Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.mft
File: 6Dk70TBfbMRDkZIRnGBfRLvwm8k.mft (raw, json)
Hash identifier: 5JLeIsmxtNvZdanTJBKMx0LwSktSDlQ6Bst6LnpNr/Q=
Subject key identifier: 0D:1B:96:2F:A2:AF:19:3B:04:B5:30:C0:FD:F2:37:F1:87:6C:64:8E
Authority key identifier: E8:39:3B:D1:30:5F:6C:C4:43:91:92:11:9C:60:5F:44:BB:F0:9B:C9
Certificate issuer: /CN=e8393bd1305f6cc4439192119c605f44bbf09bc9
Certificate serial: 019A2289A5EA8FCFE666FF4791A5E76900E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Dk70TBfbMRDkZIRnGBfRLvwm8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.mft
Manifest number: 09FF
Signing time: Sun 26 Oct 2025 22:00:37 +0000
Manifest this update: Sun 26 Oct 2025 22:00:37 +0000
Manifest next update: Mon 27 Oct 2025 22:00:37 +0000
Files and hashes: 1: 6Dk70TBfbMRDkZIRnGBfRLvwm8k.crl (hash: vG8a69XMCo4iiHECMwlvpGCWbhUA2ZlvCVw1yDdgk7M=)
2: dGlwmlHKZ3Y604U9jPtZsAf1JsI.roa (hash: g6t/bPLMAjqWES1EVRCv4fx129KuT8ofKzhDnvgk+CU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/6Dk70TBfbMRDkZIRnGBfRLvwm8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:89:a5:ea:8f:cf:e6:66:ff:47:91:a5:e7:69:00:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8393bd1305f6cc4439192119c605f44bbf09bc9
Validity
Not Before: Oct 26 22:00:37 2025 GMT
Not After : Oct 27 22:00:37 2025 GMT
Subject: CN=0d1b962fa2af193b04b530c0fdf237f1876c648e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:79:b4:99:6f:20:de:03:a2:1e:3b:07:11:17:
79:65:a4:41:aa:ac:30:bd:4c:1b:f2:24:97:7a:77:
12:ef:a5:25:75:3e:b6:d8:79:c4:1c:8c:62:68:ab:
30:46:be:00:9f:19:d0:5a:af:f8:f0:2a:08:22:64:
fb:f7:8c:9b:4a:85:57:c2:5d:a4:27:21:fe:82:c7:
84:b7:93:6f:bd:b4:27:94:97:92:ca:4b:6b:33:09:
35:e3:3a:2f:7e:5e:ac:bf:18:a0:86:93:ef:39:3c:
18:24:01:12:bd:d2:27:09:a1:b3:ed:98:db:6f:69:
db:51:87:da:e2:12:16:e2:11:bc:14:40:1c:a1:4f:
59:a8:67:39:1b:7b:60:6b:63:1f:21:b7:d6:b5:92:
e4:41:5a:8e:26:8f:ba:ce:18:4e:c2:ea:c8:70:08:
0c:82:73:4f:9d:a4:67:13:de:07:a0:de:74:f3:b5:
d0:40:0e:be:23:04:e2:71:56:35:25:c4:bf:d1:73:
13:6a:11:08:4a:d9:dd:45:89:bd:06:5c:b5:bd:d0:
04:33:9d:b6:57:c5:53:50:50:b0:7c:98:bc:82:ef:
d1:ef:32:33:a3:de:a2:76:a4:e0:24:86:d9:d4:16:
48:12:de:c7:09:56:04:e4:d3:dc:4e:21:b6:ff:89:
1e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:1B:96:2F:A2:AF:19:3B:04:B5:30:C0:FD:F2:37:F1:87:6C:64:8E
X509v3 Authority Key Identifier:
keyid:E8:39:3B:D1:30:5F:6C:C4:43:91:92:11:9C:60:5F:44:BB:F0:9B:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Dk70TBfbMRDkZIRnGBfRLvwm8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:97:cd:2f:87:8d:97:db:dc:7e:0c:78:e0:ee:16:0c:70:b9:
08:8d:63:cb:7d:1b:dd:a1:00:99:04:2f:10:c8:9b:fc:0b:fa:
e6:9e:50:01:a8:b1:ca:ac:a4:46:27:af:1c:0b:d4:57:6a:0f:
18:dc:61:e1:c1:26:ab:24:ea:eb:dc:6c:5b:8f:1e:6d:6b:aa:
ef:56:81:83:5a:c5:8e:89:66:77:50:fa:06:3e:e8:61:35:a0:
2d:ef:05:32:d3:26:3c:ec:01:cc:41:06:ee:f3:4a:76:fd:40:
9f:48:e9:e3:75:74:5f:66:b0:55:89:48:09:b2:b2:5c:2b:05:
7c:5a:9a:88:c4:36:cf:d2:7f:85:ed:2d:f2:c6:13:d4:c9:94:
7f:95:22:91:d5:b2:fb:17:5c:98:a2:28:eb:52:f3:67:3b:f2:
b2:da:19:54:97:37:2e:a2:67:f4:45:30:4a:f9:3a:43:76:6f:
1b:f5:c0:54:e2:b4:c3:1e:c8:f4:88:55:da:a5:83:10:b5:29:
29:67:21:8a:67:aa:cf:36:5e:41:94:69:33:bd:9b:82:5c:44:
cc:75:69:98:e5:03:48:e0:0e:f7:c4:c2:58:ab:b4:5b:8e:01:
70:68:31:bb:94:f7:8f:db:86:ca:3c:1f:47:08:28:56:03:b7:
0a:3b:d5:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:31:13 2025 by rpki-client