Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/8c5bc7-55fa-4044-88da-68185fdb9003/1/b6SOlhl0JuTF7rQj4P2cLpUsQXc.mft
File: b6SOlhl0JuTF7rQj4P2cLpUsQXc.mft (raw, json)
Hash identifier: pFs7AZ7/+26jFxdcJ9mT/v46P+mSa1sOK6lmV7Ihvlw=
Subject key identifier: 2D:D7:1E:F2:72:E4:6A:57:C2:CE:C7:C9:C7:29:5F:CD:53:C1:9A:A8
Authority key identifier: 6F:A4:8E:96:19:74:26:E4:C5:EE:B4:23:E0:FD:9C:2E:95:2C:41:77
Certificate issuer: /CN=6fa48e96197426e4c5eeb423e0fd9c2e952c4177
Certificate serial: 0199FD3476820113CB42C5C46B47BEA46ECE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b6SOlhl0JuTF7rQj4P2cLpUsQXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/8c5bc7-55fa-4044-88da-68185fdb9003/1/b6SOlhl0JuTF7rQj4P2cLpUsQXc.mft
Manifest number: 1626
Signing time: Sun 19 Oct 2025 16:01:37 +0000
Manifest this update: Sun 19 Oct 2025 16:01:37 +0000
Manifest next update: Mon 20 Oct 2025 16:01:37 +0000
Files and hashes: 1: 9eMR4FNJDVauWkWIUPQVpbQ5CXg.roa (hash: u33y8H6nVy03TdakAVCKdnmWlusbHupRimP8Gevy98g=)
2: b6SOlhl0JuTF7rQj4P2cLpUsQXc.crl (hash: JnUM/zzZf6Q0C9OtXj03SHIU2uY7CERNH5mqlZZarII=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/8c5bc7-55fa-4044-88da-68185fdb9003/1/b6SOlhl0JuTF7rQj4P2cLpUsQXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/8c5bc7-55fa-4044-88da-68185fdb9003/1/b6SOlhl0JuTF7rQj4P2cLpUsQXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/b6SOlhl0JuTF7rQj4P2cLpUsQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:76:82:01:13:cb:42:c5:c4:6b:47:be:a4:6e:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fa48e96197426e4c5eeb423e0fd9c2e952c4177
Validity
Not Before: Oct 19 16:01:37 2025 GMT
Not After : Oct 20 16:01:37 2025 GMT
Subject: CN=2dd71ef272e46a57c2cec7c9c7295fcd53c19aa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8f:94:6e:95:d9:0e:97:90:76:87:33:6e:9a:
2e:06:d1:dd:d8:0b:80:62:72:b7:fd:df:23:90:01:
eb:25:69:56:92:e2:94:05:3a:ec:44:84:b7:d2:a9:
e6:0b:4d:fc:09:74:81:9d:2f:f5:7d:fa:f6:c4:8d:
3f:a4:e7:ec:a7:1e:ae:03:ec:bd:bc:5d:be:e5:c9:
f1:e5:c8:9f:d1:69:bd:d7:ec:94:1d:21:55:1e:c3:
a1:bb:0a:d9:f9:1b:34:78:95:0e:2b:91:89:cb:2a:
f4:6e:a7:df:cd:d3:ed:ac:0f:cc:bc:7c:40:74:27:
ba:72:dc:90:ed:77:f0:7e:cd:99:f8:85:14:4d:c6:
cc:23:9a:6d:c6:37:47:86:80:54:97:14:eb:cd:35:
4a:d8:ba:2f:9d:03:16:41:b0:cc:4a:c7:78:1c:30:
25:d6:a7:2b:7c:07:b8:15:5b:ff:ce:9f:7d:51:fc:
1c:6c:39:fd:21:25:85:e4:f1:ef:e3:84:44:e6:37:
7d:b8:bc:fe:2c:8b:f2:aa:fb:a7:61:1e:37:8c:1c:
9d:68:7a:dc:75:31:c4:ef:f6:f0:ea:c2:98:00:db:
2e:ef:f1:72:51:35:56:50:31:90:7f:d7:84:8a:14:
1d:18:92:ef:0c:00:e4:e4:96:5c:03:57:05:11:96:
ef:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:D7:1E:F2:72:E4:6A:57:C2:CE:C7:C9:C7:29:5F:CD:53:C1:9A:A8
X509v3 Authority Key Identifier:
keyid:6F:A4:8E:96:19:74:26:E4:C5:EE:B4:23:E0:FD:9C:2E:95:2C:41:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6SOlhl0JuTF7rQj4P2cLpUsQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/8c5bc7-55fa-4044-88da-68185fdb9003/1/b6SOlhl0JuTF7rQj4P2cLpUsQXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/8c5bc7-55fa-4044-88da-68185fdb9003/1/b6SOlhl0JuTF7rQj4P2cLpUsQXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:82:71:d5:d7:e9:87:c4:84:40:ef:34:b4:4d:4d:27:ec:f3:
ca:42:32:4b:36:97:fc:eb:69:92:74:c1:ab:44:36:fc:5a:0e:
d6:16:18:99:09:de:f5:d8:a7:15:8a:ae:38:70:8b:c6:07:ee:
70:c3:ae:d7:c8:0e:6e:1d:63:42:96:24:ef:e5:56:73:75:fc:
d8:3f:4a:61:45:5a:ca:56:65:2a:a6:bb:57:60:71:25:42:b3:
ed:41:b6:b1:56:ef:f3:82:d1:9a:68:d0:f9:79:aa:a4:ee:17:
09:a5:d4:b8:86:5b:9e:84:20:29:8a:c2:f2:21:4b:92:6c:8e:
f7:78:a6:c5:2d:39:b6:b3:f8:0e:99:ea:0a:ca:c4:29:53:ee:
e6:ad:76:70:09:60:70:2b:04:96:ed:a9:7d:0d:a2:cb:82:fc:
a4:08:37:f6:fd:11:f1:e2:4b:df:09:e7:91:be:f6:bc:2b:c2:
34:b5:df:cf:3e:70:fc:65:99:6b:f9:40:f1:30:1b:64:c8:ce:
82:96:30:2d:6e:e7:da:ce:9d:20:1c:6c:e1:41:b7:8e:bc:87:
1c:70:ab:75:12:fa:b7:92:f8:90:93:fc:eb:d2:4b:5f:b8:37:
a7:c1:7d:3c:53:eb:e6:c2:77:b0:0f:a6:a5:d3:af:61:54:2a:
e9:60:7e:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9NHaCARPLQsXEa0e+pG7OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmYTQ4ZTk2MTk3NDI2ZTRjNWVlYjQyM2UwZmQ5YzJlOTUy
YzQxNzcwHhcNMjUxMDE5MTYwMTM3WhcNMjUxMDIwMTYwMTM3WjAzMTEwLwYDVQQD
EygyZGQ3MWVmMjcyZTQ2YTU3YzJjZWM3YzljNzI5NWZjZDUzYzE5YWE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwY+UbpXZDpeQdoczbpouBtHd2AuA
YnK3/d8jkAHrJWlWkuKUBTrsRIS30qnmC038CXSBnS/1ffr2xI0/pOfspx6uA+y9
vF2+5cnx5cif0Wm91+yUHSFVHsOhuwrZ+Rs0eJUOK5GJyyr0bqffzdPtrA/MvHxA
dCe6ctyQ7Xfwfs2Z+IUUTcbMI5ptxjdHhoBUlxTrzTVK2LovnQMWQbDMSsd4HDAl
1qcrfAe4FVv/zp99UfwcbDn9ISWF5PHv44RE5jd9uLz+LIvyqvunYR43jBydaHrc
dTHE7/bw6sKYANsu7/FyUTVWUDGQf9eEihQdGJLvDADk5JZcA1cFEZbvwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC3XHvJy5GpXws7HyccpX81TwZqoMB8GA1UdIwQY
MBaAFG+kjpYZdCbkxe60I+D9nC6VLEF3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjZTT2xobDBKdVRGN3JRajRQMmNMcFVzUVhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC84YzViYzctNTVmYS00MDQ0LTg4ZGEt
NjgxODVmZGI5MDAzLzEvYjZTT2xobDBKdVRGN3JRajRQMmNMcFVzUVhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC84YzViYzctNTVmYS00MDQ0LTg4ZGEtNjgxODVmZGI5MDAz
LzEvYjZTT2xobDBKdVRGN3JRajRQMmNMcFVzUVhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJoJx1dfp
h8SEQO80tE1NJ+zzykIySzaX/OtpknTBq0Q2/FoO1hYYmQne9dinFYquOHCLxgfu
cMOu18gObh1jQpYk7+VWc3X82D9KYUVaylZlKqa7V2BxJUKz7UG2sVbv84LRmmjQ
+XmqpO4XCaXUuIZbnoQgKYrC8iFLkmyO93imxS05trP4DpnqCsrEKVPu5q12cAlg
cCsElu2pfQ2iy4L8pAg39v0R8eJL3wnnkb72vCvCNLXfzz5w/GWZa/lA8TAbZMjO
gpYwLW7n2s6dIBxs4UG3jryHHHCrdRL6t5L4kJP869JLX7g3p8F9PFPr5sJ3sA+m
pdOvYVQq6WB+yg==
-----END CERTIFICATE-----
Generated at Mon Oct 20 01:10:52 2025 by rpki-client