Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/07ce7e-4641-4985-9845-1a007157d59a/1/6z1v54fFBVOwcxcRLhnmW09nWTE.mft
File: 6z1v54fFBVOwcxcRLhnmW09nWTE.mft (raw, json)
Hash identifier: vhPf1Y9hfVgr9KRu7jutcrFhxvZ8GoA5HY3T88hejYY=
Subject key identifier: 29:EE:1E:E4:17:6B:BC:56:50:70:6D:89:84:30:2A:3F:A3:C2:61:A5
Authority key identifier: EB:3D:6F:E7:87:C5:05:53:B0:73:17:11:2E:19:E6:5B:4F:67:59:31
Certificate issuer: /CN=eb3d6fe787c50553b07317112e19e65b4f675931
Certificate serial: 01987418EC3BBE59F960769442CA3EB65394
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6z1v54fFBVOwcxcRLhnmW09nWTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/07ce7e-4641-4985-9845-1a007157d59a/1/6z1v54fFBVOwcxcRLhnmW09nWTE.mft
Manifest number: 15DA
Signing time: Mon 04 Aug 2025 08:00:47 +0000
Manifest this update: Mon 04 Aug 2025 08:00:47 +0000
Manifest next update: Tue 05 Aug 2025 08:00:47 +0000
Files and hashes: 1: 6z1v54fFBVOwcxcRLhnmW09nWTE.crl (hash: tlgm0KUCPVeLZNfXhQMNOpMggRpC3SEYRRl6OWTcHNg=)
2: jcrTKRLVafxbmhoPzjEKfBszAmk.roa (hash: dZzjw0X45T+if5mYD87H3+tKeMoeDlrA485y+6aDQxk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/07ce7e-4641-4985-9845-1a007157d59a/1/6z1v54fFBVOwcxcRLhnmW09nWTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/07ce7e-4641-4985-9845-1a007157d59a/1/6z1v54fFBVOwcxcRLhnmW09nWTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/6z1v54fFBVOwcxcRLhnmW09nWTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:18:ec:3b:be:59:f9:60:76:94:42:ca:3e:b6:53:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb3d6fe787c50553b07317112e19e65b4f675931
Validity
Not Before: Aug 4 08:00:47 2025 GMT
Not After : Aug 5 08:00:47 2025 GMT
Subject: CN=29ee1ee4176bbc5650706d8984302a3fa3c261a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e6:65:40:b5:75:4c:94:5b:dd:91:e8:10:58:
68:37:3c:8e:51:b7:18:cf:fb:76:c6:d7:94:fd:2b:
ae:c7:0a:5d:b0:e8:a4:2b:45:75:2c:60:81:b6:0e:
29:8b:0e:17:37:dc:36:02:4a:fa:73:1c:6c:16:c2:
ad:c6:73:9f:22:80:a6:ef:f3:ed:44:33:ba:05:29:
02:59:23:bf:bb:dc:36:7e:bf:a9:b8:9c:b5:aa:24:
ff:fe:2f:f6:b2:fa:0e:e7:70:6e:5a:7b:a2:c4:3b:
14:0a:18:7d:33:37:ef:9a:00:12:05:f2:27:1c:c9:
a5:a1:f7:84:e1:ca:85:39:62:43:2e:e3:8d:4f:1a:
7a:82:4c:10:47:5d:3b:ff:d9:4a:b6:89:9e:51:bb:
f8:5e:8c:e5:1a:a5:57:b6:7f:49:f5:b2:9f:81:da:
2e:7e:fe:3e:42:96:c1:72:41:61:7c:e5:63:1e:c5:
8c:72:7e:21:b5:2b:3f:02:99:35:f9:21:3a:dd:92:
28:7f:a3:c2:88:c8:73:46:1d:00:b4:ea:d9:db:57:
90:71:79:e2:16:d2:38:26:72:f2:3c:bf:72:f2:68:
41:57:d2:8a:63:7f:e3:fe:90:a6:8a:4b:7a:a0:a8:
46:df:e5:ce:93:b1:91:fa:a3:b6:d3:05:aa:37:1e:
a4:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:EE:1E:E4:17:6B:BC:56:50:70:6D:89:84:30:2A:3F:A3:C2:61:A5
X509v3 Authority Key Identifier:
