Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/cd092e-6beb-4037-8a5a-fae8d42ae5e5/1/6EKkZljB0BusjUOWHGtJ54jjzMM.mft
File: 6EKkZljB0BusjUOWHGtJ54jjzMM.mft (raw, json)
Hash identifier: NFuYb1yq3XRKuWDrYDhn8HK4M5KRq00/C5OMDWKXGfo=
Subject key identifier: 32:F3:48:3A:61:9A:A1:57:64:D6:74:3E:EB:C5:E6:4F:F2:00:83:1A
Authority key identifier: E8:42:A4:66:58:C1:D0:1B:AC:8D:43:96:1C:6B:49:E7:88:E3:CC:C3
Certificate issuer: /CN=e842a46658c1d01bac8d43961c6b49e788e3ccc3
Certificate serial: 0199FD6B013A6ED78A5760B9DDE20DA7F82C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6EKkZljB0BusjUOWHGtJ54jjzMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/cd092e-6beb-4037-8a5a-fae8d42ae5e5/1/6EKkZljB0BusjUOWHGtJ54jjzMM.mft
Manifest number: 16E6
Signing time: Sun 19 Oct 2025 17:01:12 +0000
Manifest this update: Sun 19 Oct 2025 17:01:12 +0000
Manifest next update: Mon 20 Oct 2025 17:01:12 +0000
Files and hashes: 1: 6EKkZljB0BusjUOWHGtJ54jjzMM.crl (hash: /cQtvgcwzpsrhfnqVvAAkJ90QUS3wYeoyd8fOP8c3wE=)
2: xANWJIQxy5Izrn9gOyePr5tbhgY.roa (hash: BAFdEGijvRbR7pMhm3hhAYe67gFmqJkY0ASzrXKygw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/cd092e-6beb-4037-8a5a-fae8d42ae5e5/1/6EKkZljB0BusjUOWHGtJ54jjzMM.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/cd092e-6beb-4037-8a5a-fae8d42ae5e5/1/6EKkZljB0BusjUOWHGtJ54jjzMM.mft
rsync://rpki.ripe.net/repository/DEFAULT/6EKkZljB0BusjUOWHGtJ54jjzMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:01:3a:6e:d7:8a:57:60:b9:dd:e2:0d:a7:f8:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e842a46658c1d01bac8d43961c6b49e788e3ccc3
Validity
Not Before: Oct 19 17:01:12 2025 GMT
Not After : Oct 20 17:01:12 2025 GMT
Subject: CN=32f3483a619aa15764d6743eebc5e64ff200831a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9b:6e:e4:36:9f:c0:c3:ae:e7:5c:70:e9:e2:
d2:9f:50:46:13:2e:37:33:8c:62:be:35:3f:5f:23:
5e:51:fd:51:56:e8:2f:a3:2c:39:92:f9:b0:a9:4c:
74:2c:13:b4:1b:20:08:55:dc:2a:61:d9:b6:2c:0d:
30:b1:c2:20:e7:67:73:62:8e:fb:1a:68:c1:1c:18:
6c:aa:86:27:be:bb:3d:c0:46:a4:fd:cb:28:82:80:
e9:58:39:f1:aa:74:38:0b:2c:ec:f1:62:c8:90:bd:
ea:64:ef:4d:cf:ea:a1:ef:2a:8b:0a:27:8a:f4:74:
68:d3:0a:28:e0:ed:51:36:79:d6:53:3c:26:1f:27:
ae:83:b0:57:c6:b4:c6:5c:9c:eb:dc:b1:b3:4d:29:
29:c7:f9:37:8c:4c:c9:ea:b0:6d:8c:c6:9f:7a:42:
da:b6:7a:66:8d:b6:30:db:38:25:f6:86:48:8d:b0:
1d:69:27:fa:cf:14:a6:69:92:62:29:fd:96:f2:9e:
df:8c:23:d6:8b:03:02:d9:61:25:fc:f7:8c:8a:27:
62:39:3b:65:3e:3d:91:ff:8b:d7:1e:f8:dd:3a:61:
f2:96:67:df:28:fb:df:f7:88:a4:d9:b1:34:92:f4:
27:44:f2:02:0a:47:0a:00:fd:40:cf:bd:8d:07:10:
10:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:F3:48:3A:61:9A:A1:57:64:D6:74:3E:EB:C5:E6:4F:F2:00:83:1A
X509v3 Authority Key Identifier:
