Manifest this update: Sun 19 Oct 2025 11:01:02 +0000
Manifest next update: Mon 20 Oct 2025 11:01:02 +0000
Files and hashes: 1: 6w649Uh9dBqMxtbfOzkhke0-7T8.crl (hash: LfiX9ofCx+/BCH6GL2H/9dW8IFTFgkfPh1Bm4KquubY=)
2: aNZ_w4ct0s6F9JNwvU81Pvph6xA.roa (hash: DMpkzc/SEQWOGXDtkCkwGEzbNT7zz+eYHoA6cnEiN1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/d16b46-b8cc-4456-a450-27e27c163102/1/6w649Uh9dBqMxtbfOzkhke0-7T8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/d16b46-b8cc-4456-a450-27e27c163102/1/6w649Uh9dBqMxtbfOzkhke0-7T8.mft
rsync://rpki.ripe.net/repository/DEFAULT/6w649Uh9dBqMxtbfOzkhke0-7T8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:44:84:13:ee:78:fb:1f:35:c9:13:e8:3b:b2:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb0eb8f5487d741a8cc6d6df3b392191ed3eed3f
Validity
Not Before: Oct 19 11:01:02 2025 GMT
Not After : Oct 20 11:01:02 2025 GMT
Subject: CN=004a2c5d62617e2b5a09e80e6a4a674649e3bd9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:34:cd:0e:05:d0:0f:69:33:a3:a0:2d:2c:b8:
6f:21:0e:43:54:8c:ae:85:6f:b5:29:ce:08:7a:5c:
63:35:fa:da:46:fc:8e:a1:78:c2:51:3f:49:ac:0e:
b3:66:4f:91:b5:7f:f1:cd:b4:e5:f3:5d:58:c6:9d:
85:53:93:c5:a6:30:d5:12:e6:2b:17:ce:c0:7f:cb:
04:eb:f0:74:3e:b6:56:d6:0c:83:41:d0:3c:35:07:
f8:cd:f5:35:15:6b:81:f6:5f:27:ac:0f:74:82:27:
97:70:c6:19:ab:20:36:aa:d2:8a:dc:33:42:ef:fa:
fc:fc:2d:5c:89:4b:78:82:f6:b7:b5:d6:cd:39:cf:
b3:49:6b:7c:0e:83:d6:51:22:8e:e7:f7:6a:5b:53:
f3:cf:1b:57:50:9f:a9:a1:dd:6d:fa:a6:a6:6d:c8:
98:d3:bf:30:c3:3a:8b:f1:7d:5f:a5:94:c6:75:5b:
39:f9:d3:43:c1:3e:77:78:cb:6c:d8:0c:be:d1:aa:
93:c8:5a:5a:3e:dd:0d:f1:4f:8a:7a:69:87:86:9d:
85:12:0e:02:87:54:75:83:71:03:11:d5:0f:eb:e0:
da:a3:ec:26:54:a4:4c:96:f0:e3:0c:b5:bb:05:43:
16:5a:86:d6:71:09:ac:db:bd:10:31:8c:72:ab:0f:
b7:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:4A:2C:5D:62:61:7E:2B:5A:09:E8:0E:6A:4A:67:46:49:E3:BD:9B
X509v3 Authority Key Identifier:
keyid:EB:0E:B8:F5:48:7D:74:1A:8C:C6:D6:DF:3B:39:21:91:ED:3E:ED:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6w649Uh9dBqMxtbfOzkhke0-7T8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d16b46-b8cc-4456-a450-27e27c163102/1/6w649Uh9dBqMxtbfOzkhke0-7T8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d16b46-b8cc-4456-a450-27e27c163102/1/6w649Uh9dBqMxtbfOzkhke0-7T8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:9c:b3:83:12:43:e5:d5:07:6e:7d:6a:1d:1f:2d:1e:ad:81:
11:8b:fd:45:97:5b:19:75:ba:7a:46:55:aa:0e:7b:02:41:82:
9c:44:05:58:89:a5:73:c6:bf:df:f3:3a:a1:bc:04:62:29:f6:
74:eb:cf:c9:a7:81:02:b6:ac:fc:0e:96:d3:dd:25:5d:5c:2e:
d6:c6:ee:93:e4:d7:3f:05:9c:a5:1e:d1:1c:89:c8:0a:8c:38:
7d:84:0e:ad:d8:43:a4:e8:9d:a0:bb:c7:35:c6:fc:bb:62:91:
6e:3e:63:a5:f0:b7:d8:ae:e6:20:55:57:18:2a:0c:db:b2:82:
8c:79:b0:d8:a2:06:05:9e:a8:c4:88:72:b2:66:96:a4:88:2b:
43:67:24:c1:54:d9:32:1d:2f:71:d0:94:12:bb:b1:7f:e3:e3:
1a:15:34:1d:ec:6f:ee:c1:99:27:7a:93:cf:dd:37:5d:c4:b8:
43:08:2c:5b:66:02:03:00:36:9e:fc:6e:a5:b5:21:e7:e4:33:
78:88:50:a9:7a:11:29:85:1d:8d:97:57:bb:9b:6d:b2:4f:87:
89:8b:f9:d8:64:76:ac:ca:64:8e:e1:ff:5e:46:b2:d8:1b:8f:
81:a2:39:e2:9c:b0:15:35:79:22:3e:9e:22:d3:9c:fa:86:d0:
74:57:a5:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:58 2025 by rpki-client