Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/cc36f9-1669-4929-8e61-edfd3f83345b/1/i6on-cLve_SAmtQq5YkQG3PpiSc.mft
File: i6on-cLve_SAmtQq5YkQG3PpiSc.mft (raw, json)
Hash identifier: ETO2TUiocSn6EmGI9+T3/URpv1Z0CjO1IYvf1TAGwTw=
Subject key identifier: A2:6D:70:9A:39:68:07:1A:6D:3C:DC:06:26:CD:76:46:53:0F:A1:4A
Authority key identifier: 8B:AA:27:F9:C2:EF:7B:F4:80:9A:D4:2A:E5:89:10:1B:73:E9:89:27
Certificate issuer: /CN=8baa27f9c2ef7bf4809ad42ae589101b73e98927
Certificate serial: 019A6D6D0F46D28E6FC408B34C3DFBD27EF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6on-cLve_SAmtQq5YkQG3PpiSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/cc36f9-1669-4929-8e61-edfd3f83345b/1/i6on-cLve_SAmtQq5YkQG3PpiSc.mft
Manifest number: 171D
Signing time: Mon 10 Nov 2025 11:00:54 +0000
Manifest this update: Mon 10 Nov 2025 11:00:54 +0000
Manifest next update: Tue 11 Nov 2025 11:00:54 +0000
Files and hashes: 1: OelWgxZyI7_ZRF_-XMf7bZooL5I.roa (hash: BifitWmmIOb4eZWcf2Qlsgv0SmjFwvoJThXaToiSZVg=)
2: i6on-cLve_SAmtQq5YkQG3PpiSc.crl (hash: +Y+HMgJlUGhP0BV1+St2lK1A0xRX/5O3jGk68aretFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/cc36f9-1669-4929-8e61-edfd3f83345b/1/i6on-cLve_SAmtQq5YkQG3PpiSc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/cc36f9-1669-4929-8e61-edfd3f83345b/1/i6on-cLve_SAmtQq5YkQG3PpiSc.mft
rsync://rpki.ripe.net/repository/DEFAULT/i6on-cLve_SAmtQq5YkQG3PpiSc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 11 Nov 2025 08:56:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:6d:6d:0f:46:d2:8e:6f:c4:08:b3:4c:3d:fb:d2:7e:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8baa27f9c2ef7bf4809ad42ae589101b73e98927
Validity
Not Before: Nov 10 11:00:54 2025 GMT
Not After : Nov 11 11:00:54 2025 GMT
Subject: CN=a26d709a3968071a6d3cdc0626cd7646530fa14a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:1f:33:fd:40:ff:8f:7e:48:e2:96:37:ca:5e:
1c:73:f2:36:b9:15:7b:6a:7a:61:80:da:c2:4a:ab:
6f:22:7a:cd:b6:d1:31:c8:e6:c6:25:5a:1a:62:64:
1f:8d:dc:55:5d:46:33:d1:10:31:f3:90:7a:97:da:
80:35:22:c3:65:07:36:16:92:f1:0c:b3:ce:04:c0:
76:bb:b5:2a:5c:44:91:d6:d7:ce:71:5c:fc:4c:84:
c5:89:22:56:c6:c2:68:f8:64:ee:4a:fa:10:ba:82:
2b:0a:fa:cb:51:27:4e:33:37:32:ee:a0:29:30:33:
e7:a7:b2:91:bc:9b:16:39:0d:24:45:b9:63:21:0d:
c7:91:60:bf:31:3f:f7:be:c8:7e:d5:28:d4:b2:fd:
aa:bc:02:27:38:4f:2c:ca:ce:4a:45:ad:4f:b7:e5:
05:f8:bd:2a:f7:a9:7f:cc:f9:6d:b0:62:84:46:7f:
e0:5b:a6:fc:1f:ac:93:dd:3e:31:7f:34:39:c7:c3:
96:d4:d7:db:24:b0:30:9d:f7:a2:a5:de:6d:24:89:
f8:4f:6a:e2:43:99:94:70:51:0c:59:cc:91:fb:ae:
c0:20:b4:de:49:e1:ab:68:3c:47:b7:6a:c4:ff:a2:
d1:1b:dd:cc:a4:c4:a5:1b:74:7e:fd:0a:3c:8e:76:
08:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:6D:70:9A:39:68:07:1A:6D:3C:DC:06:26:CD:76:46:53:0F:A1:4A
X509v3 Authority Key Identifier:
keyid:8B:AA:27:F9:C2:EF:7B:F4:80:9A:D4:2A:E5:89:10:1B:73:E9:89:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6on-cLve_SAmtQq5YkQG3PpiSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cc36f9-1669-4929-8e61-edfd3f83345b/1/i6on-cLve_SAmtQq5YkQG3PpiSc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cc36f9-1669-4929-8e61-edfd3f83345b/1/i6on-cLve_SAmtQq5YkQG3PpiSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:34:59:e5:29:a4:45:12:60:c4:16:2c:f2:43:12:10:d4:2b:
24:29:9d:3c:7d:44:14:46:74:db:00:09:31:b7:c4:30:cc:11:
31:0b:71:84:e4:d0:46:53:30:fa:42:9d:ba:50:11:c8:cc:18:
f5:12:22:84:8f:6e:81:1b:c0:00:0b:35:6c:70:06:d9:31:83:
c0:bd:e2:45:b0:31:99:ae:e6:bd:b7:56:26:72:74:de:81:5f:
84:9c:41:82:ca:eb:80:c4:05:5f:fc:0b:7b:04:da:a6:e2:4b:
fb:17:72:92:b7:c4:0f:e0:ff:4c:11:0e:34:4f:5f:e8:f0:57:
44:54:8c:35:b4:d4:55:af:ee:6f:1d:f0:3a:ae:53:7b:56:50:
3c:62:8c:a0:91:27:79:99:e3:d8:8b:55:86:83:fa:2f:a8:51:
a7:4e:fc:c2:2e:11:ef:b4:a0:e1:3d:05:24:24:e6:db:44:24:
56:85:cc:3a:ae:32:1b:07:0d:8a:3d:6b:08:d4:ea:1a:1d:51:
78:6c:0c:29:19:3d:01:31:ba:ff:78:79:34:c4:b1:88:b3:ad:
3a:ae:bd:a6:f1:06:a1:05:c7:47:41:11:30:c0:d6:05:ef:89:
6b:a9:9a:27:ef:9f:fa:9c:94:9c:db:ae:f1:7e:76:2e:7a:fa:
bf:a5:9c:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 10 15:33:31 2025 by rpki-client