Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/4db770-d7f5-4bcb-ba44-857712720a35/1/6rmhV-EqLvcX0TIxrwb9hUVLMVE.mft
File: 6rmhV-EqLvcX0TIxrwb9hUVLMVE.mft (raw, json)
Hash identifier: MdpytdAuR0PHWF3z4HLnYHYuSjNWQhiKmor93h74kgg=
Subject key identifier: F8:92:C3:7B:7B:B0:C4:FF:E2:74:7A:E3:B7:E0:D7:2C:67:06:80:F4
Authority key identifier: EA:B9:A1:57:E1:2A:2E:F7:17:D1:32:31:AF:06:FD:85:45:4B:31:51
Certificate issuer: /CN=eab9a157e12a2ef717d13231af06fd85454b3151
Certificate serial: 01989147B0A895EDE3EB7D1E729E52A558EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6rmhV-EqLvcX0TIxrwb9hUVLMVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/4db770-d7f5-4bcb-ba44-857712720a35/1/6rmhV-EqLvcX0TIxrwb9hUVLMVE.mft
Manifest number: 0F29
Signing time: Sun 10 Aug 2025 00:00:51 +0000
Manifest this update: Sun 10 Aug 2025 00:00:51 +0000
Manifest next update: Mon 11 Aug 2025 00:00:51 +0000
Files and hashes: 1: 6rmhV-EqLvcX0TIxrwb9hUVLMVE.crl (hash: S8vXH7bIfiLgWwdk6SxM+LbLA6DW4ztpLRMNuu3Izv4=)
2: HOKH-4cqRMA_yXERkwbNDzuMfg0.roa (hash: BxrSjj1tg8yper8hXCVO7HyCIeXNMBvlZBpIdnV+E/w=)
3: q-7o-VTmQktM6CANooQxHGpfUPs.roa (hash: nkRO+yCLAt1MadmnWmx2ah2ZlpvxH2J3hDHN33uCuqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/4db770-d7f5-4bcb-ba44-857712720a35/1/6rmhV-EqLvcX0TIxrwb9hUVLMVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/4db770-d7f5-4bcb-ba44-857712720a35/1/6rmhV-EqLvcX0TIxrwb9hUVLMVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/6rmhV-EqLvcX0TIxrwb9hUVLMVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 23:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:91:47:b0:a8:95:ed:e3:eb:7d:1e:72:9e:52:a5:58:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eab9a157e12a2ef717d13231af06fd85454b3151
Validity
Not Before: Aug 10 00:00:51 2025 GMT
Not After : Aug 11 00:00:51 2025 GMT
Subject: CN=f892c37b7bb0c4ffe2747ae3b7e0d72c670680f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:2d:76:c1:f4:fc:43:d0:63:50:2c:c2:6c:2d:
47:62:f7:84:9e:a4:7f:1d:d1:2c:0e:f2:1d:8a:c5:
91:50:2e:07:ba:3c:74:3f:b3:1b:c5:43:98:d3:b1:
04:74:34:36:17:e3:00:16:e1:e8:5f:2e:8e:6e:67:
9b:df:af:c5:a0:c5:6a:24:a8:e8:01:7f:87:9e:36:
e0:28:42:10:04:de:1d:c8:7b:80:c6:2f:07:ee:47:
f8:60:6c:19:01:58:de:c7:c7:55:d3:7d:01:a7:2e:
59:c8:1d:5e:4b:21:89:da:c7:39:2b:bd:64:11:d7:
7b:11:5c:45:92:76:82:b6:8f:c5:f5:b1:00:cc:09:
a8:43:a0:6c:b4:39:02:96:31:98:ed:db:b1:0a:b8:
42:5f:8b:41:83:bf:17:24:90:0d:76:9d:cd:de:56:
52:e6:53:f8:30:99:7c:d6:0c:9c:67:be:1b:bb:2a:
73:9a:cf:6c:0b:ed:50:fb:31:b4:cb:eb:1a:36:ba:
8d:b7:95:4b:18:67:10:c3:06:f6:dd:81:36:76:ad:
de:5c:b7:41:38:6f:09:70:07:8d:b5:a6:df:49:8f:
28:c6:d1:50:5d:dd:ce:36:e7:60:67:01:4e:a7:78:
cc:64:7a:7c:db:00:bc:4e:a1:80:10:9a:cf:d8:ef:
fa:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:92:C3:7B:7B:B0:C4:FF:E2:74:7A:E3:B7:E0:D7:2C:67:06:80:F4
X509v3 Authority Key Identifier:
