Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/f78937-aed3-4b6f-aa2d-c832ed7d5fec/1/6Y4gI4HByI2C87cPO-Booao3K50.mft
File: 6Y4gI4HByI2C87cPO-Booao3K50.mft (raw, json)
Hash identifier: 72QBAUZJxDYsqDfEcgGuOTPsmIQIgkG6y8G2DtEoJyg=
Subject key identifier: A1:28:B9:E2:BF:DE:B5:D0:01:A6:BC:B9:A7:1D:D6:29:7D:E2:C9:86
Authority key identifier: E9:8E:20:23:81:C1:C8:8D:82:F3:B7:0F:3B:E0:68:A1:AA:37:2B:9D
Certificate issuer: /CN=e98e202381c1c88d82f3b70f3be068a1aa372b9d
Certificate serial: 019A00A38702BA0318BF43DB1DF9206D5325
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Y4gI4HByI2C87cPO-Booao3K50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/f78937-aed3-4b6f-aa2d-c832ed7d5fec/1/6Y4gI4HByI2C87cPO-Booao3K50.mft
Manifest number: 16E3
Signing time: Mon 20 Oct 2025 08:01:48 +0000
Manifest this update: Mon 20 Oct 2025 08:01:48 +0000
Manifest next update: Tue 21 Oct 2025 08:01:48 +0000
Files and hashes: 1: 5EXO9UiepL6Zq1llBjLLIrL5oUg.roa (hash: f7qlXZI97BeR4x4m6/QuC0gLJcnSYhH/2MDokTxi6Pw=)
2: 6Y4gI4HByI2C87cPO-Booao3K50.crl (hash: 6PAgzZjLOJ1ro1KcdozAG7wcWSUwbFCOw03vijhsW/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/f78937-aed3-4b6f-aa2d-c832ed7d5fec/1/6Y4gI4HByI2C87cPO-Booao3K50.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/f78937-aed3-4b6f-aa2d-c832ed7d5fec/1/6Y4gI4HByI2C87cPO-Booao3K50.mft
rsync://rpki.ripe.net/repository/DEFAULT/6Y4gI4HByI2C87cPO-Booao3K50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 08:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:a3:87:02:ba:03:18:bf:43:db:1d:f9:20:6d:53:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e98e202381c1c88d82f3b70f3be068a1aa372b9d
Validity
Not Before: Oct 20 08:01:48 2025 GMT
Not After : Oct 21 08:01:48 2025 GMT
Subject: CN=a128b9e2bfdeb5d001a6bcb9a71dd6297de2c986
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c3:60:b5:dc:92:e0:42:88:2a:87:ae:9c:30:
72:c4:7d:47:f3:ff:9b:5f:ac:52:42:d4:2d:56:b2:
b2:b3:44:5e:f4:5a:7c:a7:ea:f1:1a:e3:74:be:ae:
44:ca:cd:4f:e9:f6:f4:9e:8f:b4:52:80:29:c2:01:
48:3f:83:a9:c3:eb:68:1e:c0:e9:2b:96:c6:b9:87:
16:98:74:58:de:77:d2:77:c3:6b:60:04:ab:02:60:
08:76:7d:ee:61:fa:88:82:e5:a8:14:9e:7f:59:b6:
a0:f4:60:49:05:20:26:73:b4:5d:70:89:f0:b1:90:
70:ea:f7:01:28:65:8c:68:92:bd:d2:e7:86:60:05:
f8:85:18:b7:2f:92:1b:e2:01:96:aa:ea:96:b0:b1:
27:c4:f3:4a:b3:21:92:7d:d9:29:b9:3f:05:14:44:
84:8f:0e:f2:fa:4c:c7:6c:55:d2:1d:f8:4c:c5:66:
f9:77:8d:6c:1c:e8:c4:39:e2:e2:01:d7:44:46:6a:
83:2b:c1:57:32:18:76:2d:a2:4c:4a:c1:00:86:19:
7a:fc:fb:03:2b:45:75:25:39:15:bf:88:de:90:a6:
bd:56:a6:62:6f:7d:cc:1c:8b:54:9e:49:90:ae:10:
e7:58:1d:f4:2f:d9:6f:88:7e:7b:66:1a:67:e5:2e:
75:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:28:B9:E2:BF:DE:B5:D0:01:A6:BC:B9:A7:1D:D6:29:7D:E2:C9:86
X509v3 Authority Key Identifier:
keyid:E9:8E:20:23:81:C1:C8:8D:82:F3:B7:0F:3B:E0:68:A1:AA:37:2B:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Y4gI4HByI2C87cPO-Booao3K50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f78937-aed3-4b6f-aa2d-c832ed7d5fec/1/6Y4gI4HByI2C87cPO-Booao3K50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f78937-aed3-4b6f-aa2d-c832ed7d5fec/1/6Y4gI4HByI2C87cPO-Booao3K50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:95:ef:05:9a:68:43:d1:a7:d3:4f:25:9f:9b:dc:15:da:b9:
9b:c9:fe:75:75:d7:63:18:d8:0a:76:6b:71:cd:30:81:ac:73:
57:de:7f:92:bf:87:76:7a:ff:c7:8c:e7:9d:24:f8:7e:64:25:
96:9c:ea:04:74:f7:32:14:b8:b4:8a:38:f2:df:4c:4f:3b:61:
e6:9b:02:47:2f:f3:91:a4:a3:52:82:b6:f4:2e:33:1a:d2:e5:
90:a6:52:ec:7e:77:7b:fc:2b:68:1c:47:9a:40:5b:6b:d6:b2:
d5:cf:58:1a:33:46:52:93:6d:fd:67:b3:2e:82:d5:03:8a:2f:
ad:5e:ae:b8:ec:04:56:62:69:85:f4:9e:b1:6d:1c:74:1c:4f:
4a:59:25:57:d5:97:ba:85:42:c9:d5:4e:10:14:ad:79:c9:ac:
5e:ef:35:a2:91:5e:af:ec:2f:a9:03:fe:b7:8d:4e:b7:8b:11:
ce:cb:8a:9b:bb:de:72:a8:46:fd:43:ad:ac:69:7b:2a:7e:91:
e2:f0:64:ef:6e:3e:a6:fb:6b:64:aa:b6:79:d8:67:e6:eb:24:
b1:ec:6f:5a:ad:68:a3:43:bc:62:0d:e1:2f:95:4d:83:40:c8:
c8:78:62:8e:96:84:55:1e:39:c4:24:b8:78:ca:7a:da:e7:16:
9e:4c:8c:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:41:42 2025 by rpki-client