Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/a5a3a2-ad53-46a5-8fd5-065ed4d8441f/1/6iKra75C7ZzzZ7sDF99-ZA4oNtw.mft
File: 6iKra75C7ZzzZ7sDF99-ZA4oNtw.mft (raw, json)
Hash identifier: AaSofTkjbQdG1wawrH8chd2IuzUCEErDrBkJk3XATFs=
Subject key identifier: 66:EE:97:5B:33:86:4F:B5:7B:6F:C8:64:85:C3:3F:3F:BA:AF:A8:A3
Authority key identifier: EA:22:AB:6B:BE:42:ED:9C:F3:67:BB:03:17:DF:7E:64:0E:28:36:DC
Certificate issuer: /CN=ea22ab6bbe42ed9cf367bb0317df7e640e2836dc
Certificate serial: 019A533F3A45D43316A1A4227841DE0CF142
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6iKra75C7ZzzZ7sDF99-ZA4oNtw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/a5a3a2-ad53-46a5-8fd5-065ed4d8441f/1/6iKra75C7ZzzZ7sDF99-ZA4oNtw.mft
Manifest number: 0DF0
Signing time: Wed 05 Nov 2025 09:00:43 +0000
Manifest this update: Wed 05 Nov 2025 09:00:43 +0000
Manifest next update: Thu 06 Nov 2025 09:00:43 +0000
Files and hashes: 1: 6iKra75C7ZzzZ7sDF99-ZA4oNtw.crl (hash: mcLYIRWGinrfTdVA35tNA1/Ht+GiVuBWpJF4g7p6u4o=)
2: DXb8g5-PypIL6EwTwBa5JTnxBKo.roa (hash: tOPfESlkZC7S5BHJvSJ7lgd26XQAVlBllx5t/n2Rb7Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/a5a3a2-ad53-46a5-8fd5-065ed4d8441f/1/6iKra75C7ZzzZ7sDF99-ZA4oNtw.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/a5a3a2-ad53-46a5-8fd5-065ed4d8441f/1/6iKra75C7ZzzZ7sDF99-ZA4oNtw.mft
rsync://rpki.ripe.net/repository/DEFAULT/6iKra75C7ZzzZ7sDF99-ZA4oNtw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 09:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:3f:3a:45:d4:33:16:a1:a4:22:78:41:de:0c:f1:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea22ab6bbe42ed9cf367bb0317df7e640e2836dc
Validity
Not Before: Nov 5 09:00:43 2025 GMT
Not After : Nov 6 09:00:43 2025 GMT
Subject: CN=66ee975b33864fb57b6fc86485c33f3fbaafa8a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:95:a6:e4:1b:66:7f:75:e9:4e:82:50:f1:7a:
cf:72:ea:16:6c:5e:13:6c:6f:2a:fc:40:dc:b5:a1:
e5:9e:ad:60:20:9d:5c:ee:d2:45:fe:3e:f0:e6:4f:
73:5d:76:59:26:c3:eb:22:8d:da:6e:e9:2d:e0:88:
be:11:e6:00:40:f5:25:81:0b:e0:23:f7:22:2f:44:
95:19:61:f7:af:7a:ca:d5:35:89:25:1d:3b:ff:66:
aa:5d:37:91:f6:c7:b7:8b:78:88:c1:a8:3b:dd:f5:
e4:c2:42:f9:a0:d9:e0:8d:5b:e5:14:7c:d5:f0:e7:
f4:44:6c:f3:2b:c9:4f:7a:d3:4d:c0:d5:8a:42:51:
95:74:f4:72:6f:db:c3:e3:ea:a9:78:66:a5:49:cc:
d8:e4:4f:e7:88:ff:d2:87:64:2c:f5:cf:39:fc:da:
ad:19:b0:f0:5a:0e:85:ce:86:18:25:ec:6c:03:f2:
e3:19:60:1d:94:3a:b6:1f:40:f4:0a:00:5d:68:7e:
86:0b:4a:dc:fa:d8:db:f3:e3:41:e4:00:24:9c:99:
f9:8e:95:cc:87:29:54:4f:fa:87:6a:59:cc:bc:6d:
76:62:db:c7:65:e8:28:2e:d9:bf:ab:dd:97:d1:f4:
d7:0c:e2:1d:59:30:fa:b0:21:59:4d:0b:52:71:63:
d8:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:EE:97:5B:33:86:4F:B5:7B:6F:C8:64:85:C3:3F:3F:BA:AF:A8:A3
X509v3 Authority Key Identifier:
