Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/4508c4-332b-403c-9f56-db905913cb87/1/6T7pptFATGHrGbArAtdNqDpmM9o.mft
File: 6T7pptFATGHrGbArAtdNqDpmM9o.mft (raw, json)
Hash identifier: ZVMzyA5uaRjaj5CbQ77vI8yJ4YSu7eRmkFH605TYrh4=
Subject key identifier: F8:46:1A:EE:07:A1:9B:01:90:B4:43:0A:45:5B:F7:1A:54:9C:CC:AE
Authority key identifier: E9:3E:E9:A6:D1:40:4C:61:EB:19:B0:2B:02:D7:4D:A8:3A:66:33:DA
Certificate issuer: /CN=e93ee9a6d1404c61eb19b02b02d74da83a6633da
Certificate serial: 019A5262E2EDCC2FB82DB7135E56266C2891
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6T7pptFATGHrGbArAtdNqDpmM9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/4508c4-332b-403c-9f56-db905913cb87/1/6T7pptFATGHrGbArAtdNqDpmM9o.mft
Manifest number: 0214
Signing time: Wed 05 Nov 2025 05:00:03 +0000
Manifest this update: Wed 05 Nov 2025 05:00:03 +0000
Manifest next update: Thu 06 Nov 2025 05:00:03 +0000
Files and hashes: 1: 6T7pptFATGHrGbArAtdNqDpmM9o.crl (hash: XbWjkwnFYjcAHqNgkHDkSi5K7Tgn2dBZheGLDh6AP1Q=)
2: nTzt_7yObYF91YEfJlGe8rhCQyE.roa (hash: UZJuy0N8FDFUyDPS/6Vsx+tptqpEF0jDlmMqyvXeZZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/4508c4-332b-403c-9f56-db905913cb87/1/6T7pptFATGHrGbArAtdNqDpmM9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/4508c4-332b-403c-9f56-db905913cb87/1/6T7pptFATGHrGbArAtdNqDpmM9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/6T7pptFATGHrGbArAtdNqDpmM9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:62:e2:ed:cc:2f:b8:2d:b7:13:5e:56:26:6c:28:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e93ee9a6d1404c61eb19b02b02d74da83a6633da
Validity
Not Before: Nov 5 05:00:03 2025 GMT
Not After : Nov 6 05:00:03 2025 GMT
Subject: CN=f8461aee07a19b0190b4430a455bf71a549cccae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5c:9c:50:af:1a:c2:86:0f:1c:a1:9d:93:a2:
cf:4c:a5:80:52:82:9f:da:53:3e:6e:53:94:c5:64:
b2:2a:f4:ac:8c:64:89:03:c0:d3:9d:e8:09:0b:4c:
29:24:76:f8:cc:a4:7f:6b:5b:f7:28:d4:c7:b7:97:
ce:a3:11:75:b9:0d:47:30:4c:a2:da:8d:dc:34:c1:
1f:95:94:ad:c2:04:a6:86:dc:75:1a:f5:44:78:91:
fb:5d:84:4c:cc:6a:d0:8b:66:3c:d2:a7:d6:13:57:
15:c6:f3:70:d6:ec:59:c8:55:47:5e:49:e5:1f:c1:
0e:c1:57:fb:22:f7:fa:8f:b6:79:14:2e:f4:d9:0f:
92:da:6f:f9:16:1e:d2:66:78:d1:5f:7a:75:a8:03:
a4:d9:b8:71:f9:bc:2b:e8:35:43:db:4e:b2:14:7d:
82:2a:8c:47:16:0c:35:61:96:ce:cd:7c:3f:ea:3f:
b3:ac:54:0e:8c:33:f7:b2:08:c3:c5:e8:0d:62:be:
d1:c4:19:99:ec:3f:f2:c0:67:28:ab:e7:5b:24:6c:
a5:fc:94:d4:99:1e:02:80:ca:00:be:e5:db:39:51:
79:82:c3:87:4c:f5:5d:ca:76:6f:98:a4:11:c5:9e:
2e:2b:77:09:04:8b:f3:98:a5:0a:fa:41:c8:f7:7b:
82:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:46:1A:EE:07:A1:9B:01:90:B4:43:0A:45:5B:F7:1A:54:9C:CC:AE
X509v3 Authority Key Identifier:
