Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/27e870-3e8d-42b0-b30c-bbcdcda61612/1/we6wu7y21HqENM9BEVHy4kh4CBU.mft
File: we6wu7y21HqENM9BEVHy4kh4CBU.mft (raw, json)
Hash identifier: 8yYLttXINaNGyN4KOJmGBgxX+TvzyztnLdL5suCAe4w=
Subject key identifier: D2:0C:C7:70:91:1F:9B:DC:48:0F:11:B2:76:96:7F:EB:8C:E7:03:1E
Authority key identifier: C1:EE:B0:BB:BC:B6:D4:7A:84:34:CF:41:11:51:F2:E2:48:78:08:15
Certificate issuer: /CN=c1eeb0bbbcb6d47a8434cf411151f2e248780815
Certificate serial: 019A03A348A185AEF5798083ECD943B16A28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/we6wu7y21HqENM9BEVHy4kh4CBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/27e870-3e8d-42b0-b30c-bbcdcda61612/1/we6wu7y21HqENM9BEVHy4kh4CBU.mft
Manifest number: 02C6
Signing time: Mon 20 Oct 2025 22:00:23 +0000
Manifest this update: Mon 20 Oct 2025 22:00:23 +0000
Manifest next update: Tue 21 Oct 2025 22:00:23 +0000
Files and hashes: 1: iCajC07N1wXhLZhUBQa5qaDtpkc.roa (hash: TBjsHC2hLzzwIzsyf+O4ISG2vQbLL5AsHhFZzfGik5g=)
2: we6wu7y21HqENM9BEVHy4kh4CBU.crl (hash: i3Jm37LaHPqsZIn1wmnm2OKlxc0pb4RL4EXXr+MnNtI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/27e870-3e8d-42b0-b30c-bbcdcda61612/1/we6wu7y21HqENM9BEVHy4kh4CBU.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/27e870-3e8d-42b0-b30c-bbcdcda61612/1/we6wu7y21HqENM9BEVHy4kh4CBU.mft
rsync://rpki.ripe.net/repository/DEFAULT/we6wu7y21HqENM9BEVHy4kh4CBU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 22:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:03:a3:48:a1:85:ae:f5:79:80:83:ec:d9:43:b1:6a:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1eeb0bbbcb6d47a8434cf411151f2e248780815
Validity
Not Before: Oct 20 22:00:23 2025 GMT
Not After : Oct 21 22:00:23 2025 GMT
Subject: CN=d20cc770911f9bdc480f11b276967feb8ce7031e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c3:8a:97:2a:45:c4:11:de:21:a7:5f:c2:e7:
02:86:8a:6a:c6:60:50:f0:9e:20:50:2b:c0:6c:57:
d7:98:35:14:c9:b3:8b:75:29:cb:d4:ff:47:8d:08:
d6:fd:64:2f:29:25:0c:45:c4:47:e0:b9:35:a4:1a:
06:91:c9:23:1d:60:29:84:0e:25:5f:b3:6c:76:87:
79:7f:a9:3a:f6:4f:a2:0c:09:87:7e:a6:69:46:62:
46:18:8e:88:b2:66:ed:2d:24:6a:2b:50:51:f3:96:
58:ca:a3:a7:5d:16:e5:cb:8d:6f:a1:3e:44:91:97:
48:7b:9c:4f:40:07:46:9e:37:bd:c2:4d:cc:09:6f:
19:51:e6:e1:90:58:46:b8:d8:d6:f9:3d:c0:35:2a:
db:2b:aa:0d:98:fb:25:81:6a:04:2b:77:c2:92:0a:
df:0d:39:a2:b3:b3:0d:c5:2d:2d:75:12:2d:2d:f4:
5e:7f:30:f0:19:c5:77:5b:2d:7a:fd:f1:0e:9d:26:
21:0a:91:47:2a:10:a4:1c:8c:4a:a3:e4:5f:aa:46:
d9:84:ac:73:bb:87:c3:66:56:9b:44:c1:17:2c:c5:
ad:4f:f1:97:93:b0:7e:fe:f6:09:b8:84:d3:58:c0:
25:c1:d5:03:c9:0d:da:45:75:21:d7:cc:35:11:2d:
f9:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:0C:C7:70:91:1F:9B:DC:48:0F:11:B2:76:96:7F:EB:8C:E7:03:1E
X509v3 Authority Key Identifier:
keyid:C1:EE:B0:BB:BC:B6:D4:7A:84:34:CF:41:11:51:F2:E2:48:78:08:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/we6wu7y21HqENM9BEVHy4kh4CBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/27e870-3e8d-42b0-b30c-bbcdcda61612/1/we6wu7y21HqENM9BEVHy4kh4CBU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/27e870-3e8d-42b0-b30c-bbcdcda61612/1/we6wu7y21HqENM9BEVHy4kh4CBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:24:80:32:1e:6d:b5:ba:c7:8e:8f:fa:7b:b4:1d:e1:2e:1c:
11:55:39:82:28:e7:0d:19:47:27:0f:9e:22:f8:fe:22:43:ae:
9c:b1:7e:f7:59:4c:83:42:08:6c:77:11:a4:3e:78:e0:31:f9:
08:42:e1:8e:94:92:f5:de:a5:db:a5:35:0f:f9:a1:a5:18:3b:
46:f6:af:8f:86:37:47:37:0f:dd:61:c9:14:78:31:f9:f2:f1:
d0:a7:e5:11:36:27:32:52:02:4e:ee:c6:6a:a8:5e:ed:2f:23:
09:6b:89:b9:a3:c7:21:7a:ac:90:3c:c1:e6:5d:8b:c9:57:be:
81:b5:9c:44:10:fa:f6:77:9d:b9:25:d8:95:f0:f2:23:44:c1:
dc:52:77:d3:8d:c2:a8:12:29:08:c2:ce:3f:71:40:c8:3d:cd:
43:d4:c8:e2:df:96:f9:07:d8:db:e5:ee:1d:21:2f:4c:ba:f8:
e7:67:25:3c:b0:ce:ca:21:dc:54:d9:1e:b4:0c:e2:65:09:3f:
5b:bd:76:d5:a4:1d:37:7b:4d:1f:b4:a6:3e:a6:b2:23:4b:21:
b7:a0:a4:8e:f8:4a:8c:4e:23:75:b1:f1:2e:0f:a8:f4:de:5c:
89:90:f7:65:4b:d1:f4:7a:28:0e:49:b9:6e:98:74:12:92:f7:
95:ea:18:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 07:48:08 2025 by rpki-client