
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft
File: 6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft (raw, json)
Hash identifier: L654ZAwYGvEU8uMA7xsZxARA608hvufIF/O6JTG+LN0=
Subject key identifier: 96:15:1E:C1:5F:E5:E5:98:99:23:2E:B2:9F:43:76:8C:22:90:FD:68
Authority key identifier: EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98
Certificate issuer: /CN=eb349af2af111361b29fcfef2e043d5be75e3f98
Certificate serial: 019A1F1A94F9333ABDD0848559814C1F8DBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft
Manifest number: 0299
Signing time: Sun 26 Oct 2025 06:00:27 +0000
Manifest this update: Sun 26 Oct 2025 06:00:27 +0000
Manifest next update: Mon 27 Oct 2025 06:00:27 +0000
Files and hashes: 1: 2X78Dh7C7IK9HQpIdvex6cBM1zY.roa (hash: wipecr4RWsrjr1LobZ27g68/o0lGoPvjX6FqbG4G5vg=)
2: 4xVy8n1nhBpAya1KevWUaTI2tB8.roa (hash: 20aLYH4n1FuIXOWrztzrtcCxRBgx6WLXVkqg5CHqw0k=)
3: 52yRIEJtEfgFBpWr58fadnScoJw.roa (hash: YmNixuazA5Vsqwop7vZiylftf51KooRSucAzjd1m6wI=)
4: 68M2owrwonGUKTmptsMxSICxvzc.roa (hash: Oa0fedQajgDxkwDeccQyxl6+5J3W6s2tK5cH8eMToVk=)
5: 6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl (hash: h0N/LlhQOkIl7Xvm12sGAo7xYdsxnrI8T/GS+H5mAGs=)
6: BtaWKpewp0t-jzKE-k6lFnfI0_c.roa (hash: DCOoNIe4oBMll7PycXcrB8Q8Pxkmj5k38ygxgzs+uLA=)
7: Ck51eA081sqLICziway3EXtym_k.roa (hash: 2MWWtOANjJSmkcfpJCe5Dn7HPUNug/jW3r3pG5kbs+E=)
8: CxapUH8XVVec3lS0Cg0coCY6Qgc.roa (hash: KpO1kPmmOH+sNqrFN8XQ7Qyy163B9gWQQIFfTO0U4as=)
9: GzCf6eer-0KJGSOeGO_GMefOjZo.roa (hash: JaQqkGT/EuzyZjXMN8QEs56lhsj8e8xWE4PqIQSZNSY=)
10: Hqc62MqaiR1ENBvYXYbBphPGFN0.roa (hash: 4i8o9r31Hh5HW+0+aK2z52UE4F0xdqPSMZVRQXOPULo=)
11: I5RmTjKFYz79KqLmMtO2U-JhAFA.roa (hash: B1+cDeSVZwC0LcfXe39/RIErdfHZS7Ts0F3A1wzPQzw=)
12: LMMZZ3U_VXbcFd48owkZmwcU1hE.roa (hash: CfbUK0Fwv8dagnk4QuCJP/+wm0mVrn+IK19LJoG4Pqk=)
13: OyEHyocNzfaASvSX9ghIhZoK7Vg.roa (hash: LVpmM0BObmcCqdx4fHr+ScoOKewYgjGRBFNNC7CN86o=)
14: PsmRSosaJeQmzFSK3qy4_ABXXTU.roa (hash: Y7apUM55LCHcQ0UAKmKLhKFwZ/5OJTrUlZSSaxMEOws=)
15: QPW6iA9FJOgzaLE48bOh_0GVsTw.roa (hash: z4wyylTLX8zY2v0eX1XbK+ruego1UaaBEsWnBWgnpiE=)
16: R8N31IenIt0xkEBBTQjeM4Z87uM.roa (hash: Ic4nMSUJKsiGM69kIZMaWnmOqFQT0bgB9YdN5w98kIY=)
17: SJtR9yDFalD5cZd0JaUHeuQjWF4.roa (hash: o+pZOrweCiX/ZW2TkzQ2pD2uz9mIgJjpPK75RQvDCsY=)
18: VmIiz7Cnwt8QdQZXsSuJ63A6JhE.roa (hash: VRDLvebsgzN2IopaBRSitbLUQukOe2HbgDWn6E5mzfg=)
19: WMdxeCDdDNwc6ymADw8SdQ5SXqE.roa (hash: PgvSeWtg+mLsxBE/P2tTl00AaGi2pSNp8OAj3D57rx0=)
20: WjMtWaWVlsclmFUeATa0Rgoi2JE.roa (hash: aFMptd/iDTRFNCht4XhxbuJoCK35XgXERP97iKChGWA=)
21: YrxACLZvZRg2bWV9SPIgfQ7aQBY.roa (hash: n+69ldcsTqnSoYz82PvwpUY1wbaPkzBZbNKCKxXKKXk=)
