Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/c547b8-99ab-42f1-a6cc-bc665bb21686/1/61VMRARsNkOakZc4lC8x-nVraRE.mft
File: 61VMRARsNkOakZc4lC8x-nVraRE.mft (raw, json)
Hash identifier: NHDlMcDdtUQnPRtjKnB2X2egIQK2iLP/K17lYV39F3Y=
Subject key identifier: F0:30:83:17:F5:16:9C:D9:EE:5C:9A:CD:55:C7:83:9C:37:2B:89:C0
Authority key identifier: EB:55:4C:44:04:6C:36:43:9A:91:97:38:94:2F:31:FA:75:6B:69:11
Certificate issuer: /CN=eb554c44046c36439a919738942f31fa756b6911
Certificate serial: 019A27AFAC6976489BE0C7474B466EA7C34F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/61VMRARsNkOakZc4lC8x-nVraRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/c547b8-99ab-42f1-a6cc-bc665bb21686/1/61VMRARsNkOakZc4lC8x-nVraRE.mft
Manifest number: 1447
Signing time: Mon 27 Oct 2025 22:00:15 +0000
Manifest this update: Mon 27 Oct 2025 22:00:15 +0000
Manifest next update: Tue 28 Oct 2025 22:00:15 +0000
Files and hashes: 1: 61VMRARsNkOakZc4lC8x-nVraRE.crl (hash: KAWIKViR2FH+m8tu/dCrt0uAXX5mgqVAQYYXZCqO86g=)
2: FtcuzKMMTKsG4IefMTUbvthdvHQ.roa (hash: fh/bmOX6Q7urxhPxPp4WqcpQdlVctOh99ozTUlRP7Pc=)
3: V3CR4lYDNh-Wfn6M2vlTj-37od8.roa (hash: n4U7/jlyixasB2+KGy4l8AmX928ML9kaTph3fSn4QJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/c547b8-99ab-42f1-a6cc-bc665bb21686/1/61VMRARsNkOakZc4lC8x-nVraRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/c547b8-99ab-42f1-a6cc-bc665bb21686/1/61VMRARsNkOakZc4lC8x-nVraRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/61VMRARsNkOakZc4lC8x-nVraRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 22:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:27:af:ac:69:76:48:9b:e0:c7:47:4b:46:6e:a7:c3:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb554c44046c36439a919738942f31fa756b6911
Validity
Not Before: Oct 27 22:00:15 2025 GMT
Not After : Oct 28 22:00:15 2025 GMT
Subject: CN=f0308317f5169cd9ee5c9acd55c7839c372b89c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:18:d8:d8:c6:c8:95:4e:7f:21:06:4b:21:87:
be:23:f6:a2:f1:db:fe:aa:5a:a4:9d:8f:9c:01:24:
83:c7:d0:0c:cf:76:0e:c9:30:71:87:8c:a4:83:3c:
54:06:c7:ee:b1:95:a7:25:38:04:7b:0a:ad:78:9d:
e4:67:c0:7b:09:39:4a:ea:2d:fb:74:d6:ae:c7:6c:
b2:58:60:b9:0c:48:c3:e7:cb:02:9e:fa:b4:68:13:
94:4e:34:0b:17:02:cd:c5:f3:77:a0:66:dd:7c:15:
5c:a7:31:f7:98:22:b3:76:71:b2:df:03:61:5e:93:
02:a2:77:fa:3a:98:e6:98:07:23:14:ae:88:87:52:
1a:b3:16:4d:82:6c:8a:87:37:c6:93:8e:56:ee:0a:
03:23:f9:1a:7c:38:08:d4:a0:91:25:6e:14:34:10:
33:73:ff:ae:6b:6e:28:80:23:c7:2c:fc:6c:7b:5d:
17:e8:d2:5f:20:e8:f7:73:84:f8:28:51:7d:f0:54:
27:c5:8e:ba:a7:3d:af:3f:da:ca:c5:ec:f3:cf:36:
b4:c5:1c:10:f3:93:61:77:0a:c3:ef:eb:36:dd:5c:
f8:1e:9c:36:ff:38:8d:9f:9d:2c:1a:04:51:4e:f5:
06:a2:b2:66:06:00:b8:32:a7:84:31:bd:0d:0a:dc:
e2:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:30:83:17:F5:16:9C:D9:EE:5C:9A:CD:55:C7:83:9C:37:2B:89:C0
X509v3 Authority Key Identifier:
keyid:EB:55:4C:44:04:6C:36:43:9A:91:97:38:94:2F:31:FA:75:6B:69:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/61VMRARsNkOakZc4lC8x-nVraRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c547b8-99ab-42f1-a6cc-bc665bb21686/1/61VMRARsNkOakZc4lC8x-nVraRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c547b8-99ab-42f1-a6cc-bc665bb21686/1/61VMRARsNkOakZc4lC8x-nVraRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:3c:28:42:51:17:d9:31:82:20:b8:e4:ab:d5:49:90:b1:9a:
27:22:5c:09:99:19:a1:8b:24:d9:3a:13:b5:a9:a4:77:eb:10:
4b:c4:e1:a2:d1:8a:3d:8d:34:37:c2:a9:7d:9b:54:09:f5:b6:
82:41:09:ea:09:af:eb:f1:51:2c:5a:24:fc:c0:7d:99:a7:a1:
e3:d5:6d:d4:6c:0e:e8:99:53:a2:89:a8:c9:5c:50:91:ce:cb:
0e:50:19:32:d3:44:d9:12:2c:93:d4:be:85:59:4d:46:23:14:
5c:33:03:ab:e7:af:89:28:40:20:7d:ab:8a:ac:7c:33:98:b2:
ab:9d:d5:01:b9:33:1a:76:cf:17:7d:1b:39:96:f0:81:4c:5a:
db:20:fb:8c:c6:de:46:54:68:e8:ab:89:7b:72:c9:2c:3b:bd:
2e:c8:7a:aa:e2:fe:5d:45:44:14:1a:70:d5:ad:23:04:fb:12:
66:1c:f9:5b:25:dd:6a:53:0b:c8:24:8a:3b:26:2a:5a:a8:f5:
22:07:49:44:15:0e:10:f2:2e:47:7a:67:81:4c:2a:d0:6d:50:
e8:f5:bd:d7:da:1d:e1:9d:15:a9:6a:52:99:4e:a7:fe:82:9e:
e2:6b:e2:f4:04:8c:e5:8d:22:15:43:52:53:49:e1:25:a7:a6:
70:ca:59:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 06:31:29 2025 by rpki-client