Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/9c1e83-e714-4c45-8685-586b6d047878/1/6pDtaEipyh7yAQ5jTOIbbJrd62I.mft
File: 6pDtaEipyh7yAQ5jTOIbbJrd62I.mft (raw, json)
Hash identifier: K/N+DAmrLj3RRfHitg993dWwYZo7eHvSgw/VcXAVrTY=
Subject key identifier: 16:01:74:5D:99:98:66:3A:94:97:79:DF:DC:4A:73:CD:5C:04:DA:FD
Authority key identifier: EA:90:ED:68:48:A9:CA:1E:F2:01:0E:63:4C:E2:1B:6C:9A:DD:EB:62
Certificate issuer: /CN=ea90ed6848a9ca1ef2010e634ce21b6c9addeb62
Certificate serial: 019A4E4F7E8C17CD60213A8049EEB5335CE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6pDtaEipyh7yAQ5jTOIbbJrd62I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/9c1e83-e714-4c45-8685-586b6d047878/1/6pDtaEipyh7yAQ5jTOIbbJrd62I.mft
Manifest number: 03CF
Signing time: Tue 04 Nov 2025 10:00:23 +0000
Manifest this update: Tue 04 Nov 2025 10:00:23 +0000
Manifest next update: Wed 05 Nov 2025 10:00:23 +0000
Files and hashes: 1: 6pDtaEipyh7yAQ5jTOIbbJrd62I.crl (hash: jCloIy86Q5O1pRDiUkl+/CPp+yRsdJTVJCiK3o72F0M=)
2: Ph-U5dqNHzdXtAC4s8SqLkw0HnU.roa (hash: Useq54Tz9psDJFY8ug181fsHtAqbkZCsf85Cmb59VeM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/9c1e83-e714-4c45-8685-586b6d047878/1/6pDtaEipyh7yAQ5jTOIbbJrd62I.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/9c1e83-e714-4c45-8685-586b6d047878/1/6pDtaEipyh7yAQ5jTOIbbJrd62I.mft
rsync://rpki.ripe.net/repository/DEFAULT/6pDtaEipyh7yAQ5jTOIbbJrd62I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:7e:8c:17:cd:60:21:3a:80:49:ee:b5:33:5c:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea90ed6848a9ca1ef2010e634ce21b6c9addeb62
Validity
Not Before: Nov 4 10:00:23 2025 GMT
Not After : Nov 5 10:00:23 2025 GMT
Subject: CN=1601745d9998663a949779dfdc4a73cd5c04dafd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:08:3d:20:1a:b1:81:d9:eb:2e:5f:d2:32:e2:
56:5e:9c:3e:04:80:42:c3:18:e6:1c:94:14:45:53:
be:23:50:ba:a2:c9:ff:5c:d6:5c:29:55:bf:34:67:
44:14:d4:70:58:38:6b:d9:e0:3a:25:75:9b:99:6f:
6e:88:56:70:ca:f9:04:2c:22:4d:b3:37:6e:2e:f7:
f7:b7:fb:07:8b:d9:4d:fc:aa:3f:6f:9a:f7:c8:27:
fb:d8:02:99:07:cc:44:9f:03:90:ba:55:74:ee:03:
81:d9:66:e9:27:f3:df:0e:44:ba:01:de:1d:b1:ae:
5c:f1:bf:48:7f:8c:65:ff:b1:82:42:c1:47:1a:91:
76:69:50:1b:38:24:ba:ce:76:bb:bd:41:45:98:9f:
41:e7:e2:7e:9f:54:98:64:41:f5:d6:df:ba:aa:61:
58:1f:4c:9b:87:c3:a1:53:ce:17:7d:45:6c:99:be:
d8:4a:36:e1:f3:0c:65:4a:2e:7b:0a:74:1d:03:c1:
36:89:2d:63:06:12:ae:e4:fa:1c:5c:9b:0f:f0:96:
3f:97:c4:39:26:ee:56:05:12:07:b6:b3:5e:68:83:
08:b5:87:4c:1c:0e:a2:8c:7b:8f:71:f0:85:2f:03:
c6:82:c6:c8:5b:63:49:e0:a3:20:1d:9c:fc:e3:a3:
f2:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:01:74:5D:99:98:66:3A:94:97:79:DF:DC:4A:73:CD:5C:04:DA:FD
X509v3 Authority Key Identifier:
