Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/4db770-d7f5-4bcb-ba44-857712720a35/1/6rmhV-EqLvcX0TIxrwb9hUVLMVE.mft
File: 6rmhV-EqLvcX0TIxrwb9hUVLMVE.mft (raw, json)
Hash identifier: 7xcQEdnD03TE+QzCLGJAT8WThvYQO+Ky4Q9ePZJmC2s=
Subject key identifier: E9:32:1E:5D:F0:5D:CC:43:26:4E:3C:86:1D:1E:DC:03:28:F3:8A:1E
Authority key identifier: EA:B9:A1:57:E1:2A:2E:F7:17:D1:32:31:AF:06:FD:85:45:4B:31:51
Certificate issuer: /CN=eab9a157e12a2ef717d13231af06fd85454b3151
Certificate serial: 019A4D7388FFBA769D5E45237F487964FB64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6rmhV-EqLvcX0TIxrwb9hUVLMVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/4db770-d7f5-4bcb-ba44-857712720a35/1/6rmhV-EqLvcX0TIxrwb9hUVLMVE.mft
Manifest number: 100F
Signing time: Tue 04 Nov 2025 06:00:07 +0000
Manifest this update: Tue 04 Nov 2025 06:00:07 +0000
Manifest next update: Wed 05 Nov 2025 06:00:07 +0000
Files and hashes: 1: 6rmhV-EqLvcX0TIxrwb9hUVLMVE.crl (hash: jIYnPMp0/ntCx0ig+gD2W616dOM9tT4LYVqZKPst7yo=)
2: HOKH-4cqRMA_yXERkwbNDzuMfg0.roa (hash: BxrSjj1tg8yper8hXCVO7HyCIeXNMBvlZBpIdnV+E/w=)
3: q-7o-VTmQktM6CANooQxHGpfUPs.roa (hash: nkRO+yCLAt1MadmnWmx2ah2ZlpvxH2J3hDHN33uCuqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/4db770-d7f5-4bcb-ba44-857712720a35/1/6rmhV-EqLvcX0TIxrwb9hUVLMVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/4db770-d7f5-4bcb-ba44-857712720a35/1/6rmhV-EqLvcX0TIxrwb9hUVLMVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/6rmhV-EqLvcX0TIxrwb9hUVLMVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:88:ff:ba:76:9d:5e:45:23:7f:48:79:64:fb:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eab9a157e12a2ef717d13231af06fd85454b3151
Validity
Not Before: Nov 4 06:00:07 2025 GMT
Not After : Nov 5 06:00:07 2025 GMT
Subject: CN=e9321e5df05dcc43264e3c861d1edc0328f38a1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:52:4d:49:3c:ea:3a:b9:81:43:97:7c:1c:92:
3d:7e:52:17:cb:51:ea:71:75:c0:f6:5d:cf:a8:77:
37:d5:89:a1:7f:de:58:c0:95:f0:09:84:e0:17:f9:
a1:33:f8:f6:fe:64:5e:cc:60:ec:bd:44:d1:9b:6c:
7e:e1:42:65:59:09:f4:66:bf:43:d6:31:ff:5d:4b:
ab:e4:e5:6b:9a:5e:f1:f5:64:bd:a2:5a:48:21:8b:
4a:4b:73:91:78:a5:35:7f:c8:3e:d0:1c:16:e7:45:
ea:aa:53:a0:56:2f:da:ba:3c:5f:c9:36:a0:8b:ad:
d1:59:03:e6:f9:53:18:5c:d9:0b:af:f3:f2:24:8b:
7d:42:eb:50:52:42:b0:68:1d:27:46:6f:b8:55:be:
1b:9f:52:c4:9b:57:66:a6:33:0f:be:bb:dd:da:e1:
23:9e:62:4b:15:5b:ce:e7:f6:2c:4e:ca:51:10:73:
82:af:91:3f:6a:ef:2f:d8:3a:5f:9d:aa:3a:c9:03:
d0:6d:fd:8e:24:c4:ad:40:4f:d5:77:8d:ec:aa:b4:
ca:b0:c5:23:c0:b4:1c:97:e8:15:8e:dc:21:2c:52:
11:ba:23:e5:f6:bc:d0:ee:60:d1:8c:a3:75:5d:0d:
f1:b0:fe:f5:91:30:0c:7b:af:9d:ca:dd:18:b3:df:
10:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:32:1E:5D:F0:5D:CC:43:26:4E:3C:86:1D:1E:DC:03:28:F3:8A:1E
X509v3 Authority Key Identifier:
keyid:EA:B9:A1:57:E1:2A:2E:F7:17:D1:32:31:AF:06:FD:85:45:4B:31:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6rmhV-EqLvcX0TIxrwb9hUVLMVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/4db770-d7f5-4bcb-ba44-857712720a35/1/6rmhV-EqLvcX0TIxrwb9hUVLMVE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/4db770-d7f5-4bcb-ba44-857712720a35/1/6rmhV-EqLvcX0TIxrwb9hUVLMVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:63:7e:19:f2:c8:a6:cd:c4:1b:55:8a:50:30:9a:5b:2a:b2:
3f:3f:8f:8b:39:19:22:f4:f6:14:ba:83:79:cb:d1:1b:f9:b4:
32:41:4b:32:ca:10:49:00:13:3a:84:3b:a0:c9:23:9c:b1:fd:
7f:63:50:a6:44:c9:79:6e:b7:27:ac:6a:c0:08:2c:df:45:52:
4e:4b:8a:63:e4:22:1c:e9:41:0d:d5:6e:32:11:aa:81:57:c6:
d6:f3:a0:a3:f8:58:eb:3a:23:53:a2:e8:54:95:76:43:89:66:
b0:cd:95:1b:58:d6:47:8e:c5:cb:cd:4f:ff:de:bb:f9:7f:56:
86:da:66:d5:ce:a2:77:90:99:d0:c7:a6:93:17:b3:80:79:1a:
a7:f2:ee:4c:31:e6:2f:8e:d1:83:c3:5d:aa:d7:ae:51:ed:89:
f8:e6:a5:13:55:9e:f3:44:99:81:29:33:14:d2:2f:6e:07:1b:
d8:74:72:16:25:c6:9e:83:02:5d:57:3a:2a:6c:34:59:94:2e:
46:da:b5:f0:90:99:6b:82:20:6a:ce:c4:95:e6:50:30:9c:c3:
24:77:70:62:8e:0f:3a:0b:5c:49:09:71:97:d1:b1:22:60:43:
f6:da:6a:2c:20:c8:b6:fd:91:cf:8d:03:8e:88:1e:c8:46:46:
a5:9d:66:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNc4j/unadXkUjf0h5ZPtkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhYjlhMTU3ZTEyYTJlZjcxN2QxMzIzMWFmMDZmZDg1NDU0
YjMxNTEwHhcNMjUxMTA0MDYwMDA3WhcNMjUxMTA1MDYwMDA3WjAzMTEwLwYDVQQD
EyhlOTMyMWU1ZGYwNWRjYzQzMjY0ZTNjODYxZDFlZGMwMzI4ZjM4YTFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1JNSTzqOrmBQ5d8HJI9flIXy1Hq
cXXA9l3PqHc31Ymhf95YwJXwCYTgF/mhM/j2/mRezGDsvUTRm2x+4UJlWQn0Zr9D
1jH/XUur5OVrml7x9WS9olpIIYtKS3OReKU1f8g+0BwW50XqqlOgVi/aujxfyTag
i63RWQPm+VMYXNkLr/PyJIt9QutQUkKwaB0nRm+4Vb4bn1LEm1dmpjMPvrvd2uEj
nmJLFVvO5/YsTspREHOCr5E/au8v2Dpfnao6yQPQbf2OJMStQE/Vd43sqrTKsMUj
wLQcl+gVjtwhLFIRuiPl9rzQ7mDRjKN1XQ3xsP71kTAMe6+dyt0Ys98QuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOkyHl3wXcxDJk48hh0e3AMo84oeMB8GA1UdIwQY
MBaAFOq5oVfhKi73F9EyMa8G/YVFSzFRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnJtaFYtRXFMdmNYMFRJeHJ3YjloVVZMTVZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi80ZGI3NzAtZDdmNS00YmNiLWJhNDQt
ODU3NzEyNzIwYTM1LzEvNnJtaFYtRXFMdmNYMFRJeHJ3YjloVVZMTVZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi80ZGI3NzAtZDdmNS00YmNiLWJhNDQtODU3NzEyNzIwYTM1
LzEvNnJtaFYtRXFMdmNYMFRJeHJ3YjloVVZMTVZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQGN+GfLI
ps3EG1WKUDCaWyqyPz+PizkZIvT2FLqDecvRG/m0MkFLMsoQSQATOoQ7oMkjnLH9
f2NQpkTJeW63J6xqwAgs30VSTkuKY+QiHOlBDdVuMhGqgVfG1vOgo/hY6zojU6Lo
VJV2Q4lmsM2VG1jWR47Fy81P/967+X9Whtpm1c6id5CZ0MemkxezgHkap/LuTDHm
L47Rg8NdqteuUe2J+OalE1We80SZgSkzFNIvbgcb2HRyFiXGnoMCXVc6Kmw0WZQu
Rtq18JCZa4Igas7EleZQMJzDJHdwYo4POgtcSQlxl9GxImBD9tpqLCDItv2Rz40D
jogeyEZGpZ1mJg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:55:26 2025 by rpki-client