Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/09f968-781d-4d78-99f5-e8b0a9520660/1/r6qlN6pmc2ESn3Y4lPyL_L_eqW8.mft
File: r6qlN6pmc2ESn3Y4lPyL_L_eqW8.mft (raw, json)
Hash identifier: Qpa3t90ANzDTzSacU50KH0zBSfbrxCbOvD9g+QzHVs4=
Subject key identifier: 3D:9F:0C:1A:00:3A:69:5E:3B:6A:2A:59:74:F2:EA:62:DB:BC:EC:37
Authority key identifier: AF:AA:A5:37:AA:66:73:61:12:9F:76:38:94:FC:8B:FC:BF:DE:A9:6F
Certificate issuer: /CN=afaaa537aa667361129f763894fc8bfcbfdea96f
Certificate serial: 019A26660C81326A9A19F29B689894657CF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r6qlN6pmc2ESn3Y4lPyL_L_eqW8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/09f968-781d-4d78-99f5-e8b0a9520660/1/r6qlN6pmc2ESn3Y4lPyL_L_eqW8.mft
Manifest number: 082F
Signing time: Mon 27 Oct 2025 16:00:13 +0000
Manifest this update: Mon 27 Oct 2025 16:00:13 +0000
Manifest next update: Tue 28 Oct 2025 16:00:13 +0000
Files and hashes: 1: KSdUtfJ37XAaJBcShHmQ5uaPNaM.roa (hash: VsY/uDTyeEAnbIF/MEQHUfpM957cF5t4aRsKUs0MUOM=)
2: r6qlN6pmc2ESn3Y4lPyL_L_eqW8.crl (hash: nCbFxOXmfAJI5c7/RaGLf+9V+ctYN9Bnv4+cF2c2Nq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/09f968-781d-4d78-99f5-e8b0a9520660/1/r6qlN6pmc2ESn3Y4lPyL_L_eqW8.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/09f968-781d-4d78-99f5-e8b0a9520660/1/r6qlN6pmc2ESn3Y4lPyL_L_eqW8.mft
rsync://rpki.ripe.net/repository/DEFAULT/r6qlN6pmc2ESn3Y4lPyL_L_eqW8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 15:57:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:26:66:0c:81:32:6a:9a:19:f2:9b:68:98:94:65:7c:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afaaa537aa667361129f763894fc8bfcbfdea96f
Validity
Not Before: Oct 27 16:00:13 2025 GMT
Not After : Oct 28 16:00:13 2025 GMT
Subject: CN=3d9f0c1a003a695e3b6a2a5974f2ea62dbbcec37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:3a:0d:b6:31:1b:8d:ab:ce:21:99:fe:7a:c5:
dc:ad:6a:72:6f:e4:82:cc:9a:14:18:89:70:32:52:
4d:e8:63:ab:c3:a7:4f:c0:a5:07:04:1e:a3:cb:e9:
5e:e5:31:bf:a3:a2:54:60:16:e5:f1:6c:18:b8:a1:
96:e4:26:a7:32:c9:96:70:b1:7a:71:6b:11:e5:35:
ff:63:6e:08:48:58:c8:12:9b:6f:3a:b9:b7:3a:ba:
37:c6:da:14:ca:55:08:1c:6f:6e:bc:29:3f:db:ca:
d9:fc:7e:ea:d9:fa:d7:e0:00:1b:dd:fd:5c:09:31:
29:4a:ae:84:68:dc:06:8a:f2:6b:39:2c:40:eb:8f:
92:65:a4:bc:77:5b:d5:3d:59:1d:96:2a:6d:84:2a:
49:c8:d0:e1:7a:b5:40:70:2d:85:4c:ae:12:aa:14:
18:96:46:42:12:8f:a1:35:6c:07:be:d6:31:f7:b0:
9c:75:ca:ce:02:e6:f8:ca:6d:59:8a:e1:75:62:4e:
2f:38:92:62:ae:38:b3:7a:5c:06:97:ee:7a:be:5f:
ad:19:f5:1e:ca:0e:0e:bd:70:71:a0:d0:e4:57:91:
d8:aa:28:69:a1:c7:b8:b5:99:6b:21:db:31:7e:a1:
00:94:9a:ae:a8:72:ef:93:d3:f4:fd:fa:d1:7a:9c:
4d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:9F:0C:1A:00:3A:69:5E:3B:6A:2A:59:74:F2:EA:62:DB:BC:EC:37
X509v3 Authority Key Identifier:
keyid:AF:AA:A5:37:AA:66:73:61:12:9F:76:38:94:FC:8B:FC:BF:DE:A9:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r6qlN6pmc2ESn3Y4lPyL_L_eqW8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/09f968-781d-4d78-99f5-e8b0a9520660/1/r6qlN6pmc2ESn3Y4lPyL_L_eqW8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/09f968-781d-4d78-99f5-e8b0a9520660/1/r6qlN6pmc2ESn3Y4lPyL_L_eqW8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:90:87:97:e7:e8:bd:21:c6:0e:48:05:ca:09:e9:11:76:10:
f2:94:89:3a:df:f0:7d:5d:2f:23:3d:3a:c1:0c:6e:88:f2:95:
04:80:83:36:40:4c:1d:51:de:66:b6:b3:19:20:f0:79:45:49:
69:bd:bc:5e:ef:51:04:28:eb:47:df:8b:cf:76:15:68:7d:93:
8d:62:95:a3:51:0c:c2:9b:bc:66:84:08:fc:83:20:a4:7b:21:
ff:70:0b:f9:14:d5:d9:f7:bf:04:59:25:b6:00:81:90:7f:c7:
6c:04:5a:ef:cf:20:8f:72:78:94:19:bf:b6:75:92:5a:9b:78:
a6:8b:46:45:75:07:6f:71:b9:8a:74:15:ea:df:31:9c:d7:cd:
ef:90:32:12:69:c2:3d:7d:99:61:62:d3:cd:a9:11:3a:31:60:
2a:3c:7e:50:75:c5:e2:ca:42:d5:39:dc:29:33:d6:40:30:19:
0b:37:46:b5:94:3c:2a:57:e0:56:0a:98:54:4e:c3:ea:e9:03:
93:a2:7a:95:5c:d5:43:fb:69:e4:b5:42:5a:2f:23:8b:cd:66:
fc:67:3a:a5:04:f4:95:ec:04:78:d1:87:99:0f:ca:df:d2:2a:
44:60:ff:d2:f3:13:4e:81:0d:03:5e:31:49:2e:7a:8f:ba:a7:
40:23:89:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 22:46:07 2025 by rpki-client