keyid:E8:42:A4:66:58:C1:D0:1B:AC:8D:43:96:1C:6B:49:E7:88:E3:CC:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EKkZljB0BusjUOWHGtJ54jjzMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/cd092e-6beb-4037-8a5a-fae8d42ae5e5/1/6EKkZljB0BusjUOWHGtJ54jjzMM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/cd092e-6beb-4037-8a5a-fae8d42ae5e5/1/6EKkZljB0BusjUOWHGtJ54jjzMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:c0:6c:08:36:4f:d9:c4:ce:6a:11:12:b0:74:b4:5a:f5:10:
04:1f:8f:88:7a:e1:ef:39:4f:f7:74:09:03:1c:66:59:74:e8:
81:b8:5a:3c:dd:a8:64:d9:50:29:33:1d:90:cc:f5:77:21:85:
27:51:46:5c:3f:f4:38:ac:0a:fa:07:2b:4c:cc:42:85:1c:0a:
e0:77:c0:0d:6f:27:8c:23:be:81:50:fd:9c:b5:16:3f:5a:14:
63:68:5c:46:cf:36:2e:a4:d7:70:92:ca:c3:70:56:b1:5b:7c:
c6:80:3a:0c:c4:89:b7:85:00:e2:b7:e2:21:68:6d:86:7b:d4:
c6:9a:c1:93:0c:be:cc:da:fe:57:7d:7a:8f:f4:a3:0c:10:86:
07:75:0b:7d:66:e6:79:e7:2c:6b:81:74:c9:16:11:0e:a4:83:
cf:ee:2a:a5:b5:b7:bd:65:cd:4e:ba:d6:e1:db:3b:33:92:6e:
c6:c3:f9:e9:e8:c5:c1:f1:02:67:10:3b:76:15:1e:8e:e5:81:
87:c9:ba:69:98:c8:4f:3b:03:78:3e:04:8b:77:48:7a:e2:51:
9c:00:98:df:6b:8e:3e:9c:bc:54:ef:fe:30:28:4f:d7:4e:0a:
bc:43:52:a6:65:a7:fb:ec:6b:4e:84:e1:8c:51:ac:0a:72:93:
68:8b:fe:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9awE6bteKV2C53eINp/gsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4NDJhNDY2NThjMWQwMWJhYzhkNDM5NjFjNmI0OWU3ODhl
M2NjYzMwHhcNMjUxMDE5MTcwMTEyWhcNMjUxMDIwMTcwMTEyWjAzMTEwLwYDVQQD
EygzMmYzNDgzYTYxOWFhMTU3NjRkNjc0M2VlYmM1ZTY0ZmYyMDA4MzFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5tu5DafwMOu51xw6eLSn1BGEy43
M4xivjU/XyNeUf1RVugvoyw5kvmwqUx0LBO0GyAIVdwqYdm2LA0wscIg52dzYo77
GmjBHBhsqoYnvrs9wEak/csogoDpWDnxqnQ4Cyzs8WLIkL3qZO9Nz+qh7yqLCieK
9HRo0woo4O1RNnnWUzwmHyeug7BXxrTGXJzr3LGzTSkpx/k3jEzJ6rBtjMafekLa
tnpmjbYw2zgl9oZIjbAdaSf6zxSmaZJiKf2W8p7fjCPWiwMC2WEl/PeMiidiOTtl
Pj2R/4vXHvjdOmHylmffKPvf94ik2bE0kvQnRPICCkcKAP1Az72NBxAQUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDLzSDphmqFXZNZ0PuvF5k/yAIMaMB8GA1UdIwQY
MBaAFOhCpGZYwdAbrI1DlhxrSeeI48zDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkVLa1psakIwQnVzalVPV0hHdEo1NGpqek1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9jZDA5MmUtNmJlYi00MDM3LThhNWEt
ZmFlOGQ0MmFlNWU1LzEvNkVLa1psakIwQnVzalVPV0hHdEo1NGpqek1NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC9jZDA5MmUtNmJlYi00MDM3LThhNWEtZmFlOGQ0MmFlNWU1
LzEvNkVLa1psakIwQnVzalVPV0hHdEo1NGpqek1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr8BsCDZP
2cTOahESsHS0WvUQBB+PiHrh7zlP93QJAxxmWXTogbhaPN2oZNlQKTMdkMz1dyGF
J1FGXD/0OKwK+gcrTMxChRwK4HfADW8njCO+gVD9nLUWP1oUY2hcRs82LqTXcJLK
w3BWsVt8xoA6DMSJt4UA4rfiIWhthnvUxprBkwy+zNr+V316j/SjDBCGB3ULfWbm
eecsa4F0yRYRDqSDz+4qpbW3vWXNTrrW4ds7M5JuxsP56ejFwfECZxA7dhUejuWB
h8m6aZjITzsDeD4Ei3dIeuJRnACY32uOPpy8VO/+MChP104KvENSpmWn++xrToTh
jFGsCnKTaIv+ZA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:59:53 2025 by rpki-client