keyid:EA:B9:A1:57:E1:2A:2E:F7:17:D1:32:31:AF:06:FD:85:45:4B:31:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6rmhV-EqLvcX0TIxrwb9hUVLMVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/4db770-d7f5-4bcb-ba44-857712720a35/1/6rmhV-EqLvcX0TIxrwb9hUVLMVE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/4db770-d7f5-4bcb-ba44-857712720a35/1/6rmhV-EqLvcX0TIxrwb9hUVLMVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:54:0e:9d:79:84:70:a0:88:b8:6c:4b:4f:4b:f8:39:5f:b2:
a4:06:ca:fc:43:f9:de:fd:19:7d:f9:b7:02:3b:78:69:6f:58:
af:c3:5f:96:31:e2:16:8d:0b:75:b6:f8:10:42:70:20:67:d6:
22:ed:5c:95:64:e1:87:0c:bf:92:8e:3f:fa:42:10:b3:4e:65:
de:33:90:69:d2:2f:88:be:cc:43:7e:2e:f1:47:04:cf:22:c2:
d9:54:f5:74:fd:ea:c6:44:ca:4d:53:ac:fe:05:37:58:6f:16:
69:38:1d:d8:bf:49:2b:0b:91:d7:6d:32:d6:fb:de:7f:fa:88:
ae:ec:32:64:4a:2d:73:36:0c:fd:37:d8:6e:e0:60:5d:6e:65:
36:c2:c1:a1:2f:62:14:83:6a:42:fe:e7:52:19:c0:03:52:e4:
53:07:e6:13:7b:d5:19:38:43:11:33:db:3e:c6:89:47:ee:cc:
6d:94:a9:2e:16:d9:59:ff:c9:03:af:9d:b8:9b:8a:1f:93:5c:
1f:68:f9:a3:07:5d:bd:6a:e0:12:67:6b:5d:d5:ea:18:ef:17:
14:5a:bb:f2:f2:61:24:16:f9:60:3f:5d:6f:a2:07:df:5a:b9:
e1:c9:f0:8d:3c:48:08:5b:55:e2:6f:1e:c0:db:cd:ab:57:26:
db:9e:30:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiRR7Cole3j630ecp5SpVjvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhYjlhMTU3ZTEyYTJlZjcxN2QxMzIzMWFmMDZmZDg1NDU0
YjMxNTEwHhcNMjUwODEwMDAwMDUxWhcNMjUwODExMDAwMDUxWjAzMTEwLwYDVQQD
EyhmODkyYzM3YjdiYjBjNGZmZTI3NDdhZTNiN2UwZDcyYzY3MDY4MGY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmi12wfT8Q9BjUCzCbC1HYveEnqR/
HdEsDvIdisWRUC4Hujx0P7MbxUOY07EEdDQ2F+MAFuHoXy6Obmeb36/FoMVqJKjo
AX+HnjbgKEIQBN4dyHuAxi8H7kf4YGwZAVjex8dV030Bpy5ZyB1eSyGJ2sc5K71k
Edd7EVxFknaCto/F9bEAzAmoQ6BstDkCljGY7duxCrhCX4tBg78XJJANdp3N3lZS
5lP4MJl81gycZ74buypzms9sC+1Q+zG0y+saNrqNt5VLGGcQwwb23YE2dq3eXLdB
OG8JcAeNtabfSY8oxtFQXd3ONudgZwFOp3jMZHp82wC8TqGAEJrP2O/6HwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPiSw3t7sMT/4nR647fg1yxnBoD0MB8GA1UdIwQY
MBaAFOq5oVfhKi73F9EyMa8G/YVFSzFRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnJtaFYtRXFMdmNYMFRJeHJ3YjloVVZMTVZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi80ZGI3NzAtZDdmNS00YmNiLWJhNDQt
ODU3NzEyNzIwYTM1LzEvNnJtaFYtRXFMdmNYMFRJeHJ3YjloVVZMTVZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi80ZGI3NzAtZDdmNS00YmNiLWJhNDQtODU3NzEyNzIwYTM1
LzEvNnJtaFYtRXFMdmNYMFRJeHJ3YjloVVZMTVZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZFQOnXmE
cKCIuGxLT0v4OV+ypAbK/EP53v0Zffm3Ajt4aW9Yr8NfljHiFo0Ldbb4EEJwIGfW
Iu1clWThhwy/ko4/+kIQs05l3jOQadIviL7MQ34u8UcEzyLC2VT1dP3qxkTKTVOs
/gU3WG8WaTgd2L9JKwuR120y1vvef/qIruwyZEotczYM/TfYbuBgXW5lNsLBoS9i
FINqQv7nUhnAA1LkUwfmE3vVGThDETPbPsaJR+7MbZSpLhbZWf/JA6+duJuKH5Nc
H2j5owddvWrgEmdrXdXqGO8XFFq78vJhJBb5YD9db6IH31q54cnwjTxICFtV4m8e
wNvNq1cm254wcQ==
-----END CERTIFICATE-----
Generated at Sun Aug 10 05:37:09 2025 by rpki-client