Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/8c5bc7-55fa-4044-88da-68185fdb9003/1/b6SOlhl0JuTF7rQj4P2cLpUsQXc.mft
File: b6SOlhl0JuTF7rQj4P2cLpUsQXc.mft (raw, json)
Hash identifier: RbUJAmmPwhBN8D7fIhhIFqmdjyrYsyxKXYqGarKHsh4=
Subject key identifier: 16:29:36:67:23:15:FE:CB:D1:DB:70:ED:BA:F3:ED:D5:F8:19:0B:B5
Authority key identifier: 6F:A4:8E:96:19:74:26:E4:C5:EE:B4:23:E0:FD:9C:2E:95:2C:41:77
Certificate issuer: /CN=6fa48e96197426e4c5eeb423e0fd9c2e952c4177
Certificate serial: 019A4C61435641FB8CAD6F7E74E3D545320E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b6SOlhl0JuTF7rQj4P2cLpUsQXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/8c5bc7-55fa-4044-88da-68185fdb9003/1/b6SOlhl0JuTF7rQj4P2cLpUsQXc.mft
Manifest number: 164F
Signing time: Tue 04 Nov 2025 01:00:33 +0000
Manifest this update: Tue 04 Nov 2025 01:00:33 +0000
Manifest next update: Wed 05 Nov 2025 01:00:33 +0000
Files and hashes: 1: 9eMR4FNJDVauWkWIUPQVpbQ5CXg.roa (hash: u33y8H6nVy03TdakAVCKdnmWlusbHupRimP8Gevy98g=)
2: b6SOlhl0JuTF7rQj4P2cLpUsQXc.crl (hash: kVW50qFBTLbvb5W6qStr4iX1cxCJg8CBbJIGN0pXDvY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/8c5bc7-55fa-4044-88da-68185fdb9003/1/b6SOlhl0JuTF7rQj4P2cLpUsQXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/8c5bc7-55fa-4044-88da-68185fdb9003/1/b6SOlhl0JuTF7rQj4P2cLpUsQXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/b6SOlhl0JuTF7rQj4P2cLpUsQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 01:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:61:43:56:41:fb:8c:ad:6f:7e:74:e3:d5:45:32:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fa48e96197426e4c5eeb423e0fd9c2e952c4177
Validity
Not Before: Nov 4 01:00:33 2025 GMT
Not After : Nov 5 01:00:33 2025 GMT
Subject: CN=162936672315fecbd1db70edbaf3edd5f8190bb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:4f:1c:c1:11:67:a7:32:e1:7b:a3:4c:bd:83:
c8:58:a4:ce:69:a2:c4:84:62:0c:d7:a2:65:9e:17:
5b:a8:a4:c4:0b:d2:2b:57:09:c2:c8:a3:df:92:5f:
ea:fc:a4:2e:5a:4f:bc:e5:3b:04:ea:8c:e3:11:84:
31:76:5e:d0:8c:54:36:bc:ae:01:85:68:e9:cf:77:
c0:df:b6:c9:13:f1:0d:4f:88:86:09:9c:d1:2a:4a:
5e:f7:25:6e:dd:f4:67:b3:20:ba:71:70:b8:bb:f3:
23:ec:f9:8e:8a:e4:27:99:3d:55:5c:b5:4d:71:ee:
d0:f5:3e:6a:37:fa:70:8f:fb:20:6c:8b:1e:65:d3:
6c:a3:c6:f6:54:58:ad:97:54:54:4c:9e:91:aa:13:
45:2a:f5:51:6f:87:7f:97:d2:c7:4d:a7:2e:46:0f:
8e:4c:68:9e:02:41:96:2b:e0:8c:8a:db:b0:db:cb:
b5:94:86:66:2d:53:df:58:ed:ec:cc:14:88:da:9d:
eb:cf:2e:53:89:68:c0:c0:11:eb:da:44:48:a4:06:
dd:e8:04:76:29:9a:5d:85:78:5f:a8:c4:51:2c:af:
94:70:bb:c9:d5:43:a2:2a:3c:03:ac:31:4b:2f:8e:
be:8e:ad:10:07:80:85:80:83:d8:b5:86:b8:96:1c:
c9:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:29:36:67:23:15:FE:CB:D1:DB:70:ED:BA:F3:ED:D5:F8:19:0B:B5
X509v3 Authority Key Identifier:
keyid:6F:A4:8E:96:19:74:26:E4:C5:EE:B4:23:E0:FD:9C:2E:95:2C:41:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6SOlhl0JuTF7rQj4P2cLpUsQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/8c5bc7-55fa-4044-88da-68185fdb9003/1/b6SOlhl0JuTF7rQj4P2cLpUsQXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/8c5bc7-55fa-4044-88da-68185fdb9003/1/b6SOlhl0JuTF7rQj4P2cLpUsQXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:dc:cb:d0:8b:85:cf:58:da:6c:91:e7:44:01:29:4c:8c:91:
f2:65:69:64:cf:50:c3:f7:92:66:6c:03:87:58:25:29:10:f6:
37:ec:e8:ae:d9:39:e9:cd:60:d0:2c:eb:39:9f:9d:20:2e:04:
4c:b6:8c:8b:1f:81:fe:ee:74:dd:0d:ca:68:20:85:0b:d5:fa:
07:a0:84:33:38:a1:af:4a:36:e6:89:c2:06:68:79:80:88:81:
6c:0c:eb:31:34:c1:de:19:56:76:ee:6c:38:64:3b:85:18:00:
67:c5:3f:01:3a:54:94:84:88:2b:6c:cb:91:ba:8a:4c:db:e5:
8c:5a:99:07:91:d6:93:96:6a:6f:62:ac:3e:52:2a:f6:88:9a:
2a:22:66:4e:5c:34:95:40:0d:d4:ea:10:10:56:3a:db:ec:9f:
46:94:34:5d:93:b8:66:a0:01:a7:03:84:ed:06:47:cf:94:54:
f1:53:d6:25:5a:5a:5f:d0:75:d1:55:2f:b6:e7:65:a1:db:15:
68:10:86:9c:1b:bc:f2:2d:94:18:9b:a6:79:a3:a1:89:d4:66:
81:5b:f4:cb:cc:8b:43:07:cc:4a:98:48:4d:e9:67:21:fd:6e:
f7:71:87:c0:18:2c:4c:fb:5a:d1:ee:0e:37:18:e5:75:58:f2:
ed:c0:d8:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:52:31 2025 by rpki-client