Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/dbdad2-7c43-4cac-b4a6-facf48586249/1/6diA6IcHf62Ct0yZgBD6myU-Dqg.mft
File: 6diA6IcHf62Ct0yZgBD6myU-Dqg.mft (raw, json)
Hash identifier: v/ZuvksNoaAP0UnaRGSdJW1WIvNQOjP221aWm20pxog=
Subject key identifier: CA:7F:63:20:DC:9C:7C:90:9B:9B:22:51:93:35:B3:3D:C7:7A:3D:8D
Authority key identifier: E9:D8:80:E8:87:07:7F:AD:82:B7:4C:99:80:10:FA:9B:25:3E:0E:A8
Certificate issuer: /CN=e9d880e887077fad82b74c998010fa9b253e0ea8
Certificate serial: 019A4DE22E090DEFCDCD2150B35767D80267
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6diA6IcHf62Ct0yZgBD6myU-Dqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/dbdad2-7c43-4cac-b4a6-facf48586249/1/6diA6IcHf62Ct0yZgBD6myU-Dqg.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 08:00:59 +0000
Manifest this update: Tue 04 Nov 2025 08:00:59 +0000
Manifest next update: Wed 05 Nov 2025 08:00:59 +0000
Files and hashes: 1: 6diA6IcHf62Ct0yZgBD6myU-Dqg.crl (hash: vS001F2wTy3MODEcP9T3Q4y9u3wBqMRIMGv2YjrPlcQ=)
2: MAF_Elgy9u87cVsZVUNNm5Bb_UE.roa (hash: OX4gvHHnab+S9t+kA6ofZcqN5QU8A+hvwcM1NQu21jI=)
3: hbhPN4GRWF1Kh2C_ZGs02wMD7Rw.roa (hash: zbvVnLL4EUKhuAlyrvHCZpnuafPuDIGGmDdwOuvfDX8=)
4: zuxfhazkw5A2wUx6_S2GEVHOFH0.roa (hash: 2S2LWvnGAr/ZohzIcOjiYOYePYl9ZaqVuuPNKMqicns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/dbdad2-7c43-4cac-b4a6-facf48586249/1/6diA6IcHf62Ct0yZgBD6myU-Dqg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/dbdad2-7c43-4cac-b4a6-facf48586249/1/6diA6IcHf62Ct0yZgBD6myU-Dqg.mft
rsync://rpki.ripe.net/repository/DEFAULT/6diA6IcHf62Ct0yZgBD6myU-Dqg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e2:2e:09:0d:ef:cd:cd:21:50:b3:57:67:d8:02:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9d880e887077fad82b74c998010fa9b253e0ea8
Validity
Not Before: Nov 4 08:00:59 2025 GMT
Not After : Nov 5 08:00:59 2025 GMT
Subject: CN=ca7f6320dc9c7c909b9b22519335b33dc77a3d8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:2a:d5:18:0e:4b:6c:43:a9:55:ea:b3:d9:79:
73:90:d4:57:63:f7:c1:e5:a6:d2:a2:15:61:5b:e8:
fb:9d:ff:15:a1:e6:fc:6a:b7:76:ed:14:9b:d6:9e:
dd:b6:d6:a8:72:54:64:ee:48:dd:8f:8a:cf:67:e9:
a6:ab:78:87:4d:c6:97:58:e4:03:03:85:20:81:63:
b2:d8:e3:b2:d1:9a:cf:4e:7e:3e:8e:17:ac:02:1d:
6f:b0:0a:fd:46:fc:16:f8:20:74:f1:3e:cb:ca:4d:
5f:82:65:df:fa:3f:d8:0d:2e:63:c2:e0:7f:8a:c9:
bb:01:aa:30:40:c4:2f:f3:54:d6:99:fb:3d:4b:73:
8e:8f:54:f3:33:b3:06:1a:e3:4d:91:e0:29:59:07:
3a:cb:b1:df:52:6f:4f:aa:0f:34:3a:12:c3:be:65:
64:8d:dd:d8:b5:98:25:d8:4e:1f:56:7f:d1:5e:52:
6c:6b:8d:87:34:89:86:e3:55:85:19:b0:2c:d5:64:
1d:9f:3f:87:5a:1b:9b:16:94:e2:9d:51:33:24:84:
5f:16:ff:16:06:ec:77:b5:0e:4f:1a:e0:f9:cf:d8:
5b:c2:e9:c0:70:0b:55:69:e2:6f:04:b3:3a:39:58:
d7:f0:8e:24:a2:f4:a3:fe:09:db:5a:2c:88:c8:93:
b1:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:7F:63:20:DC:9C:7C:90:9B:9B:22:51:93:35:B3:3D:C7:7A:3D:8D
X509v3 Authority Key Identifier:
keyid:E9:D8:80:E8:87:07:7F:AD:82:B7:4C:99:80:10:FA:9B:25:3E:0E:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6diA6IcHf62Ct0yZgBD6myU-Dqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/dbdad2-7c43-4cac-b4a6-facf48586249/1/6diA6IcHf62Ct0yZgBD6myU-Dqg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/dbdad2-7c43-4cac-b4a6-facf48586249/1/6diA6IcHf62Ct0yZgBD6myU-Dqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:51:d8:71:9f:dc:e6:e0:18:50:ab:a4:b0:35:8a:4b:69:ca:
2e:71:66:90:30:67:f8:5e:4c:5f:ad:11:cd:fe:6c:71:59:12:
16:0b:f8:21:cb:2e:bf:7f:32:54:27:f6:c9:0c:d2:6e:b9:11:
f6:57:8b:7a:d5:3b:3c:79:9a:ca:cc:80:6b:47:69:0e:4b:61:
b2:ed:db:af:e0:33:1e:20:23:b0:a6:7b:db:4c:4c:68:ce:8e:
df:c1:67:aa:bb:96:cc:9e:e2:76:5d:4d:50:ee:5f:5a:ff:2a:
91:4b:6b:d4:7a:d1:5a:f2:41:7f:51:d4:fe:b6:95:b0:b6:c0:
84:5d:48:09:47:62:15:98:d4:91:23:36:2d:90:2a:6d:0f:5b:
70:99:ed:38:b5:cf:ed:c5:bb:20:1c:05:5d:00:32:44:45:a7:
db:9c:94:67:8d:bd:0a:78:b6:1e:b3:ea:56:8d:4d:d4:79:62:
f3:2a:cf:56:0a:3a:b4:c2:65:32:63:82:6d:3e:2a:8e:93:f3:
10:1c:03:f6:56:2a:e9:d6:3d:1c:37:5a:54:42:ba:8d:ae:10:
38:f9:48:1f:90:13:d1:0d:1d:19:86:5d:4d:cf:5b:b7:56:4b:
91:b5:90:9f:07:cc:80:02:f4:29:30:03:d6:c7:06:91:3e:7d:
9e:3f:df:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpN4i4JDe/NzSFQs1dn2AJnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5ZDg4MGU4ODcwNzdmYWQ4MmI3NGM5OTgwMTBmYTliMjUz
ZTBlYTgwHhcNMjUxMTA0MDgwMDU5WhcNMjUxMTA1MDgwMDU5WjAzMTEwLwYDVQQD
EyhjYTdmNjMyMGRjOWM3YzkwOWI5YjIyNTE5MzM1YjMzZGM3N2EzZDhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApyrVGA5LbEOpVeqz2XlzkNRXY/fB
5abSohVhW+j7nf8Voeb8ard27RSb1p7dttaoclRk7kjdj4rPZ+mmq3iHTcaXWOQD
A4UggWOy2OOy0ZrPTn4+jhesAh1vsAr9RvwW+CB08T7Lyk1fgmXf+j/YDS5jwuB/
ism7AaowQMQv81TWmfs9S3OOj1TzM7MGGuNNkeApWQc6y7HfUm9Pqg80OhLDvmVk
jd3YtZgl2E4fVn/RXlJsa42HNImG41WFGbAs1WQdnz+HWhubFpTinVEzJIRfFv8W
Bux3tQ5PGuD5z9hbwunAcAtVaeJvBLM6OVjX8I4kovSj/gnbWiyIyJOxPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMp/YyDcnHyQm5siUZM1sz3Hej2NMB8GA1UdIwQY
MBaAFOnYgOiHB3+tgrdMmYAQ+pslPg6oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNmRpQTZJY0hmNjJDdDB5WmdCRDZteVUtRHFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9kYmRhZDItN2M0My00Y2FjLWI0YTYt
ZmFjZjQ4NTg2MjQ5LzEvNmRpQTZJY0hmNjJDdDB5WmdCRDZteVUtRHFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC9kYmRhZDItN2M0My00Y2FjLWI0YTYtZmFjZjQ4NTg2MjQ5
LzEvNmRpQTZJY0hmNjJDdDB5WmdCRDZteVUtRHFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtFHYcZ/c
5uAYUKuksDWKS2nKLnFmkDBn+F5MX60Rzf5scVkSFgv4Icsuv38yVCf2yQzSbrkR
9leLetU7PHmaysyAa0dpDkthsu3br+AzHiAjsKZ720xMaM6O38FnqruWzJ7idl1N
UO5fWv8qkUtr1HrRWvJBf1HU/raVsLbAhF1ICUdiFZjUkSM2LZAqbQ9bcJntOLXP
7cW7IBwFXQAyREWn25yUZ429Cni2HrPqVo1N1Hli8yrPVgo6tMJlMmOCbT4qjpPz
EBwD9lYq6dY9HDdaVEK6ja4QOPlIH5AT0Q0dGYZdTc9bt1ZLkbWQnwfMgAL0KTAD
1scGkT59nj/fxw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 10:48:49 2025 by rpki-client