
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/61959a-e18b-4ab0-8caa-87d1de943552/1/6InLv2njpnyqg7VN6-wnIuVTaIM.mft
File: 6InLv2njpnyqg7VN6-wnIuVTaIM.mft (raw, json)
Hash identifier: DNXy0sPEelPScAEroppD/7iAc0sRRu3EVS9UvaJHJmE=
Subject key identifier: 5F:C0:D3:CA:99:7E:4A:BB:84:0B:01:87:28:14:51:35:79:77:14:67
Authority key identifier: E8:89:CB:BF:69:E3:A6:7C:AA:83:B5:4D:EB:EC:27:22:E5:53:68:83
Certificate issuer: /CN=e889cbbf69e3a67caa83b54debec2722e5536883
Certificate serial: 019A2EFBF73D8DADB3B969389FD127134C71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6InLv2njpnyqg7VN6-wnIuVTaIM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/61959a-e18b-4ab0-8caa-87d1de943552/1/6InLv2njpnyqg7VN6-wnIuVTaIM.mft
Manifest number: 03D4
Signing time: Wed 29 Oct 2025 08:00:55 +0000
Manifest this update: Wed 29 Oct 2025 08:00:55 +0000
Manifest next update: Thu 30 Oct 2025 08:00:55 +0000
Files and hashes: 1: 6InLv2njpnyqg7VN6-wnIuVTaIM.crl (hash: Pq+RVDkACc3PFIg9AzXTqJuEhpQednhMj/ENDHGVC8k=)
2: ICbfx-tBOujpicEMpQ0zGeGllek.roa (hash: 8RnLLSPHJvBsy6joiz8Uy5SsL7YtPg9O1ueAzs+NFmM=)
3: z9TK7gFvliHLFVLeOL9NIuYVno0.roa (hash: F07UsHdLE5VLNA0Dfx2KB3Rv9KdwwXE6IkvxVa4XsOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/61959a-e18b-4ab0-8caa-87d1de943552/1/6InLv2njpnyqg7VN6-wnIuVTaIM.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/61959a-e18b-4ab0-8caa-87d1de943552/1/6InLv2njpnyqg7VN6-wnIuVTaIM.mft
rsync://rpki.ripe.net/repository/DEFAULT/6InLv2njpnyqg7VN6-wnIuVTaIM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Oct 2025 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2e:fb:f7:3d:8d:ad:b3:b9:69:38:9f:d1:27:13:4c:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e889cbbf69e3a67caa83b54debec2722e5536883
Validity
Not Before: Oct 29 08:00:55 2025 GMT
Not After : Oct 30 08:00:55 2025 GMT
Subject: CN=5fc0d3ca997e4abb840b01872814513579771467
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b6:db:9c:74:0c:6b:06:1e:df:c2:0f:d4:24:
a2:ac:86:d5:ef:90:53:29:aa:2d:4c:d8:c0:59:18:
e6:81:0f:a5:4c:51:96:39:3a:c6:84:d9:09:fd:27:
8a:9c:b9:9b:0b:ee:2a:95:9e:eb:90:d0:49:dd:d5:
43:2f:89:48:f3:e6:e7:b6:ab:33:24:15:26:68:4d:
49:ff:32:23:a0:03:02:0e:12:2e:58:62:63:48:fd:
3a:a2:37:7c:35:04:7c:4a:30:7a:20:59:db:23:84:
89:9f:f0:2c:a2:13:ec:df:4f:8e:2a:07:8f:61:35:
0b:fe:ff:a5:98:cf:27:83:e8:1f:9c:d5:f5:3d:f1:
62:d8:1e:c1:9e:5f:26:50:63:e0:18:f9:e2:90:75:
b5:e1:90:c9:6a:d7:a7:f8:20:26:de:74:52:f2:e6:
09:a7:02:67:a5:0f:3b:15:cc:97:09:dd:31:62:27:
9b:94:6c:02:f9:79:ae:3b:ce:bc:94:80:1d:82:51:
16:43:32:83:4f:dd:d9:dd:7f:35:7c:96:96:20:ea:
36:2a:33:83:79:9e:2c:05:15:b3:9b:98:bc:98:f3:
d9:2f:bd:7d:02:a6:14:c6:18:11:56:92:a6:7d:66:
bf:23:d6:79:1a:89:ae:80:ac:79:6d:66:7b:f4:80:
bb:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:C0:D3:CA:99:7E:4A:BB:84:0B:01:87:28:14:51:35:79:77:14:67
X509v3 Authority Key Identifier:
keyid:E8:89:CB:BF:69:E3:A6:7C:AA:83:B5:4D:EB:EC:27:22:E5:53:68:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6InLv2njpnyqg7VN6-wnIuVTaIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/61959a-e18b-4ab0-8caa-87d1de943552/1/6InLv2njpnyqg7VN6-wnIuVTaIM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/61959a-e18b-4ab0-8caa-87d1de943552/1/6InLv2njpnyqg7VN6-wnIuVTaIM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:1e:32:fa:45:9a:3f:a7:d3:24:95:cd:8e:1e:c8:d7:d9:45:
9d:68:0a:37:91:9e:2b:6c:52:16:5f:13:d0:68:30:c8:be:9b:
2d:b9:13:63:5b:e1:1a:14:f0:c6:b9:ee:78:30:dd:44:67:21:
2b:da:f3:d0:71:66:57:d3:ce:c7:bd:86:9b:18:c9:39:18:46:
c2:7a:a8:50:86:d8:34:30:bb:3c:96:33:5e:a5:b2:c3:54:dd:
5d:7d:0e:ae:43:4d:f8:68:77:e4:3e:5e:91:f9:b6:ce:b3:65:
1d:0f:3d:56:e2:e5:9f:9e:a8:e3:98:9c:36:b4:73:e0:f2:06:
04:5d:01:80:95:c4:3c:79:68:57:cf:a5:d8:f0:0f:d6:64:74:
9e:a6:b8:13:e5:06:f4:76:ad:9e:46:5f:7d:4b:16:a4:46:bc:
b2:30:f0:9d:d8:2b:90:9f:20:16:3e:c5:56:cb:77:5e:07:e2:
70:af:98:bf:a1:d2:67:46:ee:18:3e:e5:12:56:c8:e3:86:38:
ed:54:cd:d1:17:9a:c7:c9:bf:21:21:6a:c1:85:85:e4:e1:75:
13:ae:4b:62:69:24:9d:30:7b:a2:a7:91:11:56:62:2a:7d:ba:
46:46:5a:de:39:98:f1:90:99:97:ee:ab:7e:b2:9c:bb:68:24:
00:37:1a:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 12:17:59 2025 by rpki-client