Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/6czfaVmJN585hMGGQek367aCJZs.mft
File: 6czfaVmJN585hMGGQek367aCJZs.mft (raw, json)
Hash identifier: p8xf+AHHNfJ5414gnuiCEFGEEUAINr9Zvr5QhFsaeR0=
Subject key identifier: D4:46:13:33:D1:EE:92:37:DA:09:BE:27:45:6C:AD:16:A3:10:96:B0
Authority key identifier: E9:CC:DF:69:59:89:37:9F:39:84:C1:86:41:E9:37:EB:B6:82:25:9B
Certificate issuer: /CN=e9ccdf695989379f3984c18641e937ebb682259b
Certificate serial: 0199C60E40E5AAF3B4977D6DCD3121227DE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6czfaVmJN585hMGGQek367aCJZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/6czfaVmJN585hMGGQek367aCJZs.mft
Manifest number: 0617
Signing time: Wed 08 Oct 2025 23:00:46 +0000
Manifest this update: Wed 08 Oct 2025 23:00:46 +0000
Manifest next update: Thu 09 Oct 2025 23:00:46 +0000
Files and hashes: 1: 6czfaVmJN585hMGGQek367aCJZs.crl (hash: 1TkoUVIZH4FgcojGZbJ2rqRHd+9U/ntN4GOSdjX8jq0=)
2: UonFdVxRB-HOOyUD446SJsVcabg.roa (hash: 11kZuTKWQH6OP3cuxM8FLHDKW4RaMfeFdGuijw+tO1s=)
3: e2Jeqb9Uzg6EG4YHbxV47PgTWzk.roa (hash: j8o4Nte6arS2S28o9H96r23GZrhvfGEjib56R7pWjcA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/6czfaVmJN585hMGGQek367aCJZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/6czfaVmJN585hMGGQek367aCJZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/6czfaVmJN585hMGGQek367aCJZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 16:33:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c6:0e:40:e5:aa:f3:b4:97:7d:6d:cd:31:21:22:7d:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9ccdf695989379f3984c18641e937ebb682259b
Validity
Not Before: Oct 8 23:00:46 2025 GMT
Not After : Oct 9 23:00:46 2025 GMT
Subject: CN=d4461333d1ee9237da09be27456cad16a31096b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:b6:82:a1:fd:d4:28:2c:54:c2:f0:2a:6a:30:
88:93:0e:97:73:99:59:bb:e1:f9:b4:2c:d1:60:6d:
ce:34:55:24:64:a4:f1:d8:a8:87:6e:70:b2:fc:fa:
75:be:70:d6:80:4a:9c:09:f7:2a:27:3f:9d:38:d8:
df:29:61:b5:8e:ee:3b:dc:c5:e2:81:16:59:cc:75:
b9:45:45:0e:dd:b3:86:bd:2e:7b:47:28:38:29:40:
d2:25:e2:b2:bf:a4:23:1c:27:25:9f:59:02:c7:2d:
1c:98:5e:53:91:00:40:b9:4e:5f:26:d0:d6:60:4d:
f4:6d:3d:25:0b:d0:45:ca:8a:01:68:9f:29:d0:45:
d6:6d:a3:c6:a3:0f:ee:d0:37:d9:b2:af:cd:4c:8b:
d3:1c:42:f4:f1:79:44:92:77:d2:5c:41:38:5b:bd:
2b:ea:fa:61:30:5b:5b:73:da:f7:b8:32:fe:9a:38:
ec:3c:fc:36:dc:ee:51:88:1e:63:1a:68:88:95:fb:
d3:b9:a8:a1:42:62:0d:a4:de:72:7c:8c:97:e3:8c:
5e:92:f2:61:5e:ce:ae:de:b9:fb:04:58:60:b6:46:
07:80:db:36:50:e0:08:71:c2:78:97:c0:83:84:2b:
9c:de:95:12:15:b6:62:7a:75:bc:7a:45:2b:dc:a2:
70:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:46:13:33:D1:EE:92:37:DA:09:BE:27:45:6C:AD:16:A3:10:96:B0
X509v3 Authority Key Identifier:
keyid:E9:CC:DF:69:59:89:37:9F:39:84:C1:86:41:E9:37:EB:B6:82:25:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6czfaVmJN585hMGGQek367aCJZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/6czfaVmJN585hMGGQek367aCJZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/6czfaVmJN585hMGGQek367aCJZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:ac:06:06:5d:33:78:b7:58:ca:88:7c:a4:b0:ac:1c:18:89:
57:6f:11:b2:c0:e6:c6:5c:87:a0:26:1f:25:4c:67:bf:1f:87:
96:13:f4:cf:ed:8f:4a:eb:5d:d4:25:09:64:62:1e:c8:9f:c7:
65:a9:3f:e1:fe:d2:f0:44:b2:22:e5:70:64:03:ce:6d:33:50:
6e:65:3e:b8:19:f8:0a:ef:b5:1a:25:e2:f2:3a:12:b6:cd:64:
e8:ff:67:69:6d:55:d0:93:00:0a:d0:49:fb:dd:5c:60:57:a7:
d9:ce:96:f7:b3:b1:50:d0:c5:d4:71:69:b1:d3:2c:25:a6:16:
d3:55:a5:42:86:f2:cf:ab:5a:3c:55:45:63:52:e3:e9:35:6c:
1b:e9:f8:83:f0:1e:a6:46:69:30:6a:e8:ba:bc:22:70:a4:ec:
2f:87:90:b2:df:22:86:cc:f8:66:b6:0f:69:88:83:7d:67:84:
41:33:31:b6:e2:56:09:5b:2a:dd:3c:e6:c6:0e:d9:b5:1a:9a:
70:51:31:f3:9b:09:e3:32:c6:41:03:ea:c6:c9:af:44:f8:b8:
07:70:ba:16:7c:a9:63:ca:a4:0b:72:a4:1e:82:26:e6:d7:4b:
20:b7:ec:e7:cc:3d:38:7e:81:f6:f8:1f:45:a2:93:9c:53:ad:
86:b6:1d:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 01:21:49 2025 by rpki-client