Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/29c6b0-b2ec-4712-b7c5-af3c8f583449/1/6q5cCdmQTrdE-QZzjPnwfyP7VWc.mft
File: 6q5cCdmQTrdE-QZzjPnwfyP7VWc.mft (raw, json)
Hash identifier: 2nkYMXrEwHc5LiIZtdr81/Knutm+lAjQglq23vWGwQ4=
Subject key identifier: F8:69:56:95:81:6E:63:FF:15:7D:9A:54:75:39:3D:16:07:91:BD:82
Authority key identifier: EA:AE:5C:09:D9:90:4E:B7:44:F9:06:73:8C:F9:F0:7F:23:FB:55:67
Certificate issuer: /CN=eaae5c09d9904eb744f906738cf9f07f23fb5567
Certificate serial: 019A582E29526CEC4CC33DB23300C8BD0B95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6q5cCdmQTrdE-QZzjPnwfyP7VWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/29c6b0-b2ec-4712-b7c5-af3c8f583449/1/6q5cCdmQTrdE-QZzjPnwfyP7VWc.mft
Manifest number: 7A
Signing time: Thu 06 Nov 2025 08:00:11 +0000
Manifest this update: Thu 06 Nov 2025 08:00:11 +0000
Manifest next update: Fri 07 Nov 2025 08:00:11 +0000
Files and hashes: 1: 6q5cCdmQTrdE-QZzjPnwfyP7VWc.crl (hash: +kxkjAKgXOgQKMZH6xE+smtYP8ewHXu9m0RyTD2oVgM=)
2: XtYhA40CIXZ13ODIzU5Jf7LL4LU.roa (hash: HdEWtXPo3qjkpM4rtcD6m0eh6joeQyAPSggK9PU/vxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/29c6b0-b2ec-4712-b7c5-af3c8f583449/1/6q5cCdmQTrdE-QZzjPnwfyP7VWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/29c6b0-b2ec-4712-b7c5-af3c8f583449/1/6q5cCdmQTrdE-QZzjPnwfyP7VWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/6q5cCdmQTrdE-QZzjPnwfyP7VWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 07 Nov 2025 06:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:58:2e:29:52:6c:ec:4c:c3:3d:b2:33:00:c8:bd:0b:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaae5c09d9904eb744f906738cf9f07f23fb5567
Validity
Not Before: Nov 6 08:00:11 2025 GMT
Not After : Nov 7 08:00:11 2025 GMT
Subject: CN=f8695695816e63ff157d9a5475393d160791bd82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:fb:a2:05:4f:58:d9:20:8e:c9:7c:ca:a9:fa:
29:64:cc:74:e9:8a:f8:18:53:48:c8:27:04:9f:7e:
72:34:34:f2:30:0a:03:ae:0e:dc:a9:e7:d3:30:d7:
2d:81:89:6c:42:8f:e3:8e:43:d8:d9:4e:7d:0d:e5:
d4:4d:1a:d5:75:ee:14:df:27:cd:54:dc:a2:7a:48:
03:5a:a5:c0:63:fc:8e:61:1e:56:e2:e9:3c:65:35:
18:e5:83:55:f8:33:9c:23:1f:bc:c5:1b:5c:bc:50:
81:f7:91:7e:8c:ec:55:d4:6b:7c:88:c1:74:c8:49:
91:a4:1d:17:68:a9:91:45:67:23:4f:d9:52:69:98:
64:6b:54:68:c9:b3:a4:52:0c:a2:8b:74:9b:3d:0b:
cb:b4:fe:8c:6a:55:6b:17:08:d2:fd:e6:18:3a:20:
61:fa:8e:1e:56:d3:b4:2f:42:5d:58:98:3c:03:10:
15:78:58:98:ee:12:99:46:93:87:c3:59:86:c7:90:
98:b8:58:23:f9:a8:8d:bb:d4:07:00:95:fc:54:74:
66:4c:b4:27:23:46:25:04:16:9d:52:2a:78:a5:e5:
ea:97:29:e7:53:39:46:93:26:00:3b:dd:ec:03:08:
4d:44:05:7c:11:af:d9:54:cd:37:f5:da:01:7d:fb:
e6:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:69:56:95:81:6E:63:FF:15:7D:9A:54:75:39:3D:16:07:91:BD:82
X509v3 Authority Key Identifier:
keyid:EA:AE:5C:09:D9:90:4E:B7:44:F9:06:73:8C:F9:F0:7F:23:FB:55:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6q5cCdmQTrdE-QZzjPnwfyP7VWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/29c6b0-b2ec-4712-b7c5-af3c8f583449/1/6q5cCdmQTrdE-QZzjPnwfyP7VWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/29c6b0-b2ec-4712-b7c5-af3c8f583449/1/6q5cCdmQTrdE-QZzjPnwfyP7VWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:a9:11:80:8c:c5:13:3b:ad:35:6f:6e:bc:40:68:91:14:47:
df:d9:ca:10:7d:dc:d2:fc:40:d7:3d:0d:01:26:4e:54:5d:ee:
cb:ec:94:7b:9e:8e:c7:8b:28:d3:bc:8a:91:5b:e5:78:73:e3:
6c:7b:60:a0:43:f6:9a:33:38:4a:d6:ee:76:57:fb:fa:9d:5c:
4d:82:4d:d1:ee:da:c6:85:a5:15:54:48:51:2b:4b:3d:43:1a:
29:44:b4:7d:4c:c5:b3:b9:7a:e9:72:4a:2c:3d:4a:11:55:17:
9a:5e:de:9b:9c:39:6d:5f:41:f2:f3:5d:c4:c4:2d:e1:0a:c1:
2c:60:53:ee:26:58:94:02:82:5a:cb:9c:39:c7:11:ed:a7:7f:
c2:97:42:ea:fd:bc:be:54:d6:ac:47:80:f9:9c:7c:29:49:14:
41:0a:29:a3:52:01:15:e6:b0:ad:d9:de:d6:be:76:bf:95:c2:
bf:45:9d:48:8d:9f:77:4d:04:98:c6:89:3f:aa:62:fa:ec:fd:
b3:a3:19:28:8c:89:8a:75:20:76:c9:d2:d9:0b:b0:f8:06:a0:
71:16:9f:dd:d7:6d:2d:80:7e:15:72:fc:11:bb:52:b1:fe:ae:
2e:1a:d9:47:6a:53:68:e8:46:9c:8a:53:d5:65:cc:77:16:a9:
6c:a8:81:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpYLilSbOxMwz2yMwDIvQuVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhYWU1YzA5ZDk5MDRlYjc0NGY5MDY3MzhjZjlmMDdmMjNm
YjU1NjcwHhcNMjUxMTA2MDgwMDExWhcNMjUxMTA3MDgwMDExWjAzMTEwLwYDVQQD
EyhmODY5NTY5NTgxNmU2M2ZmMTU3ZDlhNTQ3NTM5M2QxNjA3OTFiZDgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4/uiBU9Y2SCOyXzKqfopZMx06Yr4
GFNIyCcEn35yNDTyMAoDrg7cqefTMNctgYlsQo/jjkPY2U59DeXUTRrVde4U3yfN
VNyiekgDWqXAY/yOYR5W4uk8ZTUY5YNV+DOcIx+8xRtcvFCB95F+jOxV1Gt8iMF0
yEmRpB0XaKmRRWcjT9lSaZhka1RoybOkUgyii3SbPQvLtP6MalVrFwjS/eYYOiBh
+o4eVtO0L0JdWJg8AxAVeFiY7hKZRpOHw1mGx5CYuFgj+aiNu9QHAJX8VHRmTLQn
I0YlBBadUip4peXqlynnUzlGkyYAO93sAwhNRAV8Ea/ZVM039doBffvmtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPhpVpWBbmP/FX2aVHU5PRYHkb2CMB8GA1UdIwQY
MBaAFOquXAnZkE63RPkGc4z58H8j+1VnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnE1Y0NkbVFUcmRFLVFaempQbndmeVA3VldjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi8yOWM2YjAtYjJlYy00NzEyLWI3YzUt
YWYzYzhmNTgzNDQ5LzEvNnE1Y0NkbVFUcmRFLVFaempQbndmeVA3VldjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi8yOWM2YjAtYjJlYy00NzEyLWI3YzUtYWYzYzhmNTgzNDQ5
LzEvNnE1Y0NkbVFUcmRFLVFaempQbndmeVA3VldjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALqkRgIzF
EzutNW9uvEBokRRH39nKEH3c0vxA1z0NASZOVF3uy+yUe56Ox4so07yKkVvleHPj
bHtgoEP2mjM4Stbudlf7+p1cTYJN0e7axoWlFVRIUStLPUMaKUS0fUzFs7l66XJK
LD1KEVUXml7em5w5bV9B8vNdxMQt4QrBLGBT7iZYlAKCWsucOccR7ad/wpdC6v28
vlTWrEeA+Zx8KUkUQQopo1IBFeawrdne1r52v5XCv0WdSI2fd00EmMaJP6pi+uz9
s6MZKIyJinUgdsnS2Quw+AagcRaf3ddtLYB+FXL8EbtSsf6uLhrZR2pTaOhGnIpT
1WXMdxapbKiB/A==
-----END CERTIFICATE-----
Generated at Thu Nov 6 10:54:26 2025 by rpki-client