Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.mft
File: 6KhR3a5aZMw4glOVvppQfalat88.mft (raw, json)
Hash identifier: D2be1hg3Wz5ur1kjYOY7KkUpsNiG2ZU3OC9hWmGvbvc=
Subject key identifier: 3C:07:DB:42:1D:47:C3:CF:DE:93:6E:98:09:39:DE:CD:34:E6:80:93
Authority key identifier: E8:A8:51:DD:AE:5A:64:CC:38:82:53:95:BE:9A:50:7D:A9:5A:B7:CF
Certificate issuer: /CN=e8a851ddae5a64cc38825395be9a507da95ab7cf
Certificate serial: 019A206406DE522DDBFF18808C8D2537896C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6KhR3a5aZMw4glOVvppQfalat88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.mft
Manifest number: 170C
Signing time: Sun 26 Oct 2025 12:00:17 +0000
Manifest this update: Sun 26 Oct 2025 12:00:17 +0000
Manifest next update: Mon 27 Oct 2025 12:00:17 +0000
Files and hashes: 1: 6KhR3a5aZMw4glOVvppQfalat88.crl (hash: SatKcYlMFkJvwDEjysfvaJYn2H2Eawd57c5f8zLeFGo=)
2: JeUrUwbFpGu8iDqDZmLLtLX07Uo.roa (hash: AF4y3k0K4M29JKvnm3WAi9rM2wiDZSTI7KiQY/+WwGQ=)
3: LMOHIG2uLaY6GZHZHZ2LuvxqzKM.roa (hash: 4NroWDI/8Q2pwsJ7z2O+ja04jrPKvPKyJQ0j1cEhZ+Q=)
4: mYE47vke1hjpHVD-2YaC3kbzfC4.roa (hash: IHXH42+InuoAtBenPBQ/Vi7KNQwkeqEHI6dQSLTGpPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.mft
rsync://rpki.ripe.net/repository/DEFAULT/6KhR3a5aZMw4glOVvppQfalat88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 05:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:20:64:06:de:52:2d:db:ff:18:80:8c:8d:25:37:89:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8a851ddae5a64cc38825395be9a507da95ab7cf
Validity
Not Before: Oct 26 12:00:17 2025 GMT
Not After : Oct 27 12:00:17 2025 GMT
Subject: CN=3c07db421d47c3cfde936e980939decd34e68093
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7e:3f:d1:b1:54:0e:cb:16:de:30:bb:86:e9:
3d:a8:b9:c3:d0:17:ab:b3:2d:28:5b:13:d0:3d:9d:
d8:ae:9b:0c:21:1b:e1:db:a5:22:1f:fc:b9:11:33:
3f:b1:1b:12:10:ad:ee:15:da:f3:a1:34:82:c3:16:
37:21:4b:4a:9a:55:f4:88:3d:1e:d2:2e:de:91:4b:
d3:c3:c2:96:cd:b1:3b:6c:7a:95:9f:fb:09:ff:d8:
9b:db:e7:f6:67:00:b5:39:4b:c1:df:24:20:57:b3:
07:b4:28:4c:a6:be:93:ec:10:90:9b:3d:0e:ea:e6:
60:17:04:b5:eb:7c:86:ec:f2:05:4a:97:de:7f:f0:
2f:c5:99:87:b4:1d:bd:03:1f:3b:6e:52:28:d8:a5:
e3:7d:47:de:33:d6:0d:3a:50:a3:ba:f0:68:1d:ae:
d8:f4:d7:3f:88:10:f7:ab:a2:77:12:6a:d6:32:49:
cb:9f:ad:5e:21:46:01:57:ad:9d:ab:43:7a:f3:40:
db:2c:7b:17:a1:37:64:1a:f8:86:c4:92:e0:89:d8:
ad:0a:06:a4:d7:40:53:36:1f:c7:3e:cb:80:fc:91:
73:50:59:d5:6b:13:74:ca:f9:00:fb:af:32:90:c7:
1a:1b:05:88:44:e8:71:c0:25:c0:f8:69:bd:40:a8:
79:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:07:DB:42:1D:47:C3:CF:DE:93:6E:98:09:39:DE:CD:34:E6:80:93
X509v3 Authority Key Identifier:
keyid:E8:A8:51:DD:AE:5A:64:CC:38:82:53:95:BE:9A:50:7D:A9:5A:B7:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6KhR3a5aZMw4glOVvppQfalat88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:90:53:d8:30:ce:40:55:5e:8e:7e:f4:a7:1d:fe:25:22:1d:
f7:ff:e8:34:2e:9a:70:1f:3f:25:26:a4:6a:c0:28:fa:98:a5:
a3:aa:ff:35:a0:63:59:7f:67:0f:2c:67:05:d7:6b:9d:d1:ce:
00:15:eb:f1:08:7c:d9:c6:21:cf:f6:b1:67:46:ff:f9:d1:3b:
48:0e:c3:2a:2d:6e:71:de:59:94:dc:b2:e4:6c:8e:65:71:6e:
50:dd:9a:8c:cb:c1:9c:39:44:80:4e:0f:47:97:40:44:d9:73:
74:65:98:6c:ed:70:6d:b6:21:6a:0e:be:86:8a:ee:15:a3:8e:
a5:10:99:a5:ed:dc:af:85:7e:5d:a9:15:20:5e:94:39:ae:1a:
0c:97:d0:00:f6:5e:50:76:de:7b:d3:0d:54:f5:bf:c2:0a:96:
93:60:ea:2a:0e:30:65:56:88:1b:66:1b:d5:88:2b:52:0f:28:
32:d1:b4:11:0f:a3:eb:e9:6b:9f:18:28:77:08:e9:ab:c1:b9:
6d:a0:29:37:fd:7f:95:d4:7d:14:3e:d4:12:ef:c0:57:b5:71:
36:24:fb:f3:bf:27:22:e6:61:52:f6:26:f7:f8:2c:af:28:1e:
51:08:98:ba:9b:ae:3c:42:d2:79:d1:66:75:d4:7b:30:9d:5a:
87:e2:15:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 14:06:18 2025 by rpki-client