Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/c4160d-772b-4567-a54e-751ac6807b04/1/6NZy-mCu5MJzoRUH9JtYTcVSxHI.mft
File: 6NZy-mCu5MJzoRUH9JtYTcVSxHI.mft (raw, json)
Hash identifier: E8wdX3jG80JIRnoRskCSgF05Tl6H6vFFdb30onffvAs=
Subject key identifier: 2B:A6:6F:0F:79:5C:EB:98:E3:84:9F:AB:DF:08:93:DA:74:25:89:0F
Authority key identifier: E8:D6:72:FA:60:AE:E4:C2:73:A1:15:07:F4:9B:58:4D:C5:52:C4:72
Certificate issuer: /CN=e8d672fa60aee4c273a11507f49b584dc552c472
Certificate serial: 019A00A33E6966C039E1006B4341C9426A39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6NZy-mCu5MJzoRUH9JtYTcVSxHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/c4160d-772b-4567-a54e-751ac6807b04/1/6NZy-mCu5MJzoRUH9JtYTcVSxHI.mft
Manifest number: 062D
Signing time: Mon 20 Oct 2025 08:01:29 +0000
Manifest this update: Mon 20 Oct 2025 08:01:29 +0000
Manifest next update: Tue 21 Oct 2025 08:01:29 +0000
Files and hashes: 1: 6NZy-mCu5MJzoRUH9JtYTcVSxHI.crl (hash: QQfNU6QqcyNOTvq25X1CZDyvrnyweG9IKbDa8DYu1Ls=)
2: CRKNGf_xuZYF0kNapyVmFyPmlEw.roa (hash: No5hma8g70yPMrFd8Y5GeYsaZ5JGY9aPRg048GjHko8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/c4160d-772b-4567-a54e-751ac6807b04/1/6NZy-mCu5MJzoRUH9JtYTcVSxHI.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/c4160d-772b-4567-a54e-751ac6807b04/1/6NZy-mCu5MJzoRUH9JtYTcVSxHI.mft
rsync://rpki.ripe.net/repository/DEFAULT/6NZy-mCu5MJzoRUH9JtYTcVSxHI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 08:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:a3:3e:69:66:c0:39:e1:00:6b:43:41:c9:42:6a:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8d672fa60aee4c273a11507f49b584dc552c472
Validity
Not Before: Oct 20 08:01:29 2025 GMT
Not After : Oct 21 08:01:29 2025 GMT
Subject: CN=2ba66f0f795ceb98e3849fabdf0893da7425890f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f3:9c:4d:f7:0e:8e:7c:c4:57:d7:1b:c4:e7:
6f:7b:95:1f:98:9d:e0:73:82:a5:32:fd:f6:9d:84:
ad:ca:bb:3a:fe:a4:4f:53:c3:6c:47:bb:66:a6:27:
60:5b:58:7b:30:e6:b6:11:65:97:ab:44:58:c7:cc:
eb:78:c3:58:1e:72:48:f2:a0:57:0c:0c:a5:1a:85:
5a:cf:e5:75:16:00:84:d5:8a:25:79:63:58:f7:62:
fd:e3:80:f9:f9:2c:cc:23:15:c6:e9:96:f9:2e:70:
ba:81:3d:ad:5d:8e:8a:ab:3d:18:58:fa:61:f0:59:
41:4b:15:0a:67:bd:24:cc:d3:24:7d:05:df:4f:88:
ee:0e:44:07:68:4f:2c:e0:51:00:59:06:87:4b:29:
70:d3:df:e8:0d:52:4d:20:75:80:bd:b0:68:e0:88:
6b:7a:58:94:f4:e9:f7:29:a1:58:de:4d:d5:40:5b:
14:15:ea:10:af:b7:78:bf:02:3d:67:45:f6:c7:62:
f8:88:94:54:6b:c4:10:d6:a7:9e:2d:87:ab:03:a9:
79:fd:f3:c8:87:d2:63:5f:16:c7:27:70:56:b1:91:
ab:9a:63:5b:cd:da:d1:29:c6:62:da:d3:2a:cb:b9:
0d:62:44:a9:14:52:6b:e1:ed:15:30:b0:ac:a2:28:
7d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:A6:6F:0F:79:5C:EB:98:E3:84:9F:AB:DF:08:93:DA:74:25:89:0F
X509v3 Authority Key Identifier:
keyid:E8:D6:72:FA:60:AE:E4:C2:73:A1:15:07:F4:9B:58:4D:C5:52:C4:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6NZy-mCu5MJzoRUH9JtYTcVSxHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c4160d-772b-4567-a54e-751ac6807b04/1/6NZy-mCu5MJzoRUH9JtYTcVSxHI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c4160d-772b-4567-a54e-751ac6807b04/1/6NZy-mCu5MJzoRUH9JtYTcVSxHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
da:a5:e2:ad:9d:01:4d:df:31:25:5d:00:5a:75:35:ce:40:de:
d1:02:a5:0f:b3:84:e2:97:fd:7a:2a:d5:eb:fc:68:2a:8e:4c:
8e:ea:01:6e:1d:08:3c:4a:a7:55:7b:d5:ed:15:e1:58:a7:9d:
a8:7d:03:62:99:3f:6f:32:95:47:80:f8:19:79:bf:26:4b:51:
79:f2:1f:de:10:21:af:6b:59:28:68:54:6e:96:e3:d8:b5:bc:
7d:06:38:66:67:cf:05:7b:ad:b6:74:ed:96:5e:03:15:52:0b:
aa:b2:5f:80:23:e0:6f:26:cd:40:f4:78:93:3d:7f:5a:61:a2:
bd:96:60:d9:b9:56:94:f6:c1:47:de:41:0f:3f:92:a3:6e:ba:
68:9f:33:8a:94:ad:d4:19:d2:47:28:74:a6:59:10:1f:36:0a:
3d:db:35:b2:d0:08:46:22:e4:fb:72:6b:f1:a7:85:21:68:c8:
e1:95:43:c3:5c:2d:4c:ee:89:2e:2b:9e:37:2b:92:24:cc:df:
e1:cf:34:23:6e:d5:fa:63:cf:3e:ad:4b:48:85:f9:f0:05:94:
56:15:2a:af:46:0e:1e:1b:25:93:80:3c:92:d2:fb:5a:7d:70:
53:95:a8:12:a8:93:13:d8:4f:69:43:90:97:b6:c0:1d:90:24:
3a:2c:d0:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoAoz5pZsA54QBrQ0HJQmo5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4ZDY3MmZhNjBhZWU0YzI3M2ExMTUwN2Y0OWI1ODRkYzU1
MmM0NzIwHhcNMjUxMDIwMDgwMTI5WhcNMjUxMDIxMDgwMTI5WjAzMTEwLwYDVQQD
EygyYmE2NmYwZjc5NWNlYjk4ZTM4NDlmYWJkZjA4OTNkYTc0MjU4OTBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/OcTfcOjnzEV9cbxOdve5UfmJ3g
c4KlMv32nYStyrs6/qRPU8NsR7tmpidgW1h7MOa2EWWXq0RYx8zreMNYHnJI8qBX
DAylGoVaz+V1FgCE1YoleWNY92L944D5+SzMIxXG6Zb5LnC6gT2tXY6Kqz0YWPph
8FlBSxUKZ70kzNMkfQXfT4juDkQHaE8s4FEAWQaHSylw09/oDVJNIHWAvbBo4Ihr
eliU9On3KaFY3k3VQFsUFeoQr7d4vwI9Z0X2x2L4iJRUa8QQ1qeeLYerA6l5/fPI
h9JjXxbHJ3BWsZGrmmNbzdrRKcZi2tMqy7kNYkSpFFJr4e0VMLCsoih9xQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCumbw95XOuY44Sfq98Ik9p0JYkPMB8GA1UdIwQY
MBaAFOjWcvpgruTCc6EVB/SbWE3FUsRyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNk5aeS1tQ3U1TUp6b1JVSDlKdFlUY1ZTeEhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy9jNDE2MGQtNzcyYi00NTY3LWE1NGUt
NzUxYWM2ODA3YjA0LzEvNk5aeS1tQ3U1TUp6b1JVSDlKdFlUY1ZTeEhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy9jNDE2MGQtNzcyYi00NTY3LWE1NGUtNzUxYWM2ODA3YjA0
LzEvNk5aeS1tQ3U1TUp6b1JVSDlKdFlUY1ZTeEhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2qXirZ0B
Td8xJV0AWnU1zkDe0QKlD7OE4pf9eirV6/xoKo5MjuoBbh0IPEqnVXvV7RXhWKed
qH0DYpk/bzKVR4D4GXm/JktRefIf3hAhr2tZKGhUbpbj2LW8fQY4ZmfPBXuttnTt
ll4DFVILqrJfgCPgbybNQPR4kz1/WmGivZZg2blWlPbBR95BDz+So266aJ8zipSt
1BnSRyh0plkQHzYKPds1stAIRiLk+3Jr8aeFIWjI4ZVDw1wtTO6JLiueNyuSJMzf
4c80I27V+mPPPq1LSIX58AWUVhUqr0YOHhslk4A8ktL7Wn1wU5WoEqiTE9hPaUOQ
l7bAHZAkOizQBA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 19:02:55 2025 by rpki-client