keyid:EA:90:ED:68:48:A9:CA:1E:F2:01:0E:63:4C:E2:1B:6C:9A:DD:EB:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6pDtaEipyh7yAQ5jTOIbbJrd62I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/9c1e83-e714-4c45-8685-586b6d047878/1/6pDtaEipyh7yAQ5jTOIbbJrd62I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/9c1e83-e714-4c45-8685-586b6d047878/1/6pDtaEipyh7yAQ5jTOIbbJrd62I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:3e:ba:4e:d2:ee:e6:eb:75:86:11:10:5a:aa:f6:68:9e:a9:
18:74:4f:0d:58:cd:bb:5b:eb:20:38:57:41:bc:53:cf:4b:36:
74:4f:29:dd:9c:42:cd:bc:08:42:e0:45:a4:db:2e:05:bc:21:
93:a8:44:40:6b:bf:05:b5:36:01:06:7d:2d:a1:d0:90:22:9b:
c5:11:6e:d7:37:af:97:6b:94:d1:d3:51:6c:68:ce:bc:b9:7d:
f1:f3:e4:92:b6:83:84:fc:a7:48:0e:ec:61:ae:cc:e3:49:69:
b8:38:6b:3c:bb:f1:fb:6e:9c:63:77:35:fb:25:2c:b6:31:f1:
8c:7e:8d:ba:d4:30:38:55:3c:98:5f:c9:5f:8a:7a:a8:f4:8a:
ea:7c:6e:c6:84:18:83:7a:7f:ee:df:30:55:8e:bc:19:95:d5:
7f:45:e8:ea:0e:22:56:44:d9:da:27:cb:b5:1d:e5:83:65:ac:
c4:f2:3a:16:68:e7:24:8a:f2:6a:a3:64:0a:65:6e:1e:be:19:
10:e9:fb:19:f6:2f:52:85:86:4f:50:fa:ed:8b:2d:5b:50:58:
34:77:a7:fe:fb:e8:22:f2:74:70:c4:cd:2f:12:1d:8a:a3:4c:
bb:f8:aa:26:64:58:a7:71:49:df:e9:a1:23:86:87:b8:e1:bb:
4c:41:93:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOT36MF81gITqASe61M1zkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhOTBlZDY4NDhhOWNhMWVmMjAxMGU2MzRjZTIxYjZjOWFk
ZGViNjIwHhcNMjUxMTA0MTAwMDIzWhcNMjUxMTA1MTAwMDIzWjAzMTEwLwYDVQQD
EygxNjAxNzQ1ZDk5OTg2NjNhOTQ5Nzc5ZGZkYzRhNzNjZDVjMDRkYWZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyAg9IBqxgdnrLl/SMuJWXpw+BIBC
wxjmHJQURVO+I1C6osn/XNZcKVW/NGdEFNRwWDhr2eA6JXWbmW9uiFZwyvkELCJN
szduLvf3t/sHi9lN/Ko/b5r3yCf72AKZB8xEnwOQulV07gOB2WbpJ/PfDkS6Ad4d
sa5c8b9If4xl/7GCQsFHGpF2aVAbOCS6zna7vUFFmJ9B5+J+n1SYZEH11t+6qmFY
H0ybh8OhU84XfUVsmb7YSjbh8wxlSi57CnQdA8E2iS1jBhKu5PocXJsP8JY/l8Q5
Ju5WBRIHtrNeaIMItYdMHA6ijHuPcfCFLwPGgsbIW2NJ4KMgHZz846PyCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBYBdF2ZmGY6lJd539xKc81cBNr9MB8GA1UdIwQY
MBaAFOqQ7WhIqcoe8gEOY0ziG2ya3etiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnBEdGFFaXB5aDd5QVE1alRPSWJiSnJkNjJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi85YzFlODMtZTcxNC00YzQ1LTg2ODUt
NTg2YjZkMDQ3ODc4LzEvNnBEdGFFaXB5aDd5QVE1alRPSWJiSnJkNjJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi85YzFlODMtZTcxNC00YzQ1LTg2ODUtNTg2YjZkMDQ3ODc4
LzEvNnBEdGFFaXB5aDd5QVE1alRPSWJiSnJkNjJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxj66TtLu
5ut1hhEQWqr2aJ6pGHRPDVjNu1vrIDhXQbxTz0s2dE8p3ZxCzbwIQuBFpNsuBbwh
k6hEQGu/BbU2AQZ9LaHQkCKbxRFu1zevl2uU0dNRbGjOvLl98fPkkraDhPynSA7s
Ya7M40lpuDhrPLvx+26cY3c1+yUstjHxjH6NutQwOFU8mF/JX4p6qPSK6nxuxoQY
g3p/7t8wVY68GZXVf0Xo6g4iVkTZ2ifLtR3lg2WsxPI6FmjnJIryaqNkCmVuHr4Z
EOn7GfYvUoWGT1D67YstW1BYNHen/vvoIvJ0cMTNLxIdiqNMu/iqJmRYp3FJ3+mh
I4aHuOG7TEGT7Q==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:06:22 2025 by rpki-client