Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/6g8I1O4flPmESTtGe9isoq36KGY.mft
File: 6g8I1O4flPmESTtGe9isoq36KGY.mft (raw, json)
Hash identifier: FybpUxWi2KzHd8C5j3JNIj8LfBd04ubk+1+y8epey44=
Subject key identifier: 3B:8A:2D:6E:91:02:77:E9:E5:08:C2:3F:80:23:B8:5C:2F:07:5B:6D
Authority key identifier: EA:0F:08:D4:EE:1F:94:F9:84:49:3B:46:7B:D8:AC:A2:AD:FA:28:66
Certificate issuer: /CN=ea0f08d4ee1f94f984493b467bd8aca2adfa2866
Certificate serial: 019A131624CE6E7D5E74A1BC436F156E3A75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6g8I1O4flPmESTtGe9isoq36KGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/6g8I1O4flPmESTtGe9isoq36KGY.mft
Manifest number: 16ED
Signing time: Thu 23 Oct 2025 22:00:09 +0000
Manifest this update: Thu 23 Oct 2025 22:00:09 +0000
Manifest next update: Fri 24 Oct 2025 22:00:09 +0000
Files and hashes: 1: 6g8I1O4flPmESTtGe9isoq36KGY.crl (hash: 7Vr2DMC3ZDx+dlZWRc+Mcp3dHvfIGw57E2aNFaCkVWc=)
2: EdM8mT-itEKC9G8RLMrDLsNcS3o.roa (hash: aC1rODFSDGloRhxUO+L4zBSj1xyAZL+tlsZ8+nVllOY=)
3: LKntu7OdIVDRUeVXjemgx5JdRkc.roa (hash: kna/rCNXXypoDbewR/02DlClr5ejgsrzdo1XT3WKJ6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/6g8I1O4flPmESTtGe9isoq36KGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/6g8I1O4flPmESTtGe9isoq36KGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6g8I1O4flPmESTtGe9isoq36KGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Oct 2025 21:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:13:16:24:ce:6e:7d:5e:74:a1:bc:43:6f:15:6e:3a:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea0f08d4ee1f94f984493b467bd8aca2adfa2866
Validity
Not Before: Oct 23 22:00:09 2025 GMT
Not After : Oct 24 22:00:09 2025 GMT
Subject: CN=3b8a2d6e910277e9e508c23f8023b85c2f075b6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a0:b6:28:0a:eb:77:ec:e5:63:f8:26:7a:b0:
b5:9e:b8:f9:42:8c:f6:7b:34:c9:6a:05:e5:30:fc:
b4:5d:4b:a1:23:e7:79:18:3c:a4:fa:17:f7:8d:08:
75:2d:1b:31:99:b8:de:5d:20:fe:0a:df:ae:87:57:
53:03:23:76:22:b1:cc:66:ca:29:d2:f8:4e:fc:2d:
99:19:f4:1d:f7:b9:95:d0:ea:b4:4a:45:4b:e4:59:
e5:46:77:8c:0d:54:c4:4c:e1:17:0b:92:f8:74:18:
76:b6:89:99:df:55:c2:7d:17:22:05:ef:a0:fb:13:
5c:fc:e1:56:37:0a:87:eb:2b:12:33:dd:0f:3a:04:
58:42:76:32:f2:43:42:ff:6f:35:59:00:2c:99:e5:
89:8f:38:7d:b3:73:74:c4:f2:37:33:15:9d:38:b1:
82:98:e3:fc:ea:0b:b4:cc:9c:35:29:6b:7b:98:d9:
f5:c1:05:4e:dc:7f:64:c5:f8:1f:43:4f:9b:38:9d:
aa:be:b5:d7:b2:a2:a7:62:90:d2:32:e0:50:2d:fa:
ce:98:6c:85:6d:06:ac:92:47:f4:77:03:c0:e0:65:
19:8a:50:93:40:b4:f1:0c:2d:e3:a6:61:7f:97:48:
35:76:6f:1b:18:0b:95:7f:cc:37:62:94:68:9e:1a:
8d:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:8A:2D:6E:91:02:77:E9:E5:08:C2:3F:80:23:B8:5C:2F:07:5B:6D
X509v3 Authority Key Identifier:
keyid:EA:0F:08:D4:EE:1F:94:F9:84:49:3B:46:7B:D8:AC:A2:AD:FA:28:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6g8I1O4flPmESTtGe9isoq36KGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/6g8I1O4flPmESTtGe9isoq36KGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/6g8I1O4flPmESTtGe9isoq36KGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:00:26:94:21:f9:a4:b3:a3:63:1c:87:63:70:6b:6f:36:b4:
14:33:b7:4e:ab:9c:88:6c:d9:d7:e9:d3:4b:8f:16:66:bb:0f:
51:0d:ff:80:d9:10:4d:4a:8d:b1:11:3a:56:dd:30:05:6f:07:
35:d6:9c:65:34:1e:53:80:a4:d5:92:89:fe:32:d9:b9:b8:99:
04:f8:6f:78:76:69:86:cc:53:de:56:78:9c:6c:b3:27:9b:c7:
94:56:9b:44:96:3e:e2:45:b5:20:f9:aa:13:56:ae:03:da:03:
c1:d0:c1:09:dd:a0:07:2d:1c:0b:a7:83:e7:29:ff:05:71:63:
c2:84:5e:33:43:b5:2b:75:ef:46:0a:9a:80:ed:3f:96:8a:10:
5f:58:47:a8:06:78:bf:4a:86:40:6e:fc:25:98:8c:ab:04:e1:
fb:50:be:a3:a7:82:e1:37:8e:71:6d:11:8d:6b:c4:70:9e:0d:
fe:24:39:e5:35:4d:e6:ec:c1:d4:eb:5b:ed:01:92:c5:de:e6:
e7:52:49:77:eb:f5:cb:7c:b0:f0:14:76:bd:54:ab:c4:9f:47:
7b:44:bd:f9:2d:af:e9:47:16:d8:40:cd:45:d6:e6:20:87:bf:
b2:b0:88:a7:ad:b5:db:ce:54:97:2e:85:17:4d:02:ba:5d:53:
ab:9d:b2:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 00:33:41 2025 by rpki-client