Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/856ea4-de5a-4f11-8228-87bf6fdbe193/1/v6bpb8p6J4PLlyHrti3htTbBY6k.mft
File: v6bpb8p6J4PLlyHrti3htTbBY6k.mft (raw, json)
Hash identifier: /mWlfBBqvemkyediKO6s/lyBIRZ0Zw+98F4+JZoMJO8=
Subject key identifier: E8:A6:68:3E:F1:14:D3:CD:D4:F8:9A:DC:D9:D9:4E:2C:1A:C1:A8:41
Authority key identifier: BF:A6:E9:6F:CA:7A:27:83:CB:97:21:EB:B6:2D:E1:B5:36:C1:63:A9
Certificate issuer: /CN=bfa6e96fca7a2783cb9721ebb62de1b536c163a9
Certificate serial: 019A4EF50B08F10A36FCC1034088EADFD364
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v6bpb8p6J4PLlyHrti3htTbBY6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/856ea4-de5a-4f11-8228-87bf6fdbe193/1/v6bpb8p6J4PLlyHrti3htTbBY6k.mft
Manifest number: 0EBD
Signing time: Tue 04 Nov 2025 13:01:13 +0000
Manifest this update: Tue 04 Nov 2025 13:01:13 +0000
Manifest next update: Wed 05 Nov 2025 13:01:13 +0000
Files and hashes: 1: UIZd9CI7aaVoCr978zA_tJuQwXc.roa (hash: gtKlay3p/m+1ysOhvty8fHbcgsJz5ALUFkSpQwwLWbI=)
2: v6bpb8p6J4PLlyHrti3htTbBY6k.crl (hash: lpou7+2CvChHmdUicUPPaosttPzF2uR0xG231ZXjOBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/856ea4-de5a-4f11-8228-87bf6fdbe193/1/v6bpb8p6J4PLlyHrti3htTbBY6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/856ea4-de5a-4f11-8228-87bf6fdbe193/1/v6bpb8p6J4PLlyHrti3htTbBY6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/v6bpb8p6J4PLlyHrti3htTbBY6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:0b:08:f1:0a:36:fc:c1:03:40:88:ea:df:d3:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfa6e96fca7a2783cb9721ebb62de1b536c163a9
Validity
Not Before: Nov 4 13:01:13 2025 GMT
Not After : Nov 5 13:01:13 2025 GMT
Subject: CN=e8a6683ef114d3cdd4f89adcd9d94e2c1ac1a841
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:51:92:3a:c9:c8:7d:e4:fc:4a:b2:9f:a5:ca:
5e:80:4a:a3:3e:fc:bd:02:f3:ed:1c:6c:d4:fe:16:
aa:b2:ba:8f:28:ec:fa:21:34:5a:ad:ce:f8:b3:2a:
dc:8b:f7:1e:9e:44:33:e7:e7:fe:10:0c:ae:3c:35:
b5:54:bd:0d:47:f7:25:34:4c:62:d9:8b:17:8c:c4:
03:ce:d3:96:05:bb:e9:e1:f4:44:e7:ac:e1:9b:f8:
3e:63:4d:82:6c:f0:23:7c:3a:e3:bd:fd:d4:7c:e1:
e0:26:1d:a3:c7:d9:81:48:18:fb:7f:08:10:c8:03:
6e:e9:c8:12:cc:74:c0:e3:1f:75:fb:d3:2c:b3:47:
c5:34:8c:7a:09:c4:53:ae:14:51:a1:64:78:92:d6:
9b:7d:f6:5e:39:9c:59:c9:45:ec:1b:55:1f:38:d6:
4c:2e:85:3c:62:77:3b:c9:e8:04:22:f1:21:3d:7c:
0a:12:35:92:13:fd:a8:af:9d:dd:08:d7:e0:a8:7e:
ff:d8:54:ff:95:a8:a8:fa:03:b5:66:35:c6:c9:46:
ba:20:f4:28:25:cd:93:7a:6c:00:9e:08:f6:c4:e9:
10:d4:8c:76:28:b2:1e:bc:01:6f:4d:2a:07:73:b9:
c0:9a:5b:0e:42:fa:eb:e4:15:e7:84:d6:da:aa:0f:
12:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:A6:68:3E:F1:14:D3:CD:D4:F8:9A:DC:D9:D9:4E:2C:1A:C1:A8:41
X509v3 Authority Key Identifier:
keyid:BF:A6:E9:6F:CA:7A:27:83:CB:97:21:EB:B6:2D:E1:B5:36:C1:63:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v6bpb8p6J4PLlyHrti3htTbBY6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/856ea4-de5a-4f11-8228-87bf6fdbe193/1/v6bpb8p6J4PLlyHrti3htTbBY6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/856ea4-de5a-4f11-8228-87bf6fdbe193/1/v6bpb8p6J4PLlyHrti3htTbBY6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:ea:68:87:90:ae:3a:51:5e:c7:cf:f1:72:07:90:8b:e6:de:
3a:99:05:5b:66:92:6c:16:ad:39:f0:39:ea:12:75:c1:a7:4e:
65:0f:05:c8:15:c8:1b:a4:1e:5f:fc:08:ab:14:5e:d1:0d:2d:
ed:90:70:b7:d4:96:3b:85:19:68:e7:b7:11:8a:b4:83:16:98:
44:c7:70:f2:fa:3a:e0:6a:fe:4f:ad:af:6f:3d:f1:e8:71:45:
d2:39:2f:a1:06:c8:85:c1:f3:15:b8:a1:6c:b2:2a:27:92:ff:
4a:ed:9b:0f:b1:8f:b9:3d:8f:01:be:ce:b0:50:a3:75:7d:0e:
2c:70:56:87:7b:96:b1:40:12:6a:15:2d:2a:0c:8e:6e:d0:74:
e8:6f:8e:f9:9d:df:3d:89:f8:6c:86:da:78:51:ff:77:ec:f0:
8a:d2:df:ae:16:b6:39:08:71:cc:bd:c8:3e:38:15:0f:8d:d2:
69:d6:88:09:e0:1d:a6:52:58:fb:8b:be:f0:82:78:9f:80:7e:
e4:dc:54:99:e9:b1:f8:e2:d2:58:2e:28:44:f9:05:bc:54:9f:
8e:e5:bc:a0:cd:db:d5:52:f3:51:33:de:3d:27:06:49:4b:38:
6e:ff:f3:6b:3f:0f:d1:ee:46:03:32:9a:7a:e8:75:87:88:db:
6e:03:31:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:58:21 2025 by rpki-client