keyid:EB:3D:6F:E7:87:C5:05:53:B0:73:17:11:2E:19:E6:5B:4F:67:59:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6z1v54fFBVOwcxcRLhnmW09nWTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/07ce7e-4641-4985-9845-1a007157d59a/1/6z1v54fFBVOwcxcRLhnmW09nWTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/07ce7e-4641-4985-9845-1a007157d59a/1/6z1v54fFBVOwcxcRLhnmW09nWTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:d7:ae:2c:43:a5:fc:0f:7f:6f:b4:51:f8:7d:93:ee:73:d8:
ab:e9:b5:16:ff:03:4d:31:3b:e9:31:c0:70:2c:41:c6:18:e4:
16:b1:11:3b:3b:ad:f2:6d:6f:33:c8:81:07:0f:2c:02:50:88:
40:49:14:17:05:d0:3c:28:d5:2e:d4:c2:7e:1a:0f:ca:52:55:
30:28:05:98:8b:a5:74:7e:96:e9:62:49:99:23:24:39:1c:a1:
fb:0d:fc:55:92:0a:bb:6c:08:c1:73:d2:62:77:66:17:88:4a:
ca:79:39:96:dc:03:01:a8:71:21:a1:2c:03:97:e2:cd:be:73:
cc:1f:61:1c:d8:fa:ab:16:f0:42:61:a2:a6:34:94:61:8d:2e:
b9:8c:4e:c1:40:53:f2:fb:76:4e:e9:ce:ca:89:d0:ea:f3:f4:
d0:20:95:91:2c:78:83:62:47:24:87:48:b6:82:20:a0:cf:cb:
44:ef:8a:80:2c:3e:84:2c:85:b3:19:87:d2:fe:cb:7b:df:61:
d5:94:5c:69:8a:fe:ef:59:86:f3:4e:7b:c3:f4:53:4f:e7:6e:
d2:0d:2d:1e:7f:fe:c7:43:69:03:68:bf:e4:f4:c7:72:dd:2c:
d3:c9:d3:1a:4c:84:f5:c0:12:37:d8:03:a1:e6:81:90:fa:14:
69:a6:19:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh0GOw7vln5YHaUQso+tlOUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViM2Q2ZmU3ODdjNTA1NTNiMDczMTcxMTJlMTllNjViNGY2
NzU5MzEwHhcNMjUwODA0MDgwMDQ3WhcNMjUwODA1MDgwMDQ3WjAzMTEwLwYDVQQD
EygyOWVlMWVlNDE3NmJiYzU2NTA3MDZkODk4NDMwMmEzZmEzYzI2MWE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAruZlQLV1TJRb3ZHoEFhoNzyOUbcY
z/t2xteU/SuuxwpdsOikK0V1LGCBtg4piw4XN9w2Akr6cxxsFsKtxnOfIoCm7/Pt
RDO6BSkCWSO/u9w2fr+puJy1qiT//i/2svoO53BuWnuixDsUChh9MzfvmgASBfIn
HMmlofeE4cqFOWJDLuONTxp6gkwQR107/9lKtomeUbv4XozlGqVXtn9J9bKfgdou
fv4+QpbBckFhfOVjHsWMcn4htSs/Apk1+SE63ZIof6PCiMhzRh0AtOrZ21eQcXni
FtI4JnLyPL9y8mhBV9KKY3/j/pCmikt6oKhG3+XOk7GR+qO20wWqNx6kqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCnuHuQXa7xWUHBtiYQwKj+jwmGlMB8GA1UdIwQY
MBaAFOs9b+eHxQVTsHMXES4Z5ltPZ1kxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnoxdjU0ZkZCVk93Y3hjUkxobm1XMDluV1RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8wN2NlN2UtNDY0MS00OTg1LTk4NDUt
MWEwMDcxNTdkNTlhLzEvNnoxdjU0ZkZCVk93Y3hjUkxobm1XMDluV1RFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi8wN2NlN2UtNDY0MS00OTg1LTk4NDUtMWEwMDcxNTdkNTlh
LzEvNnoxdjU0ZkZCVk93Y3hjUkxobm1XMDluV1RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR9euLEOl
/A9/b7RR+H2T7nPYq+m1Fv8DTTE76THAcCxBxhjkFrEROzut8m1vM8iBBw8sAlCI
QEkUFwXQPCjVLtTCfhoPylJVMCgFmIuldH6W6WJJmSMkORyh+w38VZIKu2wIwXPS
YndmF4hKynk5ltwDAahxIaEsA5fizb5zzB9hHNj6qxbwQmGipjSUYY0uuYxOwUBT
8vt2TunOyonQ6vP00CCVkSx4g2JHJIdItoIgoM/LRO+KgCw+hCyFsxmH0v7Le99h
1ZRcaYr+71mG8057w/RTT+du0g0tHn/+x0NpA2i/5PTHct0s08nTGkyE9cASN9gD
oeaBkPoUaaYZzw==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:08:06 2025 by rpki-client