Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b903e9-6d09-4e20-b926-3692f96e33a9/1/a6JrVs7pf2AglBuxfGp8bOoPgUo.mft
File: a6JrVs7pf2AglBuxfGp8bOoPgUo.mft (raw, json)
Hash identifier: Pr2QQbM15OtqOfL3UFKfOL6UxsKitaaUrjBXfJfMiZI=
Subject key identifier: 6C:AD:61:BB:5B:FE:43:3D:09:7E:D2:6C:AE:13:C4:9A:F2:F1:D2:0A
Authority key identifier: 6B:A2:6B:56:CE:E9:7F:60:20:94:1B:B1:7C:6A:7C:6C:EA:0F:81:4A
Certificate issuer: /CN=6ba26b56cee97f6020941bb17c6a7c6cea0f814a
Certificate serial: 0199FC583423CE098B69958F90104080EA50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a6JrVs7pf2AglBuxfGp8bOoPgUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/b903e9-6d09-4e20-b926-3692f96e33a9/1/a6JrVs7pf2AglBuxfGp8bOoPgUo.mft
Manifest number: 13A2
Signing time: Sun 19 Oct 2025 12:01:02 +0000
Manifest this update: Sun 19 Oct 2025 12:01:02 +0000
Manifest next update: Mon 20 Oct 2025 12:01:02 +0000
Files and hashes: 1: Xv_k9B_Ol6KMXiDbnDdwE9msKgI.roa (hash: o2br+mpVDRPvcRh8PVchKStcPAlc6/q+ycf8CdzuWcA=)
2: a6JrVs7pf2AglBuxfGp8bOoPgUo.crl (hash: VjvpICCVURv11oI9IFQyckD9WHK6A6AQxoe0V8dIzQ0=)
3: j0LzYUhIgfi314lRG-UPK6juSV4.roa (hash: OB2pKs0VeSqp3qXLCAeqefAg0imNyv8nfRlrTm7jRsg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/b903e9-6d09-4e20-b926-3692f96e33a9/1/a6JrVs7pf2AglBuxfGp8bOoPgUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/b903e9-6d09-4e20-b926-3692f96e33a9/1/a6JrVs7pf2AglBuxfGp8bOoPgUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/a6JrVs7pf2AglBuxfGp8bOoPgUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:34:23:ce:09:8b:69:95:8f:90:10:40:80:ea:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ba26b56cee97f6020941bb17c6a7c6cea0f814a
Validity
Not Before: Oct 19 12:01:02 2025 GMT
Not After : Oct 20 12:01:02 2025 GMT
Subject: CN=6cad61bb5bfe433d097ed26cae13c49af2f1d20a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:19:90:15:41:6e:47:0c:26:5d:0e:46:c6:76:
93:77:60:c8:ba:61:b7:24:d8:e2:b7:7a:69:be:d6:
74:bf:1f:cb:ac:a9:86:30:57:17:66:4c:7d:14:d8:
e4:ce:bf:cd:82:9f:eb:b3:09:b5:ef:7d:ac:e9:8d:
c0:b5:f7:fb:da:28:b3:a6:dc:eb:7b:f8:c9:b9:28:
1c:6b:ff:1f:29:1c:64:44:01:7e:03:b9:9b:50:f4:
b7:4e:e5:ff:a3:50:7c:9b:7a:f1:8b:a6:b2:8a:16:
bc:d6:87:c2:63:9f:d8:85:89:2c:3a:76:72:5c:b8:
1e:3b:cc:71:12:0d:92:83:75:bd:3b:6b:e9:f6:eb:
ce:65:92:58:81:4e:21:b1:04:77:3d:85:45:36:b9:
a4:09:35:05:9e:41:d6:26:db:48:eb:7d:10:86:b6:
a9:79:57:47:1f:bf:42:d1:9b:0a:8d:d5:7c:ab:21:
4c:c5:18:67:bb:b2:8b:5a:c5:cc:dd:0a:38:57:a1:
9a:92:c1:88:68:7f:c9:03:69:0e:9d:94:05:47:79:
f4:84:3c:ce:e0:fd:6c:38:7a:5d:a4:a2:3a:43:ca:
79:15:b0:6a:fc:a5:dd:7d:e6:1c:34:94:57:5e:64:
98:0b:29:17:b8:c9:a7:e8:02:35:45:fc:44:a4:8c:
e7:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:AD:61:BB:5B:FE:43:3D:09:7E:D2:6C:AE:13:C4:9A:F2:F1:D2:0A
X509v3 Authority Key Identifier:
keyid:6B:A2:6B:56:CE:E9:7F:60:20:94:1B:B1:7C:6A:7C:6C:EA:0F:81:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6JrVs7pf2AglBuxfGp8bOoPgUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b903e9-6d09-4e20-b926-3692f96e33a9/1/a6JrVs7pf2AglBuxfGp8bOoPgUo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b903e9-6d09-4e20-b926-3692f96e33a9/1/a6JrVs7pf2AglBuxfGp8bOoPgUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:94:d1:ac:a7:f1:38:70:31:4b:01:46:57:9d:09:c0:fb:60:
be:2a:41:ac:15:e3:66:ea:88:fb:a4:3a:ad:d7:6a:b6:2f:a0:
ac:20:91:09:38:00:8c:d5:98:c2:82:a0:9f:e6:0a:38:73:4d:
1b:06:10:08:49:53:02:9f:f8:ac:40:23:22:5e:1c:de:e5:50:
8f:08:1c:f7:0a:fa:63:9c:4a:8c:36:94:02:a7:75:50:92:09:
78:5b:f4:df:d0:62:6c:ad:06:f4:94:d6:5f:06:9f:77:85:8c:
6d:6f:a0:44:e6:1f:f6:c6:1e:28:92:67:7e:e6:55:b3:95:8f:
eb:07:71:5a:03:5b:48:26:e7:b3:39:19:e0:68:51:a4:1d:f3:
0a:88:0d:d8:e6:ec:d6:50:a2:7e:98:64:fc:60:23:c6:74:51:
10:e8:bc:16:35:d9:37:54:68:13:26:77:d1:d0:e8:13:3f:1b:
95:f3:1b:a0:b4:87:08:7b:81:ea:13:74:8c:49:d3:3d:c6:38:
c7:f5:f7:ac:90:1a:8c:21:3f:5e:45:1f:45:14:f6:9e:aa:e7:
4c:34:70:00:51:3f:48:76:c9:f0:69:a9:78:92:8b:4f:23:e8:
56:18:b3:a6:8d:da:b8:14:a2:32:cd:b2:2e:e5:b9:85:70:30:
0c:4b:32:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:26:40 2025 by rpki-client