Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/b20561-870d-4e92-bc0e-9091026abc71/1/6WsCEuMy3Kj8fR7lqBULo4VpnIw.mft
File: 6WsCEuMy3Kj8fR7lqBULo4VpnIw.mft (raw, json)
Hash identifier: Bqjr2EUNU6lTpsx4VCuL9dUOfk7EEJxUTCYP/Ge4+P4=
Subject key identifier: DD:CA:EA:6A:AA:00:C2:4F:EA:DA:3E:B3:CF:31:A5:2C:AC:F4:B7:25
Authority key identifier: E9:6B:02:12:E3:32:DC:A8:FC:7D:1E:E5:A8:15:0B:A3:85:69:9C:8C
Certificate issuer: /CN=e96b0212e332dca8fc7d1ee5a8150ba385699c8c
Certificate serial: 0199FBEAEE664DFD440B8A50AC8C3C77D679
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6WsCEuMy3Kj8fR7lqBULo4VpnIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/b20561-870d-4e92-bc0e-9091026abc71/1/6WsCEuMy3Kj8fR7lqBULo4VpnIw.mft
Manifest number: 0DB3
Signing time: Sun 19 Oct 2025 10:01:41 +0000
Manifest this update: Sun 19 Oct 2025 10:01:41 +0000
Manifest next update: Mon 20 Oct 2025 10:01:41 +0000
Files and hashes: 1: 6WsCEuMy3Kj8fR7lqBULo4VpnIw.crl (hash: yELAVPXR2IsZywFRkrZpfU2x2jDIkoT6X8Tvpkze+Ck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/b20561-870d-4e92-bc0e-9091026abc71/1/6WsCEuMy3Kj8fR7lqBULo4VpnIw.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/b20561-870d-4e92-bc0e-9091026abc71/1/6WsCEuMy3Kj8fR7lqBULo4VpnIw.mft
rsync://rpki.ripe.net/repository/DEFAULT/6WsCEuMy3Kj8fR7lqBULo4VpnIw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:ee:66:4d:fd:44:0b:8a:50:ac:8c:3c:77:d6:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e96b0212e332dca8fc7d1ee5a8150ba385699c8c
Validity
Not Before: Oct 19 10:01:41 2025 GMT
Not After : Oct 20 10:01:41 2025 GMT
Subject: CN=ddcaea6aaa00c24feada3eb3cf31a52cacf4b725
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ae:01:3f:f1:99:3b:d2:f0:b7:60:c5:ee:92:
98:d6:22:62:63:52:32:65:49:49:bf:cf:ac:e5:db:
d6:bc:21:52:35:6d:80:8f:e5:22:6e:71:d6:e2:c7:
46:17:4a:d0:0c:71:6d:03:9e:fa:0b:70:53:aa:02:
30:1a:cc:76:b0:8a:59:0e:69:b7:83:23:23:24:08:
0f:c9:eb:ad:a0:76:ed:dc:8a:66:cf:8b:c3:37:dc:
f2:58:fe:2c:fd:7f:99:66:82:62:0a:76:60:3e:21:
f4:b3:8c:86:16:52:c2:e0:5f:2c:b7:8f:c3:2e:96:
74:4c:4e:c7:fc:4d:a0:25:14:70:fc:69:56:5f:e4:
3f:ee:5f:c2:81:5d:b4:5f:0d:d2:5b:96:44:6d:a9:
3d:ba:f0:69:f5:5f:13:cd:a8:f0:04:2a:1b:91:62:
45:26:9c:22:3c:4b:b1:33:da:fd:0c:02:08:83:74:
79:2d:1f:68:bc:d1:93:2d:88:65:2e:b7:d9:0f:0f:
d0:c9:df:f9:fa:d1:fa:2f:fc:4a:b2:18:ae:97:29:
d5:8c:9f:64:a8:30:83:db:11:b6:80:b5:a6:21:e4:
de:ee:79:17:e5:5a:9a:ba:da:d2:8b:c7:d3:d6:4a:
65:df:83:92:b5:b1:87:b4:d6:b0:3e:29:88:8b:8e:
88:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:CA:EA:6A:AA:00:C2:4F:EA:DA:3E:B3:CF:31:A5:2C:AC:F4:B7:25
X509v3 Authority Key Identifier:
keyid:E9:6B:02:12:E3:32:DC:A8:FC:7D:1E:E5:A8:15:0B:A3:85:69:9C:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6WsCEuMy3Kj8fR7lqBULo4VpnIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/b20561-870d-4e92-bc0e-9091026abc71/1/6WsCEuMy3Kj8fR7lqBULo4VpnIw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/b20561-870d-4e92-bc0e-9091026abc71/1/6WsCEuMy3Kj8fR7lqBULo4VpnIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:cd:89:0b:6a:57:c3:89:b7:cd:c6:62:f9:5e:8a:29:82:68:
3e:25:ca:af:04:ff:a3:1b:09:46:c1:42:09:33:3e:80:69:0b:
ed:3c:fd:37:37:40:47:69:b6:1f:cc:11:cb:52:b8:8e:d0:9f:
d6:59:a1:3f:3d:36:11:de:c2:18:a3:52:1c:c7:22:58:0f:8c:
67:b4:23:45:2f:3f:0a:ef:16:46:3d:a4:3c:3b:8a:38:3a:ad:
b2:3a:91:6c:d9:cf:71:b9:ea:75:0f:58:6e:f9:a9:78:d8:d7:
d0:1b:13:5a:2f:d4:91:72:d0:99:e5:b4:3d:68:d8:46:f3:33:
84:0f:64:e3:a6:d6:b1:dc:b7:3d:0a:ec:77:e3:53:cb:44:44:
aa:30:77:1d:7d:a0:81:79:78:25:d9:ce:d5:9d:83:cb:4a:39:
ed:eb:a6:40:1e:08:db:e2:2f:65:90:9d:72:f7:ba:85:38:96:
e3:75:ea:46:ac:ce:66:98:f1:7b:f9:df:5c:a0:f4:40:df:e4:
6d:7e:5c:cb:a2:79:ac:a6:bd:8e:19:c3:e7:55:81:9b:75:31:
12:f9:f2:fc:60:94:d4:db:2a:a5:a6:bf:42:e9:ad:49:c6:9c:
fe:5b:b6:88:51:32:a7:ce:95:de:3a:0d:c3:1e:28:6a:43:9d:
c6:58:5d:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76u5mTf1EC4pQrIw8d9Z5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5NmIwMjEyZTMzMmRjYThmYzdkMWVlNWE4MTUwYmEzODU2
OTljOGMwHhcNMjUxMDE5MTAwMTQxWhcNMjUxMDIwMTAwMTQxWjAzMTEwLwYDVQQD
EyhkZGNhZWE2YWFhMDBjMjRmZWFkYTNlYjNjZjMxYTUyY2FjZjRiNzI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuq4BP/GZO9Lwt2DF7pKY1iJiY1Iy
ZUlJv8+s5dvWvCFSNW2Aj+UibnHW4sdGF0rQDHFtA576C3BTqgIwGsx2sIpZDmm3
gyMjJAgPyeutoHbt3Ipmz4vDN9zyWP4s/X+ZZoJiCnZgPiH0s4yGFlLC4F8st4/D
LpZ0TE7H/E2gJRRw/GlWX+Q/7l/CgV20Xw3SW5ZEbak9uvBp9V8TzajwBCobkWJF
JpwiPEuxM9r9DAIIg3R5LR9ovNGTLYhlLrfZDw/Qyd/5+tH6L/xKshiulynVjJ9k
qDCD2xG2gLWmIeTe7nkX5VqautrSi8fT1kpl34OStbGHtNawPimIi46ITwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN3K6mqqAMJP6to+s88xpSys9LclMB8GA1UdIwQY
MBaAFOlrAhLjMtyo/H0e5agVC6OFaZyMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNldzQ0V1TXkzS2o4ZlI3bHFCVUxvNFZwbkl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9iMjA1NjEtODcwZC00ZTkyLWJjMGUt
OTA5MTAyNmFiYzcxLzEvNldzQ0V1TXkzS2o4ZlI3bHFCVUxvNFZwbkl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy9iMjA1NjEtODcwZC00ZTkyLWJjMGUtOTA5MTAyNmFiYzcx
LzEvNldzQ0V1TXkzS2o4ZlI3bHFCVUxvNFZwbkl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfc2JC2pX
w4m3zcZi+V6KKYJoPiXKrwT/oxsJRsFCCTM+gGkL7Tz9NzdAR2m2H8wRy1K4jtCf
1lmhPz02Ed7CGKNSHMciWA+MZ7QjRS8/Cu8WRj2kPDuKODqtsjqRbNnPcbnqdQ9Y
bvmpeNjX0BsTWi/UkXLQmeW0PWjYRvMzhA9k46bWsdy3PQrsd+NTy0REqjB3HX2g
gXl4JdnO1Z2Dy0o57eumQB4I2+IvZZCdcve6hTiW43XqRqzOZpjxe/nfXKD0QN/k
bX5cy6J5rKa9jhnD51WBm3UxEvny/GCU1Nsqpaa/QumtScac/lu2iFEyp86V3joN
wx4oakOdxlhdog==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:30:03 2025 by rpki-client