Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/d62d22-82f2-4b20-bac4-601a725a00f5/1/6R8nKxPHUBQ8fsh-DIAq6tisbgc.mft
File: 6R8nKxPHUBQ8fsh-DIAq6tisbgc.mft (raw, json)
Hash identifier: KMcHpvAl3MoIfWM+7aYwVr2YUXHd4KktkZLeB6YlEpo=
Subject key identifier: 7E:BD:C2:FD:65:D5:BD:82:F0:3E:C5:B3:E8:87:19:3C:07:06:BD:E7
Authority key identifier: E9:1F:27:2B:13:C7:50:14:3C:7E:C8:7E:0C:80:2A:EA:D8:AC:6E:07
Certificate issuer: /CN=e91f272b13c750143c7ec87e0c802aead8ac6e07
Certificate serial: 0199FC8FC04D4DA3B5BD99B9A27616CCDDA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6R8nKxPHUBQ8fsh-DIAq6tisbgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/d62d22-82f2-4b20-bac4-601a725a00f5/1/6R8nKxPHUBQ8fsh-DIAq6tisbgc.mft
Manifest number: 0C40
Signing time: Sun 19 Oct 2025 13:01:43 +0000
Manifest this update: Sun 19 Oct 2025 13:01:43 +0000
Manifest next update: Mon 20 Oct 2025 13:01:43 +0000
Files and hashes: 1: 6R8nKxPHUBQ8fsh-DIAq6tisbgc.crl (hash: hZCeIw4+fVqr0ol+smnD8TQT2NIbi3DEYjkaWDW+n9s=)
2: 9SpuyxwY5s_DY9H2HuXrbxGl_AE.roa (hash: 8TyA+krjmjGFWghMXqG0FTTJGiUwEj3FhItOTxb8jEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/d62d22-82f2-4b20-bac4-601a725a00f5/1/6R8nKxPHUBQ8fsh-DIAq6tisbgc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/d62d22-82f2-4b20-bac4-601a725a00f5/1/6R8nKxPHUBQ8fsh-DIAq6tisbgc.mft
rsync://rpki.ripe.net/repository/DEFAULT/6R8nKxPHUBQ8fsh-DIAq6tisbgc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:c0:4d:4d:a3:b5:bd:99:b9:a2:76:16:cc:dd:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e91f272b13c750143c7ec87e0c802aead8ac6e07
Validity
Not Before: Oct 19 13:01:43 2025 GMT
Not After : Oct 20 13:01:43 2025 GMT
Subject: CN=7ebdc2fd65d5bd82f03ec5b3e887193c0706bde7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6a:cd:da:b3:d2:25:f4:93:48:c1:dc:af:fe:
1d:c6:7c:3a:a6:00:11:94:17:24:fd:de:fa:74:c3:
1d:9d:cd:62:dd:92:08:21:37:9a:06:11:83:0e:23:
9c:b2:12:f2:1a:a4:d3:4e:ec:da:cb:47:11:c3:17:
52:5e:cd:5e:4d:49:a5:b1:21:2e:29:43:c9:d2:88:
0e:f2:00:d0:80:b0:cb:d6:1b:ff:11:cf:ad:20:7b:
f2:ab:a8:c9:f0:91:93:26:b0:9c:c0:68:81:9a:94:
ff:a5:57:34:85:16:13:ab:f7:6d:b1:f0:3a:d5:b4:
a6:68:d6:0c:60:ab:88:28:44:1e:ae:7e:f3:a2:2f:
82:00:6c:a2:95:80:11:90:9e:ce:46:e9:73:e2:bd:
80:0b:fc:00:77:ac:88:96:89:02:50:f7:82:b8:b0:
d2:73:4b:a4:9e:78:a2:05:a2:91:9a:4f:c9:66:ca:
fe:2c:ba:06:67:25:f9:4d:84:40:6b:9e:97:b6:26:
3d:a2:15:b6:02:20:97:ee:ed:16:e7:f7:00:c3:2d:
89:70:55:47:3b:a1:c6:42:3d:13:9d:b1:bd:8f:d9:
50:06:55:f6:26:10:92:57:ec:67:47:2f:f3:7b:57:
38:24:1a:33:8a:34:cc:19:2a:6c:84:86:0e:2b:26:
a0:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:BD:C2:FD:65:D5:BD:82:F0:3E:C5:B3:E8:87:19:3C:07:06:BD:E7
X509v3 Authority Key Identifier:
keyid:E9:1F:27:2B:13:C7:50:14:3C:7E:C8:7E:0C:80:2A:EA:D8:AC:6E:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6R8nKxPHUBQ8fsh-DIAq6tisbgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d62d22-82f2-4b20-bac4-601a725a00f5/1/6R8nKxPHUBQ8fsh-DIAq6tisbgc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d62d22-82f2-4b20-bac4-601a725a00f5/1/6R8nKxPHUBQ8fsh-DIAq6tisbgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:32:5d:b6:d5:49:18:d5:f3:2c:e6:74:e3:cd:e8:94:02:d6:
a9:e8:7a:6e:e7:32:a3:83:0a:9f:a0:3c:45:b7:ca:9b:6b:12:
41:b4:dc:f9:b7:71:4a:7f:2f:ea:13:aa:72:f1:ea:5d:38:12:
e3:e9:83:3c:12:c4:6e:4d:17:39:05:06:77:ad:fe:e4:43:f5:
6a:d3:ca:ce:5b:4f:c2:83:ed:d1:c0:ec:d1:33:eb:d5:ce:f2:
23:80:55:50:40:df:bd:a9:ba:2e:a2:00:ff:e0:d4:9c:84:c5:
1c:c4:60:63:ad:52:04:0a:0a:d5:f3:bb:4f:da:58:87:dd:77:
fe:d9:0b:7d:27:ac:7e:a1:b7:c1:3d:7f:c5:9f:13:3a:b2:2c:
f7:d7:f6:5d:4e:82:e0:7d:c0:3e:e4:51:6d:b8:30:ff:d7:7d:
aa:2d:f4:20:21:5d:36:86:ae:86:bf:58:ee:e1:6a:d2:88:13:
d9:87:38:96:c7:93:f0:54:d2:92:24:ae:ab:9e:ec:e5:32:77:
e1:f6:df:10:c2:a3:fa:46:79:20:53:2f:23:8e:c1:0a:ec:97:
f1:b1:40:34:49:6b:b7:43:c5:01:09:fe:25:63:cd:06:6e:c2:
e4:9d:ce:52:5a:1d:84:50:35:cf:b4:14:e2:30:d1:1b:3b:2b:
5b:52:43:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8j8BNTaO1vZm5onYWzN2pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5MWYyNzJiMTNjNzUwMTQzYzdlYzg3ZTBjODAyYWVhZDhh
YzZlMDcwHhcNMjUxMDE5MTMwMTQzWhcNMjUxMDIwMTMwMTQzWjAzMTEwLwYDVQQD
Eyg3ZWJkYzJmZDY1ZDViZDgyZjAzZWM1YjNlODg3MTkzYzA3MDZiZGU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmrN2rPSJfSTSMHcr/4dxnw6pgAR
lBck/d76dMMdnc1i3ZIIITeaBhGDDiOcshLyGqTTTuzay0cRwxdSXs1eTUmlsSEu
KUPJ0ogO8gDQgLDL1hv/Ec+tIHvyq6jJ8JGTJrCcwGiBmpT/pVc0hRYTq/dtsfA6
1bSmaNYMYKuIKEQern7zoi+CAGyilYARkJ7ORulz4r2AC/wAd6yIlokCUPeCuLDS
c0uknniiBaKRmk/JZsr+LLoGZyX5TYRAa56XtiY9ohW2AiCX7u0W5/cAwy2JcFVH
O6HGQj0TnbG9j9lQBlX2JhCSV+xnRy/ze1c4JBozijTMGSpshIYOKyagswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH69wv1l1b2C8D7Fs+iHGTwHBr3nMB8GA1UdIwQY
MBaAFOkfJysTx1AUPH7IfgyAKurYrG4HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlI4bkt4UEhVQlE4ZnNoLURJQXE2dGlzYmdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9kNjJkMjItODJmMi00YjIwLWJhYzQt
NjAxYTcyNWEwMGY1LzEvNlI4bkt4UEhVQlE4ZnNoLURJQXE2dGlzYmdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy9kNjJkMjItODJmMi00YjIwLWJhYzQtNjAxYTcyNWEwMGY1
LzEvNlI4bkt4UEhVQlE4ZnNoLURJQXE2dGlzYmdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGTJdttVJ
GNXzLOZ0483olALWqeh6bucyo4MKn6A8RbfKm2sSQbTc+bdxSn8v6hOqcvHqXTgS
4+mDPBLEbk0XOQUGd63+5EP1atPKzltPwoPt0cDs0TPr1c7yI4BVUEDfvam6LqIA
/+DUnITFHMRgY61SBAoK1fO7T9pYh913/tkLfSesfqG3wT1/xZ8TOrIs99f2XU6C
4H3APuRRbbgw/9d9qi30ICFdNoauhr9Y7uFq0ogT2Yc4lseT8FTSkiSuq57s5TJ3
4fbfEMKj+kZ5IFMvI47BCuyX8bFANElrt0PFAQn+JWPNBm7C5J3OUlodhFA1z7QU
4jDRGzsrW1JDbA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:28:44 2025 by rpki-client