Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/e853ab-f470-4928-bc68-57e90c56a0e2/1/6g9bIh9q8yCY8wZNaCUbYXiSrJI.mft
File: 6g9bIh9q8yCY8wZNaCUbYXiSrJI.mft (raw, json)
Hash identifier: CgfcAlxcAEU/StFsQ7yxlxH+FLSlHB4Ypeep4K0aG04=
Subject key identifier: 14:02:B4:B9:95:15:B2:DF:C9:D5:62:F1:0C:20:BB:FF:F5:8F:4E:43
Authority key identifier: EA:0F:5B:22:1F:6A:F3:20:98:F3:06:4D:68:25:1B:61:78:92:AC:92
Certificate issuer: /CN=ea0f5b221f6af32098f3064d68251b617892ac92
Certificate serial: 0199C3B1F069465506F2B7EFBFFF8FF9379D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6g9bIh9q8yCY8wZNaCUbYXiSrJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/e853ab-f470-4928-bc68-57e90c56a0e2/1/6g9bIh9q8yCY8wZNaCUbYXiSrJI.mft
Manifest number: 0C13
Signing time: Wed 08 Oct 2025 12:00:42 +0000
Manifest this update: Wed 08 Oct 2025 12:00:42 +0000
Manifest next update: Thu 09 Oct 2025 12:00:42 +0000
Files and hashes: 1: 0XabXlC7deISiRQU33Gmn1-hwRM.roa (hash: XChkodvgKF7pFZfRd54zjJi0OLTiUwtDb3v0CScHm/A=)
2: 6g9bIh9q8yCY8wZNaCUbYXiSrJI.crl (hash: nJpj47DW5/D93cTi7K5HubgMxIJIik9n7GIxiyblZC0=)
3: Jkdiv5bBO_BKcgc0OerouNuGE1k.roa (hash: VbBTlFGzjAjrvA9wRAtB5k6JdTD926ZHlAXAShcRc2U=)
4: RG7fXecCgltP9RGkiJ-aVXS-wsM.roa (hash: qs5jUi+jVQdO/5VzCetY5ouvlERqA5awKhxjDrx/XnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/e853ab-f470-4928-bc68-57e90c56a0e2/1/6g9bIh9q8yCY8wZNaCUbYXiSrJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/e853ab-f470-4928-bc68-57e90c56a0e2/1/6g9bIh9q8yCY8wZNaCUbYXiSrJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/6g9bIh9q8yCY8wZNaCUbYXiSrJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 12:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c3:b1:f0:69:46:55:06:f2:b7:ef:bf:ff:8f:f9:37:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea0f5b221f6af32098f3064d68251b617892ac92
Validity
Not Before: Oct 8 12:00:42 2025 GMT
Not After : Oct 9 12:00:42 2025 GMT
Subject: CN=1402b4b99515b2dfc9d562f10c20bbfff58f4e43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:59:e9:81:b0:68:88:04:c4:67:cf:1b:a2:4e:
91:d1:29:e4:60:39:48:77:e9:d0:97:65:01:71:35:
8e:95:f6:49:8c:ad:77:4f:6c:e4:d6:f7:fd:04:ba:
7e:c9:e0:22:57:a8:e2:41:6a:95:81:26:63:94:5f:
ef:32:6a:49:c1:1c:f5:96:58:96:f7:18:89:5b:cf:
78:b5:a4:f5:5a:50:44:a2:c4:54:e8:47:31:92:57:
ca:4d:b4:70:26:0e:09:2e:5a:08:55:08:e6:54:0d:
ce:de:cd:d2:d0:b8:e4:32:fa:8c:8c:5a:50:5a:e0:
95:1e:84:d0:6e:da:29:06:fd:b6:81:21:7f:a5:d1:
12:c2:93:4a:1a:fd:b4:8f:38:94:8c:a2:50:c4:af:
c5:69:30:3b:ab:25:10:3b:83:dc:df:1a:92:14:d6:
c1:c2:c1:a2:db:fe:b8:67:a8:9e:31:e9:6f:de:0c:
a2:82:11:6e:a3:fc:30:40:e9:0b:d7:e7:e8:1c:d6:
0a:a7:83:6a:38:15:0b:cc:14:f1:ad:ce:86:d4:67:
5a:e1:cb:50:83:e5:a2:bf:82:a7:c7:5c:2d:57:27:
6b:a5:09:37:21:58:47:53:83:29:c5:cb:d6:8e:c2:
f6:dd:da:f4:34:79:34:5d:80:25:ec:0d:9c:f0:c2:
fc:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:02:B4:B9:95:15:B2:DF:C9:D5:62:F1:0C:20:BB:FF:F5:8F:4E:43
X509v3 Authority Key Identifier:
keyid:EA:0F:5B:22:1F:6A:F3:20:98:F3:06:4D:68:25:1B:61:78:92:AC:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6g9bIh9q8yCY8wZNaCUbYXiSrJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e853ab-f470-4928-bc68-57e90c56a0e2/1/6g9bIh9q8yCY8wZNaCUbYXiSrJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e853ab-f470-4928-bc68-57e90c56a0e2/1/6g9bIh9q8yCY8wZNaCUbYXiSrJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:b6:60:c7:e2:7f:35:4d:19:a9:d2:1c:9d:2f:3f:53:f5:3c:
f4:34:23:51:67:17:76:b2:f1:e9:29:bc:ad:4f:c7:da:d5:60:
51:fc:b9:0f:e0:c2:87:2c:45:e4:9a:96:50:8b:c0:97:79:83:
d7:a6:9a:3f:cf:76:a1:68:64:34:3d:d8:b7:9b:94:0e:50:46:
9f:8e:a7:e0:e6:4d:29:53:5c:5a:cb:ac:4f:42:f5:e8:83:28:
ff:7f:1e:9f:12:49:b0:0a:a4:dc:f7:74:e5:df:dc:04:bf:87:
d7:97:a1:20:e5:d1:d9:1c:3e:5c:3f:dc:5b:74:ff:6b:93:92:
54:86:9a:7c:10:76:16:09:61:60:a1:e4:26:2d:69:7c:84:19:
22:46:77:41:cb:a3:99:bd:e8:cd:fd:6f:07:8b:f5:6f:cf:dc:
ce:30:17:53:d0:66:11:f7:a2:4a:b8:06:7b:d6:9f:07:c5:f5:
87:7a:3b:27:4d:57:7b:c7:29:e1:79:50:16:8f:e4:99:9f:b4:
35:ec:f1:15:8c:b4:fe:4f:19:60:9d:30:77:8b:f7:ed:46:79:
2b:7b:a5:05:3b:64:7a:de:f0:9c:38:72:95:71:23:8d:ee:8c:
0f:50:62:dd:6b:43:b9:1e:a1:bd:6f:c1:8e:03:dc:f3:09:91:
1a:ea:14:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 21:20:03 2025 by rpki-client