Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/c69c75-8391-4d93-b378-3fa15a33f429/1/6oPjDy1vznWmZqLQtja0bsmYocs.mft
File: 6oPjDy1vznWmZqLQtja0bsmYocs.mft (raw, json)
Hash identifier: NpzktBi4m+Y4GjPcnsNQ4ZM1xtPaF7NvuJNjW63cRRo=
Subject key identifier: 96:25:35:6B:31:49:99:9B:BA:03:06:3B:24:9F:35:A1:2F:04:C2:1F
Authority key identifier: EA:83:E3:0F:2D:6F:CE:75:A6:66:A2:D0:B6:36:B4:6E:C9:98:A1:CB
Certificate issuer: /CN=ea83e30f2d6fce75a666a2d0b636b46ec998a1cb
Certificate serial: 019A24792FB930BE161131F37096B03E744B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6oPjDy1vznWmZqLQtja0bsmYocs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/c69c75-8391-4d93-b378-3fa15a33f429/1/6oPjDy1vznWmZqLQtja0bsmYocs.mft
Manifest number: 0F18
Signing time: Mon 27 Oct 2025 07:01:53 +0000
Manifest this update: Mon 27 Oct 2025 07:01:53 +0000
Manifest next update: Tue 28 Oct 2025 07:01:53 +0000
Files and hashes: 1: 6oPjDy1vznWmZqLQtja0bsmYocs.crl (hash: C9f2guV8dE14zCFYwpyLGmdJGFCmYtV//u7HgZ5kvOY=)
2: okg73byO9ZwK73bf1nHKxWy9BQc.roa (hash: UhLrY21oOL3tD3JEsUSjif+xKx57LK0Vj7G+Yv+lBBQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/c69c75-8391-4d93-b378-3fa15a33f429/1/6oPjDy1vznWmZqLQtja0bsmYocs.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/c69c75-8391-4d93-b378-3fa15a33f429/1/6oPjDy1vznWmZqLQtja0bsmYocs.mft
rsync://rpki.ripe.net/repository/DEFAULT/6oPjDy1vznWmZqLQtja0bsmYocs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 07:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:79:2f:b9:30:be:16:11:31:f3:70:96:b0:3e:74:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea83e30f2d6fce75a666a2d0b636b46ec998a1cb
Validity
Not Before: Oct 27 07:01:53 2025 GMT
Not After : Oct 28 07:01:53 2025 GMT
Subject: CN=9625356b3149999bba03063b249f35a12f04c21f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:95:99:ef:24:5e:89:8e:f4:9d:29:12:83:d8:
3e:54:bc:11:7a:40:9c:75:dc:65:09:0e:3b:d6:52:
71:fb:c4:79:49:40:d2:01:b0:fd:95:dc:05:11:48:
e1:05:c8:16:85:bb:9d:fe:76:3a:79:b2:36:dc:bf:
54:90:d2:c5:73:55:17:cf:ee:55:6c:ad:43:2e:d2:
71:d4:aa:e6:ef:74:e3:7a:32:7f:a9:da:39:6b:91:
f6:6b:ea:31:a2:4e:bc:5e:22:a7:38:24:da:63:7f:
f3:8e:fe:79:0d:56:c8:3f:ef:ac:db:58:dd:f2:77:
06:f2:59:f0:77:13:d4:d2:3e:a5:e8:0a:71:24:e7:
3b:c8:71:21:c9:f5:0a:72:56:c8:4d:d6:51:99:2f:
47:fd:43:38:f6:8b:81:b5:4f:ec:1e:92:0f:fb:33:
6f:40:88:6a:c6:58:97:7d:03:e6:c8:fa:f7:79:04:
dc:e6:2c:f9:c4:d7:9f:e4:a8:ec:25:e6:09:db:ef:
80:d2:18:7a:d2:9d:25:74:12:8b:30:88:af:ec:19:
93:71:03:74:1c:8b:c1:ba:36:88:2a:62:b9:3c:9b:
e9:40:13:a8:39:c9:6e:2b:27:69:41:dc:83:16:ee:
3b:b5:5a:f9:53:ea:df:76:2c:3d:bd:97:c4:8f:e4:
2c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:25:35:6B:31:49:99:9B:BA:03:06:3B:24:9F:35:A1:2F:04:C2:1F
X509v3 Authority Key Identifier:
keyid:EA:83:E3:0F:2D:6F:CE:75:A6:66:A2:D0:B6:36:B4:6E:C9:98:A1:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6oPjDy1vznWmZqLQtja0bsmYocs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c69c75-8391-4d93-b378-3fa15a33f429/1/6oPjDy1vznWmZqLQtja0bsmYocs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c69c75-8391-4d93-b378-3fa15a33f429/1/6oPjDy1vznWmZqLQtja0bsmYocs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:55:71:c3:c9:b3:9b:fe:a4:1e:5f:15:55:52:81:ed:3f:4f:
01:da:19:62:78:b7:84:8f:08:b3:75:43:87:b0:80:8a:f4:5f:
0f:0a:d3:6d:e9:6b:14:fd:99:c8:d2:6c:53:46:f5:63:16:72:
e4:d3:4d:de:2c:96:75:3a:60:c6:02:49:d9:5a:b2:f7:0e:80:
d1:02:e6:5d:e0:ce:54:bb:5f:f6:f6:b8:f7:5d:5f:8e:5f:a5:
3a:c4:18:f3:58:8e:3a:07:a5:84:8d:71:8b:e8:bc:16:06:2a:
53:1b:f4:70:ea:56:6a:56:26:4b:d3:1b:0e:34:fb:b2:3a:21:
c3:02:9c:a2:88:34:d1:f8:d5:d3:fd:19:af:67:69:fc:f4:82:
5e:e2:1d:64:c5:10:0c:95:57:15:7d:f3:93:23:10:ed:c7:06:
4b:24:9f:40:35:6f:e0:e6:d1:c0:9f:bd:b6:ad:c5:b1:0a:d5:
be:08:23:9b:0a:5e:13:74:32:70:e4:3c:a0:4b:f7:fc:3e:23:
ca:0b:9d:55:b8:34:0a:e1:49:6e:f6:d6:d1:4e:f1:be:18:53:
eb:84:da:c8:8e:46:34:f8:e8:6d:3c:16:7a:f0:e8:22:0b:56:
a2:7f:c1:58:7a:e7:f0:96:b8:ae:7e:ed:ff:42:58:cb:45:fc:
bd:bf:8b:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 12:28:46 2025 by rpki-client