22: bnbO6YG10PCmqlCsmyP50Fd_o4g.roa (hash: FN6GI1Kp7T9KjFIMw11eQNYoSIQT81c+97qaaX9eCCg=)
23: dx58yh-dSv2JgPIFomDm2gd-Re4.roa (hash: xlQAPIKpbZbxvxscJLu/dA02W65rF8gyeeFSGhxfjxo=)
24: iuyN3NwXdsZlXThiwcR0LWVmoX4.roa (hash: 6R/JhKvtjb4C81R377gB5uUKDJijkYxAPU8kK0mmRJQ=)
25: uxc5vfve3Si08_1CchI8ifdgJPY.roa (hash: /SI48xsbMIADKemEHZ6Oy1FfH6dit3gQxDwLPx1S1UQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 03:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1f:1a:94:f9:33:3a:bd:d0:84:85:59:81:4c:1f:8d:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb349af2af111361b29fcfef2e043d5be75e3f98
Validity
Not Before: Oct 26 06:00:27 2025 GMT
Not After : Oct 27 06:00:27 2025 GMT
Subject: CN=96151ec15fe5e59899232eb29f43768c2290fd68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:98:5d:29:34:19:ee:d2:8c:e6:76:ed:93:f7:
5c:8a:60:64:3e:54:86:cf:6c:b5:22:97:d5:02:76:
3c:ae:4a:9e:40:eb:54:64:4d:ff:af:76:0f:73:72:
e1:b7:6a:68:4c:37:07:82:70:d3:fe:51:e3:a7:90:
21:40:b4:ab:9f:c8:4b:96:9c:c8:ca:f7:85:0a:dc:
31:34:27:c6:0c:14:a4:6c:a1:20:d5:a8:d1:cf:60:
e3:c0:2f:a1:03:7d:16:c9:45:26:26:ea:19:79:6b:
65:58:74:2d:af:eb:8d:67:f1:f9:36:73:14:d3:f7:
ff:eb:3e:26:41:49:8c:2c:eb:f3:fd:7e:0c:98:7f:
b7:70:47:68:4d:10:2f:cb:5f:34:4e:a5:64:92:39:
5a:2b:4a:63:f8:a0:b8:c0:a1:ee:c5:fc:e0:a7:e9:
d7:e9:5c:a4:64:4b:ac:e4:a9:8f:1e:b9:45:34:b7:
f2:40:91:9e:11:e3:60:4f:d2:06:2d:91:03:ac:d0:
54:62:12:77:19:ca:86:7b:fa:44:fb:f9:1e:81:91:
8e:df:1c:b5:5f:64:3a:a0:69:62:9a:0e:03:bd:fd:
c3:6b:ba:70:01:ba:f2:83:a2:47:57:4c:c1:70:f8:
7a:53:68:84:5a:c5:91:1e:c7:11:34:55:cc:9b:fa:
c6:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:15:1E:C1:5F:E5:E5:98:99:23:2E:B2:9F:43:76:8C:22:90:FD:68
X509v3 Authority Key Identifier:
keyid:EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:d4:47:2a:01:77:b6:b7:89:f9:24:3e:e3:e2:b8:9a:ce:5a:
5a:4d:c4:e8:73:39:e2:f8:01:5a:c4:4b:02:4b:35:31:ff:19:
d2:f0:33:4c:a4:77:1b:df:4c:36:fc:28:76:28:e8:b1:78:69:
5d:be:da:b8:95:24:8e:e4:04:97:0b:8f:9a:1b:05:9d:d6:e8:
94:ee:98:21:d0:5f:13:fb:33:da:fa:df:0a:2d:3b:90:6a:2e:
50:e0:22:dd:93:9d:68:f9:82:35:9a:0e:07:2b:2d:1b:55:35:
e9:bf:90:fe:0b:33:c8:64:f4:60:cd:df:08:49:48:37:30:98:
99:d9:97:47:ac:37:04:96:d9:bd:d7:85:28:34:bf:b2:b1:a6:
e4:45:54:ba:33:48:1f:1b:16:9d:8d:e9:4a:18:8b:1b:f6:ad:
9a:20:9c:16:4c:46:66:b5:ea:dc:5f:d6:e8:74:6a:6f:ee:35:
11:48:51:5c:a9:e7:5a:92:d7:bd:f6:4c:8a:f9:fb:aa:05:cb:
03:b4:09:2f:ef:f4:00:5c:95:82:bb:a2:d5:07:b3:3c:03:b8:
f9:5f:9d:9d:04:28:ce:8a:2f:03:d7:8e:04:30:e3:ab:4c:11:
6c:5e:00:60:55:5d:90:5d:3f:e0:41:62:8e:51:f4:9b:0c:99:
68:09:76:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 11:31:14 2025 by rpki-client