Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.mft
File: 6rR29nfNDDKY0oEeYPSOGymzr-8.mft (raw, json)
Hash identifier: TP3SjPx4V+JbcR/7EkUGISvW0FWUprXdad2z5kZCIqU=
Subject key identifier: D4:22:16:17:25:E6:E5:29:BE:6E:FD:D1:11:49:C3:F6:63:5C:42:D7
Authority key identifier: EA:B4:76:F6:77:CD:0C:32:98:D2:81:1E:60:F4:8E:1B:29:B3:AF:EF
Certificate issuer: /CN=eab476f677cd0c3298d2811e60f48e1b29b3afef
Certificate serial: 019A24AEADEF28E5C3861DEC7CE7BB6CC6AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6rR29nfNDDKY0oEeYPSOGymzr-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.mft
Manifest number: 153B
Signing time: Mon 27 Oct 2025 08:00:18 +0000
Manifest this update: Mon 27 Oct 2025 08:00:18 +0000
Manifest next update: Tue 28 Oct 2025 08:00:18 +0000
Files and hashes: 1: 0UzsGme_k2nP3xmC23x_NIyPI4I.roa (hash: 9GCcsHrAPMsxEip94efAnxBNP67TuW3l3gu24kwBziA=)
2: 6rR29nfNDDKY0oEeYPSOGymzr-8.crl (hash: PmwUAUPWVqq6k4lJI8xgxC/ibz+dvgTmH6pqQZtAKI0=)
3: QhX-bY8Pyu0IVpXlU-objdMMYgU.roa (hash: AtV/TPeQmqPYNR6TwwiivnQLG1K0ZguaxSrJsKzoymM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/6rR29nfNDDKY0oEeYPSOGymzr-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 08:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:ae:ad:ef:28:e5:c3:86:1d:ec:7c:e7:bb:6c:c6:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eab476f677cd0c3298d2811e60f48e1b29b3afef
Validity
Not Before: Oct 27 08:00:18 2025 GMT
Not After : Oct 28 08:00:18 2025 GMT
Subject: CN=d422161725e6e529be6efdd11149c3f6635c42d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:23:85:05:70:d9:18:57:35:ff:38:11:c8:83:
f9:18:04:e3:b6:c2:79:c7:79:4a:19:ce:91:2e:bc:
a2:1a:7c:e5:17:49:c1:0a:ca:11:61:09:fa:57:25:
87:57:c7:74:44:dd:04:5c:53:93:60:08:77:3b:6f:
4f:c2:df:ad:20:e9:8c:2b:70:84:1e:96:cb:21:99:
c5:7b:71:0a:06:10:49:a8:7b:5c:07:e0:bf:84:5e:
3b:cd:c7:b6:85:14:58:17:b2:f7:63:ca:42:a9:f3:
26:af:30:81:41:d6:69:f7:ce:24:1c:cf:f5:35:77:
79:4a:09:9f:2e:b6:4d:c9:c4:69:c3:eb:c8:4c:b8:
45:23:6c:ac:3d:4b:3b:2e:bb:18:73:0d:4a:0c:d9:
56:40:93:58:de:51:a0:e3:a8:3f:27:8e:ef:d4:20:
aa:b5:f6:c7:9c:2d:fd:d6:2f:66:4a:ec:9a:1c:41:
7d:e7:56:19:95:ba:da:12:8b:7f:9e:f3:e0:74:a2:
7c:3d:f4:32:38:38:3a:10:bd:d8:d1:09:49:c5:f7:
06:30:33:17:e6:c7:24:57:a3:bd:7e:68:38:27:c0:
53:f3:1e:e2:fe:26:16:6d:0f:93:ac:8f:d1:3a:3a:
61:79:6c:9f:77:3a:d9:11:8e:38:27:56:d4:11:80:
4f:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:22:16:17:25:E6:E5:29:BE:6E:FD:D1:11:49:C3:F6:63:5C:42:D7
X509v3 Authority Key Identifier:
keyid:EA:B4:76:F6:77:CD:0C:32:98:D2:81:1E:60:F4:8E:1B:29:B3:AF:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6rR29nfNDDKY0oEeYPSOGymzr-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:9e:18:b0:a4:62:b9:7f:da:c7:a1:10:f2:5f:4a:51:3b:ec:
12:59:07:9b:4a:a4:2c:ee:4f:1e:25:49:98:81:b6:13:c7:2e:
79:dc:e0:ce:16:76:fe:0c:29:5f:7b:7f:59:24:75:81:aa:c1:
25:ee:dc:68:5d:69:fd:2b:2b:06:dc:c8:f4:68:fb:56:e3:3b:
5a:55:68:7e:9c:46:94:cc:ef:ae:37:23:be:2b:f2:f4:3d:ae:
ce:86:e4:c0:d5:fd:29:b8:73:a0:aa:18:b8:e4:27:0e:d7:0f:
5a:7e:f9:10:85:bc:cf:90:cf:c1:c8:a8:e8:30:ba:c8:a4:a6:
2c:06:99:92:1b:d6:6a:1e:3d:f2:fa:53:7c:71:6e:3b:7a:e7:
ce:29:0f:23:a8:ea:19:05:1e:0f:ff:e3:e2:e6:5b:8c:b6:93:
7e:7c:3b:de:9e:ad:0a:d3:bd:f3:0d:64:cc:a4:24:34:ad:a7:
cf:3f:58:13:b3:67:63:0c:fb:3d:6e:e8:a8:8d:c7:81:ae:00:
6e:99:d9:5f:af:d6:02:cf:80:86:c1:d6:b5:4a:c7:80:03:0d:
34:55:96:90:ae:02:66:23:ff:53:6f:11:36:f0:34:35:48:e3:
54:8e:eb:fa:2d:4c:47:c8:69:91:0a:2b:48:05:ab:10:15:18:
29:da:c9:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 14:32:00 2025 by rpki-client