
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/20d1d5-3141-40b1-8f35-3b4c501929c5/1/6sw7q9U8RM12FFr4fUI3Axfo0ME.mft
File: 6sw7q9U8RM12FFr4fUI3Axfo0ME.mft (raw, json)
Hash identifier: 6pnn9QUbbE7DtwvNnA4zYbSvwLGkmGRxHJ/jpSDTJic=
Subject key identifier: 36:22:DE:92:51:5B:E5:8D:9A:6A:12:FD:B0:3C:50:67:2A:74:91:6C
Authority key identifier: EA:CC:3B:AB:D5:3C:44:CD:76:14:5A:F8:7D:42:37:03:17:E8:D0:C1
Certificate issuer: /CN=eacc3babd53c44cd76145af87d42370317e8d0c1
Certificate serial: 019A5150C81AB4D10EAC31A32B02AC55905B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6sw7q9U8RM12FFr4fUI3Axfo0ME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/20d1d5-3141-40b1-8f35-3b4c501929c5/1/6sw7q9U8RM12FFr4fUI3Axfo0ME.mft
Manifest number: 0E5B
Signing time: Wed 05 Nov 2025 00:00:39 +0000
Manifest this update: Wed 05 Nov 2025 00:00:39 +0000
Manifest next update: Thu 06 Nov 2025 00:00:39 +0000
Files and hashes: 1: 6sw7q9U8RM12FFr4fUI3Axfo0ME.crl (hash: GjbMIp6+MusIX9QBqGthgKSDPeWzQl1jjgBnIpucqPI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/20d1d5-3141-40b1-8f35-3b4c501929c5/1/6sw7q9U8RM12FFr4fUI3Axfo0ME.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/20d1d5-3141-40b1-8f35-3b4c501929c5/1/6sw7q9U8RM12FFr4fUI3Axfo0ME.mft
rsync://rpki.ripe.net/repository/DEFAULT/6sw7q9U8RM12FFr4fUI3Axfo0ME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 00:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:50:c8:1a:b4:d1:0e:ac:31:a3:2b:02:ac:55:90:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eacc3babd53c44cd76145af87d42370317e8d0c1
Validity
Not Before: Nov 5 00:00:39 2025 GMT
Not After : Nov 6 00:00:39 2025 GMT
Subject: CN=3622de92515be58d9a6a12fdb03c50672a74916c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ab:9b:30:43:db:18:eb:b5:9a:cb:1c:54:b4:
ea:a4:39:76:df:9f:35:22:bb:0e:01:4d:fc:6e:34:
b8:0c:73:7c:06:5c:26:48:51:9f:c1:87:db:ca:37:
fa:47:42:7b:cc:c8:56:d6:46:cb:74:30:96:f1:df:
8a:54:26:a9:89:37:53:f0:95:8c:b5:e3:45:89:44:
01:6c:f6:b3:b7:8a:b6:ee:99:0a:be:4f:3d:05:6d:
9a:6a:eb:2c:90:f3:53:a5:76:d1:eb:a3:87:ce:cb:
89:7c:23:df:70:09:2e:ab:6d:18:e9:0f:bc:13:6b:
ab:c2:93:e7:99:2b:37:27:2f:71:f9:a5:79:16:10:
ce:4d:83:a8:de:b8:7b:82:aa:d2:67:f2:db:5e:2f:
8c:9f:1e:b6:e4:90:d9:66:b7:92:fa:1b:82:d2:b1:
dc:56:3d:79:ee:10:c4:b5:bb:23:e9:f3:78:4d:97:
80:9e:66:54:7c:eb:e6:65:96:1a:21:7b:01:be:34:
c0:6c:48:be:6b:20:f9:8c:cb:79:a5:f7:f2:ac:d1:
1f:df:58:92:7e:17:c7:53:35:5c:aa:31:83:b6:05:
3b:1d:0c:c4:24:09:5b:e7:c2:52:5e:68:63:d3:cd:
0f:ce:ea:0f:59:62:e7:98:ae:a9:8b:8b:e6:2f:4c:
b1:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:22:DE:92:51:5B:E5:8D:9A:6A:12:FD:B0:3C:50:67:2A:74:91:6C
X509v3 Authority Key Identifier:
