Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/8fa051-4357-4d31-8537-6812babc5a8b/1/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.mft
File: 6XZW8iAVWJ_3zGYFaGf2BdgUSbw.mft (raw, json)
Hash identifier: nv67ocvsL35Mo9srR/JREjnReyVAEDY5eeniWNkx3p8=
Subject key identifier: 7C:2B:B6:4B:85:58:51:E4:C8:B6:ED:C9:6A:AD:A5:EB:7C:E6:67:C2
Authority key identifier: E9:76:56:F2:20:15:58:9F:F7:CC:66:05:68:67:F6:05:D8:14:49:BC
Certificate issuer: /CN=e97656f22015589ff7cc66056867f605d81449bc
Certificate serial: 019A006C70A121E4CC4030711FFD0F4F458D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/8fa051-4357-4d31-8537-6812babc5a8b/1/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.mft
Manifest number: 16E6
Signing time: Mon 20 Oct 2025 07:01:37 +0000
Manifest this update: Mon 20 Oct 2025 07:01:37 +0000
Manifest next update: Tue 21 Oct 2025 07:01:37 +0000
Files and hashes: 1: 46IkgipDtz-gl4yWGt7SVQgrM2Y.roa (hash: xd1tjAJC9B4oABZm0yY50qZfUkL+C2aunMu/YZc9css=)
2: 6XZW8iAVWJ_3zGYFaGf2BdgUSbw.crl (hash: iLkfpqQ5bbmOSRDqLf7ybYziA3RrlYUwKzsBl+S+WkE=)
3: TJ9h-OeDoNwLJy-bpo2ooNFoYYY.roa (hash: uSX/ck6PKaNlZa7GifLSaPti7K35d8cXLGS+lgOUDKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/8fa051-4357-4d31-8537-6812babc5a8b/1/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/8fa051-4357-4d31-8537-6812babc5a8b/1/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.mft
rsync://rpki.ripe.net/repository/DEFAULT/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 07:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:6c:70:a1:21:e4:cc:40:30:71:1f:fd:0f:4f:45:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e97656f22015589ff7cc66056867f605d81449bc
Validity
Not Before: Oct 20 07:01:37 2025 GMT
Not After : Oct 21 07:01:37 2025 GMT
Subject: CN=7c2bb64b855851e4c8b6edc96aada5eb7ce667c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5e:50:e6:78:a2:12:1c:43:dc:b2:18:ed:d7:
16:de:50:0d:90:07:af:8b:35:3a:6b:4e:92:8e:76:
50:0f:d8:55:97:23:11:b8:bc:5a:b8:5d:d4:01:ff:
cb:4c:24:fd:a5:71:64:ca:1b:b7:79:f5:c0:dc:d5:
01:d7:89:6a:74:23:54:74:f1:72:e2:7c:b3:c6:d9:
c4:65:f6:16:ca:62:fe:eb:e2:4f:8a:24:aa:82:5d:
5e:1f:14:c8:89:0f:8b:39:6e:c7:db:6b:3f:11:0f:
ee:43:48:18:e2:4f:ff:08:5c:e9:3e:ef:b1:15:d6:
ad:2a:f5:fe:18:eb:a2:17:80:0d:d6:b7:06:0b:ae:
1a:fb:d4:b3:34:6d:03:c3:bd:07:98:3f:00:3a:2d:
6d:15:14:a7:40:6a:a4:58:f4:3e:19:6c:be:55:e0:
1c:1a:0c:e0:3f:fd:b9:f1:9c:02:a0:c8:6c:b4:a2:
cd:eb:a0:25:eb:95:6b:66:1e:f6:28:7d:2a:b7:46:
a8:a0:13:35:9a:85:f0:57:6f:10:d1:1a:f3:c8:cc:
b4:b4:43:66:f8:f6:c3:cf:5d:0d:21:23:f1:43:75:
f2:3c:bf:41:1b:64:98:d5:9e:f6:63:09:02:d9:97:
be:ec:b8:02:37:94:55:46:aa:d5:2c:2a:11:21:dc:
53:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:2B:B6:4B:85:58:51:E4:C8:B6:ED:C9:6A:AD:A5:EB:7C:E6:67:C2
