Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/4d7f6e-c6df-41d7-8ffd-5089b602bfc2/1/6Y3F54JY5CZzm9iMLUwgCq3zvxM.mft
File: 6Y3F54JY5CZzm9iMLUwgCq3zvxM.mft (raw, json)
Hash identifier: CyejC/SM90XOmGXHLMFX3niC9z3BSaJCjlCjvksz0g8=
Subject key identifier: CF:34:88:24:51:09:36:FF:7A:A6:B5:2C:A3:AF:53:87:F9:CC:6D:D5
Authority key identifier: E9:8D:C5:E7:82:58:E4:26:73:9B:D8:8C:2D:4C:20:0A:AD:F3:BF:13
Certificate issuer: /CN=e98dc5e78258e426739bd88c2d4c200aadf3bf13
Certificate serial: 019A533F0D02BC88FC61872170B3BC38ABB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Y3F54JY5CZzm9iMLUwgCq3zvxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/4d7f6e-c6df-41d7-8ffd-5089b602bfc2/1/6Y3F54JY5CZzm9iMLUwgCq3zvxM.mft
Manifest number: 170F
Signing time: Wed 05 Nov 2025 09:00:32 +0000
Manifest this update: Wed 05 Nov 2025 09:00:32 +0000
Manifest next update: Thu 06 Nov 2025 09:00:32 +0000
Files and hashes: 1: 6Y3F54JY5CZzm9iMLUwgCq3zvxM.crl (hash: 6feosTgnYYAJUXzMw6UkfTw8Az4+fRpnuIeFKK+1S2E=)
2: tseR8GP4Fbf261yqYCNjj9fDV1M.roa (hash: fi4QggPDU2QjSa/CfYSOVM8ZVKWF4rBk1jBf4sgMqBk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/4d7f6e-c6df-41d7-8ffd-5089b602bfc2/1/6Y3F54JY5CZzm9iMLUwgCq3zvxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/4d7f6e-c6df-41d7-8ffd-5089b602bfc2/1/6Y3F54JY5CZzm9iMLUwgCq3zvxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/6Y3F54JY5CZzm9iMLUwgCq3zvxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 09:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:3f:0d:02:bc:88:fc:61:87:21:70:b3:bc:38:ab:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e98dc5e78258e426739bd88c2d4c200aadf3bf13
Validity
Not Before: Nov 5 09:00:32 2025 GMT
Not After : Nov 6 09:00:32 2025 GMT
Subject: CN=cf348824510936ff7aa6b52ca3af5387f9cc6dd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:77:23:01:69:64:09:eb:a3:00:0a:2e:d7:74:
70:27:45:2a:e2:5a:69:4c:09:01:82:cd:c7:06:d3:
c0:a9:bc:50:88:68:02:62:47:c8:db:e0:a9:7d:17:
a2:85:fd:0b:30:7c:d1:8a:85:8c:f6:28:87:95:76:
93:82:8b:91:1a:58:2f:c8:2b:34:ac:1f:d0:8e:6c:
b0:35:51:c7:79:53:50:fc:16:1c:ea:03:9b:b2:4a:
c2:ff:88:e0:99:71:b1:a5:20:1e:d8:28:57:06:54:
64:c2:9b:30:aa:6e:b2:68:6f:55:9d:15:57:4a:46:
0f:1d:d3:28:0f:54:78:17:44:02:be:25:3e:5a:c9:
5a:82:67:d1:35:e3:58:c9:05:d8:2d:8a:ff:57:70:
0d:67:b8:61:6e:f7:a1:df:84:69:76:8c:13:53:eb:
59:82:86:9d:6f:61:e7:9c:f0:f6:6c:a9:81:8a:0e:
3c:d0:32:05:3c:e0:6f:78:7e:e2:19:0a:9c:68:d3:
69:66:2d:01:9c:fd:79:aa:7c:1d:e4:f9:1b:c6:c9:
17:0c:99:c0:9b:01:18:b8:64:a7:4f:6a:73:16:72:
93:71:20:4e:cd:8a:4f:be:02:f1:f4:e8:2f:62:35:
98:e1:c7:34:6f:b3:87:54:d1:4f:15:dc:06:ff:cc:
6f:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:34:88:24:51:09:36:FF:7A:A6:B5:2C:A3:AF:53:87:F9:CC:6D:D5
X509v3 Authority Key Identifier:
