Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ed69dc-80d7-4336-a22d-848af698d0d8/1/g6yI8BcMv-RGz9MaWCPN4OCTGZo.mft
File: g6yI8BcMv-RGz9MaWCPN4OCTGZo.mft (raw, json)
Hash identifier: zShixZdn7bQt76nl2vImBwS78XQmBeMj/Ivbe187COQ=
Subject key identifier: 25:1C:D8:8B:4F:A3:B1:E8:A9:F1:E9:A6:93:CA:FC:CF:69:B3:D0:40
Authority key identifier: 83:AC:88:F0:17:0C:BF:E4:46:CF:D3:1A:58:23:CD:E0:E0:93:19:9A
Certificate issuer: /CN=83ac88f0170cbfe446cfd31a5823cde0e093199a
Certificate serial: 019A4F2B4B36857A0AC3CE413A3B0851B89A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g6yI8BcMv-RGz9MaWCPN4OCTGZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ed69dc-80d7-4336-a22d-848af698d0d8/1/g6yI8BcMv-RGz9MaWCPN4OCTGZo.mft
Manifest number: 16A1
Signing time: Tue 04 Nov 2025 14:00:28 +0000
Manifest this update: Tue 04 Nov 2025 14:00:28 +0000
Manifest next update: Wed 05 Nov 2025 14:00:28 +0000
Files and hashes: 1: 7Atpb8ICQNgBoE2VxygDoXR916c.roa (hash: 9LfiFF+kHY8QeDVlYR0804RgSHl5CYTGB3eoMEBzGw0=)
2: g6yI8BcMv-RGz9MaWCPN4OCTGZo.crl (hash: TVd4MSspEmaGjXB5CH/lS5ZTIBP7KbnOjljAh3E2N+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ed69dc-80d7-4336-a22d-848af698d0d8/1/g6yI8BcMv-RGz9MaWCPN4OCTGZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/ed69dc-80d7-4336-a22d-848af698d0d8/1/g6yI8BcMv-RGz9MaWCPN4OCTGZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/g6yI8BcMv-RGz9MaWCPN4OCTGZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:4b:36:85:7a:0a:c3:ce:41:3a:3b:08:51:b8:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83ac88f0170cbfe446cfd31a5823cde0e093199a
Validity
Not Before: Nov 4 14:00:28 2025 GMT
Not After : Nov 5 14:00:28 2025 GMT
Subject: CN=251cd88b4fa3b1e8a9f1e9a693cafccf69b3d040
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:11:6e:e3:49:47:a6:e5:88:ba:32:de:3a:76:
a1:48:f2:b3:6a:12:53:ec:dd:ac:1d:01:09:22:2b:
a6:82:2a:e8:ec:af:69:4d:32:ec:29:d4:81:09:58:
e2:fe:97:1e:2f:01:76:5c:db:96:57:7b:7a:28:1f:
ae:d0:3f:6a:53:a8:b8:6b:0d:b7:2b:06:0d:f7:fa:
b2:da:38:ef:1e:23:2c:b8:88:21:10:0e:73:84:80:
3d:fb:ad:03:03:1f:73:91:db:bb:e6:f4:9c:20:a1:
37:6e:2c:8c:6a:64:fb:6f:a1:67:bc:a0:42:b8:a1:
b7:4a:68:7b:79:a1:e7:f7:68:86:e0:57:e3:92:ef:
d1:a2:48:44:1e:f8:62:3f:86:1f:46:7e:24:20:39:
aa:2b:a7:35:2a:31:38:b3:41:80:07:ac:c5:cf:cb:
ff:fe:16:f4:58:75:bb:17:a1:6c:39:cd:06:f8:c2:
1d:6a:ed:45:61:9f:e8:7f:b7:2f:5c:91:ec:72:a2:
c4:40:12:fc:11:3c:7f:f8:f6:d3:d8:de:4e:3d:81:
19:3b:bd:f2:8a:b0:be:e4:ce:05:1c:e8:19:36:e0:
b1:00:41:f1:6b:d6:36:47:96:e8:8b:0e:8c:ce:ca:
0e:b4:d4:29:47:46:c5:77:9b:a6:e4:35:20:60:d0:
1c:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:1C:D8:8B:4F:A3:B1:E8:A9:F1:E9:A6:93:CA:FC:CF:69:B3:D0:40
X509v3 Authority Key Identifier:
keyid:83:AC:88:F0:17:0C:BF:E4:46:CF:D3:1A:58:23:CD:E0:E0:93:19:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g6yI8BcMv-RGz9MaWCPN4OCTGZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ed69dc-80d7-4336-a22d-848af698d0d8/1/g6yI8BcMv-RGz9MaWCPN4OCTGZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ed69dc-80d7-4336-a22d-848af698d0d8/1/g6yI8BcMv-RGz9MaWCPN4OCTGZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:e6:36:af:2e:41:10:e0:4d:99:df:04:44:c0:36:18:e2:e3:
f0:81:85:15:77:7d:bd:89:24:c3:e0:29:26:22:08:73:69:20:
dd:54:7c:24:b0:0a:4f:db:e4:2a:08:40:1b:b1:94:0b:f2:7c:
cd:0a:e1:c6:e0:cc:ed:89:52:33:42:72:01:ee:72:b4:e3:04:
3b:b6:2a:52:5c:3b:1c:db:23:5f:17:51:1d:8c:8a:78:9a:20:
c4:56:d0:ae:6f:34:b5:4e:42:ba:04:79:51:09:07:5b:2c:67:
c6:4b:4f:6e:b8:0d:1a:0e:90:40:ae:6b:da:88:b7:44:c2:67:
29:2a:e4:fa:c5:83:a3:e6:95:6d:72:c9:b5:33:ae:ca:8b:53:
54:f7:a7:d6:38:17:5b:6f:d0:af:aa:7d:0a:b1:98:ec:4d:3a:
c9:42:f1:de:0a:41:c6:96:0e:f8:bd:ab:bc:22:2c:49:7d:3d:
bc:1f:b1:e4:b1:d3:16:de:57:60:1d:f7:e6:71:f5:48:7c:78:
cb:0f:9d:28:83:9a:fc:c2:b7:72:3c:dd:ac:c5:a6:15:85:40:
f6:53:73:32:70:56:03:a8:7f:fc:e4:c2:34:09:2c:cf:2c:2e:
06:48:af:82:a4:fb:48:1f:3f:d6:4a:91:22:a9:96:e8:d1:52:
82:d6:66:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:20:19 2025 by rpki-client