Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/742a04-17af-4f40-a140-604584895925/1/6Ed60hy3iRQzE8QLGfjMACPeiKY.mft
File: 6Ed60hy3iRQzE8QLGfjMACPeiKY.mft (raw, json)
Hash identifier: +suOmncgMmZ5398mU5Q4HyTokHJwYwzu1rSYr90O6H8=
Subject key identifier: 45:00:37:57:1D:F3:B1:C9:17:51:F1:72:1B:70:68:2D:D2:8E:AF:C1
Authority key identifier: E8:47:7A:D2:1C:B7:89:14:33:13:C4:0B:19:F8:CC:00:23:DE:88:A6
Certificate issuer: /CN=e8477ad21cb789143313c40b19f8cc0023de88a6
Certificate serial: 019A21AD8346D0827C2D6007D699DDC67880
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Ed60hy3iRQzE8QLGfjMACPeiKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/742a04-17af-4f40-a140-604584895925/1/6Ed60hy3iRQzE8QLGfjMACPeiKY.mft
Manifest number: 01BB
Signing time: Sun 26 Oct 2025 18:00:10 +0000
Manifest this update: Sun 26 Oct 2025 18:00:10 +0000
Manifest next update: Mon 27 Oct 2025 18:00:10 +0000
Files and hashes: 1: 2M47-6eKALJ6FmiVAowRa7gLSUI.roa (hash: sTE5YWztn/a2MX2OSX/0Yz9OgI3CBWwdi/QI1zYZYUk=)
2: 6Ed60hy3iRQzE8QLGfjMACPeiKY.crl (hash: GAX0fiwl6dHil8SdKtEXPCNuaun5stvXbTFAFz+knO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/742a04-17af-4f40-a140-604584895925/1/6Ed60hy3iRQzE8QLGfjMACPeiKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/742a04-17af-4f40-a140-604584895925/1/6Ed60hy3iRQzE8QLGfjMACPeiKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6Ed60hy3iRQzE8QLGfjMACPeiKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 14:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:ad:83:46:d0:82:7c:2d:60:07:d6:99:dd:c6:78:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8477ad21cb789143313c40b19f8cc0023de88a6
Validity
Not Before: Oct 26 18:00:10 2025 GMT
Not After : Oct 27 18:00:10 2025 GMT
Subject: CN=450037571df3b1c91751f1721b70682dd28eafc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:95:68:f7:66:61:74:c3:66:70:80:d3:56:7b:
b6:cc:b2:87:4e:29:38:e0:3b:94:0d:d0:1a:05:b4:
ac:e3:13:75:30:d5:6a:7a:88:a8:f5:81:1e:fa:0e:
76:88:cf:b6:7d:1c:80:a1:2d:64:ac:59:b0:e9:87:
ef:67:79:55:d7:dc:4b:ec:b1:0e:d6:4e:fd:8f:18:
5f:08:72:8e:5b:dc:35:56:96:db:ed:4a:dc:c7:4e:
6a:43:f0:1f:97:16:90:1d:c2:54:70:d3:e2:1c:86:
d8:1d:0a:a9:f1:88:63:51:82:a5:75:a6:79:81:25:
12:83:9b:32:a4:0a:79:4a:17:b9:0b:88:82:79:e8:
22:97:0c:03:74:e8:ec:dc:5e:ca:d0:1b:39:26:d4:
e1:99:0b:3d:8b:b1:69:6a:20:e0:62:8b:be:29:a6:
4f:6e:09:72:d0:46:13:bb:86:82:31:a3:80:92:a3:
a3:85:77:d3:87:6b:a5:59:1b:b4:ec:4e:c5:e8:52:
a4:02:af:d5:6c:e4:e2:89:59:e4:49:03:1c:e7:17:
f7:fb:18:a8:76:6f:4d:2e:78:05:ad:18:c4:9e:b8:
52:a6:f2:30:18:99:a6:19:66:30:cd:d5:0a:7f:fb:
2e:2f:76:0e:af:e4:ff:7b:a0:0e:80:c3:ef:33:2e:
53:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:00:37:57:1D:F3:B1:C9:17:51:F1:72:1B:70:68:2D:D2:8E:AF:C1
X509v3 Authority Key Identifier:
keyid:E8:47:7A:D2:1C:B7:89:14:33:13:C4:0B:19:F8:CC:00:23:DE:88:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Ed60hy3iRQzE8QLGfjMACPeiKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/742a04-17af-4f40-a140-604584895925/1/6Ed60hy3iRQzE8QLGfjMACPeiKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/742a04-17af-4f40-a140-604584895925/1/6Ed60hy3iRQzE8QLGfjMACPeiKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:9c:8f:e1:ce:c9:b6:86:9a:fe:d7:16:19:e0:43:c9:61:b5:
0b:f7:74:ec:40:57:bf:d4:62:45:4e:18:d0:9d:c8:b3:3a:8f:
68:83:42:08:0a:dd:43:36:e4:da:ea:3d:2e:e2:5f:3f:9f:93:
97:1a:03:68:37:15:0d:e1:2d:ea:3b:e1:b5:b1:53:00:b1:75:
6b:e4:f4:12:bb:12:58:1b:7a:03:bf:a3:ea:7b:e8:1c:6c:e6:
31:03:09:c0:d8:87:1d:89:48:c4:fa:d0:40:24:4a:06:bd:20:
87:f4:c4:bb:86:d5:85:cd:cd:3e:a7:5a:89:4c:29:3d:c5:7d:
38:78:46:21:9e:c2:ab:fe:ac:59:ca:13:c4:3d:49:69:eb:3b:
5a:f0:88:52:d0:f8:c1:c2:3d:14:52:b3:7a:e4:d2:7a:e9:7f:
4d:a0:e7:12:d2:1a:ad:3d:6d:bb:fe:87:78:1f:78:0f:12:56:
26:76:44:b1:07:9d:44:26:87:c9:61:cd:7e:27:73:d0:ca:0a:
4b:01:53:f9:c0:9f:4b:c9:99:3b:dd:63:45:ca:b0:26:8d:18:
0b:25:d6:7b:69:6b:b1:9e:c4:6f:e0:7b:92:7a:05:cb:77:8e:
e5:af:60:06:8f:83:eb:9f:6b:36:1a:67:99:ed:82:27:29:ef:
b7:12:b0:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 22:58:28 2025 by rpki-client