Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/856ea4-de5a-4f11-8228-87bf6fdbe193/1/v6bpb8p6J4PLlyHrti3htTbBY6k.mft
File: v6bpb8p6J4PLlyHrti3htTbBY6k.mft (raw, json)
Hash identifier: ZtuG/rO8ZK9Arr26+OD74wHKY1GglQ804gIVtMBvlrY=
Subject key identifier: 3D:19:61:B4:EA:91:9F:D5:53:1C:A5:B6:53:25:72:AD:B2:3D:DF:2C
Authority key identifier: BF:A6:E9:6F:CA:7A:27:83:CB:97:21:EB:B6:2D:E1:B5:36:C1:63:A9
Certificate issuer: /CN=bfa6e96fca7a2783cb9721ebb62de1b536c163a9
Certificate serial: 019A2289A0B2235EA51788E24DC59686F25C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v6bpb8p6J4PLlyHrti3htTbBY6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/856ea4-de5a-4f11-8228-87bf6fdbe193/1/v6bpb8p6J4PLlyHrti3htTbBY6k.mft
Manifest number: 0EA6
Signing time: Sun 26 Oct 2025 22:00:36 +0000
Manifest this update: Sun 26 Oct 2025 22:00:36 +0000
Manifest next update: Mon 27 Oct 2025 22:00:36 +0000
Files and hashes: 1: UIZd9CI7aaVoCr978zA_tJuQwXc.roa (hash: gtKlay3p/m+1ysOhvty8fHbcgsJz5ALUFkSpQwwLWbI=)
2: v6bpb8p6J4PLlyHrti3htTbBY6k.crl (hash: /43r3o4gPA4J5bNbsv0BIgbxLNz446F9PEUSqvGgZ+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/856ea4-de5a-4f11-8228-87bf6fdbe193/1/v6bpb8p6J4PLlyHrti3htTbBY6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/856ea4-de5a-4f11-8228-87bf6fdbe193/1/v6bpb8p6J4PLlyHrti3htTbBY6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/v6bpb8p6J4PLlyHrti3htTbBY6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:89:a0:b2:23:5e:a5:17:88:e2:4d:c5:96:86:f2:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfa6e96fca7a2783cb9721ebb62de1b536c163a9
Validity
Not Before: Oct 26 22:00:36 2025 GMT
Not After : Oct 27 22:00:36 2025 GMT
Subject: CN=3d1961b4ea919fd5531ca5b6532572adb23ddf2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:91:1d:85:24:aa:92:8f:3c:36:c8:5a:68:78:
28:ae:75:f7:fb:9a:26:ac:b9:84:f4:99:02:fc:03:
5a:47:44:08:dd:f0:4d:82:f9:8f:9f:74:d1:94:41:
25:56:94:93:91:da:9a:43:37:c9:b7:65:6f:35:71:
cf:58:bf:42:03:4a:2c:26:59:f5:0f:09:49:9e:df:
3b:05:11:23:d9:22:c7:5f:22:04:57:5d:61:38:b7:
02:f7:c1:a9:42:80:6d:cf:7d:cd:a5:5e:bd:56:ff:
30:16:3f:bd:33:a8:e9:2b:a6:8d:e4:b3:16:99:1a:
75:11:39:23:e7:20:c4:50:ae:9f:8d:b9:cd:0f:ee:
59:b6:53:61:69:06:85:3e:2e:32:08:d8:e0:f0:f4:
e8:23:43:29:07:52:e6:e0:65:22:4a:1a:17:71:c4:
05:fd:e3:8f:da:7e:09:17:a7:20:e6:01:dc:d4:44:
cf:c3:dd:6d:0b:39:4a:01:0f:39:86:af:65:77:dd:
93:19:84:a4:e2:7b:54:10:ab:62:f4:06:b1:c3:9c:
13:a3:f6:23:b5:ac:64:8f:b9:e8:8b:f4:92:3b:4f:
36:60:19:06:95:0e:b9:ef:4c:c5:47:69:10:6c:aa:
90:29:43:49:95:38:af:4d:2c:ae:e2:c5:c9:06:7c:
91:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:19:61:B4:EA:91:9F:D5:53:1C:A5:B6:53:25:72:AD:B2:3D:DF:2C
X509v3 Authority Key Identifier:
keyid:BF:A6:E9:6F:CA:7A:27:83:CB:97:21:EB:B6:2D:E1:B5:36:C1:63:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v6bpb8p6J4PLlyHrti3htTbBY6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/856ea4-de5a-4f11-8228-87bf6fdbe193/1/v6bpb8p6J4PLlyHrti3htTbBY6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/856ea4-de5a-4f11-8228-87bf6fdbe193/1/v6bpb8p6J4PLlyHrti3htTbBY6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:5b:b4:66:fc:19:81:0e:92:40:bd:5f:ef:ee:a5:d7:8a:13:
29:96:5e:c3:87:28:48:1b:7d:fe:0a:69:b5:fe:fb:25:3e:48:
80:ed:83:8d:05:f7:40:71:d7:56:2c:68:65:12:a2:35:b7:bb:
98:87:9f:7d:eb:db:aa:54:42:e8:68:9c:69:7d:49:f7:e1:92:
ea:02:5f:2b:d1:28:e6:15:04:96:2e:09:f1:54:e8:05:22:fa:
f9:b8:f7:c4:e1:1d:3e:03:5f:b7:ad:00:92:f1:c1:a8:43:24:
26:ec:09:eb:57:84:ce:b6:b3:c0:52:bc:fe:6f:39:93:5b:14:
4a:61:eb:34:6e:a2:92:5c:e8:15:fa:8b:11:e2:c7:80:7d:02:
f1:df:2f:0c:6e:00:07:41:33:2b:9b:4f:34:d7:c7:7f:c7:af:
26:91:b5:7c:a1:9f:ca:a0:73:f4:d0:21:8b:39:fb:c8:a6:10:
50:d9:f1:8d:65:e7:12:d0:bb:4c:49:d2:b1:8c:e3:93:a0:83:
3d:bb:17:49:8c:bd:d7:90:73:cd:ce:b5:7a:67:f4:af:3c:e7:
14:db:fb:e4:2d:69:84:90:a6:ca:48:c7:9c:cf:72:f6:57:3c:
f1:a8:0d:ed:33:12:f7:73:a8:07:f1:df:12:e8:a7:a9:30:58:
99:40:ef:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 01:46:46 2025 by rpki-client