Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/c3069e-5ffc-4c8c-91dc-31d197f139d8/1/6HVGTomBbvALA2lQIBin5Zzi02w.mft
File: 6HVGTomBbvALA2lQIBin5Zzi02w.mft (raw, json)
Hash identifier: iEF86EkvcwxopoG05ht7va4yG37r8ClOJ60JHhdbMV8=
Subject key identifier: 29:65:DE:97:9B:94:23:4D:18:A0:5E:69:50:34:71:54:A7:82:27:09
Authority key identifier: E8:75:46:4E:89:81:6E:F0:0B:03:69:50:20:18:A7:E5:9C:E2:D3:6C
Certificate issuer: /CN=e875464e89816ef00b0369502018a7e59ce2d36c
Certificate serial: 019A24AEEB50DE770AA186BD6608DC5EA6A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6HVGTomBbvALA2lQIBin5Zzi02w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/c3069e-5ffc-4c8c-91dc-31d197f139d8/1/6HVGTomBbvALA2lQIBin5Zzi02w.mft
Manifest number: 14DB
Signing time: Mon 27 Oct 2025 08:00:34 +0000
Manifest this update: Mon 27 Oct 2025 08:00:34 +0000
Manifest next update: Tue 28 Oct 2025 08:00:34 +0000
Files and hashes: 1: 1K9FnI645Yqoqp7v7ivnFFVcKlU.roa (hash: h6hzrhT4kJEWC7V4ecnqwx0o1Jw9Qh9TGp5gYGQjVLY=)
2: 6HVGTomBbvALA2lQIBin5Zzi02w.crl (hash: 7smnU9Y0VCmUg06AWr1FDo7s4hH7aWF2yodbx5mOWV4=)
3: E4_z-I5S9ncgaaSljqVssc0s8uk.roa (hash: qL0QuMiYtX65hwE3RBedT5Hnno1IGD+mzQYraz5OhWU=)
4: OuTJvGgTKVnEZq7gCAEHXIiEW0A.roa (hash: YXkZ09I/fBc9Mmxb3/951nvIEdnGhT1gbWVM1wiVQc8=)
5: TTqnLj3WpKYvdn_3GVellbdKkvo.roa (hash: pyP10mZYKwVtG3Ir/Zb6+G0oU3PtknfdfIV9uEh1OQ8=)
6: e1cwbcDkdgSRu6n5KfpwkuDdmxQ.roa (hash: aIDnnp2yTdzDu5j4SrtTH/gBGFH3XCan8aEwWj5RxWQ=)
7: i3rHyXPusCVWKugIUURPj5Z_2oI.roa (hash: 1gfDfF2rTo/9YCI3+WwxH/uMujAutjvVMJoVtYw6quc=)
8: r3ev4zBDd_GC35s0Kz0Ij7H3LQM.roa (hash: HdkG2O8mQ9D6IO4Hyed6rak9jpN8qftAs7DiwRIQwXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/c3069e-5ffc-4c8c-91dc-31d197f139d8/1/6HVGTomBbvALA2lQIBin5Zzi02w.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/c3069e-5ffc-4c8c-91dc-31d197f139d8/1/6HVGTomBbvALA2lQIBin5Zzi02w.mft
rsync://rpki.ripe.net/repository/DEFAULT/6HVGTomBbvALA2lQIBin5Zzi02w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 08:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:ae:eb:50:de:77:0a:a1:86:bd:66:08:dc:5e:a6:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e875464e89816ef00b0369502018a7e59ce2d36c
Validity
Not Before: Oct 27 08:00:34 2025 GMT
Not After : Oct 28 08:00:34 2025 GMT
Subject: CN=2965de979b94234d18a05e6950347154a7822709
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:89:c8:1d:e8:f5:25:8d:fd:28:e7:17:eb:95:
3e:db:08:a9:b6:12:e4:e7:a7:c9:b8:94:be:dc:87:
1d:98:e3:31:a1:1b:9c:82:d4:6e:b1:70:8d:45:02:
37:21:9b:d6:82:7a:56:11:e2:73:66:81:54:01:98:
81:37:66:1c:33:0c:40:66:ba:a9:f2:06:c6:ab:39:
e5:90:70:1c:b7:05:f5:62:c9:2c:bd:ec:71:3c:93:
6f:0e:c1:77:69:53:15:2c:4b:46:5e:b5:eb:14:67:
1f:62:6b:d4:2d:7c:97:9b:cc:68:ad:9e:e1:ff:35:
d2:b6:91:7e:26:61:1a:cc:b6:ed:fd:19:d9:45:aa:
4b:68:a9:59:4a:d4:11:ba:05:97:9f:0b:5a:87:23:
69:14:8e:2b:b1:be:68:44:a1:f6:4c:b7:d8:68:b4:
2d:3d:6c:f1:50:65:ac:8f:29:39:a1:39:ce:42:50:
eb:cf:04:34:76:26:d8:f9:63:37:1b:8f:4e:40:e3:
71:e9:0d:76:70:8b:28:3c:00:27:c3:33:b1:57:0c:
95:bb:ad:da:15:b7:39:fb:06:b2:f1:8b:2c:8b:1d:
b0:e1:db:21:68:ad:87:53:11:b5:9d:c0:7b:de:f9:
a0:65:86:86:49:87:ac:0c:7a:96:57:75:09:91:62:
63:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:65:DE:97:9B:94:23:4D:18:A0:5E:69:50:34:71:54:A7:82:27:09
X509v3 Authority Key Identifier:
keyid:E8:75:46:4E:89:81:6E:F0:0B:03:69:50:20:18:A7:E5:9C:E2:D3:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6HVGTomBbvALA2lQIBin5Zzi02w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/c3069e-5ffc-4c8c-91dc-31d197f139d8/1/6HVGTomBbvALA2lQIBin5Zzi02w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/c3069e-5ffc-4c8c-91dc-31d197f139d8/1/6HVGTomBbvALA2lQIBin5Zzi02w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:ce:54:50:3e:79:6b:32:86:f4:8e:da:f7:f2:5d:e2:07:4f:
e8:5b:56:93:5a:39:dc:56:04:d6:a5:cb:bf:c1:b4:dc:31:27:
a0:ed:95:83:26:f7:4c:03:b7:51:b1:a4:3c:f4:56:1e:d2:15:
5c:20:10:c8:21:53:8f:ed:c4:81:14:9b:91:bf:8f:75:88:bf:
c5:2e:e7:16:26:1a:02:84:3b:5e:e4:05:81:f1:28:16:20:86:
47:a3:23:0a:5b:c6:a1:49:42:80:fe:ab:fa:fe:be:00:dc:d4:
43:db:ae:e2:e2:70:34:28:25:b8:63:a0:cb:2a:61:b2:cb:3b:
61:c8:0b:93:ce:74:a7:3e:5f:b0:2d:c8:89:96:eb:99:1b:76:
38:91:f5:3f:be:66:02:4c:da:77:ec:cd:e6:0b:13:cf:33:96:
0a:c0:86:eb:31:f6:76:83:7e:af:61:94:a2:0e:87:de:ae:79:
1c:40:39:e6:88:ce:74:65:4a:fd:f9:db:7f:45:de:98:0d:fb:
5e:df:bc:59:52:28:0e:34:98:08:cc:c2:51:bf:c7:eb:19:16:
36:24:a7:49:0a:1e:37:47:ec:c4:4a:70:40:c0:eb:2d:93:44:
35:ad:6a:6b:ff:42:dc:23:4b:f5:b4:85:9a:f2:e2:9f:2d:ba:
12:c4:ce:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 14:07:13 2025 by rpki-client