Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/958a2c-cef0-4bcc-99c2-321c9d66c847/1/g6BiUlKSop6X_moFW5vWCEp3GXc.mft
File: g6BiUlKSop6X_moFW5vWCEp3GXc.mft (raw, json)
Hash identifier: 48VrogcbRnjVARdVRxKjC8DW2S+GonxrkDkd9WTgkWc=
Subject key identifier: 81:9C:34:4A:D2:23:3D:3E:4D:97:F7:E7:C4:BA:76:58:90:76:E1:C8
Authority key identifier: 83:A0:62:52:52:92:A2:9E:97:FE:6A:05:5B:9B:D6:08:4A:77:19:77
Certificate issuer: /CN=83a062525292a29e97fe6a055b9bd6084a771977
Certificate serial: 019A232E1741AED218EAA7A1AB0D22AD9079
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g6BiUlKSop6X_moFW5vWCEp3GXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/958a2c-cef0-4bcc-99c2-321c9d66c847/1/g6BiUlKSop6X_moFW5vWCEp3GXc.mft
Manifest number: 16F6
Signing time: Mon 27 Oct 2025 01:00:14 +0000
Manifest this update: Mon 27 Oct 2025 01:00:14 +0000
Manifest next update: Tue 28 Oct 2025 01:00:14 +0000
Files and hashes: 1: fb6wEgaDbLPx8q9w1xJmiSz6jYA.roa (hash: cTH5l3quR1dZhmY8/pVYGOhtfcq0HdpSh+BT0OKf954=)
2: g6BiUlKSop6X_moFW5vWCEp3GXc.crl (hash: jxuD+U5rKWMIP8QbieO7TA/VGcYyslbZry8YH4AFrWs=)
3: owvK-K4xt1xLcc7TBT_SQsn0CJs.roa (hash: i/ROe7RqOf5kAUxhkRxcQuX6NvNJ0cLz8fR53Bhsxmc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/958a2c-cef0-4bcc-99c2-321c9d66c847/1/g6BiUlKSop6X_moFW5vWCEp3GXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/958a2c-cef0-4bcc-99c2-321c9d66c847/1/g6BiUlKSop6X_moFW5vWCEp3GXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/g6BiUlKSop6X_moFW5vWCEp3GXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:2e:17:41:ae:d2:18:ea:a7:a1:ab:0d:22:ad:90:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83a062525292a29e97fe6a055b9bd6084a771977
Validity
Not Before: Oct 27 01:00:14 2025 GMT
Not After : Oct 28 01:00:14 2025 GMT
Subject: CN=819c344ad2233d3e4d97f7e7c4ba76589076e1c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:72:6d:42:c7:23:cc:db:89:e1:d5:7c:20:73:
d2:93:42:45:03:d2:87:de:87:5c:dc:b7:9e:c1:a2:
81:6a:6b:1e:10:40:b6:79:c6:1c:d5:84:ad:5d:26:
80:85:1c:c9:e9:b4:ef:7b:6e:44:fe:eb:cb:dd:ea:
b4:c2:6c:dd:6d:fe:d2:1e:1a:af:a4:1e:af:64:38:
d2:ff:f5:05:5b:9f:b4:4e:df:c1:21:ed:9e:37:5f:
9e:2c:96:bc:cd:f5:4a:65:6b:c7:2d:50:b5:b6:4c:
ca:63:60:4e:79:61:6f:e7:0c:bf:be:b3:0c:86:8a:
e9:23:62:2b:30:74:dd:23:7d:97:a4:44:66:2c:05:
fd:15:79:62:a6:64:f2:26:4b:fe:31:89:05:8e:6d:
55:b4:fc:75:ef:94:1e:61:10:44:b9:d8:fc:3c:a0:
f0:ad:5f:99:bd:29:18:94:d9:43:c1:ab:f7:48:65:
a6:6e:7b:dc:ba:16:db:2b:56:97:7a:aa:5b:17:dc:
75:92:1e:bf:fa:db:14:a8:57:58:98:43:a0:40:bd:
4f:50:f9:4c:ee:93:d0:69:99:93:eb:ba:29:b3:fa:
ad:83:85:06:92:fe:47:d4:65:54:4b:d3:64:7e:97:
c7:f0:45:3f:78:0d:a5:7c:50:ab:39:12:d6:12:ff:
bf:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:9C:34:4A:D2:23:3D:3E:4D:97:F7:E7:C4:BA:76:58:90:76:E1:C8
X509v3 Authority Key Identifier:
keyid:83:A0:62:52:52:92:A2:9E:97:FE:6A:05:5B:9B:D6:08:4A:77:19:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g6BiUlKSop6X_moFW5vWCEp3GXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/958a2c-cef0-4bcc-99c2-321c9d66c847/1/g6BiUlKSop6X_moFW5vWCEp3GXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/958a2c-cef0-4bcc-99c2-321c9d66c847/1/g6BiUlKSop6X_moFW5vWCEp3GXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:4e:a4:70:f2:48:4e:ba:19:68:c6:15:62:6f:53:27:17:50:
e9:f0:92:cd:36:6e:bb:be:d5:06:52:99:79:ad:21:e3:a0:d1:
84:12:cf:25:a2:f1:c6:c3:b3:4a:e4:c3:1a:d9:95:f8:a1:85:
66:17:18:ce:db:aa:bd:8a:ca:53:5c:3f:6c:80:89:a8:43:55:
5f:fc:1b:7c:48:b0:96:4f:9b:f2:da:6d:7c:77:a9:b1:f2:bb:
af:dc:61:37:b1:2f:b0:3f:c0:c3:b1:76:e9:07:f6:32:76:95:
ac:40:8a:89:60:02:b1:09:87:cf:d5:51:d4:3a:26:57:5a:0e:
8f:05:f0:38:73:14:02:fd:25:69:47:ce:0c:e2:d5:3a:b3:23:
a3:26:64:d5:52:d9:77:fd:cb:e7:96:2a:3d:9a:28:90:10:43:
54:5e:78:25:c0:59:90:c6:38:99:4b:41:a7:35:c8:2e:5d:da:
c1:7c:59:09:ba:e0:1c:64:50:aa:41:9f:a5:75:9d:3f:c1:74:
23:a9:61:06:5f:a6:bf:09:1d:e0:7e:d1:0c:f8:a8:f6:6a:53:
d4:57:69:5f:16:65:24:00:0c:38:d4:c9:e1:c3:f2:91:66:c8:
bc:bd:9a:eb:49:2b:f2:52:fd:29:12:13:25:e2:01:fc:c0:6c:
1f:e6:3d:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:15:54 2025 by rpki-client