Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/c42160-d6f4-482c-bf62-62140b202eb4/1/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.mft
File: 6nUDuD-gmnW8uRB1QA-DB6ZnuO0.mft (raw, json)
Hash identifier: GdT5/AesMlIWzDdBqMLeVTsDuS6MCxKyH1FBfVi6Kto=
Subject key identifier: D3:DF:26:46:CC:1A:A1:6D:FD:F9:17:62:DC:09:F3:25:F4:E4:58:81
Authority key identifier: EA:75:03:B8:3F:A0:9A:75:BC:B9:10:75:40:0F:83:07:A6:67:B8:ED
Certificate issuer: /CN=ea7503b83fa09a75bcb91075400f8307a667b8ed
Certificate serial: 019A51F5D78EFB62B48732526D0B37254069
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/c42160-d6f4-482c-bf62-62140b202eb4/1/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.mft
Manifest number: 0E04
Signing time: Wed 05 Nov 2025 03:00:57 +0000
Manifest this update: Wed 05 Nov 2025 03:00:57 +0000
Manifest next update: Thu 06 Nov 2025 03:00:57 +0000
Files and hashes: 1: 534vF5sjkwJDGuUSMSbyeoXyx-w.roa (hash: yaE3+RBNj5kJXWkdpo0vdtCXgmh99gzWa0o0cozuQ7M=)
2: 6nUDuD-gmnW8uRB1QA-DB6ZnuO0.crl (hash: 53Uc2/LbxN1ChaoVwE6JAhC4A1qJTjtKIv3L2MqWIlk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/c42160-d6f4-482c-bf62-62140b202eb4/1/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/c42160-d6f4-482c-bf62-62140b202eb4/1/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.mft
rsync://rpki.ripe.net/repository/DEFAULT/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:f5:d7:8e:fb:62:b4:87:32:52:6d:0b:37:25:40:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea7503b83fa09a75bcb91075400f8307a667b8ed
Validity
Not Before: Nov 5 03:00:57 2025 GMT
Not After : Nov 6 03:00:57 2025 GMT
Subject: CN=d3df2646cc1aa16dfdf91762dc09f325f4e45881
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:22:c2:e0:a6:b9:82:15:ee:cc:06:23:d8:e4:
b5:70:f5:f0:b7:79:ee:89:09:0f:92:7b:da:ab:81:
1b:79:e3:48:28:02:1f:eb:b7:5c:2f:2e:26:09:7e:
35:62:7e:48:f7:fa:e1:47:8b:2b:a0:39:bc:0b:2b:
44:76:40:c6:85:bd:7f:42:6f:0a:0a:2c:1d:ba:34:
5d:5e:77:9b:8e:85:40:46:94:f5:52:72:a8:a2:91:
63:8a:d8:f8:13:d7:0f:5c:94:0d:0b:e1:fe:70:36:
23:41:c3:1a:52:40:5f:7e:52:6b:8f:99:4b:99:18:
fc:21:b9:b5:5b:9e:f1:88:7f:d9:e8:32:af:2c:f2:
df:97:16:5e:bf:89:67:8e:b9:96:a6:75:30:18:c3:
6b:48:0b:39:05:28:aa:39:f2:da:a5:bb:4d:c9:0b:
db:99:42:dd:bd:51:b6:21:63:3c:3c:cb:ed:3c:af:
dc:02:b0:e2:a2:18:6a:eb:f2:98:22:ba:e8:b5:8a:
e5:c0:80:df:b6:54:ba:9d:87:a6:0a:b9:f5:f3:4c:
8f:de:cc:9f:67:87:66:82:b5:78:d5:d7:b4:1e:c8:
48:95:4e:10:6c:fa:1d:a6:c7:d9:18:ee:1b:c3:0d:
e9:69:38:75:80:b8:cc:62:19:7c:41:00:a1:63:11:
01:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:DF:26:46:CC:1A:A1:6D:FD:F9:17:62:DC:09:F3:25:F4:E4:58:81
X509v3 Authority Key Identifier:
keyid:EA:75:03:B8:3F:A0:9A:75:BC:B9:10:75:40:0F:83:07:A6:67:B8:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c42160-d6f4-482c-bf62-62140b202eb4/1/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c42160-d6f4-482c-bf62-62140b202eb4/1/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:4c:41:f2:df:8f:97:d7:af:8e:e1:05:b0:8b:cb:2c:66:bf:
0f:2e:98:09:40:70:da:72:de:2c:65:11:a5:05:d8:e3:51:0a:
03:cd:88:4a:bd:98:cd:87:23:2c:22:15:a7:5c:a2:92:f3:c4:
c2:38:8c:9f:04:dc:c1:4a:57:0b:6d:b9:a9:ad:5b:ca:49:01:
bf:0f:9b:7c:bb:6d:dc:f6:58:77:6d:8a:7e:ee:86:f3:cf:ec:
bb:14:3a:a3:0e:79:b8:9a:53:0e:8c:a7:33:24:cb:a7:7f:49:
76:a2:b2:7f:a5:be:1f:ef:82:93:8e:76:4a:dc:fd:94:9f:fa:
c3:d2:09:a8:da:d2:ef:06:bf:69:d5:dd:38:5a:2f:51:8d:9f:
3c:b2:34:06:2c:fd:43:6b:12:1e:d0:fb:98:61:2e:24:9c:b1:
66:b9:bc:db:a0:0e:a4:a1:84:70:1a:a0:1b:fc:70:b5:9e:d4:
e5:8c:2b:d1:88:80:83:7d:88:11:20:c0:b1:90:ba:49:09:45:
54:80:83:40:00:fb:1e:09:d7:21:50:04:7a:96:02:97:47:9b:
69:b1:c3:68:a6:28:c2:d6:c0:a2:3e:72:6d:4f:e6:f5:15:57:
29:9e:25:28:9f:a0:75:fc:36:be:4d:f4:0c:aa:67:06:03:20:
cd:a2:f5:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpR9deO+2K0hzJSbQs3JUBpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhNzUwM2I4M2ZhMDlhNzViY2I5MTA3NTQwMGY4MzA3YTY2
N2I4ZWQwHhcNMjUxMTA1MDMwMDU3WhcNMjUxMTA2MDMwMDU3WjAzMTEwLwYDVQQD
EyhkM2RmMjY0NmNjMWFhMTZkZmRmOTE3NjJkYzA5ZjMyNWY0ZTQ1ODgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwiLC4Ka5ghXuzAYj2OS1cPXwt3nu
iQkPknvaq4EbeeNIKAIf67dcLy4mCX41Yn5I9/rhR4sroDm8CytEdkDGhb1/Qm8K
CiwdujRdXnebjoVARpT1UnKoopFjitj4E9cPXJQNC+H+cDYjQcMaUkBfflJrj5lL
mRj8Ibm1W57xiH/Z6DKvLPLflxZev4lnjrmWpnUwGMNrSAs5BSiqOfLapbtNyQvb
mULdvVG2IWM8PMvtPK/cArDiohhq6/KYIrrotYrlwIDftlS6nYemCrn180yP3syf
Z4dmgrV41de0HshIlU4QbPodpsfZGO4bww3paTh1gLjMYhl8QQChYxEBEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNPfJkbMGqFt/fkXYtwJ8yX05FiBMB8GA1UdIwQY
MBaAFOp1A7g/oJp1vLkQdUAPgwemZ7jtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNm5VRHVELWdtblc4dVJCMVFBLURCNlpudU8wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9jNDIxNjAtZDZmNC00ODJjLWJmNjIt
NjIxNDBiMjAyZWI0LzEvNm5VRHVELWdtblc4dVJCMVFBLURCNlpudU8wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS9jNDIxNjAtZDZmNC00ODJjLWJmNjItNjIxNDBiMjAyZWI0
LzEvNm5VRHVELWdtblc4dVJCMVFBLURCNlpudU8wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsUxB8t+P
l9evjuEFsIvLLGa/Dy6YCUBw2nLeLGURpQXY41EKA82ISr2YzYcjLCIVp1yikvPE
wjiMnwTcwUpXC225qa1bykkBvw+bfLtt3PZYd22Kfu6G88/suxQ6ow55uJpTDoyn
MyTLp39JdqKyf6W+H++Ck452Stz9lJ/6w9IJqNrS7wa/adXdOFovUY2fPLI0Biz9
Q2sSHtD7mGEuJJyxZrm826AOpKGEcBqgG/xwtZ7U5Ywr0YiAg32IESDAsZC6SQlF
VICDQAD7HgnXIVAEepYCl0ebabHDaKYowtbAoj5ybU/m9RVXKZ4lKJ+gdfw2vk30
DKpnBgMgzaL1wQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:44:24 2025 by rpki-client