Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/1b7635-e6ff-4969-b2c0-89fb8fe69633/1/m6kNZtLd62RqYUBpEv_d-hTjmRA.mft
File: m6kNZtLd62RqYUBpEv_d-hTjmRA.mft (raw, json)
Hash identifier: lzzDSIF40tgRGr2UsUW3Tq4sSK3JbLtr1iYN2YsggAU=
Subject key identifier: 63:2D:0A:D7:C9:2F:11:73:8C:50:03:81:B2:84:4D:17:EA:48:EA:92
Authority key identifier: 9B:A9:0D:66:D2:DD:EB:64:6A:61:40:69:12:FF:DD:FA:14:E3:99:10
Certificate issuer: /CN=9ba90d66d2ddeb646a61406912ffddfa14e39910
Certificate serial: 0199FE0FDEDC8EA311A1CDA52FB7845C0E37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m6kNZtLd62RqYUBpEv_d-hTjmRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/1b7635-e6ff-4969-b2c0-89fb8fe69633/1/m6kNZtLd62RqYUBpEv_d-hTjmRA.mft
Manifest number: 16E6
Signing time: Sun 19 Oct 2025 20:01:16 +0000
Manifest this update: Sun 19 Oct 2025 20:01:16 +0000
Manifest next update: Mon 20 Oct 2025 20:01:16 +0000
Files and hashes: 1: f7PbKdzww9eFqmnrI3piPy2autI.roa (hash: cqid/Jh0JmuzLCy6Bmi9fDCE0NHp5jdaUsxa+HYnuO0=)
2: m6kNZtLd62RqYUBpEv_d-hTjmRA.crl (hash: Bb4xN3+Yrs5ujpUjsblEOl56J2XFV1ygeqDfbZ/9C/M=)
3: xhmAfLkH5cXdTfyZ-bUPjRF4p2I.roa (hash: xl3A4+W1ikpeq98vDwW24/ZZ/cjGs93cM5HGe2yBy/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/1b7635-e6ff-4969-b2c0-89fb8fe69633/1/m6kNZtLd62RqYUBpEv_d-hTjmRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/1b7635-e6ff-4969-b2c0-89fb8fe69633/1/m6kNZtLd62RqYUBpEv_d-hTjmRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/m6kNZtLd62RqYUBpEv_d-hTjmRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:0f:de:dc:8e:a3:11:a1:cd:a5:2f:b7:84:5c:0e:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ba90d66d2ddeb646a61406912ffddfa14e39910
Validity
Not Before: Oct 19 20:01:16 2025 GMT
Not After : Oct 20 20:01:16 2025 GMT
Subject: CN=632d0ad7c92f11738c500381b2844d17ea48ea92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:00:f0:dc:6f:da:ea:ef:a3:54:e6:d8:af:b0:
53:49:98:dc:4a:6d:0d:ca:a3:96:3e:3d:e7:af:c9:
33:b2:bc:78:0b:34:23:da:9d:db:7f:07:9f:64:68:
58:73:f7:2e:c5:f2:77:a9:d6:f3:63:28:c9:4a:0e:
05:00:1d:2c:50:0c:ce:6e:70:15:76:7a:7d:a8:b1:
ec:f5:c2:bf:5d:e4:ee:96:30:6a:91:cd:5a:80:6e:
ec:6d:6a:53:16:38:e0:01:a3:23:5d:78:29:f6:7d:
6b:5c:b1:b2:3a:6d:9f:d6:24:59:fb:1d:42:f9:61:
8d:7b:92:c9:2b:d3:fc:26:4c:87:78:96:b6:11:ff:
e4:71:8e:b5:dc:fe:60:94:b5:6a:57:5f:42:ee:e2:
f3:f3:44:2d:c8:7a:1e:29:91:33:25:b6:11:88:fe:
65:fb:cd:50:d0:38:49:7b:94:38:71:74:1a:1a:bd:
72:ad:2c:fa:c3:68:11:c5:95:57:f2:a8:d5:b5:64:
0e:85:35:31:b2:76:46:fc:04:c4:05:e7:29:77:2d:
b2:3b:dd:fe:9f:44:0d:4b:a3:e0:15:d1:e9:32:08:
ac:90:14:80:86:27:e2:d4:ab:fa:a9:06:b7:eb:41:
72:fc:64:f9:ff:a1:80:4a:89:a2:7c:90:fc:62:47:
a1:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:2D:0A:D7:C9:2F:11:73:8C:50:03:81:B2:84:4D:17:EA:48:EA:92
X509v3 Authority Key Identifier:
keyid:9B:A9:0D:66:D2:DD:EB:64:6A:61:40:69:12:FF:DD:FA:14:E3:99:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m6kNZtLd62RqYUBpEv_d-hTjmRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1b7635-e6ff-4969-b2c0-89fb8fe69633/1/m6kNZtLd62RqYUBpEv_d-hTjmRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1b7635-e6ff-4969-b2c0-89fb8fe69633/1/m6kNZtLd62RqYUBpEv_d-hTjmRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:a8:55:6f:77:f3:e7:4b:49:f2:41:7c:19:f8:21:5f:6e:48:
ce:bd:33:e2:9e:9a:98:bc:20:c6:e7:5f:d2:34:c7:52:d1:43:
1c:9a:11:5b:8b:d0:bc:11:83:8d:c6:3d:01:dd:2f:3d:a3:a9:
07:19:57:57:e8:18:23:86:d1:c8:70:bd:30:e2:8e:74:79:e7:
d3:ae:e1:38:d7:d2:92:26:9c:e1:87:b0:ed:ef:b1:1a:5d:96:
3b:66:4c:65:68:59:e2:77:16:27:9e:78:9c:de:a4:f9:d1:eb:
72:0f:5d:15:73:e5:92:b3:2c:7a:1c:05:fe:d4:7e:49:9f:14:
80:2b:a7:fc:93:32:ce:9c:ae:d3:09:12:e0:92:d4:90:a7:d9:
51:18:18:0a:9d:a8:04:aa:5b:b2:7e:87:de:2e:21:45:cb:42:
1a:ab:28:31:af:11:41:f1:06:8e:15:7e:1a:9f:c8:a9:1a:17:
67:f4:41:c1:36:1e:c4:9e:d3:3b:f3:ad:f0:27:f7:5a:43:76:
d1:0f:ac:b9:b2:e5:bd:46:9d:b1:1c:34:74:7f:ee:e2:3b:bf:
7f:b2:3f:59:1f:94:28:85:bc:75:77:cb:6f:72:a3:4e:da:c7:
2e:db:97:ad:e2:78:3f:62:97:59:62:6d:e4:ed:05:06:20:52:
0a:07:49:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+D97cjqMRoc2lL7eEXA43MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliYTkwZDY2ZDJkZGViNjQ2YTYxNDA2OTEyZmZkZGZhMTRl
Mzk5MTAwHhcNMjUxMDE5MjAwMTE2WhcNMjUxMDIwMjAwMTE2WjAzMTEwLwYDVQQD
Eyg2MzJkMGFkN2M5MmYxMTczOGM1MDAzODFiMjg0NGQxN2VhNDhlYTkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2gDw3G/a6u+jVObYr7BTSZjcSm0N
yqOWPj3nr8kzsrx4CzQj2p3bfwefZGhYc/cuxfJ3qdbzYyjJSg4FAB0sUAzObnAV
dnp9qLHs9cK/XeTuljBqkc1agG7sbWpTFjjgAaMjXXgp9n1rXLGyOm2f1iRZ+x1C
+WGNe5LJK9P8JkyHeJa2Ef/kcY613P5glLVqV19C7uLz80QtyHoeKZEzJbYRiP5l
+81Q0DhJe5Q4cXQaGr1yrSz6w2gRxZVX8qjVtWQOhTUxsnZG/ATEBecpdy2yO93+
n0QNS6PgFdHpMgiskBSAhifi1Kv6qQa360Fy/GT5/6GASomifJD8Ykeh1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGMtCtfJLxFzjFADgbKETRfqSOqSMB8GA1UdIwQY
MBaAFJupDWbS3etkamFAaRL/3foU45kQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbTZrTlp0TGQ2MlJxWVVCcEV2X2QtaFRqbVJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8xYjc2MzUtZTZmZi00OTY5LWIyYzAt
ODlmYjhmZTY5NjMzLzEvbTZrTlp0TGQ2MlJxWVVCcEV2X2QtaFRqbVJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC8xYjc2MzUtZTZmZi00OTY5LWIyYzAtODlmYjhmZTY5NjMz
LzEvbTZrTlp0TGQ2MlJxWVVCcEV2X2QtaFRqbVJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvahVb3fz
50tJ8kF8GfghX25Izr0z4p6amLwgxudf0jTHUtFDHJoRW4vQvBGDjcY9Ad0vPaOp
BxlXV+gYI4bRyHC9MOKOdHnn067hONfSkiac4Yew7e+xGl2WO2ZMZWhZ4ncWJ554
nN6k+dHrcg9dFXPlkrMsehwF/tR+SZ8UgCun/JMyzpyu0wkS4JLUkKfZURgYCp2o
BKpbsn6H3i4hRctCGqsoMa8RQfEGjhV+Gp/IqRoXZ/RBwTYexJ7TO/Ot8Cf3WkN2
0Q+subLlvUadsRw0dH/u4ju/f7I/WR+UKIW8dXfLb3KjTtrHLtuXreJ4P2KXWWJt
5O0FBiBSCgdJGA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:57:30 2025 by rpki-client