Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/5fb9fe-ddc7-4432-a4a3-16d9f7d074f3/1/6MpwwfyVubHp3Hd1RVutuSFPkdA.mft
File: 6MpwwfyVubHp3Hd1RVutuSFPkdA.mft (raw, json)
Hash identifier: GHe01K+3lnAVBhSvTmrGeZGI2sxe3S5VqTWYrh3KbUI=
Subject key identifier: 4F:A2:3B:3A:23:FA:69:CE:F1:89:D6:9F:DC:29:8E:72:A9:7D:93:81
Authority key identifier: E8:CA:70:C1:FC:95:B9:B1:E9:DC:77:75:45:5B:AD:B9:21:4F:91:D0
Certificate issuer: /CN=e8ca70c1fc95b9b1e9dc7775455badb9214f91d0
Certificate serial: 0199FD6B1A2202978D873C6E059229C4914A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6MpwwfyVubHp3Hd1RVutuSFPkdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/5fb9fe-ddc7-4432-a4a3-16d9f7d074f3/1/6MpwwfyVubHp3Hd1RVutuSFPkdA.mft
Manifest number: 15E9
Signing time: Sun 19 Oct 2025 17:01:18 +0000
Manifest this update: Sun 19 Oct 2025 17:01:18 +0000
Manifest next update: Mon 20 Oct 2025 17:01:18 +0000
Files and hashes: 1: 6MpwwfyVubHp3Hd1RVutuSFPkdA.crl (hash: 9CKjgCYYsCpHcUm3vmxkMebLWpT9M3zSKDfEkqhvzts=)
2: h3MBCKUGhHfeEGJEjBUvFcZingY.roa (hash: Kf87fhJV7eWi54ATVvDhv4SnGp1TZLheM1w//OwPipM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/5fb9fe-ddc7-4432-a4a3-16d9f7d074f3/1/6MpwwfyVubHp3Hd1RVutuSFPkdA.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/5fb9fe-ddc7-4432-a4a3-16d9f7d074f3/1/6MpwwfyVubHp3Hd1RVutuSFPkdA.mft
rsync://rpki.ripe.net/repository/DEFAULT/6MpwwfyVubHp3Hd1RVutuSFPkdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:1a:22:02:97:8d:87:3c:6e:05:92:29:c4:91:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8ca70c1fc95b9b1e9dc7775455badb9214f91d0
Validity
Not Before: Oct 19 17:01:18 2025 GMT
Not After : Oct 20 17:01:18 2025 GMT
Subject: CN=4fa23b3a23fa69cef189d69fdc298e72a97d9381
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ca:83:a5:43:2c:49:50:d7:0f:66:71:54:77:
3f:72:8a:e2:ab:d7:90:67:55:71:c0:39:b8:bf:70:
2e:9c:d5:3b:81:19:64:f5:85:54:28:b3:1d:11:de:
13:04:35:5f:53:ca:e6:e0:4e:03:99:86:4e:2a:d2:
f0:82:c2:9f:3b:ed:fd:00:f3:25:b2:93:64:f0:fd:
7b:ff:f4:8a:6b:26:be:37:32:5b:05:0f:40:8d:6d:
23:d4:9c:bb:a0:cd:7c:cc:d0:23:1c:6f:50:8e:d8:
8a:29:59:8e:f6:05:c4:d0:97:9b:29:50:e4:46:a3:
7a:1e:a1:a0:81:84:78:7e:50:9e:d5:f7:9f:ad:6f:
f6:70:fd:9d:bc:9f:84:18:ba:7d:31:bd:f8:61:00:
7f:2b:2d:5a:66:9b:20:f6:c9:2a:6e:52:b4:9f:ad:
22:93:db:ce:be:52:b7:60:f3:35:58:4d:51:8f:92:
e4:21:22:97:d0:23:3e:8d:b3:3a:7b:c4:db:d1:02:
d1:2f:bd:65:94:38:99:99:41:4f:13:08:50:e9:99:
6b:a4:1f:be:b0:c4:39:a2:d1:b0:2a:78:ed:96:bb:
78:71:a0:d3:46:23:5e:fa:d0:5f:c3:05:a4:b7:20:
ce:c5:4e:26:c1:5b:1d:d5:f7:92:94:81:a1:c7:c8:
3c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:A2:3B:3A:23:FA:69:CE:F1:89:D6:9F:DC:29:8E:72:A9:7D:93:81
X509v3 Authority Key Identifier:
keyid:E8:CA:70:C1:FC:95:B9:B1:E9:DC:77:75:45:5B:AD:B9:21:4F:91:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6MpwwfyVubHp3Hd1RVutuSFPkdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5fb9fe-ddc7-4432-a4a3-16d9f7d074f3/1/6MpwwfyVubHp3Hd1RVutuSFPkdA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5fb9fe-ddc7-4432-a4a3-16d9f7d074f3/1/6MpwwfyVubHp3Hd1RVutuSFPkdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:c3:56:0d:13:c2:f5:b0:22:3a:b8:32:7b:c0:4b:3e:4c:e7:
1d:10:8e:8c:3b:49:ec:e8:f3:90:08:7d:9e:f1:a3:85:0c:4b:
a1:70:8a:95:d9:e1:3d:2f:92:50:fe:61:8b:92:37:aa:0e:c1:
9b:30:d0:ba:44:62:68:a2:ac:99:6b:cd:a2:b8:6b:86:1e:60:
d0:f5:ef:6f:67:81:6f:89:24:e0:89:f0:a4:e8:76:0f:75:2e:
29:74:60:f4:22:c8:64:e3:cf:3b:5e:4c:d4:f3:f5:1d:a9:d8:
f5:61:de:c0:c2:bc:8b:0e:7c:5e:57:06:7b:2e:73:64:16:e4:
84:7d:c1:03:c3:a9:10:d9:3d:82:b2:32:7e:03:c0:89:c5:2e:
cd:a6:41:a2:47:0c:f3:ba:0a:b6:fe:7e:88:de:4b:24:c9:be:
29:a0:fa:33:bd:bd:5b:ad:11:e3:1c:3f:e6:ff:3e:03:61:9b:
26:de:61:dc:ef:11:25:ad:a0:27:28:0c:b4:ce:0c:9c:8d:63:
19:11:f5:b9:35:a0:32:4d:b9:65:a2:2a:f3:a0:b0:66:ca:af:
d0:f1:dd:bf:9a:02:5b:e3:ca:05:3c:bd:d5:4f:31:e5:96:09:
75:ac:02:04:ad:50:90:77:1c:0f:8b:59:d4:06:ed:2d:fd:62:
2c:bd:5d:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9axoiApeNhzxuBZIpxJFKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4Y2E3MGMxZmM5NWI5YjFlOWRjNzc3NTQ1NWJhZGI5MjE0
ZjkxZDAwHhcNMjUxMDE5MTcwMTE4WhcNMjUxMDIwMTcwMTE4WjAzMTEwLwYDVQQD
Eyg0ZmEyM2IzYTIzZmE2OWNlZjE4OWQ2OWZkYzI5OGU3MmE5N2Q5MzgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8qDpUMsSVDXD2ZxVHc/coriq9eQ
Z1VxwDm4v3AunNU7gRlk9YVUKLMdEd4TBDVfU8rm4E4DmYZOKtLwgsKfO+39APMl
spNk8P17//SKaya+NzJbBQ9AjW0j1Jy7oM18zNAjHG9QjtiKKVmO9gXE0JebKVDk
RqN6HqGggYR4flCe1fefrW/2cP2dvJ+EGLp9Mb34YQB/Ky1aZpsg9skqblK0n60i
k9vOvlK3YPM1WE1Rj5LkISKX0CM+jbM6e8Tb0QLRL71llDiZmUFPEwhQ6ZlrpB++
sMQ5otGwKnjtlrt4caDTRiNe+tBfwwWktyDOxU4mwVsd1feSlIGhx8g8hwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE+iOzoj+mnO8YnWn9wpjnKpfZOBMB8GA1UdIwQY
MBaAFOjKcMH8lbmx6dx3dUVbrbkhT5HQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNk1wd3dmeVZ1YkhwM0hkMVJWdXR1U0ZQa2RBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy81ZmI5ZmUtZGRjNy00NDMyLWE0YTMt
MTZkOWY3ZDA3NGYzLzEvNk1wd3dmeVZ1YkhwM0hkMVJWdXR1U0ZQa2RBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy81ZmI5ZmUtZGRjNy00NDMyLWE0YTMtMTZkOWY3ZDA3NGYz
LzEvNk1wd3dmeVZ1YkhwM0hkMVJWdXR1U0ZQa2RBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFMNWDRPC
9bAiOrgye8BLPkznHRCOjDtJ7OjzkAh9nvGjhQxLoXCKldnhPS+SUP5hi5I3qg7B
mzDQukRiaKKsmWvNorhrhh5g0PXvb2eBb4kk4InwpOh2D3UuKXRg9CLIZOPPO15M
1PP1HanY9WHewMK8iw58XlcGey5zZBbkhH3BA8OpENk9grIyfgPAicUuzaZBokcM
87oKtv5+iN5LJMm+KaD6M729W60R4xw/5v8+A2GbJt5h3O8RJa2gJygMtM4MnI1j
GRH1uTWgMk25ZaIq86CwZsqv0PHdv5oCW+PKBTy91U8x5ZYJdawCBK1QkHccD4tZ
1AbtLf1iLL1d/g==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:13:46 2025 by rpki-client