Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/c547b8-99ab-42f1-a6cc-bc665bb21686/1/61VMRARsNkOakZc4lC8x-nVraRE.mft
File: 61VMRARsNkOakZc4lC8x-nVraRE.mft (raw, json)
Hash identifier: OWTHV1HUR16rD9HDwfTqPj1tWgDtgD6I5gCrwQ7mr6k=
Subject key identifier: 22:05:DF:F3:85:BF:32:5F:89:BA:AD:8F:AB:D8:3D:A4:2C:CB:04:AC
Authority key identifier: EB:55:4C:44:04:6C:36:43:9A:91:97:38:94:2F:31:FA:75:6B:69:11
Certificate issuer: /CN=eb554c44046c36439a919738942f31fa756b6911
Certificate serial: 0199FD33EE6AFCB4F33F0551B0224E768494
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/61VMRARsNkOakZc4lC8x-nVraRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/c547b8-99ab-42f1-a6cc-bc665bb21686/1/61VMRARsNkOakZc4lC8x-nVraRE.mft
Manifest number: 1431
Signing time: Sun 19 Oct 2025 16:01:02 +0000
Manifest this update: Sun 19 Oct 2025 16:01:02 +0000
Manifest next update: Mon 20 Oct 2025 16:01:02 +0000
Files and hashes: 1: 61VMRARsNkOakZc4lC8x-nVraRE.crl (hash: t4/AJqd7ntlkJhFr5Y9QUTwBNGsV13cvuobt4YRqi0o=)
2: FtcuzKMMTKsG4IefMTUbvthdvHQ.roa (hash: fh/bmOX6Q7urxhPxPp4WqcpQdlVctOh99ozTUlRP7Pc=)
3: V3CR4lYDNh-Wfn6M2vlTj-37od8.roa (hash: n4U7/jlyixasB2+KGy4l8AmX928ML9kaTph3fSn4QJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/c547b8-99ab-42f1-a6cc-bc665bb21686/1/61VMRARsNkOakZc4lC8x-nVraRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/c547b8-99ab-42f1-a6cc-bc665bb21686/1/61VMRARsNkOakZc4lC8x-nVraRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/61VMRARsNkOakZc4lC8x-nVraRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:33:ee:6a:fc:b4:f3:3f:05:51:b0:22:4e:76:84:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb554c44046c36439a919738942f31fa756b6911
Validity
Not Before: Oct 19 16:01:02 2025 GMT
Not After : Oct 20 16:01:02 2025 GMT
Subject: CN=2205dff385bf325f89baad8fabd83da42ccb04ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:9c:9d:05:c6:26:6f:0d:a5:ca:c6:e9:1c:91:
e8:b6:40:1e:44:95:f2:f2:01:6a:07:2c:c6:c0:98:
9b:3e:4a:3a:99:84:d0:20:a0:3f:78:2c:df:ac:72:
81:a2:b0:58:66:be:a4:f2:a3:0d:ed:50:13:09:cf:
8d:b9:57:7f:02:7b:5d:f2:c3:e2:82:ab:b2:50:ba:
ee:bc:a3:cb:6a:36:20:66:1e:a4:60:f5:08:64:06:
d6:17:1a:04:2d:67:d9:27:4e:14:db:58:cd:ef:2d:
ef:b2:75:ce:74:42:61:78:c1:5d:24:98:82:97:72:
8f:d0:da:43:0d:c2:d6:9c:32:09:0a:9f:f5:3b:5c:
99:1e:c8:a7:42:ae:18:52:b8:68:a9:da:c2:b5:41:
6b:9b:ad:2d:2e:38:c9:12:33:a8:00:d4:fb:85:9a:
14:b3:c1:10:cc:4b:b7:08:ca:4c:d3:a3:60:88:9e:
46:6d:56:e9:f6:fc:2f:18:63:f3:c4:0b:67:f7:11:
0d:73:d4:04:c1:bb:4e:03:54:46:00:8b:fc:af:98:
11:ec:62:11:d8:3f:bb:e9:e0:20:0e:a1:c0:48:0f:
31:70:d7:aa:09:e2:08:68:f2:84:6f:05:73:dc:93:
35:44:2c:aa:3f:c5:f3:18:96:7a:28:85:a4:81:63:
0f:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:05:DF:F3:85:BF:32:5F:89:BA:AD:8F:AB:D8:3D:A4:2C:CB:04:AC
X509v3 Authority Key Identifier:
keyid:EB:55:4C:44:04:6C:36:43:9A:91:97:38:94:2F:31:FA:75:6B:69:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/61VMRARsNkOakZc4lC8x-nVraRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c547b8-99ab-42f1-a6cc-bc665bb21686/1/61VMRARsNkOakZc4lC8x-nVraRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c547b8-99ab-42f1-a6cc-bc665bb21686/1/61VMRARsNkOakZc4lC8x-nVraRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:fc:84:0d:50:d5:f8:3b:da:7b:b5:23:6e:25:d3:94:4f:c2:
e7:55:dd:2a:d7:4d:81:9a:30:26:8d:a9:38:57:ba:68:2f:ec:
6b:fb:79:2c:68:b4:2c:be:8a:44:5b:0a:f4:59:2f:bb:22:0d:
df:9b:b8:b5:f0:41:12:e1:07:68:1f:ca:a0:82:ce:67:4d:f2:
4c:e1:c4:22:82:94:23:44:19:05:a5:49:04:7a:12:88:42:d5:
04:73:61:b1:e0:38:44:60:e4:d1:8c:8a:53:99:95:0e:98:e1:
96:e8:16:8d:99:11:f9:6d:7f:9a:b1:b5:b4:cb:ac:4a:ee:ee:
ec:77:99:23:6d:82:85:a6:34:9c:81:1d:a6:7f:7f:d4:cf:4e:
ae:3e:f7:99:92:ad:d2:cb:00:3b:cb:a1:8d:ca:aa:f3:54:4b:
54:06:fa:17:ca:f5:22:8b:c0:35:0c:da:d3:8d:39:f8:87:cc:
29:87:7e:eb:27:4e:f2:d5:09:34:bc:4d:6c:7b:cc:79:30:e7:
0c:5c:a5:d3:7f:ef:d5:69:2e:cc:2e:d2:58:06:c2:1a:09:74:
ce:ca:97:4b:3c:f6:70:0c:ae:0c:70:a9:fa:5f:87:72:85:8f:
8a:9e:e2:b0:66:c4:a5:1f:8d:89:e1:1e:ba:8a:70:6b:fd:f2:
1d:5b:5c:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9M+5q/LTzPwVRsCJOdoSUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViNTU0YzQ0MDQ2YzM2NDM5YTkxOTczODk0MmYzMWZhNzU2
YjY5MTEwHhcNMjUxMDE5MTYwMTAyWhcNMjUxMDIwMTYwMTAyWjAzMTEwLwYDVQQD
EygyMjA1ZGZmMzg1YmYzMjVmODliYWFkOGZhYmQ4M2RhNDJjY2IwNGFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2JydBcYmbw2lysbpHJHotkAeRJXy
8gFqByzGwJibPko6mYTQIKA/eCzfrHKBorBYZr6k8qMN7VATCc+NuVd/Antd8sPi
gquyULruvKPLajYgZh6kYPUIZAbWFxoELWfZJ04U21jN7y3vsnXOdEJheMFdJJiC
l3KP0NpDDcLWnDIJCp/1O1yZHsinQq4YUrhoqdrCtUFrm60tLjjJEjOoANT7hZoU
s8EQzEu3CMpM06NgiJ5GbVbp9vwvGGPzxAtn9xENc9QEwbtOA1RGAIv8r5gR7GIR
2D+76eAgDqHASA8xcNeqCeIIaPKEbwVz3JM1RCyqP8XzGJZ6KIWkgWMPSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCIF3/OFvzJfibqtj6vYPaQsywSsMB8GA1UdIwQY
MBaAFOtVTEQEbDZDmpGXOJQvMfp1a2kRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNjFWTVJBUnNOa09ha1pjNGxDOHgtblZyYVJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9jNTQ3YjgtOTlhYi00MmYxLWE2Y2Mt
YmM2NjViYjIxNjg2LzEvNjFWTVJBUnNOa09ha1pjNGxDOHgtblZyYVJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS9jNTQ3YjgtOTlhYi00MmYxLWE2Y2MtYmM2NjViYjIxNjg2
LzEvNjFWTVJBUnNOa09ha1pjNGxDOHgtblZyYVJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfPyEDVDV
+Dvae7UjbiXTlE/C51XdKtdNgZowJo2pOFe6aC/sa/t5LGi0LL6KRFsK9FkvuyIN
35u4tfBBEuEHaB/KoILOZ03yTOHEIoKUI0QZBaVJBHoSiELVBHNhseA4RGDk0YyK
U5mVDpjhlugWjZkR+W1/mrG1tMusSu7u7HeZI22ChaY0nIEdpn9/1M9Orj73mZKt
0ssAO8uhjcqq81RLVAb6F8r1IovANQza0405+IfMKYd+6ydO8tUJNLxNbHvMeTDn
DFyl03/v1WkuzC7SWAbCGgl0zsqXSzz2cAyuDHCp+l+HcoWPip7isGbEpR+NieEe
uopwa/3yHVtcCg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 22:30:17 2025 by rpki-client