X509v3 Authority Key Identifier:
keyid:E9:76:56:F2:20:15:58:9F:F7:CC:66:05:68:67:F6:05:D8:14:49:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8fa051-4357-4d31-8537-6812babc5a8b/1/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8fa051-4357-4d31-8537-6812babc5a8b/1/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:53:2c:c9:17:0a:8d:66:30:41:11:ec:d6:8a:78:3a:5a:ce:
97:f6:df:32:8b:a1:7f:83:2a:91:4b:9b:5c:e8:2c:b6:dc:3a:
b2:a3:6b:38:ee:82:b1:e7:f2:66:8f:db:0f:4d:91:ea:35:db:
0e:c9:bd:73:27:58:6e:b6:cf:47:d9:f8:71:7e:bb:be:67:13:
34:1a:da:78:41:37:27:4a:d5:03:64:b5:48:17:0b:71:01:07:
68:a9:9e:6d:e1:a8:61:09:eb:ee:22:be:64:75:ad:3a:f6:29:
f2:6c:b1:99:e1:3e:c0:07:58:5e:35:e7:68:82:42:a3:fc:09:
ac:4b:5e:ab:c5:bd:a9:27:2e:15:2d:93:ff:f1:4f:09:8c:ec:
b9:6e:da:84:9d:f3:77:be:23:f1:8d:0d:f1:f2:01:2d:8a:9e:
61:c6:e7:3a:4e:59:59:6b:88:82:b1:c5:66:7b:24:f4:18:51:
46:28:f4:ea:50:c5:eb:47:ad:a1:af:2f:47:6a:2d:47:a8:63:
b6:5e:da:d0:eb:03:1c:98:99:9c:e7:52:84:60:04:65:a5:b3:
a5:4e:35:c7:fb:ad:58:b2:32:0c:22:83:ba:b3:4e:e3:e3:9b:
69:ec:f1:44:71:a0:de:eb:67:35:a8:e0:af:0e:32:3f:6c:af:
1f:bd:15:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoAbHChIeTMQDBxH/0PT0WNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5NzY1NmYyMjAxNTU4OWZmN2NjNjYwNTY4NjdmNjA1ZDgx
NDQ5YmMwHhcNMjUxMDIwMDcwMTM3WhcNMjUxMDIxMDcwMTM3WjAzMTEwLwYDVQQD
Eyg3YzJiYjY0Yjg1NTg1MWU0YzhiNmVkYzk2YWFkYTVlYjdjZTY2N2MyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs15Q5niiEhxD3LIY7dcW3lANkAev
izU6a06SjnZQD9hVlyMRuLxauF3UAf/LTCT9pXFkyhu3efXA3NUB14lqdCNUdPFy
4nyzxtnEZfYWymL+6+JPiiSqgl1eHxTIiQ+LOW7H22s/EQ/uQ0gY4k//CFzpPu+x
FdatKvX+GOuiF4AN1rcGC64a+9SzNG0Dw70HmD8AOi1tFRSnQGqkWPQ+GWy+VeAc
GgzgP/258ZwCoMhstKLN66Al65VrZh72KH0qt0aooBM1moXwV28Q0RrzyMy0tENm
+PbDz10NISPxQ3XyPL9BG2SY1Z72YwkC2Ze+7LgCN5RVRqrVLCoRIdxTwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHwrtkuFWFHkyLbtyWqtpet85mfCMB8GA1UdIwQY
MBaAFOl2VvIgFVif98xmBWhn9gXYFEm8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlhaVzhpQVZXSl8zekdZRmFHZjJCZGdVU2J3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS84ZmEwNTEtNDM1Ny00ZDMxLTg1Mzct
NjgxMmJhYmM1YThiLzEvNlhaVzhpQVZXSl8zekdZRmFHZjJCZGdVU2J3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS84ZmEwNTEtNDM1Ny00ZDMxLTg1MzctNjgxMmJhYmM1YThi
LzEvNlhaVzhpQVZXSl8zekdZRmFHZjJCZGdVU2J3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWlMsyRcK
jWYwQRHs1op4OlrOl/bfMouhf4MqkUubXOgsttw6sqNrOO6CsefyZo/bD02R6jXb
Dsm9cydYbrbPR9n4cX67vmcTNBraeEE3J0rVA2S1SBcLcQEHaKmebeGoYQnr7iK+
ZHWtOvYp8myxmeE+wAdYXjXnaIJCo/wJrEteq8W9qScuFS2T//FPCYzsuW7ahJ3z
d74j8Y0N8fIBLYqeYcbnOk5ZWWuIgrHFZnsk9BhRRij06lDF60etoa8vR2otR6hj
tl7a0OsDHJiZnOdShGAEZaWzpU41x/utWLIyDCKDurNO4+ObaezxRHGg3utnNajg
rw4yP2yvH70VvQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 16:15:13 2025 by rpki-client