
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.mft
File: 6kaWPMR52tvjxSI0q5-rqoEi0ls.mft (raw, json)
Hash identifier: rVVmay3U9A73TeWTUYTEuYbMTOy0txR4BfJ3kCNF5+M=
Subject key identifier: 4D:DA:A0:91:06:20:B9:9C:D6:D9:4E:98:1B:53:4F:78:CC:CF:1D:11
Authority key identifier: EA:46:96:3C:C4:79:DA:DB:E3:C5:22:34:AB:9F:AB:AA:81:22:D2:5B
Certificate issuer: /CN=ea46963cc479dadbe3c52234ab9fabaa8122d25b
Certificate serial: 019A21AE160B13DE02CC3663D1EC3552F4EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.mft
Manifest number: 1716
Signing time: Sun 26 Oct 2025 18:00:48 +0000
Manifest this update: Sun 26 Oct 2025 18:00:48 +0000
Manifest next update: Mon 27 Oct 2025 18:00:48 +0000
Files and hashes: 1: 1-TaCRcgr21TvpQXP2txBwhS56hA.roa (hash: KHZjR7WUZNhVQwflclEipajJ/Wn9iLr+1LQGG1l2CNw=)
2: 4zqjJQ54tnfvuWqP4q5HT_tG78I.roa (hash: 4CxXSPWcwR0vooLT58rCHtl4yna461Xu3YJUyKhp4T8=)
3: 6kaWPMR52tvjxSI0q5-rqoEi0ls.crl (hash: f/F5R8BbwZFn7KX+ioRm6lf1XOx1fPwvr6qRcFeI2tU=)
4: F-mOL_vvtaH8j4HozgTvwJ1ADv0.roa (hash: dR6lpfQoc94mbznYYoddiYKpR7CQD6t8Gifp28SY3LU=)
5: LqgMdLmzZfPPNVVL0TSKOfjuask.roa (hash: WTZx7Qb69rQ7242yE9FQUcUlhccWz/PWLVTI8R3vG9Y=)
6: RPNVta1i_68ETzE6TtaaOFHYjFg.roa (hash: FJ6/94/8Wm2f6M9BRBCD4vKtrBrwPPP4N1wQnShAIwQ=)
7: S5-7pFac3Ww2rKkOW0pDvjHzO1w.roa (hash: y0paFatbjL3QesVnybDnaaTih+L+bbmSVD8cw6FJ/Tk=)
8: aZPp_cV5jr5aukOafXhVZHLOxO8.roa (hash: HiVo5n2AfzX/D2YKvojUG77iVNrUKo2LAmIGlr0XbVQ=)
9: goiFRwOZl4s-9eBS6-ty9Aa39xg.roa (hash: v1XADcYkOBOq2ag0EAvzsyypI+irjQ9kDOaWYQtUUzg=)
10: hmzomv1-759nj0qSVJG0M2x1-8Q.roa (hash: MK4TAOVTO08aktfn+4XR5IYWs4vIY8zv+w46XozbGLk=)
11: j5JUp4dpZXOc3dAFDFR264JePYQ.roa (hash: 7z6a7BTyRtoByeNzH/m220ETEsm3++fGEVvk5z41eYw=)
12: kpBZgUoI5SVEvkUD2itySup6KcI.roa (hash: XeEaX76YfLu7oqRet3KoyuM4S4TCuYJpZv/8fGXU5lk=)
13: o5yg3z2ttjMPQUGfQ2mgZ2QkyKs.roa (hash: I3MHEYCMmhtWaJuIqpxZMoC4+VmpWPCOyIyu+46S58s=)
14: u8eSG8Tv1dGu5xy9LAZN3LadMO0.roa (hash: 8ftGbQK6TKosgJWFS94PMu1Zj3OMZJC66zppWk0qzYg=)
15: xqrG1-afUyLJs-76v_kaVff1bzQ.roa (hash: qv2oTeJPi+2iZxHlxw+NMd9cTjH6NJtDH3DW5nEIJZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.mft
rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 14:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:ae:16:0b:13:de:02:cc:36:63:d1:ec:35:52:f4:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea46963cc479dadbe3c52234ab9fabaa8122d25b
Validity
Not Before: Oct 26 18:00:48 2025 GMT
Not After : Oct 27 18:00:48 2025 GMT
Subject: CN=4ddaa0910620b99cd6d94e981b534f78cccf1d11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:fe:3b:af:cd:c4:ca:28:5e:5a:31:00:b4:11:
61:6d:b0:88:06:62:a4:f5:19:56:2a:50:bf:87:b1:
50:b7:45:3c:c4:62:ba:c7:cd:76:a3:91:89:ae:1c:
01:1b:32:b7:d1:bd:54:57:6d:9b:44:7f:65:a6:f3:
ab:46:0c:28:f0:39:54:8a:37:a0:1e:51:0a:2d:74:
64:79:cf:be:c9:c9:25:1a:88:cb:c8:74:0d:31:f3:
f7:b8:86:c1:27:47:6b:71:10:0c:05:55:8f:e3:59:
1a:76:ba:b6:7e:b6:29:80:4a:06:74:49:01:a1:d4:
98:53:ed:c1:fc:85:b1:c6:fb:6b:31:c2:30:ce:cc:
43:69:dd:6b:06:be:6f:d9:14:db:5f:14:c1:41:fe:
95:46:cf:4f:9b:62:4d:7d:1c:13:80:c5:c2:89:04:
9a:de:e8:c0:9f:9b:8f:e1:26:77:8c:ce:9b:5e:8e:
46:83:73:91:a9:1e:2f:4c:63:f4:40:29:92:d2:44:
77:3f:97:b6:43:98:77:42:dc:7e:1d:2e:08:d8:be:
00:07:7b:fd:a5:45:8e:dd:f0:f0:2a:5e:fd:16:73:
1a:97:70:23:8e:d1:ad:93:d0:2c:ff:52:33:00:e0:
83:5c:48:67:ec:c9:92:3b:a9:27:ad:b9:d1:94:e9:
1d:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:DA:A0:91:06:20:B9:9C:D6:D9:4E:98:1B:53:4F:78:CC:CF:1D:11
X509v3 Authority Key Identifier:
keyid:EA:46:96:3C:C4:79:DA:DB:E3:C5:22:34:AB:9F:AB:AA:81:22:D2:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:c5:e8:2c:da:32:c6:c0:0b:90:d5:58:52:a5:29:a5:cb:46:
2c:f6:44:97:e9:43:df:15:71:31:63:bb:09:48:33:80:c8:af:
b3:75:f1:20:13:a6:4f:52:4b:34:24:ab:3f:1a:87:cc:64:c9:
8a:6a:36:99:15:28:eb:91:0f:f8:6b:09:b6:79:78:3d:4c:80:
94:bf:5c:77:55:cd:cd:3d:95:cd:69:db:10:bf:75:62:96:9c:
16:5b:13:1e:b0:92:ee:56:ca:57:12:3f:7f:74:79:c5:f1:ca:
a0:96:ae:07:de:78:24:fd:45:08:b8:aa:06:59:cb:6e:10:6b:
a3:5d:3d:8b:5e:c7:4a:5a:00:36:7f:a3:38:d6:62:d1:a0:95:
48:4e:ea:39:1a:cb:7f:b5:32:b8:21:4c:01:f1:70:ef:ef:0d:
2f:15:5b:59:cf:c9:c7:b8:fe:94:13:04:7b:48:cd:f1:5d:9e:
88:85:1f:3a:0b:2e:6d:15:23:a2:20:77:23:12:ee:62:5d:90:
e1:f1:32:36:a6:ac:97:6e:88:46:cc:1f:84:14:2f:10:35:1e:
e5:ea:a7:9c:1a:85:8b:74:d7:f6:41:02:be:f7:95:4e:fa:5a:
a1:75:5b:b7:14:53:cf:cd:18:ac:ed:e8:be:67:78:7e:2e:03:
b7:da:84:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 22:58:23 2025 by rpki-client