keyid:EA:CC:3B:AB:D5:3C:44:CD:76:14:5A:F8:7D:42:37:03:17:E8:D0:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6sw7q9U8RM12FFr4fUI3Axfo0ME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/20d1d5-3141-40b1-8f35-3b4c501929c5/1/6sw7q9U8RM12FFr4fUI3Axfo0ME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/20d1d5-3141-40b1-8f35-3b4c501929c5/1/6sw7q9U8RM12FFr4fUI3Axfo0ME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:c5:36:79:30:c2:93:2d:2f:b7:5b:3d:ba:e8:b0:aa:14:a0:
d7:02:4e:19:26:e1:91:e4:a5:86:5a:9c:a0:4f:83:34:e2:6d:
01:04:2a:47:90:5c:26:ab:88:92:36:36:66:be:94:a5:2b:3d:
73:33:03:d9:4c:75:9f:60:ae:e8:46:f4:1f:9d:ff:09:3e:54:
ce:e9:41:c2:95:e2:fe:9e:a3:3f:e4:92:4c:05:10:b4:57:07:
72:66:55:0c:81:e1:be:58:e6:8e:21:d3:92:cb:a7:ea:72:cb:
b5:34:18:ed:b2:eb:7a:0f:d5:27:ef:1d:c3:1a:54:c5:42:76:
7c:68:59:3c:0c:85:d0:8e:22:2e:44:cb:0c:d0:4b:5f:80:60:
ee:79:0b:c1:dd:6a:d9:05:6e:4a:e0:87:7b:c0:49:e9:81:8f:
a1:fe:1a:3f:5b:89:42:6b:0f:8f:fe:d6:58:03:33:d1:08:cb:
0f:b2:a2:a6:38:58:56:f5:50:3a:95:1f:b7:ba:1e:7c:ae:0b:
d3:10:7f:ee:18:b9:f2:4d:52:04:99:83:ad:ad:82:fa:8f:94:
a6:6c:c4:b5:1d:9a:6c:d7:2a:41:5c:ab:18:e8:48:6e:58:22:
d8:95:ff:56:5a:6f:ff:51:9c:f5:c0:6b:9a:25:9f:4e:ba:58:
34:59:29:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpRUMgatNEOrDGjKwKsVZBbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhY2MzYmFiZDUzYzQ0Y2Q3NjE0NWFmODdkNDIzNzAzMTdl
OGQwYzEwHhcNMjUxMTA1MDAwMDM5WhcNMjUxMTA2MDAwMDM5WjAzMTEwLwYDVQQD
EygzNjIyZGU5MjUxNWJlNThkOWE2YTEyZmRiMDNjNTA2NzJhNzQ5MTZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAraubMEPbGOu1msscVLTqpDl23581
IrsOAU38bjS4DHN8BlwmSFGfwYfbyjf6R0J7zMhW1kbLdDCW8d+KVCapiTdT8JWM
teNFiUQBbPazt4q27pkKvk89BW2aausskPNTpXbR66OHzsuJfCPfcAkuq20Y6Q+8
E2urwpPnmSs3Jy9x+aV5FhDOTYOo3rh7gqrSZ/LbXi+Mnx625JDZZreS+huC0rHc
Vj157hDEtbsj6fN4TZeAnmZUfOvmZZYaIXsBvjTAbEi+ayD5jMt5pffyrNEf31iS
fhfHUzVcqjGDtgU7HQzEJAlb58JSXmhj080PzuoPWWLnmK6pi4vmL0yxKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDYi3pJRW+WNmmoS/bA8UGcqdJFsMB8GA1UdIwQY
MBaAFOrMO6vVPETNdhRa+H1CNwMX6NDBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnN3N3E5VThSTTEyRkZyNGZVSTNBeGZvME1FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS8yMGQxZDUtMzE0MS00MGIxLThmMzUt
M2I0YzUwMTkyOWM1LzEvNnN3N3E5VThSTTEyRkZyNGZVSTNBeGZvME1FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS8yMGQxZDUtMzE0MS00MGIxLThmMzUtM2I0YzUwMTkyOWM1
LzEvNnN3N3E5VThSTTEyRkZyNGZVSTNBeGZvME1FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsMU2eTDC
ky0vt1s9uuiwqhSg1wJOGSbhkeSlhlqcoE+DNOJtAQQqR5BcJquIkjY2Zr6UpSs9
czMD2Ux1n2Cu6Eb0H53/CT5UzulBwpXi/p6jP+SSTAUQtFcHcmZVDIHhvljmjiHT
ksun6nLLtTQY7bLreg/VJ+8dwxpUxUJ2fGhZPAyF0I4iLkTLDNBLX4Bg7nkLwd1q
2QVuSuCHe8BJ6YGPof4aP1uJQmsPj/7WWAMz0QjLD7KipjhYVvVQOpUft7oefK4L
0xB/7hi58k1SBJmDra2C+o+UpmzEtR2abNcqQVyrGOhIblgi2JX/Vlpv/1Gc9cBr
miWfTrpYNFkp+A==
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:35:38 2025 by rpki-client