Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/21417d-238b-45e2-a121-3beea39da8ca/1/6W3gIbqO3QcU7TEgxJhy6jzOioY.mft
File: 6W3gIbqO3QcU7TEgxJhy6jzOioY.mft (raw, json)
Hash identifier: a+GNRwKX6C1LlV0mko4WIhKAWuyhkMswEyjHXsQYBPM=
Subject key identifier: C6:8C:68:14:75:9D:4B:82:D8:0F:D0:00:28:DB:78:B8:19:B4:52:72
Authority key identifier: E9:6D:E0:21:BA:8E:DD:07:14:ED:31:20:C4:98:72:EA:3C:CE:8A:86
Certificate issuer: /CN=e96de021ba8edd0714ed3120c49872ea3cce8a86
Certificate serial: 019A4D7416E4E7FB8C8AEFC6136A6408EF67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6W3gIbqO3QcU7TEgxJhy6jzOioY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/21417d-238b-45e2-a121-3beea39da8ca/1/6W3gIbqO3QcU7TEgxJhy6jzOioY.mft
Manifest number: 1707
Signing time: Tue 04 Nov 2025 06:00:44 +0000
Manifest this update: Tue 04 Nov 2025 06:00:44 +0000
Manifest next update: Wed 05 Nov 2025 06:00:44 +0000
Files and hashes: 1: 6W3gIbqO3QcU7TEgxJhy6jzOioY.crl (hash: TzL3jJHKd7QReiK9T2hrghm/pDH1lLPdzJgXE+fqvQQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/21417d-238b-45e2-a121-3beea39da8ca/1/6W3gIbqO3QcU7TEgxJhy6jzOioY.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/21417d-238b-45e2-a121-3beea39da8ca/1/6W3gIbqO3QcU7TEgxJhy6jzOioY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6W3gIbqO3QcU7TEgxJhy6jzOioY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:16:e4:e7:fb:8c:8a:ef:c6:13:6a:64:08:ef:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e96de021ba8edd0714ed3120c49872ea3cce8a86
Validity
Not Before: Nov 4 06:00:44 2025 GMT
Not After : Nov 5 06:00:44 2025 GMT
Subject: CN=c68c6814759d4b82d80fd00028db78b819b45272
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:75:8c:44:a9:de:31:80:26:ae:6c:cf:f3:c0:
eb:c5:8e:e8:3a:5e:70:ee:79:4d:82:f7:a6:fa:db:
61:b7:f7:e8:78:11:67:4c:9e:de:44:d7:b7:19:4d:
9a:84:21:6a:4b:a8:3e:b2:3b:8d:84:85:6e:df:9b:
a0:23:67:ad:2a:bd:24:a0:89:b0:09:35:33:ec:1b:
dd:85:20:08:17:35:a8:10:e4:5f:db:5b:71:76:c9:
fa:db:2a:3d:98:37:e6:bd:c0:da:6b:2b:69:65:05:
99:a4:29:91:ce:50:57:5b:5b:46:3a:20:47:5f:46:
5d:e2:84:4c:77:7a:17:02:97:29:87:16:ed:a4:bd:
ac:3c:7a:ce:d6:46:21:84:a8:f4:5c:9d:5a:24:57:
1f:8b:99:4c:f3:a2:4e:d6:01:81:14:5b:54:9a:4a:
1e:da:50:cd:f0:c5:00:59:59:92:82:95:24:70:20:
d1:99:50:15:8c:5f:3e:73:05:ce:cf:70:c1:69:1c:
07:a1:03:f7:cb:d7:85:27:93:26:2e:d6:d4:ea:d7:
0a:9e:76:76:78:d5:01:a2:f7:c2:ac:f1:f0:4b:5e:
3c:d7:40:04:70:76:41:f5:e2:54:fc:f3:e3:44:f8:
6c:ef:d5:f0:7e:78:fc:9a:8d:39:c5:70:aa:b0:ca:
a6:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:8C:68:14:75:9D:4B:82:D8:0F:D0:00:28:DB:78:B8:19:B4:52:72
X509v3 Authority Key Identifier:
keyid:E9:6D:E0:21:BA:8E:DD:07:14:ED:31:20:C4:98:72:EA:3C:CE:8A:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6W3gIbqO3QcU7TEgxJhy6jzOioY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/21417d-238b-45e2-a121-3beea39da8ca/1/6W3gIbqO3QcU7TEgxJhy6jzOioY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/21417d-238b-45e2-a121-3beea39da8ca/1/6W3gIbqO3QcU7TEgxJhy6jzOioY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:62:fe:63:63:f6:85:00:4c:c9:4f:3f:07:e4:6d:ba:66:55:
c1:22:ae:c3:7f:3c:30:38:23:93:bc:48:69:8a:dd:7c:c7:e5:
0a:ae:c7:ff:97:29:ca:b6:1e:48:12:eb:c3:4d:7f:cf:6e:f7:
2c:6f:d1:63:bc:72:0a:b1:3c:75:c8:d0:99:26:3e:7f:64:e5:
17:c4:e9:54:e6:c6:94:21:f9:84:be:52:1b:3a:b5:03:e4:d7:
6a:51:a1:ed:85:8b:f4:ac:82:fd:be:53:d0:21:57:e2:19:02:
3c:ce:19:be:c3:d3:74:ab:1b:27:4e:e5:93:f2:86:29:02:bb:
f7:15:01:ae:46:d7:f3:31:7f:e0:a6:97:bc:91:91:1b:78:c2:
e6:a4:6c:8f:ca:b7:b5:79:a6:97:80:67:3e:ea:11:b8:19:0a:
26:ec:43:58:57:c3:4b:33:ec:a4:26:0b:45:c3:b1:af:3a:b3:
6e:f7:30:22:1c:9c:13:72:92:e1:65:aa:06:2a:52:22:5c:08:
01:dd:07:e9:da:65:d6:1c:ca:38:3c:2a:f6:30:ab:77:4c:ff:
7c:09:d6:e0:ea:db:93:8f:0b:84:07:93:5b:02:dd:dd:3a:ce:
d4:bf:3c:c8:74:a6:46:7d:e0:6b:c9:54:42:3d:16:c7:c8:29:
98:b0:7b:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNdBbk5/uMiu/GE2pkCO9nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5NmRlMDIxYmE4ZWRkMDcxNGVkMzEyMGM0OTg3MmVhM2Nj
ZThhODYwHhcNMjUxMTA0MDYwMDQ0WhcNMjUxMTA1MDYwMDQ0WjAzMTEwLwYDVQQD
EyhjNjhjNjgxNDc1OWQ0YjgyZDgwZmQwMDAyOGRiNzhiODE5YjQ1MjcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2XWMRKneMYAmrmzP88DrxY7oOl5w
7nlNgvem+ttht/foeBFnTJ7eRNe3GU2ahCFqS6g+sjuNhIVu35ugI2etKr0koImw
CTUz7BvdhSAIFzWoEORf21txdsn62yo9mDfmvcDaaytpZQWZpCmRzlBXW1tGOiBH
X0Zd4oRMd3oXApcphxbtpL2sPHrO1kYhhKj0XJ1aJFcfi5lM86JO1gGBFFtUmkoe
2lDN8MUAWVmSgpUkcCDRmVAVjF8+cwXOz3DBaRwHoQP3y9eFJ5MmLtbU6tcKnnZ2
eNUBovfCrPHwS14810AEcHZB9eJU/PPjRPhs79Xwfnj8mo05xXCqsMqmbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMaMaBR1nUuC2A/QACjbeLgZtFJyMB8GA1UdIwQY
MBaAFOlt4CG6jt0HFO0xIMSYcuo8zoqGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlczZ0licU8zUWNVN1RFZ3hKaHk2anpPaW9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8yMTQxN2QtMjM4Yi00NWUyLWExMjEt
M2JlZWEzOWRhOGNhLzEvNlczZ0licU8zUWNVN1RFZ3hKaHk2anpPaW9ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS8yMTQxN2QtMjM4Yi00NWUyLWExMjEtM2JlZWEzOWRhOGNh
LzEvNlczZ0licU8zUWNVN1RFZ3hKaHk2anpPaW9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeWL+Y2P2
hQBMyU8/B+RtumZVwSKuw388MDgjk7xIaYrdfMflCq7H/5cpyrYeSBLrw01/z273
LG/RY7xyCrE8dcjQmSY+f2TlF8TpVObGlCH5hL5SGzq1A+TXalGh7YWL9KyC/b5T
0CFX4hkCPM4ZvsPTdKsbJ07lk/KGKQK79xUBrkbX8zF/4KaXvJGRG3jC5qRsj8q3
tXmml4BnPuoRuBkKJuxDWFfDSzPspCYLRcOxrzqzbvcwIhycE3KS4WWqBipSIlwI
Ad0H6dpl1hzKODwq9jCrd0z/fAnW4Orbk48LhAeTWwLd3TrO1L88yHSmRn3ga8lU
Qj0Wx8gpmLB7Ig==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:42:34 2025 by rpki-client