Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/b6409b-1638-4c7a-81f2-94f8fb3009f2/1/6O1gL9DUbTjN4ecyxlLqmVjpdpE.mft
File: 6O1gL9DUbTjN4ecyxlLqmVjpdpE.mft (raw, json)
Hash identifier: pHcBZUUTX7qKtNdx854lbM5pv++rF6PGTXcdYEN4OUE=
Subject key identifier: A3:1F:4C:F1:DA:92:27:1D:E2:99:AE:2B:F1:4E:B7:10:9F:2F:E4:CE
Authority key identifier: E8:ED:60:2F:D0:D4:6D:38:CD:E1:E7:32:C6:52:EA:99:58:E9:76:91
Certificate issuer: /CN=e8ed602fd0d46d38cde1e732c652ea9958e97691
Certificate serial: 019A560990E65E0592B6F80A3EADF8CD739D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6O1gL9DUbTjN4ecyxlLqmVjpdpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/b6409b-1638-4c7a-81f2-94f8fb3009f2/1/6O1gL9DUbTjN4ecyxlLqmVjpdpE.mft
Manifest number: 1698
Signing time: Wed 05 Nov 2025 22:00:58 +0000
Manifest this update: Wed 05 Nov 2025 22:00:58 +0000
Manifest next update: Thu 06 Nov 2025 22:00:58 +0000
Files and hashes: 1: 6O1gL9DUbTjN4ecyxlLqmVjpdpE.crl (hash: x+gJFr8inMd2NyipmAtReUM5Jezc3ZWp7v6BJwuWrRg=)
2: rvzjyC9muvr4migx_xtUIzZ2FRM.roa (hash: 2jsltHZ+YtkUSfR/OVprtu2235QmWCtb64qQWKzazWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/b6409b-1638-4c7a-81f2-94f8fb3009f2/1/6O1gL9DUbTjN4ecyxlLqmVjpdpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/b6409b-1638-4c7a-81f2-94f8fb3009f2/1/6O1gL9DUbTjN4ecyxlLqmVjpdpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/6O1gL9DUbTjN4ecyxlLqmVjpdpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 21:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:56:09:90:e6:5e:05:92:b6:f8:0a:3e:ad:f8:cd:73:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8ed602fd0d46d38cde1e732c652ea9958e97691
Validity
Not Before: Nov 5 22:00:58 2025 GMT
Not After : Nov 6 22:00:58 2025 GMT
Subject: CN=a31f4cf1da92271de299ae2bf14eb7109f2fe4ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ba:7b:c1:5c:67:62:8a:d0:34:90:0a:c7:eb:
d7:8f:3a:68:ba:0e:ec:16:c2:e8:d1:13:b7:a8:51:
11:61:55:be:91:19:20:4a:c4:b1:95:22:44:df:8a:
61:ee:44:d5:23:ab:1e:23:87:32:d2:24:3d:e0:c9:
fd:bb:dc:af:20:4a:af:fd:ba:f2:67:18:f8:d4:26:
a9:85:47:e8:28:b5:aa:f9:c0:5e:b3:2a:b6:a2:d8:
2d:44:ab:32:8a:f6:c1:2c:e7:f0:74:7e:8d:42:5d:
fa:0c:52:ea:7d:4d:41:30:59:85:6b:ec:74:b6:cb:
8d:c6:ad:fb:15:c4:3b:bc:11:56:bc:1c:ef:16:b5:
a7:5c:d8:71:3f:a5:21:33:ea:e9:f3:04:f0:86:f1:
98:34:1b:dc:65:29:f1:cc:63:ff:c3:80:8b:ee:ee:
bf:e8:8d:6e:d7:b6:47:db:3e:39:6e:10:8f:fd:8a:
36:fc:ec:e9:89:e0:a8:e0:7a:24:b1:d1:62:43:99:
32:b9:e1:9f:86:4f:3a:15:8d:30:58:b8:0e:9a:b0:
d6:f5:0b:bb:73:cd:7a:23:34:7a:cf:e3:5e:70:f4:
08:78:d8:62:1d:de:ec:84:18:68:f9:ef:99:af:08:
6e:4f:47:7f:5e:1e:78:2c:0d:2c:5b:41:38:a0:d6:
7c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:1F:4C:F1:DA:92:27:1D:E2:99:AE:2B:F1:4E:B7:10:9F:2F:E4:CE
X509v3 Authority Key Identifier:
