Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/ca698e-e6a8-41f4-869c-961f437135c6/1/e6dzYuMUWG0NIYhNAaha23dmW3Q.mft
File: e6dzYuMUWG0NIYhNAaha23dmW3Q.mft (raw, json)
Hash identifier: e+PGSqVVOypEKjUQlKsbZwxu9pNRwH8il5VE8sA5nIE=
Subject key identifier: 8F:82:E2:F4:2F:AA:8D:C9:BC:CF:19:81:3E:3F:39:C3:30:86:F7:7A
Authority key identifier: 7B:A7:73:62:E3:14:58:6D:0D:21:88:4D:01:A8:5A:DB:77:66:5B:74
Certificate issuer: /CN=7ba77362e314586d0d21884d01a85adb77665b74
Certificate serial: 019A213FDA9461C40AAAD6E69F1E7071CCDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e6dzYuMUWG0NIYhNAaha23dmW3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/ca698e-e6a8-41f4-869c-961f437135c6/1/e6dzYuMUWG0NIYhNAaha23dmW3Q.mft
Manifest number: 16F9
Signing time: Sun 26 Oct 2025 16:00:24 +0000
Manifest this update: Sun 26 Oct 2025 16:00:24 +0000
Manifest next update: Mon 27 Oct 2025 16:00:24 +0000
Files and hashes: 1: A2mB37rJmerIuB24l4Bs4lzgXqo.roa (hash: ndaVFcXFO0lVM0GIop/3BjpE63WSZdctz0XY3LjKsVI=)
2: e6dzYuMUWG0NIYhNAaha23dmW3Q.crl (hash: 0k08QfQgHZ70n++2f69sRztMn2VXwfaCEYkKO7ieHqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/ca698e-e6a8-41f4-869c-961f437135c6/1/e6dzYuMUWG0NIYhNAaha23dmW3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/ca698e-e6a8-41f4-869c-961f437135c6/1/e6dzYuMUWG0NIYhNAaha23dmW3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/e6dzYuMUWG0NIYhNAaha23dmW3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 14:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:3f:da:94:61:c4:0a:aa:d6:e6:9f:1e:70:71:cc:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ba77362e314586d0d21884d01a85adb77665b74
Validity
Not Before: Oct 26 16:00:24 2025 GMT
Not After : Oct 27 16:00:24 2025 GMT
Subject: CN=8f82e2f42faa8dc9bccf19813e3f39c33086f77a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:08:16:f4:39:30:91:73:29:d5:84:e6:d2:be:
04:b6:75:04:00:7f:1e:f3:68:21:be:f7:d3:d2:e5:
25:dd:88:3f:07:80:e6:28:53:27:76:7f:d5:1a:df:
59:2a:88:fb:b4:71:12:1d:89:2e:97:77:87:8f:ab:
3c:57:3b:08:6e:16:74:ec:fc:5f:c8:30:25:64:04:
85:17:be:6f:7f:14:0f:30:60:d9:29:90:5b:c0:fa:
e8:65:11:dd:fa:ba:40:39:f5:dd:8e:cc:a4:4b:fb:
36:eb:ff:69:79:68:07:1c:68:e1:e7:7b:d1:ce:84:
ca:46:88:56:56:8e:e4:4a:60:9b:48:32:96:d5:88:
53:5d:bc:28:24:57:63:1b:14:e9:e2:7c:35:c5:12:
dd:d3:a2:92:7d:fd:3c:24:bc:4c:35:b8:7c:74:6c:
96:2e:1f:05:cb:6a:28:ab:2c:8c:5c:c2:48:a7:ff:
4f:17:7f:a9:fa:cd:e2:43:20:75:8f:9b:44:c6:de:
8a:13:f9:a9:ca:b2:78:46:b9:6b:02:e9:27:29:1b:
30:40:cd:39:6c:38:c9:86:1b:7e:b5:59:5a:50:83:
40:bc:25:d3:b2:e0:f7:2a:d5:44:89:13:e3:10:f2:
29:f8:ec:be:6d:1f:b1:22:45:a6:a3:4d:68:50:ba:
c9:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:82:E2:F4:2F:AA:8D:C9:BC:CF:19:81:3E:3F:39:C3:30:86:F7:7A
X509v3 Authority Key Identifier:
keyid:7B:A7:73:62:E3:14:58:6D:0D:21:88:4D:01:A8:5A:DB:77:66:5B:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6dzYuMUWG0NIYhNAaha23dmW3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/ca698e-e6a8-41f4-869c-961f437135c6/1/e6dzYuMUWG0NIYhNAaha23dmW3Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/ca698e-e6a8-41f4-869c-961f437135c6/1/e6dzYuMUWG0NIYhNAaha23dmW3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:a3:b2:95:05:39:dc:1f:65:f7:04:84:f3:e8:83:d7:b2:de:
45:a2:fe:e4:6b:7a:ac:47:73:80:b3:5a:50:39:48:e8:5e:e6:
4a:33:d7:c6:45:f8:d9:3f:e9:2e:79:4b:5f:07:ee:a3:f4:fc:
b1:89:36:b4:88:59:32:16:2d:c0:53:c3:5f:61:60:6b:cc:45:
56:c7:47:23:a6:b6:70:2e:f1:52:c6:d1:1a:2d:da:dd:c4:69:
6c:6e:9e:b9:d5:c2:d5:3a:18:bf:6d:c8:16:ad:8b:10:96:02:
1c:c3:9e:81:c8:09:71:0b:f8:c0:b9:03:4b:c9:53:26:1c:0e:
51:c6:04:07:6c:9f:9f:fb:27:0f:24:10:68:d4:64:08:97:53:
42:fb:37:7e:d7:0f:6d:6a:1c:d3:6c:4c:80:a4:7d:76:d5:ab:
4c:5c:6f:f9:22:ab:e1:3c:4e:66:bc:38:dd:24:e7:bd:01:d5:
3e:52:d9:56:d0:a8:d4:bf:7c:b6:e3:16:45:d7:25:30:6f:a8:
86:3c:e3:89:30:39:2f:47:15:5d:ab:58:3e:e6:22:f1:13:df:
a7:a3:8a:35:e8:e5:68:d3:a0:cd:00:c4:18:fc:7c:89:99:23:
f0:ee:4f:f5:45:87:9c:45:80:18:1f:e6:2a:de:17:75:70:16:
47:33:ef:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 00:12:10 2025 by rpki-client