Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/742a04-17af-4f40-a140-604584895925/1/6Ed60hy3iRQzE8QLGfjMACPeiKY.mft
File: 6Ed60hy3iRQzE8QLGfjMACPeiKY.mft (raw, json)
Hash identifier: 86skP+7SO8UI+q8hivFYQnvLjQR/TGIctx8oBDR8siU=
Subject key identifier: 89:AD:6A:10:34:F1:7F:59:B9:79:31:1E:64:EF:39:F2:46:09:80:34
Authority key identifier: E8:47:7A:D2:1C:B7:89:14:33:13:C4:0B:19:F8:CC:00:23:DE:88:A6
Certificate issuer: /CN=e8477ad21cb789143313c40b19f8cc0023de88a6
Certificate serial: 019A5006F5097A7A0A0C69F519D19691FB07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Ed60hy3iRQzE8QLGfjMACPeiKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/742a04-17af-4f40-a140-604584895925/1/6Ed60hy3iRQzE8QLGfjMACPeiKY.mft
Manifest number: 01D3
Signing time: Tue 04 Nov 2025 18:00:24 +0000
Manifest this update: Tue 04 Nov 2025 18:00:24 +0000
Manifest next update: Wed 05 Nov 2025 18:00:24 +0000
Files and hashes: 1: 2M47-6eKALJ6FmiVAowRa7gLSUI.roa (hash: sTE5YWztn/a2MX2OSX/0Yz9OgI3CBWwdi/QI1zYZYUk=)
2: 6Ed60hy3iRQzE8QLGfjMACPeiKY.crl (hash: GJxuTTqmJsecjeut2n75EwX4OD3jOvMRP64mdhJ15eI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/742a04-17af-4f40-a140-604584895925/1/6Ed60hy3iRQzE8QLGfjMACPeiKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/742a04-17af-4f40-a140-604584895925/1/6Ed60hy3iRQzE8QLGfjMACPeiKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6Ed60hy3iRQzE8QLGfjMACPeiKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:06:f5:09:7a:7a:0a:0c:69:f5:19:d1:96:91:fb:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8477ad21cb789143313c40b19f8cc0023de88a6
Validity
Not Before: Nov 4 18:00:24 2025 GMT
Not After : Nov 5 18:00:24 2025 GMT
Subject: CN=89ad6a1034f17f59b979311e64ef39f246098034
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:62:d2:fb:f7:01:f5:e0:7f:34:67:73:67:3c:
db:50:86:31:71:94:55:3b:aa:74:2b:f4:e9:da:f9:
6d:5c:2e:9c:14:2d:2b:75:73:f2:c4:d1:df:cf:3d:
58:82:61:5c:79:00:a8:1c:dc:46:2c:86:4b:36:70:
52:d2:b4:78:7d:1d:41:53:ec:96:bc:48:3b:d3:80:
14:9d:55:e5:88:6d:22:b2:57:11:85:17:64:3d:1e:
3d:14:f2:9e:65:51:6a:c6:90:8c:8e:1f:99:9b:3a:
d8:d8:04:ff:6b:63:9e:37:e8:67:9b:30:e9:5b:ed:
11:1a:b9:f2:16:82:65:a5:ae:a7:84:01:43:19:0f:
b2:dc:2f:4e:30:93:03:52:41:b0:be:55:bc:70:46:
46:a9:af:6a:8a:74:8d:51:c2:01:f9:1d:92:78:d7:
83:b5:53:9a:cf:c8:64:a5:85:66:10:aa:1a:b3:56:
d2:c4:19:ab:6b:92:8e:c4:87:67:ee:30:d9:e0:e4:
94:57:8f:ec:de:ec:ad:f9:76:c1:ec:20:65:5d:d4:
6a:2f:49:01:75:67:b7:c4:17:2e:4c:7c:10:35:e2:
74:71:bd:39:69:c1:ff:97:0c:f2:a7:40:4c:ff:9e:
ff:3f:6f:63:35:44:8f:3a:d8:aa:28:aa:69:d3:6a:
ba:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:AD:6A:10:34:F1:7F:59:B9:79:31:1E:64:EF:39:F2:46:09:80:34
X509v3 Authority Key Identifier:
keyid:E8:47:7A:D2:1C:B7:89:14:33:13:C4:0B:19:F8:CC:00:23:DE:88:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Ed60hy3iRQzE8QLGfjMACPeiKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/742a04-17af-4f40-a140-604584895925/1/6Ed60hy3iRQzE8QLGfjMACPeiKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/742a04-17af-4f40-a140-604584895925/1/6Ed60hy3iRQzE8QLGfjMACPeiKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:be:80:ac:a4:d8:40:01:f6:bc:26:d3:89:48:bf:a8:81:51:
2f:00:60:ab:b6:f3:85:24:ec:be:e9:22:bb:36:ad:36:7d:df:
6d:66:7c:ab:6c:b9:7c:f9:f1:3d:81:d5:f0:6c:d7:60:c0:68:
54:c5:5d:5b:05:93:3b:b8:3c:ed:ca:07:ef:40:d1:bc:0e:3a:
14:3c:e2:69:aa:ee:b7:46:37:d2:b8:45:9e:11:a5:98:31:0f:
73:0a:04:16:31:c5:fa:f7:95:d9:93:86:f8:32:ea:5f:38:6a:
09:59:86:8a:bd:20:9c:de:d7:68:08:02:2f:a7:b9:6d:81:ca:
83:e1:1c:58:2d:d4:3d:4a:97:50:f5:4f:4f:2b:0c:fa:19:a4:
bd:71:78:73:03:a5:06:34:6d:59:0e:2f:a2:e1:09:20:dd:38:
8d:8e:0c:ff:4f:6f:b4:0f:f8:6d:aa:16:d2:75:52:d0:33:c7:
ae:11:4e:2f:6a:2a:dd:97:d5:4e:d5:2e:60:4b:40:98:2c:15:
66:40:8b:0f:e8:06:f6:fc:0e:83:08:05:c2:fb:1c:c2:4f:40:
89:ef:7c:5b:21:70:89:bf:27:c5:44:93:21:13:64:a2:30:23:
e1:a5:f2:9d:e5:17:c2:40:2c:93:26:42:3b:61:16:56:01:d8:
39:2e:1c:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQBvUJenoKDGn1GdGWkfsHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4NDc3YWQyMWNiNzg5MTQzMzEzYzQwYjE5ZjhjYzAwMjNk
ZTg4YTYwHhcNMjUxMTA0MTgwMDI0WhcNMjUxMTA1MTgwMDI0WjAzMTEwLwYDVQQD
Eyg4OWFkNmExMDM0ZjE3ZjU5Yjk3OTMxMWU2NGVmMzlmMjQ2MDk4MDM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWLS+/cB9eB/NGdzZzzbUIYxcZRV
O6p0K/Tp2vltXC6cFC0rdXPyxNHfzz1YgmFceQCoHNxGLIZLNnBS0rR4fR1BU+yW
vEg704AUnVXliG0islcRhRdkPR49FPKeZVFqxpCMjh+ZmzrY2AT/a2OeN+hnmzDp
W+0RGrnyFoJlpa6nhAFDGQ+y3C9OMJMDUkGwvlW8cEZGqa9qinSNUcIB+R2SeNeD
tVOaz8hkpYVmEKoas1bSxBmra5KOxIdn7jDZ4OSUV4/s3uyt+XbB7CBlXdRqL0kB
dWe3xBcuTHwQNeJ0cb05acH/lwzyp0BM/57/P29jNUSPOtiqKKpp02q6cwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFImtahA08X9ZuXkxHmTvOfJGCYA0MB8GA1UdIwQY
MBaAFOhHetIct4kUMxPECxn4zAAj3oimMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkVkNjBoeTNpUlF6RThRTEdmak1BQ1BlaUtZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi83NDJhMDQtMTdhZi00ZjQwLWExNDAt
NjA0NTg0ODk1OTI1LzEvNkVkNjBoeTNpUlF6RThRTEdmak1BQ1BlaUtZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi83NDJhMDQtMTdhZi00ZjQwLWExNDAtNjA0NTg0ODk1OTI1
LzEvNkVkNjBoeTNpUlF6RThRTEdmak1BQ1BlaUtZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhr6ArKTY
QAH2vCbTiUi/qIFRLwBgq7bzhSTsvukiuzatNn3fbWZ8q2y5fPnxPYHV8GzXYMBo
VMVdWwWTO7g87coH70DRvA46FDziaarut0Y30rhFnhGlmDEPcwoEFjHF+veV2ZOG
+DLqXzhqCVmGir0gnN7XaAgCL6e5bYHKg+EcWC3UPUqXUPVPTysM+hmkvXF4cwOl
BjRtWQ4vouEJIN04jY4M/09vtA/4baoW0nVS0DPHrhFOL2oq3ZfVTtUuYEtAmCwV
ZkCLD+gG9vwOgwgFwvscwk9Aie98WyFwib8nxUSTIRNkojAj4aXyneUXwkAskyZC
O2EWVgHYOS4cAw==
-----END CERTIFICATE-----
Generated at Wed Nov 5 04:05:35 2025 by rpki-client