keyid:E9:3E:E9:A6:D1:40:4C:61:EB:19:B0:2B:02:D7:4D:A8:3A:66:33:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6T7pptFATGHrGbArAtdNqDpmM9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/4508c4-332b-403c-9f56-db905913cb87/1/6T7pptFATGHrGbArAtdNqDpmM9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/4508c4-332b-403c-9f56-db905913cb87/1/6T7pptFATGHrGbArAtdNqDpmM9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:1e:df:e2:34:ca:a7:02:81:40:f4:1f:f1:c1:54:db:bc:b8:
7a:6c:f5:46:c1:30:03:ab:d6:e7:80:1e:e9:c7:f6:14:9f:84:
6f:a8:aa:70:88:fa:58:53:d7:11:7c:11:6c:88:02:5f:f3:bf:
82:a7:4f:a7:87:a3:9a:6e:32:3b:79:a2:91:9c:cb:f0:1c:e9:
ab:3b:9c:da:6b:d2:79:8c:2b:37:4d:23:de:6b:82:8b:ae:ea:
c2:a0:33:82:1d:d9:6e:34:33:83:58:c3:14:41:28:f6:e2:6b:
63:3e:f4:38:8a:5f:31:b1:72:db:5c:dc:56:2e:58:44:fb:fd:
5c:1b:d3:08:04:e7:9d:85:c5:c4:22:49:e1:9f:bd:57:b3:39:
5e:8e:af:58:bf:ec:a6:a2:7d:25:43:27:1e:12:eb:3b:d1:8c:
e6:8c:3b:00:c1:eb:60:11:37:83:a5:5b:2c:f1:1c:7f:cb:44:
70:6a:9f:f0:fa:66:f3:11:46:02:62:89:0f:1f:ab:11:99:f9:
93:07:94:2f:74:f1:4b:cb:7a:7c:75:2d:4c:dd:89:8c:f1:13:
23:4f:d2:df:bd:bc:79:9c:dc:14:73:3a:6c:c1:59:2a:c1:fd:
19:74:f7:e4:6c:31:6e:17:87:92:19:da:f5:f2:b9:6a:6b:51:
5c:85:d5:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpSYuLtzC+4LbcTXlYmbCiRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5M2VlOWE2ZDE0MDRjNjFlYjE5YjAyYjAyZDc0ZGE4M2E2
NjMzZGEwHhcNMjUxMTA1MDUwMDAzWhcNMjUxMTA2MDUwMDAzWjAzMTEwLwYDVQQD
EyhmODQ2MWFlZTA3YTE5YjAxOTBiNDQzMGE0NTViZjcxYTU0OWNjY2FlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlycUK8awoYPHKGdk6LPTKWAUoKf
2lM+blOUxWSyKvSsjGSJA8DTnegJC0wpJHb4zKR/a1v3KNTHt5fOoxF1uQ1HMEyi
2o3cNMEflZStwgSmhtx1GvVEeJH7XYRMzGrQi2Y80qfWE1cVxvNw1uxZyFVHXknl
H8EOwVf7Ivf6j7Z5FC702Q+S2m/5Fh7SZnjRX3p1qAOk2bhx+bwr6DVD206yFH2C
KoxHFgw1YZbOzXw/6j+zrFQOjDP3sgjDxegNYr7RxBmZ7D/ywGcoq+dbJGyl/JTU
mR4CgMoAvuXbOVF5gsOHTPVdynZvmKQRxZ4uK3cJBIvzmKUK+kHI93uCjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPhGGu4HoZsBkLRDCkVb9xpUnMyuMB8GA1UdIwQY
MBaAFOk+6abRQExh6xmwKwLXTag6ZjPaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlQ3cHB0RkFUR0hyR2JBckF0ZE5xRHBtTTlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC80NTA4YzQtMzMyYi00MDNjLTlmNTYt
ZGI5MDU5MTNjYjg3LzEvNlQ3cHB0RkFUR0hyR2JBckF0ZE5xRHBtTTlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC80NTA4YzQtMzMyYi00MDNjLTlmNTYtZGI5MDU5MTNjYjg3
LzEvNlQ3cHB0RkFUR0hyR2JBckF0ZE5xRHBtTTlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALB7f4jTK
pwKBQPQf8cFU27y4emz1RsEwA6vW54Ae6cf2FJ+Eb6iqcIj6WFPXEXwRbIgCX/O/
gqdPp4ejmm4yO3mikZzL8Bzpqzuc2mvSeYwrN00j3muCi67qwqAzgh3ZbjQzg1jD
FEEo9uJrYz70OIpfMbFy21zcVi5YRPv9XBvTCATnnYXFxCJJ4Z+9V7M5Xo6vWL/s
pqJ9JUMnHhLrO9GM5ow7AMHrYBE3g6VbLPEcf8tEcGqf8Ppm8xFGAmKJDx+rEZn5
kweUL3TxS8t6fHUtTN2JjPETI0/S3728eZzcFHM6bMFZKsH9GXT35GwxbheHkhna
9fK5amtRXIXVKQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 12:12:49 2025 by rpki-client