Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/ea9402-be4d-49f3-81fb-4df728c58d17/1/6Tj5GCt9pEADWR7q4lYPhFGzOTo.mft
File: 6Tj5GCt9pEADWR7q4lYPhFGzOTo.mft (raw, json)
Hash identifier: Znno+yllefv/GDNSsnf6Q+LiBdn4iq8WBu4xUz3mqiM=
Subject key identifier: A0:0A:11:B9:32:25:17:18:14:41:20:29:96:6C:13:08:EF:41:65:D9
Authority key identifier: E9:38:F9:18:2B:7D:A4:40:03:59:1E:EA:E2:56:0F:84:51:B3:39:3A
Certificate issuer: /CN=e938f9182b7da44003591eeae2560f8451b3393a
Certificate serial: 019A209B77E357428BFE0175FD0F5A9C355F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Tj5GCt9pEADWR7q4lYPhFGzOTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/ea9402-be4d-49f3-81fb-4df728c58d17/1/6Tj5GCt9pEADWR7q4lYPhFGzOTo.mft
Manifest number: 10A0
Signing time: Sun 26 Oct 2025 13:00:50 +0000
Manifest this update: Sun 26 Oct 2025 13:00:50 +0000
Manifest next update: Mon 27 Oct 2025 13:00:50 +0000
Files and hashes: 1: 1o1EO_QQPmnZ8plF5uOUWfPej3I.roa (hash: ih+zsElPgdS9pl3aJWT5y3rEqtTRMgUDV5NvhBE9Nxk=)
2: 6Tj5GCt9pEADWR7q4lYPhFGzOTo.crl (hash: 8BuKP2Sa3ZjA0duwZsqhdapIypZm6QClUJKJ+qffDZ8=)
3: KwwH1tV59uIMDd5TAGspH19uR4o.roa (hash: x1yYHpItXbsfzuH9Uo0WPpObfj69kidI+dgaDxqjw94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/ea9402-be4d-49f3-81fb-4df728c58d17/1/6Tj5GCt9pEADWR7q4lYPhFGzOTo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/ea9402-be4d-49f3-81fb-4df728c58d17/1/6Tj5GCt9pEADWR7q4lYPhFGzOTo.mft
rsync://rpki.ripe.net/repository/DEFAULT/6Tj5GCt9pEADWR7q4lYPhFGzOTo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:20:9b:77:e3:57:42:8b:fe:01:75:fd:0f:5a:9c:35:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e938f9182b7da44003591eeae2560f8451b3393a
Validity
Not Before: Oct 26 13:00:50 2025 GMT
Not After : Oct 27 13:00:50 2025 GMT
Subject: CN=a00a11b93225171814412029966c1308ef4165d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e3:45:9d:71:a4:b3:87:44:f7:36:2d:0f:61:
85:08:c1:18:6e:b0:e2:c9:c9:31:c0:9e:dd:28:33:
ee:c0:1e:ed:7b:95:e6:f8:40:3d:92:30:42:c5:2e:
d9:99:08:58:ec:92:84:4c:3f:7e:94:eb:79:4e:1a:
7d:36:4f:fc:23:d9:4e:08:3c:ec:34:91:bb:1b:55:
41:d0:9a:83:cd:03:6a:1c:ab:6c:e4:2f:57:b5:b2:
88:ce:15:2b:d3:31:64:11:00:c4:e7:63:4e:0b:db:
27:4f:43:45:ac:29:64:68:a6:f6:00:f3:df:dc:9c:
13:dd:d7:e1:89:6b:b2:a9:16:82:a7:69:1e:b6:00:
09:0b:09:86:89:12:58:83:67:c4:69:85:b4:6c:ee:
cf:5f:c4:38:57:15:db:6a:2a:12:b0:c8:c0:2d:a9:
c0:40:c4:fe:df:5c:29:6d:29:7b:79:02:3d:87:d9:
cb:f3:c7:56:08:5c:31:4d:e1:cf:4c:bb:bf:cd:45:
70:84:3e:aa:c2:02:b3:86:be:f7:5f:28:58:c4:e1:
7a:43:16:76:91:3b:96:cb:9c:d9:ae:c5:6d:29:5f:
61:3d:f0:f5:7c:c5:cd:fc:12:5a:e2:04:24:f8:30:
d2:f3:45:ac:54:8b:7d:1f:29:81:23:25:60:b3:e3:
04:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:0A:11:B9:32:25:17:18:14:41:20:29:96:6C:13:08:EF:41:65:D9
X509v3 Authority Key Identifier:
keyid:E9:38:F9:18:2B:7D:A4:40:03:59:1E:EA:E2:56:0F:84:51:B3:39:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Tj5GCt9pEADWR7q4lYPhFGzOTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ea9402-be4d-49f3-81fb-4df728c58d17/1/6Tj5GCt9pEADWR7q4lYPhFGzOTo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ea9402-be4d-49f3-81fb-4df728c58d17/1/6Tj5GCt9pEADWR7q4lYPhFGzOTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:b1:33:47:8a:ff:6b:50:47:6b:1b:b3:0d:0f:96:3d:f0:34:
ae:68:59:b9:3d:89:90:d1:bb:7c:81:71:36:e4:99:19:88:3e:
c7:b1:1a:37:8e:28:58:86:c2:7a:ef:1f:fc:60:ca:f2:cc:8a:
db:2a:9d:0f:1c:4b:1c:f1:9c:b3:bb:c3:00:ee:3f:bc:1f:37:
9c:7d:c4:a2:1c:74:18:92:5e:fe:da:84:b7:e7:87:04:b4:a5:
be:22:29:00:a5:c7:b8:6a:52:50:1d:d0:aa:23:c2:a4:62:bd:
2e:bd:21:5c:94:ae:85:22:63:37:e6:b5:d2:4b:ab:46:24:0b:
65:6d:7d:b6:98:fe:a2:f1:b7:ec:9d:0c:8f:ff:ef:68:58:6a:
63:7f:f3:4e:f0:14:cd:c4:0c:75:26:93:b9:1e:3e:6c:25:3c:
da:94:37:11:4d:85:11:6a:ab:31:88:c7:a0:fb:5d:9a:2d:fd:
6e:75:cc:bb:57:0f:7f:be:6f:2b:59:11:21:7c:33:0d:84:d7:
02:1a:40:e2:3f:6a:56:65:dc:c7:29:c7:33:ea:8a:64:46:a8:
2e:37:04:73:bb:09:d7:6c:80:0c:8c:5f:5a:bb:02:b0:0e:62:
d7:7f:b3:42:3a:ca:16:32:5d:ea:62:0e:b3:97:dc:bb:9b:e5:
6e:93:58:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 17:16:06 2025 by rpki-client