keyid:E9:8D:C5:E7:82:58:E4:26:73:9B:D8:8C:2D:4C:20:0A:AD:F3:BF:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Y3F54JY5CZzm9iMLUwgCq3zvxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/4d7f6e-c6df-41d7-8ffd-5089b602bfc2/1/6Y3F54JY5CZzm9iMLUwgCq3zvxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/4d7f6e-c6df-41d7-8ffd-5089b602bfc2/1/6Y3F54JY5CZzm9iMLUwgCq3zvxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:1e:5a:22:f8:1f:28:69:27:2d:aa:d6:92:a6:69:0c:e1:91:
bf:22:eb:e4:8d:27:5e:a5:6a:07:4e:87:10:58:88:4c:42:04:
5c:d4:2a:4a:26:2c:09:10:b7:f7:83:e6:92:af:7b:b8:d1:e6:
b5:92:47:1f:f3:29:bf:66:f8:55:38:c0:40:32:03:73:33:99:
c3:d9:d0:9f:74:79:34:7b:53:57:10:ce:d8:07:2f:9f:4e:b2:
15:7a:ec:78:a4:cf:e6:8a:37:1d:3c:f9:9f:0d:12:f2:96:eb:
4f:10:5c:b4:9d:2b:b7:89:3f:d2:54:ef:dd:cc:94:67:c0:7d:
7a:0c:10:ac:ef:48:07:2b:1b:dd:82:ca:09:8d:a0:22:e7:74:
20:c3:28:2e:0b:44:8f:7d:ac:b9:9b:e8:c1:7a:b0:8b:86:66:
6e:56:fe:a5:a5:2f:53:c7:1b:92:11:2d:3a:b1:cc:e4:dc:98:
c1:43:8d:b3:7f:c2:d8:6b:17:02:3e:4c:db:04:b9:51:4c:3e:
0b:d5:39:94:6f:c9:0b:3f:7e:98:24:6f:21:58:3a:19:fb:eb:
38:52:ef:7b:c3:57:e7:eb:22:d0:15:22:49:25:8e:3f:aa:80:
99:aa:56:25:c2:08:e8:48:d1:fb:f6:9d:b4:c4:0a:9b:09:31:
98:0d:5b:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpTPw0CvIj8YYchcLO8OKu2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5OGRjNWU3ODI1OGU0MjY3MzliZDg4YzJkNGMyMDBhYWRm
M2JmMTMwHhcNMjUxMTA1MDkwMDMyWhcNMjUxMTA2MDkwMDMyWjAzMTEwLwYDVQQD
EyhjZjM0ODgyNDUxMDkzNmZmN2FhNmI1MmNhM2FmNTM4N2Y5Y2M2ZGQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXcjAWlkCeujAAou13RwJ0Uq4lpp
TAkBgs3HBtPAqbxQiGgCYkfI2+CpfReihf0LMHzRioWM9iiHlXaTgouRGlgvyCs0
rB/QjmywNVHHeVNQ/BYc6gObskrC/4jgmXGxpSAe2ChXBlRkwpswqm6yaG9VnRVX
SkYPHdMoD1R4F0QCviU+WslagmfRNeNYyQXYLYr/V3ANZ7hhbveh34RpdowTU+tZ
goadb2HnnPD2bKmBig480DIFPOBveH7iGQqcaNNpZi0BnP15qnwd5PkbxskXDJnA
mwEYuGSnT2pzFnKTcSBOzYpPvgLx9OgvYjWY4cc0b7OHVNFPFdwG/8xvKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM80iCRRCTb/eqa1LKOvU4f5zG3VMB8GA1UdIwQY
MBaAFOmNxeeCWOQmc5vYjC1MIAqt878TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlkzRjU0Slk1Q1p6bTlpTUxVd2dDcTN6dnhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC80ZDdmNmUtYzZkZi00MWQ3LThmZmQt
NTA4OWI2MDJiZmMyLzEvNlkzRjU0Slk1Q1p6bTlpTUxVd2dDcTN6dnhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC80ZDdmNmUtYzZkZi00MWQ3LThmZmQtNTA4OWI2MDJiZmMy
LzEvNlkzRjU0Slk1Q1p6bTlpTUxVd2dDcTN6dnhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhB5aIvgf
KGknLarWkqZpDOGRvyLr5I0nXqVqB06HEFiITEIEXNQqSiYsCRC394Pmkq97uNHm
tZJHH/Mpv2b4VTjAQDIDczOZw9nQn3R5NHtTVxDO2Acvn06yFXrseKTP5oo3HTz5
nw0S8pbrTxBctJ0rt4k/0lTv3cyUZ8B9egwQrO9IBysb3YLKCY2gIud0IMMoLgtE
j32suZvowXqwi4Zmblb+paUvU8cbkhEtOrHM5NyYwUONs3/C2GsXAj5M2wS5UUw+
C9U5lG/JCz9+mCRvIVg6GfvrOFLve8NX5+si0BUiSSWOP6qAmapWJcII6EjR+/ad
tMQKmwkxmA1bRA==
-----END CERTIFICATE-----
Generated at Wed Nov 5 14:46:41 2025 by rpki-client