Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/c824d1-8cfe-440e-9b5c-889243869679/1/6L0NmqjHQ82hgvAGaFg6RuYAwy0.mft
File: 6L0NmqjHQ82hgvAGaFg6RuYAwy0.mft (raw, json)
Hash identifier: ofK+193qOQr32bOsBVpDtYz3rlxvcPO9JT4jhOIWi20=
Subject key identifier: 5D:8E:02:90:B8:5D:E2:42:AB:97:8C:8B:6A:07:20:C7:91:71:48:90
Authority key identifier: E8:BD:0D:9A:A8:C7:43:CD:A1:82:F0:06:68:58:3A:46:E6:00:C3:2D
Certificate issuer: /CN=e8bd0d9aa8c743cda182f00668583a46e600c32d
Certificate serial: 019A232E8A725CE44599C74B0E0BD09D3F25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6L0NmqjHQ82hgvAGaFg6RuYAwy0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/c824d1-8cfe-440e-9b5c-889243869679/1/6L0NmqjHQ82hgvAGaFg6RuYAwy0.mft
Manifest number: 15B2
Signing time: Mon 27 Oct 2025 01:00:43 +0000
Manifest this update: Mon 27 Oct 2025 01:00:43 +0000
Manifest next update: Tue 28 Oct 2025 01:00:43 +0000
Files and hashes: 1: 6L0NmqjHQ82hgvAGaFg6RuYAwy0.crl (hash: VaXMoMuDprZaddPVPWUnTHFVhk5tJC7AMFYhRD2mH44=)
2: XmxwkZr2Ua5UDkEHGjDtz-Zyw08.roa (hash: P/OmeGABxQo0KdahW/abtL2rzvBKjRzNV4nj+svt9Ok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/c824d1-8cfe-440e-9b5c-889243869679/1/6L0NmqjHQ82hgvAGaFg6RuYAwy0.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/c824d1-8cfe-440e-9b5c-889243869679/1/6L0NmqjHQ82hgvAGaFg6RuYAwy0.mft
rsync://rpki.ripe.net/repository/DEFAULT/6L0NmqjHQ82hgvAGaFg6RuYAwy0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:2e:8a:72:5c:e4:45:99:c7:4b:0e:0b:d0:9d:3f:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8bd0d9aa8c743cda182f00668583a46e600c32d
Validity
Not Before: Oct 27 01:00:43 2025 GMT
Not After : Oct 28 01:00:43 2025 GMT
Subject: CN=5d8e0290b85de242ab978c8b6a0720c791714890
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:93:4f:4d:96:c3:e5:48:eb:c1:d0:6d:ba:bd:
9a:6e:89:a1:81:28:7e:4a:62:fd:a5:ff:75:86:62:
82:08:54:5c:85:d7:c5:d7:c1:d5:b2:d9:ed:17:c1:
d0:6c:fb:54:b0:80:f2:f6:ea:27:97:1e:90:0b:5f:
ed:b1:ee:c8:32:26:c1:22:a9:d8:fd:bd:23:39:ed:
e9:74:1f:92:c3:9c:50:c8:d9:0d:eb:12:95:15:4a:
8a:bd:a9:0c:d2:0e:d0:27:22:b5:2d:97:20:6a:fe:
0b:64:c5:cc:c3:7d:bd:dc:56:c8:d8:07:84:4d:e9:
50:ba:a4:22:ed:9c:ee:ce:98:73:39:22:e5:56:f5:
ff:c4:9b:8a:d3:ec:73:4f:ca:f6:62:ea:23:09:1c:
23:1b:1e:b8:75:0c:cb:ff:ac:35:51:0f:d4:ae:c0:
80:a5:b4:6c:81:5e:38:66:41:2a:36:96:68:c5:7f:
e3:31:b5:0b:80:d8:d0:ee:42:dc:22:4d:ba:65:e7:
69:07:5e:8d:d9:9d:fa:05:8a:2c:34:b2:1c:e5:08:
37:41:88:f9:4e:fc:57:be:48:f8:a2:d2:e0:fc:5d:
46:e0:78:f7:08:1c:9f:b7:3d:e5:1c:d6:34:e7:3f:
bd:2c:fc:e1:3b:2b:f3:e2:23:87:c2:46:46:3d:a8:
55:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:8E:02:90:B8:5D:E2:42:AB:97:8C:8B:6A:07:20:C7:91:71:48:90
X509v3 Authority Key Identifier:
keyid:E8:BD:0D:9A:A8:C7:43:CD:A1:82:F0:06:68:58:3A:46:E6:00:C3:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6L0NmqjHQ82hgvAGaFg6RuYAwy0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c824d1-8cfe-440e-9b5c-889243869679/1/6L0NmqjHQ82hgvAGaFg6RuYAwy0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c824d1-8cfe-440e-9b5c-889243869679/1/6L0NmqjHQ82hgvAGaFg6RuYAwy0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:7f:24:54:31:6c:37:c5:35:f9:e7:ec:50:53:2a:c8:c8:a5:
81:60:ed:a7:dd:db:1f:ea:ec:4c:0c:33:57:f5:20:73:50:9d:
73:61:83:41:56:08:01:49:21:24:5e:d8:c7:b6:4f:00:f2:f1:
ab:0c:bc:c1:fb:33:fb:f3:84:c4:a4:20:44:be:78:bc:b0:c2:
97:fc:62:ff:9d:b0:2f:d9:2f:c9:0e:0c:a2:69:6c:75:7a:88:
23:6d:8a:07:6b:be:57:f0:8a:9b:d9:c1:c9:2b:ae:92:69:ab:
a7:2a:b7:a9:ad:d7:09:d5:7c:81:50:84:48:ae:86:fe:7d:e6:
5c:5b:7d:45:8a:36:1f:a8:45:ca:a4:d2:74:72:e9:ce:60:98:
49:f4:05:e1:c3:39:d5:61:e3:e0:a8:04:b3:ae:3b:d7:f0:d0:
2f:c3:d6:69:36:9d:d3:1a:cf:34:7c:1f:77:00:e4:b6:87:35:
88:67:05:8e:1d:c0:c4:a5:5e:f4:9a:8f:fd:dd:d0:27:35:9c:
b8:34:de:df:c5:63:61:38:fd:a8:ab:dd:b5:1c:d0:34:e3:4a:
75:76:c4:d3:48:d5:cf:40:c4:24:ff:1c:d3:9a:58:87:d6:6b:
74:c8:9c:f0:c8:c8:00:78:58:6d:d6:f5:22:6c:18:db:9a:c5:
e3:24:5b:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 06:34:56 2025 by rpki-client