Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/e5dfe2-a967-4712-bee6-32187e24889f/1/6N8-nLacyliscCotXpE1w7yrcgA.mft
File: 6N8-nLacyliscCotXpE1w7yrcgA.mft (raw, json)
Hash identifier: oXpW9e7B80e+4B1Z1eZ60GsccKXjaU4qSEnteJU5Vao=
Subject key identifier: B2:D9:82:4F:B2:66:93:82:0D:97:DD:CB:B2:CF:4B:87:A2:F0:31:83
Authority key identifier: E8:DF:3E:9C:B6:9C:CA:58:AC:70:2A:2D:5E:91:35:C3:BC:AB:72:00
Certificate issuer: /CN=e8df3e9cb69cca58ac702a2d5e9135c3bcab7200
Certificate serial: 019A1FBF8C5BD57558E10E7429123D2B99A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6N8-nLacyliscCotXpE1w7yrcgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/e5dfe2-a967-4712-bee6-32187e24889f/1/6N8-nLacyliscCotXpE1w7yrcgA.mft
Manifest number: 16FC
Signing time: Sun 26 Oct 2025 09:00:38 +0000
Manifest this update: Sun 26 Oct 2025 09:00:38 +0000
Manifest next update: Mon 27 Oct 2025 09:00:38 +0000
Files and hashes: 1: 6N8-nLacyliscCotXpE1w7yrcgA.crl (hash: W+50kcNQ+FLJwlstfzbPzlHNpUpO624WQpIgu7cFUfk=)
2: 9EUnRRjK1DPEOpCFHKLbj6DnnwE.roa (hash: 5pOnqwDunio8ibNAPUzfXIZHCC6lmUXt91wi8md1CvM=)
3: gU67SonlohhDi8lWe_MYl6yJJsI.roa (hash: FLpgUzbj974ZgJCetR7gymMI2OHT8rOTBcexSYhxtZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/e5dfe2-a967-4712-bee6-32187e24889f/1/6N8-nLacyliscCotXpE1w7yrcgA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/e5dfe2-a967-4712-bee6-32187e24889f/1/6N8-nLacyliscCotXpE1w7yrcgA.mft
rsync://rpki.ripe.net/repository/DEFAULT/6N8-nLacyliscCotXpE1w7yrcgA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1f:bf:8c:5b:d5:75:58:e1:0e:74:29:12:3d:2b:99:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8df3e9cb69cca58ac702a2d5e9135c3bcab7200
Validity
Not Before: Oct 26 09:00:38 2025 GMT
Not After : Oct 27 09:00:38 2025 GMT
Subject: CN=b2d9824fb26693820d97ddcbb2cf4b87a2f03183
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d0:7d:e6:90:38:82:7c:c0:5c:d5:28:00:31:
08:2c:c5:25:78:1e:81:2b:5f:84:27:34:f9:f5:ee:
7a:0f:00:7c:0e:1f:72:b0:b3:dd:00:5b:a9:ee:eb:
d6:e6:d7:cc:f4:78:2c:e7:36:20:f4:95:1e:1a:74:
42:e6:84:af:6f:d7:d0:1f:45:c4:1d:17:66:d8:45:
16:e2:af:a9:dd:96:0f:89:5f:42:3a:1c:60:88:44:
ab:9b:63:14:14:41:ab:67:7c:d6:71:d7:e0:5f:73:
e4:05:90:06:a8:30:84:d2:d2:92:5b:0d:be:a1:f1:
85:4a:9f:01:9f:c7:ea:b2:6c:73:63:cf:51:6b:4e:
9f:88:5f:db:59:b6:a8:31:f2:66:18:99:40:87:85:
5d:ec:20:fc:fa:a1:3b:94:bc:1e:b8:00:d3:37:26:
e5:ac:75:49:26:06:f5:6a:0f:a8:00:af:67:ef:0c:
8d:8a:83:e3:48:5d:79:ac:28:e5:42:60:4c:e3:24:
c1:6b:e4:35:95:29:99:06:28:4c:31:55:9d:d7:0c:
e3:d4:24:f6:ca:7d:d0:36:b6:8c:1c:65:2b:4b:72:
d5:98:7a:5b:1b:37:6d:b4:54:59:e9:03:09:8f:84:
20:97:81:0b:5e:45:09:db:c9:5b:8f:46:27:b5:85:
d4:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:D9:82:4F:B2:66:93:82:0D:97:DD:CB:B2:CF:4B:87:A2:F0:31:83
X509v3 Authority Key Identifier:
keyid:E8:DF:3E:9C:B6:9C:CA:58:AC:70:2A:2D:5E:91:35:C3:BC:AB:72:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6N8-nLacyliscCotXpE1w7yrcgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/e5dfe2-a967-4712-bee6-32187e24889f/1/6N8-nLacyliscCotXpE1w7yrcgA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/e5dfe2-a967-4712-bee6-32187e24889f/1/6N8-nLacyliscCotXpE1w7yrcgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:d6:90:eb:bf:3b:70:19:82:fd:55:c7:17:60:9f:72:27:3e:
0b:49:91:bb:b8:d4:6b:bb:cb:81:23:54:bf:a2:f2:25:9a:0b:
63:08:24:02:33:b6:f7:64:04:ff:9c:d9:92:16:61:d5:70:8f:
43:2a:2e:01:02:98:75:68:ef:dc:25:f9:51:73:c2:35:3e:e2:
1d:db:61:a4:aa:b1:8e:f6:46:df:ed:69:ae:40:a8:ee:52:9a:
b2:8b:a6:eb:db:01:68:2b:cd:7a:33:5e:18:de:77:68:fc:64:
9e:a3:29:81:7f:0a:60:cb:ba:33:59:d5:5e:c7:84:2f:3f:db:
f2:2f:45:17:49:fe:c2:13:c8:11:61:1a:d5:bd:31:05:83:36:
02:1a:b0:5e:cd:85:d0:cd:a7:90:f5:ee:5d:6c:df:9a:af:84:
1a:8e:28:a2:67:89:ef:c2:45:9f:15:98:ea:5d:c5:f2:f2:1a:
98:41:aa:87:21:d0:2a:5d:60:06:cf:87:91:28:f6:54:c3:f3:
08:9c:b0:7d:7e:28:fb:9f:f2:c9:c3:ab:a8:1a:27:39:02:ea:
94:8e:18:32:46:1d:36:fe:ab:ce:a7:95:97:31:4f:39:15:3b:
75:5b:be:21:14:78:4e:8e:62:03:c9:cf:24:43:d8:a2:07:dc:
d2:8f:2f:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 17:11:45 2025 by rpki-client