Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/729fcd-704b-4081-8d25-c9ff1ee6ad95/1/6ocBJxa2bugiZCwvChuQFItceyk.mft
File: 6ocBJxa2bugiZCwvChuQFItceyk.mft (raw, json)
Hash identifier: i9QhYUlDu9QCrr59+5rFDqphSa4gIh1Qw84liZNF2/o=
Subject key identifier: 3D:A1:EC:08:63:F8:E6:9F:97:2D:E9:70:BA:A5:52:27:C0:8C:EE:71
Authority key identifier: EA:87:01:27:16:B6:6E:E8:22:64:2C:2F:0A:1B:90:14:8B:5C:7B:29
Certificate issuer: /CN=ea87012716b66ee822642c2f0a1b90148b5c7b29
Certificate serial: 019A52D264763F661487ADE0832650F8FEAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6ocBJxa2bugiZCwvChuQFItceyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/729fcd-704b-4081-8d25-c9ff1ee6ad95/1/6ocBJxa2bugiZCwvChuQFItceyk.mft
Manifest number: 0E5E
Signing time: Wed 05 Nov 2025 07:01:51 +0000
Manifest this update: Wed 05 Nov 2025 07:01:51 +0000
Manifest next update: Thu 06 Nov 2025 07:01:51 +0000
Files and hashes: 1: 6ocBJxa2bugiZCwvChuQFItceyk.crl (hash: l2tLR/7u+zD+kd+ZMZ3wmYNrkepaELu1mvyv5VupIhA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/729fcd-704b-4081-8d25-c9ff1ee6ad95/1/6ocBJxa2bugiZCwvChuQFItceyk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/729fcd-704b-4081-8d25-c9ff1ee6ad95/1/6ocBJxa2bugiZCwvChuQFItceyk.mft
rsync://rpki.ripe.net/repository/DEFAULT/6ocBJxa2bugiZCwvChuQFItceyk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d2:64:76:3f:66:14:87:ad:e0:83:26:50:f8:fe:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea87012716b66ee822642c2f0a1b90148b5c7b29
Validity
Not Before: Nov 5 07:01:51 2025 GMT
Not After : Nov 6 07:01:51 2025 GMT
Subject: CN=3da1ec0863f8e69f972de970baa55227c08cee71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:d8:d5:cc:6f:3d:a9:70:74:d7:be:5d:94:3f:
1c:30:25:89:1f:ff:9d:13:a4:65:11:29:95:3e:3f:
97:d4:0d:5b:12:d3:72:cc:43:f1:17:4e:2d:fe:e5:
e5:ca:65:12:72:15:e8:f3:3f:6f:5d:90:af:f2:e2:
fa:2d:84:6d:e8:a9:6b:d5:05:cc:8d:69:36:be:c0:
8d:34:7b:ec:b7:ef:43:c2:da:18:5d:d7:09:88:43:
79:4d:14:71:aa:62:b8:e2:50:73:2b:43:b2:0c:2f:
6f:d0:17:6d:99:f9:29:ac:04:74:c1:d4:4b:90:6d:
bf:ff:b2:c6:d2:70:33:67:ce:b2:3b:93:7c:9b:8c:
00:88:55:64:d0:d8:13:82:2a:e0:98:9e:74:1c:ef:
0a:ce:90:d1:0a:35:3d:e4:61:43:64:65:ea:48:89:
0d:2f:4e:98:b9:a7:0c:78:e8:15:ba:03:23:6e:37:
8c:44:51:c8:e9:f4:4e:8e:99:f7:57:b8:f1:af:0e:
22:38:6d:5e:f6:ff:10:0c:a9:40:05:7d:70:2a:d2:
25:5a:ac:45:c1:64:ab:55:8f:0a:73:20:6a:f8:97:
e8:92:bb:4d:03:99:16:8a:99:bc:3d:8c:6a:f6:f4:
37:d6:82:53:34:26:74:6c:08:07:0b:09:2e:89:d2:
70:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:A1:EC:08:63:F8:E6:9F:97:2D:E9:70:BA:A5:52:27:C0:8C:EE:71
X509v3 Authority Key Identifier:
keyid:EA:87:01:27:16:B6:6E:E8:22:64:2C:2F:0A:1B:90:14:8B:5C:7B:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ocBJxa2bugiZCwvChuQFItceyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/729fcd-704b-4081-8d25-c9ff1ee6ad95/1/6ocBJxa2bugiZCwvChuQFItceyk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/729fcd-704b-4081-8d25-c9ff1ee6ad95/1/6ocBJxa2bugiZCwvChuQFItceyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:ac:21:7f:38:97:9b:5e:12:60:fb:b1:4a:3b:21:9c:04:f9:
bf:c9:f2:0b:be:bc:80:0d:7c:e7:f5:1a:6c:7b:d6:30:67:29:
b9:f1:da:b4:a8:a6:67:16:96:7e:99:d2:95:aa:b6:f4:5f:12:
c5:6c:7f:83:28:86:9b:8b:56:8b:32:65:7a:ff:2b:f7:9c:2c:
c1:40:1a:91:67:a8:cf:dd:b5:d5:9a:58:53:50:d8:95:9a:a9:
22:06:f0:7b:86:e0:c1:95:70:98:91:7f:62:7c:07:70:bd:94:
6e:48:90:fd:fd:33:fb:45:d2:96:62:63:45:e7:3c:e0:39:c4:
f7:06:6c:2a:78:78:f0:93:5c:75:4b:49:5f:a2:a3:22:62:b6:
9c:1d:32:d5:a8:41:78:00:66:a3:7c:af:a7:c0:f9:cf:23:f7:
0b:fe:e0:2e:90:a7:59:d3:8f:6b:f2:c3:c6:67:73:ce:54:cc:
41:79:ac:e5:91:06:e6:e8:f0:e4:f5:c9:2c:b1:99:7a:5b:0d:
aa:84:29:c8:a7:7c:5e:26:cf:5f:7c:a0:64:b6:a4:d9:75:87:
bf:10:c4:9f:e4:a1:a5:15:80:9e:6b:fb:d7:14:60:af:0f:76:
76:f8:67:c6:23:f8:8e:b1:39:9e:50:c7:79:bd:46:48:e6:3d:
55:3c:37:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpS0mR2P2YUh63ggyZQ+P6sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhODcwMTI3MTZiNjZlZTgyMjY0MmMyZjBhMWI5MDE0OGI1
YzdiMjkwHhcNMjUxMTA1MDcwMTUxWhcNMjUxMTA2MDcwMTUxWjAzMTEwLwYDVQQD
EygzZGExZWMwODYzZjhlNjlmOTcyZGU5NzBiYWE1NTIyN2MwOGNlZTcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7tjVzG89qXB0175dlD8cMCWJH/+d
E6RlESmVPj+X1A1bEtNyzEPxF04t/uXlymUSchXo8z9vXZCv8uL6LYRt6Klr1QXM
jWk2vsCNNHvst+9DwtoYXdcJiEN5TRRxqmK44lBzK0OyDC9v0BdtmfkprAR0wdRL
kG2//7LG0nAzZ86yO5N8m4wAiFVk0NgTgirgmJ50HO8KzpDRCjU95GFDZGXqSIkN
L06YuacMeOgVugMjbjeMRFHI6fROjpn3V7jxrw4iOG1e9v8QDKlABX1wKtIlWqxF
wWSrVY8KcyBq+JfokrtNA5kWipm8PYxq9vQ31oJTNCZ0bAgHCwkuidJwrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD2h7Ahj+Oafly3pcLqlUifAjO5xMB8GA1UdIwQY
MBaAFOqHAScWtm7oImQsLwobkBSLXHspMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNm9jQkp4YTJidWdpWkN3dkNodVFGSXRjZXlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS83MjlmY2QtNzA0Yi00MDgxLThkMjUt
YzlmZjFlZTZhZDk1LzEvNm9jQkp4YTJidWdpWkN3dkNodVFGSXRjZXlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS83MjlmY2QtNzA0Yi00MDgxLThkMjUtYzlmZjFlZTZhZDk1
LzEvNm9jQkp4YTJidWdpWkN3dkNodVFGSXRjZXlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgKwhfziX
m14SYPuxSjshnAT5v8nyC768gA185/UabHvWMGcpufHatKimZxaWfpnSlaq29F8S
xWx/gyiGm4tWizJlev8r95wswUAakWeoz9211ZpYU1DYlZqpIgbwe4bgwZVwmJF/
YnwHcL2UbkiQ/f0z+0XSlmJjRec84DnE9wZsKnh48JNcdUtJX6KjImK2nB0y1ahB
eABmo3yvp8D5zyP3C/7gLpCnWdOPa/LDxmdzzlTMQXms5ZEG5ujw5PXJLLGZelsN
qoQpyKd8XibPX3ygZLak2XWHvxDEn+ShpRWAnmv71xRgrw92dvhnxiP4jrE5nlDH
eb1GSOY9VTw3HQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 11:08:49 2025 by rpki-client