Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/787a96-fb0d-432a-8428-710ef47732b0/1/6QUkmbAAPqDurqJCYzjDTgv4_c8.mft
File: 6QUkmbAAPqDurqJCYzjDTgv4_c8.mft (raw, json)
Hash identifier: 8YfsndHqMh8JKDXx2+1YS993FhjzL57qCTX7ggbBGBY=
Subject key identifier: 36:C5:2C:38:6A:FB:84:28:A1:6C:D1:A5:DF:67:00:83:56:0D:AD:A9
Authority key identifier: E9:05:24:99:B0:00:3E:A0:EE:AE:A2:42:63:38:C3:4E:0B:F8:FD:CF
Certificate issuer: /CN=e9052499b0003ea0eeaea2426338c34e0bf8fdcf
Certificate serial: 019A4F6227A04CB42CA843D57681188F654B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6QUkmbAAPqDurqJCYzjDTgv4_c8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/787a96-fb0d-432a-8428-710ef47732b0/1/6QUkmbAAPqDurqJCYzjDTgv4_c8.mft
Manifest number: 0AF8
Signing time: Tue 04 Nov 2025 15:00:23 +0000
Manifest this update: Tue 04 Nov 2025 15:00:23 +0000
Manifest next update: Wed 05 Nov 2025 15:00:23 +0000
Files and hashes: 1: 53gBiMV-U5T_UTNr_H6y2uJN32c.roa (hash: loF7sBRMOPze87N7XZhvPgafCESVBxbr6i5uTn+lW9k=)
2: 6QUkmbAAPqDurqJCYzjDTgv4_c8.crl (hash: AX/dSMGoJu1BENrvwVUIUzfvLTdExFF0bcMcrkfDFGc=)
3: lUuN68-IxOYTjJomy5kGo9veb00.roa (hash: IB0rOxo9mML04bmfaPFamlA+rNBljWr4GfuyYt2d/RU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/787a96-fb0d-432a-8428-710ef47732b0/1/6QUkmbAAPqDurqJCYzjDTgv4_c8.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/787a96-fb0d-432a-8428-710ef47732b0/1/6QUkmbAAPqDurqJCYzjDTgv4_c8.mft
rsync://rpki.ripe.net/repository/DEFAULT/6QUkmbAAPqDurqJCYzjDTgv4_c8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:27:a0:4c:b4:2c:a8:43:d5:76:81:18:8f:65:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9052499b0003ea0eeaea2426338c34e0bf8fdcf
Validity
Not Before: Nov 4 15:00:23 2025 GMT
Not After : Nov 5 15:00:23 2025 GMT
Subject: CN=36c52c386afb8428a16cd1a5df670083560dada9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:83:bc:e6:c8:ac:45:d7:6f:04:2d:42:eb:81:
57:c8:08:52:b9:b6:6c:b1:25:bf:25:7a:d4:e3:cf:
fe:06:6d:87:5d:77:a7:26:ef:a1:6e:e0:8e:d8:d6:
13:23:9d:6a:ce:cf:b7:76:db:04:9b:2f:c2:68:8a:
92:f8:80:e4:f4:75:19:87:26:a4:10:3b:e8:e1:97:
cb:99:cc:f6:15:38:25:24:61:39:b2:d3:19:c1:ae:
1d:0a:28:00:e7:3b:14:37:3e:02:1c:b1:86:36:3e:
2a:b1:2b:b8:ff:b6:07:e3:ce:e5:86:f9:59:9a:c3:
06:7c:32:32:ff:ea:ec:8e:c5:ba:ba:5a:d1:e0:c0:
13:70:09:e5:a2:77:41:33:59:77:fe:0f:68:86:a4:
01:80:68:fa:ca:3e:2f:15:0b:44:e3:f8:ed:2d:0e:
e2:3d:20:bc:76:f0:fb:8e:f6:1e:22:26:84:94:88:
f0:a7:ec:a2:d3:a4:a4:43:e7:8d:95:d8:b0:d3:20:
d7:92:93:2c:99:32:69:ca:7a:de:2d:04:94:cd:19:
99:c3:66:db:e4:9b:8e:78:a1:5a:b6:f0:b9:10:56:
5d:61:a8:95:05:d9:27:98:e2:d6:f6:d9:98:fc:dd:
87:9b:90:e7:03:ed:33:46:1e:33:57:0d:1b:21:cc:
9e:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:C5:2C:38:6A:FB:84:28:A1:6C:D1:A5:DF:67:00:83:56:0D:AD:A9
X509v3 Authority Key Identifier:
keyid:E9:05:24:99:B0:00:3E:A0:EE:AE:A2:42:63:38:C3:4E:0B:F8:FD:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6QUkmbAAPqDurqJCYzjDTgv4_c8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/787a96-fb0d-432a-8428-710ef47732b0/1/6QUkmbAAPqDurqJCYzjDTgv4_c8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/787a96-fb0d-432a-8428-710ef47732b0/1/6QUkmbAAPqDurqJCYzjDTgv4_c8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:5d:ed:bd:2a:46:b2:f6:5d:64:6d:81:9b:3c:4d:8d:a1:ca:
32:b9:6d:21:b8:24:8c:c7:55:c1:60:aa:15:50:91:96:f7:8c:
5a:1c:f2:28:e4:56:14:c5:30:66:92:54:d9:81:06:f8:1c:57:
af:44:54:e1:03:21:64:a4:ac:86:b0:9a:0a:a2:60:22:9b:73:
92:8f:08:2f:50:37:da:31:22:a8:0a:a0:a6:20:b9:f1:94:0f:
d8:1d:e0:25:a7:0d:96:26:59:90:2e:eb:e5:9f:6f:86:0c:80:
48:e4:3b:6f:6a:4e:f8:35:1c:b4:d7:ef:4b:eb:da:6f:27:22:
9d:62:24:71:88:a1:21:5b:c2:d7:d8:db:16:a8:51:d4:fd:5a:
4d:c8:e1:b3:0a:73:e3:47:f1:fc:f9:95:0a:8b:d0:98:1c:25:
8e:ce:1f:e0:3f:60:a1:40:fc:73:30:68:4b:a5:40:1b:2c:ff:
5f:bf:54:7d:86:79:b8:3b:3a:7d:49:b0:7a:af:ba:4b:38:e2:
5f:a2:05:a5:52:0a:af:5a:85:bd:03:51:a3:a5:96:73:22:a5:
16:0f:7a:1f:67:2a:dd:1d:e4:67:8a:99:f6:a0:7d:b6:25:03:
e6:a6:48:f0:1c:a9:50:ea:9e:55:a7:55:b3:0f:1a:db:8f:a2:
37:90:ad:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPYiegTLQsqEPVdoEYj2VLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5MDUyNDk5YjAwMDNlYTBlZWFlYTI0MjYzMzhjMzRlMGJm
OGZkY2YwHhcNMjUxMTA0MTUwMDIzWhcNMjUxMTA1MTUwMDIzWjAzMTEwLwYDVQQD
EygzNmM1MmMzODZhZmI4NDI4YTE2Y2QxYTVkZjY3MDA4MzU2MGRhZGE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy4O85sisRddvBC1C64FXyAhSubZs
sSW/JXrU48/+Bm2HXXenJu+hbuCO2NYTI51qzs+3dtsEmy/CaIqS+IDk9HUZhyak
EDvo4ZfLmcz2FTglJGE5stMZwa4dCigA5zsUNz4CHLGGNj4qsSu4/7YH487lhvlZ
msMGfDIy/+rsjsW6ulrR4MATcAnlondBM1l3/g9ohqQBgGj6yj4vFQtE4/jtLQ7i
PSC8dvD7jvYeIiaElIjwp+yi06SkQ+eNldiw0yDXkpMsmTJpynreLQSUzRmZw2bb
5JuOeKFatvC5EFZdYaiVBdknmOLW9tmY/N2Hm5DnA+0zRh4zVw0bIcyeawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDbFLDhq+4QooWzRpd9nAINWDa2pMB8GA1UdIwQY
MBaAFOkFJJmwAD6g7q6iQmM4w04L+P3PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlFVa21iQUFQcUR1cnFKQ1l6akRUZ3Y0X2M4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My83ODdhOTYtZmIwZC00MzJhLTg0Mjgt
NzEwZWY0NzczMmIwLzEvNlFVa21iQUFQcUR1cnFKQ1l6akRUZ3Y0X2M4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My83ODdhOTYtZmIwZC00MzJhLTg0MjgtNzEwZWY0NzczMmIw
LzEvNlFVa21iQUFQcUR1cnFKQ1l6akRUZ3Y0X2M4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq13tvSpG
svZdZG2BmzxNjaHKMrltIbgkjMdVwWCqFVCRlveMWhzyKORWFMUwZpJU2YEG+BxX
r0RU4QMhZKSshrCaCqJgIptzko8IL1A32jEiqAqgpiC58ZQP2B3gJacNliZZkC7r
5Z9vhgyASOQ7b2pO+DUctNfvS+vabycinWIkcYihIVvC19jbFqhR1P1aTcjhswpz
40fx/PmVCovQmBwljs4f4D9goUD8czBoS6VAGyz/X79UfYZ5uDs6fUmweq+6Szji
X6IFpVIKr1qFvQNRo6WWcyKlFg96H2cq3R3kZ4qZ9qB9tiUD5qZI8BypUOqeVadV
sw8a24+iN5Ct7Q==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:06:15 2025 by rpki-client