Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/cc4d76-3ae9-491e-9bd2-193cc61bce61/1/r6R0pepgHICSke55uuORiWTQhx4.mft
File: r6R0pepgHICSke55uuORiWTQhx4.mft (raw, json)
Hash identifier: 0SABvl5DVXbs6JdQjOaFcdMD87ahPcW0oSgGeUOrWn0=
Subject key identifier: 20:E1:E4:25:EF:25:F9:FD:53:D6:0D:DC:97:FE:6B:DE:0B:2C:AF:DE
Authority key identifier: AF:A4:74:A5:EA:60:1C:80:92:91:EE:79:BA:E3:91:89:64:D0:87:1E
Certificate issuer: /CN=afa474a5ea601c809291ee79bae3918964d0871e
Certificate serial: 0199FBEB7266E1B78BEBB39867E4033D9361
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r6R0pepgHICSke55uuORiWTQhx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/cc4d76-3ae9-491e-9bd2-193cc61bce61/1/r6R0pepgHICSke55uuORiWTQhx4.mft
Manifest number: 0DB5
Signing time: Sun 19 Oct 2025 10:02:15 +0000
Manifest this update: Sun 19 Oct 2025 10:02:15 +0000
Manifest next update: Mon 20 Oct 2025 10:02:15 +0000
Files and hashes: 1: CZnT00JxVXA6iAWaLFt9qygzud4.roa (hash: wJhaU7kGG6UC4hZw+OMvKmIWQmn3+xc9WR2/MP/95Vw=)
2: r6R0pepgHICSke55uuORiWTQhx4.crl (hash: y0A4+LcxRy4e3QF30PFm+6pWzjk1FQ8a8phQk1hTB2s=)
3: x6GJc4ojOxgz3esDAZaU67m_2pc.roa (hash: zoKZ4awQgsW57nby6hTMjyGrch8AryfCfI+Yae5icPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/cc4d76-3ae9-491e-9bd2-193cc61bce61/1/r6R0pepgHICSke55uuORiWTQhx4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/cc4d76-3ae9-491e-9bd2-193cc61bce61/1/r6R0pepgHICSke55uuORiWTQhx4.mft
rsync://rpki.ripe.net/repository/DEFAULT/r6R0pepgHICSke55uuORiWTQhx4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:72:66:e1:b7:8b:eb:b3:98:67:e4:03:3d:93:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afa474a5ea601c809291ee79bae3918964d0871e
Validity
Not Before: Oct 19 10:02:15 2025 GMT
Not After : Oct 20 10:02:15 2025 GMT
Subject: CN=20e1e425ef25f9fd53d60ddc97fe6bde0b2cafde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a9:23:5f:4e:af:ed:62:58:94:79:ff:b2:6c:
d7:cf:16:ed:94:70:13:ca:9d:c5:3a:7a:80:78:26:
ef:19:a8:cc:82:76:89:98:ae:55:cc:bb:7d:50:7c:
4a:78:86:20:de:52:3e:63:ad:8f:64:cd:bd:1c:65:
1b:6b:85:de:e5:6c:1f:d6:95:6a:69:e7:ba:df:91:
28:db:bb:82:4c:13:d7:3a:db:87:c6:78:eb:81:5a:
42:9b:d2:c8:b6:2d:9a:28:d1:1d:f7:b5:a4:6e:43:
4b:c7:e6:03:5c:01:46:66:70:aa:81:a9:8e:a8:d8:
72:d4:6c:76:d7:38:20:5c:7b:07:ee:a7:b9:3e:70:
f8:8f:53:cd:6e:51:99:e6:3d:18:a0:c7:85:9c:62:
99:63:39:33:5e:5e:76:1e:43:2b:8f:a5:3f:31:52:
dc:7b:dc:1c:9a:a3:9d:4e:0b:f5:ff:b0:04:1c:c3:
dd:b6:16:2d:b3:5b:81:56:fa:46:fa:ff:be:f3:f8:
eb:fd:35:2b:cd:34:71:e5:13:32:0f:3c:b9:2e:f0:
55:9c:49:f2:66:d8:65:07:32:3a:2e:68:3b:c0:40:
18:e7:ba:d6:38:69:4a:08:14:0a:8e:87:12:9a:69:
4a:09:53:a8:36:c4:c0:d9:a3:ed:25:0b:8a:cd:2a:
6e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:E1:E4:25:EF:25:F9:FD:53:D6:0D:DC:97:FE:6B:DE:0B:2C:AF:DE
X509v3 Authority Key Identifier:
keyid:AF:A4:74:A5:EA:60:1C:80:92:91:EE:79:BA:E3:91:89:64:D0:87:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r6R0pepgHICSke55uuORiWTQhx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/cc4d76-3ae9-491e-9bd2-193cc61bce61/1/r6R0pepgHICSke55uuORiWTQhx4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/cc4d76-3ae9-491e-9bd2-193cc61bce61/1/r6R0pepgHICSke55uuORiWTQhx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:04:e9:61:e5:e0:82:ea:fe:4e:2a:9c:2e:b3:40:4d:f3:e7:
9d:23:4c:78:d0:43:0d:f4:4b:e7:ba:b0:91:d2:ca:80:1c:e3:
37:49:be:f0:e9:b1:1b:c5:7b:7e:fa:d9:52:be:c8:55:6f:72:
cc:17:aa:6d:b2:61:d7:9a:5d:2d:fa:56:6a:3e:4f:37:59:18:
86:2a:08:34:e3:7d:78:a6:8d:a5:11:60:f1:37:3d:79:20:ee:
15:7c:a8:94:4f:dd:a3:04:47:78:e0:7e:88:e8:d5:e7:1e:6b:
ab:ef:6c:5f:f2:f0:3b:1a:e4:c7:9f:3e:2e:a6:48:02:ae:77:
b0:06:e6:b4:aa:42:4e:42:0a:dd:7c:a7:21:ce:ba:a9:28:a5:
78:1b:60:5e:a5:a3:0a:43:25:f5:76:24:80:8e:49:2e:c0:6f:
57:a1:94:09:15:1c:c8:35:f5:f1:16:83:2b:33:67:c0:6f:c5:
9d:b1:d0:6d:c5:51:91:69:e2:3d:ad:c3:86:73:f7:39:e7:9a:
cd:6e:6c:2b:f8:61:67:31:5c:cc:33:5d:06:72:1f:95:25:17:
da:28:54:98:75:ee:1e:4c:8e:0f:92:7d:fb:20:ec:a7:37:fe:
15:d8:cf:44:07:fd:3a:56:72:4d:b5:e3:63:de:cb:3d:f7:e3:
0f:5b:83:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn763Jm4beL67OYZ+QDPZNhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmYTQ3NGE1ZWE2MDFjODA5MjkxZWU3OWJhZTM5MTg5NjRk
MDg3MWUwHhcNMjUxMDE5MTAwMjE1WhcNMjUxMDIwMTAwMjE1WjAzMTEwLwYDVQQD
EygyMGUxZTQyNWVmMjVmOWZkNTNkNjBkZGM5N2ZlNmJkZTBiMmNhZmRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnakjX06v7WJYlHn/smzXzxbtlHAT
yp3FOnqAeCbvGajMgnaJmK5VzLt9UHxKeIYg3lI+Y62PZM29HGUba4Xe5Wwf1pVq
aee635Eo27uCTBPXOtuHxnjrgVpCm9LIti2aKNEd97WkbkNLx+YDXAFGZnCqgamO
qNhy1Gx21zggXHsH7qe5PnD4j1PNblGZ5j0YoMeFnGKZYzkzXl52HkMrj6U/MVLc
e9wcmqOdTgv1/7AEHMPdthYts1uBVvpG+v++8/jr/TUrzTRx5RMyDzy5LvBVnEny
ZthlBzI6Lmg7wEAY57rWOGlKCBQKjocSmmlKCVOoNsTA2aPtJQuKzSpuGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCDh5CXvJfn9U9YN3Jf+a94LLK/eMB8GA1UdIwQY
MBaAFK+kdKXqYByAkpHuebrjkYlk0IceMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjZSMHBlcGdISUNTa2U1NXV1T1JpV1RRaHg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9jYzRkNzYtM2FlOS00OTFlLTliZDIt
MTkzY2M2MWJjZTYxLzEvcjZSMHBlcGdISUNTa2U1NXV1T1JpV1RRaHg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC9jYzRkNzYtM2FlOS00OTFlLTliZDItMTkzY2M2MWJjZTYx
LzEvcjZSMHBlcGdISUNTa2U1NXV1T1JpV1RRaHg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADgTpYeXg
gur+TiqcLrNATfPnnSNMeNBDDfRL57qwkdLKgBzjN0m+8OmxG8V7fvrZUr7IVW9y
zBeqbbJh15pdLfpWaj5PN1kYhioINON9eKaNpRFg8Tc9eSDuFXyolE/dowRHeOB+
iOjV5x5rq+9sX/LwOxrkx58+LqZIAq53sAbmtKpCTkIK3XynIc66qSileBtgXqWj
CkMl9XYkgI5JLsBvV6GUCRUcyDX18RaDKzNnwG/FnbHQbcVRkWniPa3DhnP3Oeea
zW5sK/hhZzFczDNdBnIflSUX2ihUmHXuHkyOD5J9+yDspzf+FdjPRAf9OlZyTbXj
Y97LPffjD1uDDA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:56:30 2025 by rpki-client