Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/85e00e-d9ae-4074-9662-48790f600c64/1/k6EPqeyo7I3dXhJUJkOOjfjIerw.mft
File: k6EPqeyo7I3dXhJUJkOOjfjIerw.mft (raw, json)
Hash identifier: r0JUZHCFwO+QSokK3rFcbVkrgudC0f7lGbSQhrbkHzM=
Subject key identifier: C3:B6:E8:E0:D3:BC:B1:F1:60:5A:49:74:9A:7B:F0:7F:60:47:36:E7
Authority key identifier: 93:A1:0F:A9:EC:A8:EC:8D:DD:5E:12:54:26:43:8E:8D:F8:C8:7A:BC
Certificate issuer: /CN=93a10fa9eca8ec8ddd5e125426438e8df8c87abc
Certificate serial: 019A24E6434F26E3D96C665E42CE7A416F14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k6EPqeyo7I3dXhJUJkOOjfjIerw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/85e00e-d9ae-4074-9662-48790f600c64/1/k6EPqeyo7I3dXhJUJkOOjfjIerw.mft
Manifest number: 16F8
Signing time: Mon 27 Oct 2025 09:01:01 +0000
Manifest this update: Mon 27 Oct 2025 09:01:01 +0000
Manifest next update: Tue 28 Oct 2025 09:01:01 +0000
Files and hashes: 1: 0eBNXDs625wWt3eSViaFroIf-H4.roa (hash: GT9Q8SAk5DHsclX/025XYQZy9SsVDxGpUQis2WozehI=)
2: k4iKGO7UoCQelG-VE7Zb37GDHAA.roa (hash: CfgOFR+eRUjr0ITmkPf/YrPGm8/0mSRvig8pVJqGkMU=)
3: k6EPqeyo7I3dXhJUJkOOjfjIerw.crl (hash: 5PjdeO1AN0BFiE8+KpqEidxa5n6SY5aVoHs5JmWTm9Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/85e00e-d9ae-4074-9662-48790f600c64/1/k6EPqeyo7I3dXhJUJkOOjfjIerw.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/85e00e-d9ae-4074-9662-48790f600c64/1/k6EPqeyo7I3dXhJUJkOOjfjIerw.mft
rsync://rpki.ripe.net/repository/DEFAULT/k6EPqeyo7I3dXhJUJkOOjfjIerw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 08:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:e6:43:4f:26:e3:d9:6c:66:5e:42:ce:7a:41:6f:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93a10fa9eca8ec8ddd5e125426438e8df8c87abc
Validity
Not Before: Oct 27 09:01:01 2025 GMT
Not After : Oct 28 09:01:01 2025 GMT
Subject: CN=c3b6e8e0d3bcb1f1605a49749a7bf07f604736e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:7a:d3:06:54:19:5a:78:82:b8:56:b6:95:93:
74:cb:16:a2:2c:15:34:4f:0b:cf:ce:21:f2:98:fa:
1b:54:21:43:99:98:e0:cd:04:fe:83:52:5e:2e:5d:
d3:6c:5f:1c:fb:e9:17:05:83:6f:cd:e2:f2:d3:96:
89:8d:99:ba:f9:cf:80:ab:81:9d:51:f4:24:d3:c3:
3c:eb:d6:e4:07:b3:4a:eb:e1:5c:d0:75:79:f4:23:
cb:28:3e:a3:ba:79:1d:d6:58:fa:87:46:9d:95:d0:
07:73:bd:52:64:0f:00:ba:12:72:e4:23:95:e7:1f:
4e:01:4f:9b:bb:37:38:5e:78:4a:8b:66:6c:43:60:
50:1f:e9:8d:f2:07:ac:a5:3a:49:7d:61:8d:c7:36:
cb:1c:a2:f8:79:3d:be:95:70:f0:e6:99:1d:88:bf:
5c:94:1c:2d:84:ea:60:00:40:90:88:1c:a5:77:92:
27:c6:e7:f9:1a:c8:02:f9:03:6a:be:db:0e:4e:64:
6d:79:41:bf:ce:29:cf:8d:d9:bf:fc:88:32:3c:aa:
67:e3:4c:8e:4a:8d:44:e8:be:4e:06:b4:6a:3e:86:
e4:8a:a5:c3:f0:ec:36:f2:27:32:34:e8:8b:3d:ea:
0b:26:e0:90:ce:f5:75:56:3a:a2:fa:b3:50:bf:2a:
72:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:B6:E8:E0:D3:BC:B1:F1:60:5A:49:74:9A:7B:F0:7F:60:47:36:E7
X509v3 Authority Key Identifier:
keyid:93:A1:0F:A9:EC:A8:EC:8D:DD:5E:12:54:26:43:8E:8D:F8:C8:7A:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k6EPqeyo7I3dXhJUJkOOjfjIerw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/85e00e-d9ae-4074-9662-48790f600c64/1/k6EPqeyo7I3dXhJUJkOOjfjIerw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/85e00e-d9ae-4074-9662-48790f600c64/1/k6EPqeyo7I3dXhJUJkOOjfjIerw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:9a:0f:81:f8:2a:d3:01:05:57:d6:02:66:2d:0d:fc:29:91:
d9:7e:29:4e:1c:74:66:8e:ad:ae:86:86:73:30:7a:58:aa:94:
29:27:91:2e:30:f7:a9:93:b6:10:3a:a2:7f:68:21:e7:96:35:
34:4f:3b:32:73:de:7a:72:76:46:cd:97:a8:47:96:61:b2:0b:
ca:30:39:bc:bf:f2:32:ab:40:58:b7:70:0d:aa:a2:47:4b:97:
77:6c:fb:9b:2b:59:ac:29:02:f8:f7:30:7a:e6:1b:6b:cd:ae:
13:e3:fa:d9:b5:c0:6f:e4:09:6f:fe:40:0d:7e:6e:19:e6:97:
71:45:ae:74:21:0c:a0:13:d8:21:87:11:74:96:74:1d:06:e3:
98:e3:19:f6:f6:8a:61:c1:cb:a9:a5:d3:10:e8:43:06:96:3c:
85:1b:02:60:89:48:2f:b5:9f:c3:31:89:45:97:59:98:a4:dd:
8c:eb:c5:1e:3a:aa:95:f8:33:ff:cc:90:1d:c6:b8:80:95:df:
c4:98:5d:dc:02:94:e9:d2:a9:c2:ed:96:33:44:23:c9:d0:05:
55:c6:72:36:fc:f1:4e:93:21:32:d1:ba:4b:a2:f3:aa:a0:49:
ce:33:42:d7:b6:22:f9:6c:d7:5c:04:2f:63:ac:e3:2d:d0:82:
4f:26:c8:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 14:32:03 2025 by rpki-client