Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.mft
File: 6Dk70TBfbMRDkZIRnGBfRLvwm8k.mft (raw, json)
Hash identifier: FLiQF4aHXgEJC1pm3BPAMln0AXcFZp/8IkBbc7g5NSY=
Subject key identifier: 76:5A:9D:65:2F:8F:18:6E:74:51:A9:B3:C8:2F:20:E8:11:A2:91:28
Authority key identifier: E8:39:3B:D1:30:5F:6C:C4:43:91:92:11:9C:60:5F:44:BB:F0:9B:C9
Certificate issuer: /CN=e8393bd1305f6cc4439192119c605f44bbf09bc9
Certificate serial: 0199FFC7C6AC42F2259158B58A5FE1AFCD19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Dk70TBfbMRDkZIRnGBfRLvwm8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.mft
Manifest number: 09ED
Signing time: Mon 20 Oct 2025 04:01:46 +0000
Manifest this update: Mon 20 Oct 2025 04:01:46 +0000
Manifest next update: Tue 21 Oct 2025 04:01:46 +0000
Files and hashes: 1: 6Dk70TBfbMRDkZIRnGBfRLvwm8k.crl (hash: CSYGqT7KpomAbbfwCRL9kGgxXuP2IowxH3rS/WFdbbQ=)
2: dGlwmlHKZ3Y604U9jPtZsAf1JsI.roa (hash: g6t/bPLMAjqWES1EVRCv4fx129KuT8ofKzhDnvgk+CU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/6Dk70TBfbMRDkZIRnGBfRLvwm8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:c6:ac:42:f2:25:91:58:b5:8a:5f:e1:af:cd:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8393bd1305f6cc4439192119c605f44bbf09bc9
Validity
Not Before: Oct 20 04:01:46 2025 GMT
Not After : Oct 21 04:01:46 2025 GMT
Subject: CN=765a9d652f8f186e7451a9b3c82f20e811a29128
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a5:fe:f5:4e:d0:38:2a:18:1b:f2:8c:c9:d4:
63:29:f7:dc:fe:77:f1:56:3f:e9:d6:ca:e2:7d:b0:
32:7d:7c:06:22:1d:74:0f:1b:2f:85:85:a5:2c:cc:
71:54:5e:8f:90:ad:a2:c4:e0:57:7a:07:37:48:4b:
2f:b2:8f:d4:e9:7a:78:a2:ae:ed:f4:3b:94:1c:ed:
5d:40:62:cd:39:33:5d:a4:87:0a:75:bf:79:02:f4:
06:c7:ad:a8:02:f2:58:05:9c:f6:cb:e5:35:b2:cf:
99:08:d3:27:47:77:92:bb:7b:b3:68:bc:48:39:aa:
63:90:8a:ce:be:58:63:03:40:20:47:da:0e:18:cb:
e0:14:88:dd:cb:2f:88:7c:c2:14:32:6d:78:93:43:
5d:0b:c8:3a:f1:19:28:7c:78:c4:d8:9d:42:8e:de:
40:26:8e:a3:f9:40:1e:75:3d:3a:37:c4:b1:a3:db:
50:b0:09:4d:28:85:1e:7e:ca:b8:d9:fa:85:b2:e5:
cb:82:56:5a:f0:b1:6f:e5:44:b6:cc:26:3e:1f:84:
41:01:d8:5c:b4:c5:84:75:06:7f:0c:4b:08:fa:0a:
4d:aa:e0:44:e2:66:7a:b3:ba:55:6d:8d:53:dc:0f:
bb:63:44:48:71:23:b5:1d:66:e9:92:4d:51:03:26:
fb:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:5A:9D:65:2F:8F:18:6E:74:51:A9:B3:C8:2F:20:E8:11:A2:91:28
X509v3 Authority Key Identifier:
keyid:E8:39:3B:D1:30:5F:6C:C4:43:91:92:11:9C:60:5F:44:BB:F0:9B:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Dk70TBfbMRDkZIRnGBfRLvwm8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:29:eb:c6:c7:4d:35:9f:8d:4d:98:8c:fb:3d:71:8c:9f:a7:
a3:83:c9:23:55:ed:12:a4:78:87:86:a0:42:e6:f1:d6:dd:f7:
c4:97:41:36:c7:ad:02:8d:24:01:c3:9e:53:d0:23:b3:b6:81:
25:cd:74:e9:cb:34:be:0e:4c:f0:02:e8:e9:09:08:9f:e1:be:
dc:f4:0a:11:5e:70:53:11:98:c4:6c:a6:1c:0a:67:c9:a4:6c:
97:c3:c2:cc:ac:8f:7a:3b:bf:cd:72:6c:7a:a1:32:28:31:f3:
b0:cf:a6:a8:27:d4:47:e0:ad:30:a7:fa:07:d8:b0:64:25:c3:
63:53:17:b0:29:bd:07:06:ef:fc:13:9d:26:79:c6:5d:21:8e:
ee:f2:f3:a0:e2:49:71:8e:db:5b:59:43:2e:25:cf:dc:b8:df:
75:3e:bd:c1:18:38:78:0d:72:e9:87:43:c2:84:9c:c0:5f:a7:
0c:00:74:25:59:0f:09:56:5d:a0:ff:46:5c:84:55:74:04:cd:
45:49:5b:f3:b1:ab:56:1e:f2:89:35:55:73:39:cd:99:0a:a9:
87:a8:21:16:1f:d6:ac:99:81:4f:de:76:d6:e3:cf:43:fe:55:
f0:db:e9:fc:a4:c8:2a:65:55:9d:23:37:91:d9:2c:e0:11:90:
d6:e8:73:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:04:10 2025 by rpki-client