Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/6s3B4kf6qVMYCCpKxe29gFEfjfc.mft
File: 6s3B4kf6qVMYCCpKxe29gFEfjfc.mft (raw, json)
Hash identifier: yGW34GH/6SmernnwETMht9dto+60UISORmDIaLdteDU=
Subject key identifier: 8D:08:07:72:79:BD:A4:6F:0D:7A:61:34:A6:A7:16:1E:98:F9:99:C0
Authority key identifier: EA:CD:C1:E2:47:FA:A9:53:18:08:2A:4A:C5:ED:BD:80:51:1F:8D:F7
Certificate issuer: /CN=eacdc1e247faa95318082a4ac5edbd80511f8df7
Certificate serial: 019A21E4D83E244972E07A7344110E750CA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6s3B4kf6qVMYCCpKxe29gFEfjfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/6s3B4kf6qVMYCCpKxe29gFEfjfc.mft
Manifest number: 0150
Signing time: Sun 26 Oct 2025 19:00:36 +0000
Manifest this update: Sun 26 Oct 2025 19:00:36 +0000
Manifest next update: Mon 27 Oct 2025 19:00:36 +0000
Files and hashes: 1: 6s3B4kf6qVMYCCpKxe29gFEfjfc.crl (hash: D9buMhqehafJMBputD/4vMfeKUvBs0xygOaYK04QSBw=)
2: BAM3nXGrGMN-vPq2R9npnfCa7M8.roa (hash: u9Ttm9d9a7OCOprvdQDw/C2eraaJpITqpYw8QAs1tzg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/6s3B4kf6qVMYCCpKxe29gFEfjfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/6s3B4kf6qVMYCCpKxe29gFEfjfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/6s3B4kf6qVMYCCpKxe29gFEfjfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 14:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:e4:d8:3e:24:49:72:e0:7a:73:44:11:0e:75:0c:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eacdc1e247faa95318082a4ac5edbd80511f8df7
Validity
Not Before: Oct 26 19:00:36 2025 GMT
Not After : Oct 27 19:00:36 2025 GMT
Subject: CN=8d08077279bda46f0d7a6134a6a7161e98f999c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f5:44:73:d3:dc:3f:8a:68:a9:f3:de:ee:c8:
72:16:07:61:69:31:62:fb:32:a0:b7:d0:d3:ef:95:
35:5c:fd:ea:0f:fd:02:42:84:0c:fa:49:b0:e6:c6:
63:5f:f9:cd:18:87:f7:77:0f:8b:46:7c:88:6f:03:
9b:4c:b6:a7:b0:eb:26:11:6f:4b:88:4a:40:b7:29:
39:42:07:4c:f6:16:c6:0b:e8:a9:aa:af:24:ec:18:
ff:76:a9:53:29:39:1a:47:5c:30:66:0a:07:04:6d:
9d:ff:33:de:9f:9b:29:66:06:03:de:5f:87:c9:a8:
a4:fb:e2:aa:e7:5f:4c:f3:14:e4:51:1a:68:cc:ad:
db:01:90:74:90:6f:7a:b4:af:0a:ee:d3:62:20:f0:
24:86:bf:da:9a:bc:58:d6:2b:af:50:f5:4e:0e:f4:
43:6b:da:34:fe:d5:31:14:4e:61:36:e1:02:be:e7:
5f:eb:e8:26:16:5b:ab:44:a1:2f:d5:62:10:85:73:
2a:25:65:d7:6d:24:93:cd:04:43:f5:1d:c9:f2:aa:
ff:e7:2e:64:70:6c:63:bd:d6:25:3a:4f:8c:08:20:
27:a8:20:ed:42:ef:d0:e3:cf:c2:28:9e:29:fa:e0:
53:e2:46:ab:e9:a3:fb:8e:aa:01:a1:b0:96:89:39:
d0:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:08:07:72:79:BD:A4:6F:0D:7A:61:34:A6:A7:16:1E:98:F9:99:C0
X509v3 Authority Key Identifier:
keyid:EA:CD:C1:E2:47:FA:A9:53:18:08:2A:4A:C5:ED:BD:80:51:1F:8D:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6s3B4kf6qVMYCCpKxe29gFEfjfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/6s3B4kf6qVMYCCpKxe29gFEfjfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/6s3B4kf6qVMYCCpKxe29gFEfjfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:dc:c4:41:b8:bd:70:8b:23:e7:5b:8a:52:eb:a5:ed:ca:45:
8c:61:8b:be:44:de:92:5b:ea:b0:7c:23:ad:66:15:14:57:85:
fa:4e:1e:70:80:a6:a7:04:08:c5:ad:db:cb:ff:1e:d8:6b:3c:
b4:44:28:91:7f:d6:7d:73:f6:0e:a7:7d:67:4f:2b:8c:ea:6e:
8a:31:89:1d:f3:01:34:98:85:4b:91:50:e2:94:ce:22:27:4b:
ed:3d:22:bc:94:79:80:2b:fd:7a:7b:c2:8c:4b:7e:e3:9b:6f:
42:00:55:b3:22:00:30:29:4a:7f:f9:93:76:92:d2:f0:3c:bc:
03:27:d8:1a:24:3c:9d:57:6f:a7:f6:d2:03:14:fa:1f:9a:32:
19:2e:1e:1b:05:60:38:5b:a5:e0:8c:88:1d:da:31:fc:6e:e3:
13:5d:fb:91:80:56:18:0d:4d:59:8e:af:b2:1e:71:35:26:1b:
26:6e:fa:ed:60:fd:7c:69:37:54:68:e0:38:1e:d4:91:4c:8f:
37:11:50:46:78:28:cd:60:72:41:68:44:0b:c0:20:0c:a6:39:
ad:c8:0f:a6:69:28:fe:f0:2f:9a:e2:ad:37:74:b3:7d:76:25:
50:6d:d8:48:00:9a:c8:b3:6c:a7:57:53:f3:e2:f2:d6:34:f7:
80:3d:ec:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 00:25:34 2025 by rpki-client