
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/d83576-c685-4624-9d88-9911fa984e2e/1/6M8Vv2sfJpDyCQHRiW4tiA_oiG4.mft
File: 6M8Vv2sfJpDyCQHRiW4tiA_oiG4.mft (raw, json)
Hash identifier: xR/q4NFlFnvLninmgX5brjTHwTQllRskcpdWgyeaj4U=
Subject key identifier: D0:EA:07:EC:20:E9:9A:76:B8:D7:F6:81:EA:75:5B:A8:D4:68:6C:B0
Authority key identifier: E8:CF:15:BF:6B:1F:26:90:F2:09:01:D1:89:6E:2D:88:0F:E8:88:6E
Certificate issuer: /CN=e8cf15bf6b1f2690f20901d1896e2d880fe8886e
Certificate serial: 019789C7207171C764394CF0CC3126FE5B39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6M8Vv2sfJpDyCQHRiW4tiA_oiG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/d83576-c685-4624-9d88-9911fa984e2e/1/6M8Vv2sfJpDyCQHRiW4tiA_oiG4.mft
Manifest number: 159E
Signing time: Thu 19 Jun 2025 20:00:17 +0000
Manifest this update: Thu 19 Jun 2025 20:00:17 +0000
Manifest next update: Fri 20 Jun 2025 20:00:17 +0000
Files and hashes: 1: 6M8Vv2sfJpDyCQHRiW4tiA_oiG4.crl (hash: peBgGipPSiJsMbgoVy8hWeJof1upaaTw6+b7niNkugI=)
2: CEi11oDah-Xj3CSyKJ8iomoOYoM.roa (hash: ez/wVHjqJzETmetoc7ih07UD25PAbuMs0U3dxKCFOXE=)
3: h_PujoF1idQej6mkI673sMCS4CI.roa (hash: gJAR6zsyEp9IfdpTVmdU+2Uly1ejVeeDkLflgAL2GD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/d83576-c685-4624-9d88-9911fa984e2e/1/6M8Vv2sfJpDyCQHRiW4tiA_oiG4.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/d83576-c685-4624-9d88-9911fa984e2e/1/6M8Vv2sfJpDyCQHRiW4tiA_oiG4.mft
rsync://rpki.ripe.net/repository/DEFAULT/6M8Vv2sfJpDyCQHRiW4tiA_oiG4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 19:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:89:c7:20:71:71:c7:64:39:4c:f0:cc:31:26:fe:5b:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8cf15bf6b1f2690f20901d1896e2d880fe8886e
Validity
Not Before: Jun 19 20:00:17 2025 GMT
Not After : Jun 20 20:00:17 2025 GMT
Subject: CN=d0ea07ec20e99a76b8d7f681ea755ba8d4686cb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:02:5b:b5:c5:7b:e2:f2:ed:05:bb:6d:8a:5f:
8e:b8:96:f5:c4:27:b3:ea:98:7c:bf:e2:27:99:82:
cc:7e:6b:78:90:fb:6d:88:70:5e:4a:2c:2c:9a:84:
3f:25:8b:ad:09:73:53:43:58:1e:e9:16:19:d4:31:
a9:73:10:25:39:8a:e8:2c:62:e6:aa:b6:41:76:8b:
44:f5:6c:77:cb:1d:2e:09:a9:21:89:3f:00:84:05:
52:3a:87:53:7d:99:f6:f5:a8:06:b0:1e:9e:51:cc:
85:b8:26:1e:a6:c6:fd:d2:cc:57:c7:93:02:4d:23:
ca:3b:a0:29:80:ae:59:05:d5:67:35:38:65:93:6c:
18:09:b7:cf:2d:c7:e5:6e:78:9f:af:63:c9:19:92:
a8:28:f8:98:cc:0c:90:82:b9:37:b1:9f:49:a3:48:
08:d6:c1:3a:bd:75:3f:9c:6f:a3:d9:1b:c1:98:8c:
b4:0c:0b:3b:49:f1:4d:fa:2f:e0:e7:ad:32:d5:d4:
b2:28:84:3a:a6:34:60:51:d4:17:cc:7d:4a:6b:39:
a5:a5:aa:d6:6a:88:7e:94:35:5d:80:d7:13:84:13:
92:0c:02:98:c0:d1:7f:d8:0c:dd:46:7b:84:5a:53:
8e:23:10:80:bc:a2:c6:f0:7b:7f:56:76:24:8b:4b:
17:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:EA:07:EC:20:E9:9A:76:B8:D7:F6:81:EA:75:5B:A8:D4:68:6C:B0
X509v3 Authority Key Identifier:
keyid:E8:CF:15:BF:6B:1F:26:90:F2:09:01:D1:89:6E:2D:88:0F:E8:88:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6M8Vv2sfJpDyCQHRiW4tiA_oiG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d83576-c685-4624-9d88-9911fa984e2e/1/6M8Vv2sfJpDyCQHRiW4tiA_oiG4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d83576-c685-4624-9d88-9911fa984e2e/1/6M8Vv2sfJpDyCQHRiW4tiA_oiG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:d7:7b:ab:77:e0:6c:1b:1d:de:18:62:bd:c2:d1:cb:55:4c:
61:67:07:7b:24:53:11:1c:99:bb:5f:69:02:66:23:2d:bf:41:
31:bd:c4:f0:17:7c:6c:56:14:49:a8:23:e1:06:ea:72:ba:22:
9b:02:e8:67:95:9a:0d:60:de:6c:a8:14:1a:7f:73:47:32:28:
3e:d8:16:58:70:28:bc:34:c3:f2:17:0d:ef:00:06:62:ce:9e:
df:b0:df:cc:68:77:df:48:74:b3:bd:e3:a7:c6:1f:6f:e0:61:
bc:6c:0b:be:98:67:3a:be:11:b8:cd:65:5b:7b:e0:23:88:bf:
96:07:3e:72:5f:cc:36:dd:41:03:9b:31:bc:db:c4:e8:3f:0b:
f3:b7:1e:d6:42:30:d3:49:5d:6c:84:e0:f7:e2:57:dc:38:5b:
17:80:a4:f8:31:1a:1a:2e:f8:e6:40:1e:a2:1b:f5:e9:b1:85:
69:4d:b9:f7:bf:03:d2:93:5e:f7:60:68:8b:f8:3c:10:30:73:
0e:76:21:81:31:7c:2c:50:a1:d4:b4:68:48:e1:8d:99:f8:46:
c0:ce:bd:ea:38:8c:45:b4:56:35:8e:c2:55:da:ea:4c:6e:f2:
7e:38:6e:44:9f:9f:39:51:a2:ab:d7:61:91:18:24:f9:f0:96:
4a:93:da:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZeJxyBxccdkOUzwzDEm/ls5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4Y2YxNWJmNmIxZjI2OTBmMjA5MDFkMTg5NmUyZDg4MGZl
ODg4NmUwHhcNMjUwNjE5MjAwMDE3WhcNMjUwNjIwMjAwMDE3WjAzMTEwLwYDVQQD
EyhkMGVhMDdlYzIwZTk5YTc2YjhkN2Y2ODFlYTc1NWJhOGQ0Njg2Y2IwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqAJbtcV74vLtBbttil+OuJb1xCez
6ph8v+InmYLMfmt4kPttiHBeSiwsmoQ/JYutCXNTQ1ge6RYZ1DGpcxAlOYroLGLm
qrZBdotE9Wx3yx0uCakhiT8AhAVSOodTfZn29agGsB6eUcyFuCYepsb90sxXx5MC
TSPKO6ApgK5ZBdVnNThlk2wYCbfPLcflbnifr2PJGZKoKPiYzAyQgrk3sZ9Jo0gI
1sE6vXU/nG+j2RvBmIy0DAs7SfFN+i/g560y1dSyKIQ6pjRgUdQXzH1KazmlparW
aoh+lDVdgNcThBOSDAKYwNF/2AzdRnuEWlOOIxCAvKLG8Ht/VnYki0sXRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNDqB+wg6Zp2uNf2gep1W6jUaGywMB8GA1UdIwQY
MBaAFOjPFb9rHyaQ8gkB0YluLYgP6IhuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNk04VnYyc2ZKcER5Q1FIUmlXNHRpQV9vaUc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9kODM1NzYtYzY4NS00NjI0LTlkODgt
OTkxMWZhOTg0ZTJlLzEvNk04VnYyc2ZKcER5Q1FIUmlXNHRpQV9vaUc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS9kODM1NzYtYzY4NS00NjI0LTlkODgtOTkxMWZhOTg0ZTJl
LzEvNk04VnYyc2ZKcER5Q1FIUmlXNHRpQV9vaUc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeNd7q3fg
bBsd3hhivcLRy1VMYWcHeyRTERyZu19pAmYjLb9BMb3E8Bd8bFYUSagj4Qbqcroi
mwLoZ5WaDWDebKgUGn9zRzIoPtgWWHAovDTD8hcN7wAGYs6e37DfzGh330h0s73j
p8Yfb+BhvGwLvphnOr4RuM1lW3vgI4i/lgc+cl/MNt1BA5sxvNvE6D8L87ce1kIw
00ldbITg9+JX3DhbF4Ck+DEaGi745kAeohv16bGFaU25978D0pNe92Boi/g8EDBz
DnYhgTF8LFCh1LRoSOGNmfhGwM696jiMRbRWNY7CVdrqTG7yfjhuRJ+fOVGiq9dh
kRgk+fCWSpPaVg==
-----END CERTIFICATE-----
Generated at Fri Jun 20 05:51:06 2025 by rpki-client