keyid:E8:ED:60:2F:D0:D4:6D:38:CD:E1:E7:32:C6:52:EA:99:58:E9:76:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6O1gL9DUbTjN4ecyxlLqmVjpdpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/b6409b-1638-4c7a-81f2-94f8fb3009f2/1/6O1gL9DUbTjN4ecyxlLqmVjpdpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/b6409b-1638-4c7a-81f2-94f8fb3009f2/1/6O1gL9DUbTjN4ecyxlLqmVjpdpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:c9:4c:d0:a2:25:88:17:95:c0:32:32:5c:80:68:f9:4e:ee:
fe:6f:95:03:2e:9c:f7:2f:06:73:3c:26:39:e0:de:1c:71:3c:
52:3e:17:b3:fc:30:34:b1:f2:22:8a:1b:77:a4:b7:8c:c9:f3:
08:30:b1:3c:1a:f7:8b:27:cb:eb:39:81:66:38:5e:22:d2:88:
13:f9:33:61:0a:2d:5b:aa:6a:4c:5d:fd:9d:19:bd:64:92:83:
f6:2a:a6:2c:d4:dd:17:f9:bc:23:07:73:d1:b0:2a:24:e5:5d:
8e:0e:81:bb:4f:c3:c1:7d:90:92:28:a4:15:c6:60:1e:ee:4e:
43:55:6a:2d:ab:8a:aa:69:e2:53:13:ea:13:e3:17:34:f6:23:
40:5c:92:a6:1d:7b:c7:f3:79:7f:6a:09:b7:dc:46:31:aa:7d:
57:2b:f8:8c:49:c2:4b:5d:7b:99:bd:a5:da:ec:b2:aa:e5:93:
ec:1a:ac:55:a3:08:9b:01:0e:1b:08:14:f1:b4:78:cd:c4:fa:
f2:1c:20:b2:7d:fa:c3:af:7d:7e:a1:49:7f:64:62:8f:02:9d:
e9:9c:3a:af:59:3f:4a:1a:69:4f:2b:0d:9c:68:72:c2:33:d4:
9f:bc:5b:d7:67:f9:6e:d4:ad:6c:71:b5:ef:27:a5:13:68:08:
97:f2:2c:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpWCZDmXgWStvgKPq34zXOdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4ZWQ2MDJmZDBkNDZkMzhjZGUxZTczMmM2NTJlYTk5NThl
OTc2OTEwHhcNMjUxMTA1MjIwMDU4WhcNMjUxMTA2MjIwMDU4WjAzMTEwLwYDVQQD
EyhhMzFmNGNmMWRhOTIyNzFkZTI5OWFlMmJmMTRlYjcxMDlmMmZlNGNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyrp7wVxnYorQNJAKx+vXjzpoug7s
FsLo0RO3qFERYVW+kRkgSsSxlSJE34ph7kTVI6seI4cy0iQ94Mn9u9yvIEqv/bry
Zxj41CaphUfoKLWq+cBesyq2otgtRKsyivbBLOfwdH6NQl36DFLqfU1BMFmFa+x0
tsuNxq37FcQ7vBFWvBzvFrWnXNhxP6UhM+rp8wTwhvGYNBvcZSnxzGP/w4CL7u6/
6I1u17ZH2z45bhCP/Yo2/OzpieCo4HoksdFiQ5kyueGfhk86FY0wWLgOmrDW9Qu7
c816IzR6z+NecPQIeNhiHd7shBho+e+ZrwhuT0d/Xh54LA0sW0E4oNZ8iQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKMfTPHakicd4pmuK/FOtxCfL+TOMB8GA1UdIwQY
MBaAFOjtYC/Q1G04zeHnMsZS6plY6XaRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNk8xZ0w5RFViVGpONGVjeXhsTHFtVmpwZHBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9iNjQwOWItMTYzOC00YzdhLTgxZjIt
OTRmOGZiMzAwOWYyLzEvNk8xZ0w5RFViVGpONGVjeXhsTHFtVmpwZHBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC9iNjQwOWItMTYzOC00YzdhLTgxZjItOTRmOGZiMzAwOWYy
LzEvNk8xZ0w5RFViVGpONGVjeXhsTHFtVmpwZHBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWMlM0KIl
iBeVwDIyXIBo+U7u/m+VAy6c9y8GczwmOeDeHHE8Uj4Xs/wwNLHyIoobd6S3jMnz
CDCxPBr3iyfL6zmBZjheItKIE/kzYQotW6pqTF39nRm9ZJKD9iqmLNTdF/m8Iwdz
0bAqJOVdjg6Bu0/DwX2QkiikFcZgHu5OQ1VqLauKqmniUxPqE+MXNPYjQFySph17
x/N5f2oJt9xGMap9Vyv4jEnCS117mb2l2uyyquWT7BqsVaMImwEOGwgU8bR4zcT6
8hwgsn36w699fqFJf2RijwKd6Zw6r1k/ShppTysNnGhywjPUn7xb12f5btStbHG1
7yelE2gIl/IsVA==
-----END CERTIFICATE-----
Generated at Thu Nov 6 00:09:22 2025 by rpki-client