keyid:EA:22:AB:6B:BE:42:ED:9C:F3:67:BB:03:17:DF:7E:64:0E:28:36:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6iKra75C7ZzzZ7sDF99-ZA4oNtw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/a5a3a2-ad53-46a5-8fd5-065ed4d8441f/1/6iKra75C7ZzzZ7sDF99-ZA4oNtw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/a5a3a2-ad53-46a5-8fd5-065ed4d8441f/1/6iKra75C7ZzzZ7sDF99-ZA4oNtw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:0f:d1:58:f1:fd:99:12:23:49:bf:44:8d:a2:b9:b0:e6:3a:
71:2e:84:86:40:63:7d:45:74:93:1a:43:fd:dc:fd:74:39:26:
74:68:bb:ac:60:04:62:f3:af:06:fd:64:73:c5:8d:93:4b:09:
18:ec:f9:e0:5d:99:da:a4:1f:22:f0:a6:11:63:88:53:d6:06:
a4:06:fe:49:4a:25:ff:dc:82:6d:c8:6a:9a:27:37:57:e7:27:
22:b6:f9:3a:ae:a9:48:cb:07:8b:92:55:b3:e1:38:17:e3:c8:
da:db:a3:93:95:57:98:08:b2:7a:42:07:4b:cf:71:e6:27:8b:
b6:ce:5b:72:14:c6:80:4a:cf:45:90:11:46:c2:55:65:46:d6:
9b:ef:97:5f:00:29:54:53:6e:07:fe:01:c7:fc:d8:0e:95:9f:
60:f4:1a:d7:f4:10:b1:f7:b3:6d:59:27:94:93:40:4a:bb:db:
31:4c:26:a4:e0:33:35:10:d8:e4:15:b1:62:eb:2a:af:30:0d:
15:21:ed:41:71:aa:96:e8:a8:28:e0:4f:b9:b7:41:fd:84:07:
14:fb:c2:26:31:5b:76:6e:f1:ff:a0:04:c0:d8:ba:6e:11:7c:
80:20:82:1e:bd:52:da:b4:33:e9:d6:db:b8:fd:79:50:c8:f6:
1a:22:0d:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpTPzpF1DMWoaQieEHeDPFCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhMjJhYjZiYmU0MmVkOWNmMzY3YmIwMzE3ZGY3ZTY0MGUy
ODM2ZGMwHhcNMjUxMTA1MDkwMDQzWhcNMjUxMTA2MDkwMDQzWjAzMTEwLwYDVQQD
Eyg2NmVlOTc1YjMzODY0ZmI1N2I2ZmM4NjQ4NWMzM2YzZmJhYWZhOGEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA05Wm5Btmf3XpToJQ8XrPcuoWbF4T
bG8q/EDctaHlnq1gIJ1c7tJF/j7w5k9zXXZZJsPrIo3abukt4Ii+EeYAQPUlgQvg
I/ciL0SVGWH3r3rK1TWJJR07/2aqXTeR9se3i3iIwag73fXkwkL5oNngjVvlFHzV
8Of0RGzzK8lPetNNwNWKQlGVdPRyb9vD4+qpeGalSczY5E/niP/Sh2Qs9c85/Nqt
GbDwWg6FzoYYJexsA/LjGWAdlDq2H0D0CgBdaH6GC0rc+tjb8+NB5AAknJn5jpXM
hylUT/qHalnMvG12YtvHZegoLtm/q92X0fTXDOIdWTD6sCFZTQtScWPYgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGbul1szhk+1e2/IZIXDPz+6r6ijMB8GA1UdIwQY
MBaAFOoiq2u+Qu2c82e7AxfffmQOKDbcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNmlLcmE3NUM3Wnp6WjdzREY5OS1aQTRvTnR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9hNWEzYTItYWQ1My00NmE1LThmZDUt
MDY1ZWQ0ZDg0NDFmLzEvNmlLcmE3NUM3Wnp6WjdzREY5OS1aQTRvTnR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC9hNWEzYTItYWQ1My00NmE1LThmZDUtMDY1ZWQ0ZDg0NDFm
LzEvNmlLcmE3NUM3Wnp6WjdzREY5OS1aQTRvTnR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiQ/RWPH9
mRIjSb9EjaK5sOY6cS6EhkBjfUV0kxpD/dz9dDkmdGi7rGAEYvOvBv1kc8WNk0sJ
GOz54F2Z2qQfIvCmEWOIU9YGpAb+SUol/9yCbchqmic3V+cnIrb5Oq6pSMsHi5JV
s+E4F+PI2tujk5VXmAiyekIHS89x5ieLts5bchTGgErPRZARRsJVZUbWm++XXwAp
VFNuB/4Bx/zYDpWfYPQa1/QQsfezbVknlJNASrvbMUwmpOAzNRDY5BWxYusqrzAN
FSHtQXGqluioKOBPubdB/YQHFPvCJjFbdm7x/6AEwNi6bhF8gCCCHr1S2rQz6dbb
uP15UMj2GiINSw==
-----END CERTIFICATE-----
Generated at Wed Nov 5 16:23:16 2025 by rpki-client