Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/a9db23-a67c-4f8b-8adf-70522d814e0c/1/6TC3bnIfXYNO1T5JKE2XkDOSEcg.mft
File: 6TC3bnIfXYNO1T5JKE2XkDOSEcg.mft (raw, json)
Hash identifier: 28XlbjZ/EKs1kMQDLo5yTZCO3QdZRBefVt7wddtUvvA=
Subject key identifier: 22:63:28:86:61:F1:FE:2F:F1:FB:64:22:2A:21:EE:5D:6F:89:E4:71
Authority key identifier: E9:30:B7:6E:72:1F:5D:83:4E:D5:3E:49:28:4D:97:90:33:92:11:C8
Certificate issuer: /CN=e930b76e721f5d834ed53e49284d9790339211c8
Certificate serial: 019A52D10ACC3D36F081430E2FE8225562FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6TC3bnIfXYNO1T5JKE2XkDOSEcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/a9db23-a67c-4f8b-8adf-70522d814e0c/1/6TC3bnIfXYNO1T5JKE2XkDOSEcg.mft
Manifest number: 01D8
Signing time: Wed 05 Nov 2025 07:00:22 +0000
Manifest this update: Wed 05 Nov 2025 07:00:22 +0000
Manifest next update: Thu 06 Nov 2025 07:00:22 +0000
Files and hashes: 1: 6TC3bnIfXYNO1T5JKE2XkDOSEcg.crl (hash: EXIKfY30RnCd/T3wfuwOSkpgDpccCMYqP9PiGipYFRE=)
2: xQC18Di_ctqtLNxYWbMtSnGwz5c.roa (hash: KunZ5Y32qy4l7Ei6v6cWQmt4QYuY/vwQLNAYzWY5uXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/a9db23-a67c-4f8b-8adf-70522d814e0c/1/6TC3bnIfXYNO1T5JKE2XkDOSEcg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/a9db23-a67c-4f8b-8adf-70522d814e0c/1/6TC3bnIfXYNO1T5JKE2XkDOSEcg.mft
rsync://rpki.ripe.net/repository/DEFAULT/6TC3bnIfXYNO1T5JKE2XkDOSEcg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 07:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d1:0a:cc:3d:36:f0:81:43:0e:2f:e8:22:55:62:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e930b76e721f5d834ed53e49284d9790339211c8
Validity
Not Before: Nov 5 07:00:22 2025 GMT
Not After : Nov 6 07:00:22 2025 GMT
Subject: CN=2263288661f1fe2ff1fb64222a21ee5d6f89e471
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:45:bd:c1:70:b9:80:5b:eb:91:08:61:58:7a:
58:9c:f6:e7:e1:c0:f4:9c:e1:ea:aa:14:0b:8b:00:
7b:87:13:e1:56:9e:9e:7d:47:af:26:f3:9b:a6:80:
34:1f:b6:c1:3f:3a:98:bb:70:77:74:37:4c:8a:97:
05:fb:bb:e3:ad:ab:c1:6a:e7:f5:88:de:f5:5b:bb:
ab:59:33:96:3e:b7:13:22:a0:18:48:91:ea:49:50:
47:f5:0d:ab:66:5a:f5:5d:5e:41:dc:9b:71:f0:2e:
62:c5:aa:5c:2b:ca:60:5c:84:fc:66:f8:4e:04:03:
cf:a4:d1:79:82:d5:a9:d7:f5:95:77:d2:6d:a0:f1:
be:3c:10:f5:cf:8b:8c:a6:a1:00:cb:2b:2d:13:d6:
85:47:65:60:53:7c:c1:64:8a:6a:cb:97:87:c7:7d:
51:3f:73:3b:d8:28:e9:42:24:c1:ca:a2:b6:b7:04:
61:2b:3b:61:a1:fd:27:ad:4b:c7:a1:4c:ac:e6:74:
b5:b2:12:53:10:04:19:c3:ba:67:b6:ce:a2:5c:7d:
61:08:a9:3b:86:00:7b:c7:10:d4:8b:62:ed:bb:b4:
e7:8b:2d:c9:f3:ff:43:cb:c7:6c:12:43:25:54:a0:
2e:16:65:18:3b:fb:fd:b9:58:b1:0b:9b:0f:11:a3:
c4:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:63:28:86:61:F1:FE:2F:F1:FB:64:22:2A:21:EE:5D:6F:89:E4:71
X509v3 Authority Key Identifier:
keyid:E9:30:B7:6E:72:1F:5D:83:4E:D5:3E:49:28:4D:97:90:33:92:11:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6TC3bnIfXYNO1T5JKE2XkDOSEcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a9db23-a67c-4f8b-8adf-70522d814e0c/1/6TC3bnIfXYNO1T5JKE2XkDOSEcg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a9db23-a67c-4f8b-8adf-70522d814e0c/1/6TC3bnIfXYNO1T5JKE2XkDOSEcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:e2:63:61:0d:04:f4:44:25:44:8a:be:a0:2c:01:75:03:20:
1a:2b:16:3d:8b:5c:4d:04:ec:6d:35:b7:b4:a7:07:6e:60:93:
88:b4:16:0c:4b:e6:0f:cb:e3:55:92:01:56:4b:76:8f:44:7a:
f4:a1:ad:e5:4f:3c:d9:db:ae:6b:27:a0:cf:27:bb:90:bd:39:
70:83:d4:8f:d8:c4:9b:5b:5c:df:b1:90:c4:9d:0c:11:a0:9d:
1a:87:9f:d0:8a:f4:0c:29:9b:84:c9:e0:1a:83:2a:f2:16:70:
19:f7:cf:b8:cf:7b:ef:bd:19:4f:a0:bc:07:27:af:f7:da:3b:
b5:79:2d:70:50:28:ab:bd:f0:a7:6d:87:99:2f:2f:99:73:34:
e5:2d:78:87:bc:65:6e:ec:d6:43:ac:9d:cd:3d:4b:46:be:ac:
25:2e:f1:c0:6b:ee:e6:d7:93:b5:d3:54:24:a9:04:ff:6c:48:
07:44:75:1a:29:2d:38:9f:3c:c8:2e:85:49:a5:96:75:a4:8e:
4b:72:af:c6:3b:62:9c:ad:c4:9d:c0:2b:46:86:79:f5:9b:a5:
41:ac:e8:bd:c0:cd:43:6a:5f:12:c6:59:e6:30:bc:a2:a4:92:
72:1d:0a:24:4f:c3:94:42:7a:aa:62:b7:91:e2:68:46:07:cc:
b0:f6:f2:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpS0QrMPTbwgUMOL+giVWL8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5MzBiNzZlNzIxZjVkODM0ZWQ1M2U0OTI4NGQ5NzkwMzM5
MjExYzgwHhcNMjUxMTA1MDcwMDIyWhcNMjUxMTA2MDcwMDIyWjAzMTEwLwYDVQQD
EygyMjYzMjg4NjYxZjFmZTJmZjFmYjY0MjIyYTIxZWU1ZDZmODllNDcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApkW9wXC5gFvrkQhhWHpYnPbn4cD0
nOHqqhQLiwB7hxPhVp6efUevJvObpoA0H7bBPzqYu3B3dDdMipcF+7vjravBauf1
iN71W7urWTOWPrcTIqAYSJHqSVBH9Q2rZlr1XV5B3Jtx8C5ixapcK8pgXIT8ZvhO
BAPPpNF5gtWp1/WVd9JtoPG+PBD1z4uMpqEAyystE9aFR2VgU3zBZIpqy5eHx31R
P3M72CjpQiTByqK2twRhKzthof0nrUvHoUys5nS1shJTEAQZw7pnts6iXH1hCKk7
hgB7xxDUi2Ltu7Tniy3J8/9Dy8dsEkMlVKAuFmUYO/v9uVixC5sPEaPEfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCJjKIZh8f4v8ftkIioh7l1vieRxMB8GA1UdIwQY
MBaAFOkwt25yH12DTtU+SShNl5AzkhHIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlRDM2JuSWZYWU5PMVQ1SktFMlhrRE9TRWNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9hOWRiMjMtYTY3Yy00ZjhiLThhZGYt
NzA1MjJkODE0ZTBjLzEvNlRDM2JuSWZYWU5PMVQ1SktFMlhrRE9TRWNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS9hOWRiMjMtYTY3Yy00ZjhiLThhZGYtNzA1MjJkODE0ZTBj
LzEvNlRDM2JuSWZYWU5PMVQ1SktFMlhrRE9TRWNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj+JjYQ0E
9EQlRIq+oCwBdQMgGisWPYtcTQTsbTW3tKcHbmCTiLQWDEvmD8vjVZIBVkt2j0R6
9KGt5U882duuayegzye7kL05cIPUj9jEm1tc37GQxJ0MEaCdGoef0Ir0DCmbhMng
GoMq8hZwGffPuM97770ZT6C8Byev99o7tXktcFAoq73wp22HmS8vmXM05S14h7xl
buzWQ6ydzT1LRr6sJS7xwGvu5teTtdNUJKkE/2xIB0R1GiktOJ88yC6FSaWWdaSO
S3KvxjtinK3EncArRoZ59ZulQazovcDNQ2pfEsZZ5jC8oqSSch0KJE/DlEJ6qmK3
keJoRgfMsPbyJQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 14:06:26 2025 by rpki-client