Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/a82b65-8565-4f86-bbe8-b370084a27f7/1/6M-rsrXXj_n7vcHjfdN7b8NPEdk.mft
File: 6M-rsrXXj_n7vcHjfdN7b8NPEdk.mft (raw, json)
Hash identifier: Yo7T6SR8yVfiRy7ESwwu0FrNcsaXt998JGZqR2e1/y0=
Subject key identifier: 99:6A:6E:D3:61:94:F9:75:0D:AB:5C:9F:C7:D1:97:02:EC:01:05:2C
Authority key identifier: E8:CF:AB:B2:B5:D7:8F:F9:FB:BD:C1:E3:7D:D3:7B:6F:C3:4F:11:D9
Certificate issuer: /CN=e8cfabb2b5d78ff9fbbdc1e37dd37b6fc34f11d9
Certificate serial: 0199FF59DE0D09C1D3A4EADA48F461D3703E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6M-rsrXXj_n7vcHjfdN7b8NPEdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/a82b65-8565-4f86-bbe8-b370084a27f7/1/6M-rsrXXj_n7vcHjfdN7b8NPEdk.mft
Manifest number: FD
Signing time: Mon 20 Oct 2025 02:01:43 +0000
Manifest this update: Mon 20 Oct 2025 02:01:43 +0000
Manifest next update: Tue 21 Oct 2025 02:01:43 +0000
Files and hashes: 1: 6M-rsrXXj_n7vcHjfdN7b8NPEdk.crl (hash: svtvjHuhCjgTTH6H93yVh/CDqgMSqRIGUQimnF2CVoc=)
2: 8PxOvmgBEGk1dvdpAuCMyuAS_zU.roa (hash: IZyNSWwzA8kml+4/83o4BNcAjIyr4gruiC7sv+HeyL8=)
3: Cn6tsbojoXV2BW1l6UM2MQ_UsAU.roa (hash: EoHXyDjKAGRNBxff2RnAuxXKuvRoyOY/m2/oz9BIZOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/a82b65-8565-4f86-bbe8-b370084a27f7/1/6M-rsrXXj_n7vcHjfdN7b8NPEdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/a82b65-8565-4f86-bbe8-b370084a27f7/1/6M-rsrXXj_n7vcHjfdN7b8NPEdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/6M-rsrXXj_n7vcHjfdN7b8NPEdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:59:de:0d:09:c1:d3:a4:ea:da:48:f4:61:d3:70:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8cfabb2b5d78ff9fbbdc1e37dd37b6fc34f11d9
Validity
Not Before: Oct 20 02:01:43 2025 GMT
Not After : Oct 21 02:01:43 2025 GMT
Subject: CN=996a6ed36194f9750dab5c9fc7d19702ec01052c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:88:65:92:6e:96:37:12:36:73:22:2d:12:e4:
a0:f1:92:09:87:82:73:87:a7:1a:67:fa:98:39:7e:
ab:a5:f2:73:40:1c:95:86:75:d6:a3:99:53:af:76:
b9:07:95:08:8a:f3:59:80:fb:21:c7:3b:7d:5b:a5:
b9:74:06:d1:70:e4:b9:be:f3:ea:6e:b6:c3:f4:c2:
12:85:4e:6f:58:78:88:b8:cd:ef:29:06:d6:c5:5d:
e3:f7:62:66:d3:bb:60:0a:d2:20:65:ee:8f:51:5e:
cb:de:38:05:f6:5d:27:0f:b3:de:be:3d:e0:c1:e4:
d3:c5:b5:b8:8e:e0:7f:e7:6b:f7:2b:d3:03:55:c4:
2f:c4:7f:53:a4:5a:f0:7e:25:28:c7:d6:b1:81:ef:
6f:da:d4:77:66:1d:cf:e3:9e:36:43:02:54:b0:f9:
df:ab:e4:37:b1:13:6a:75:ec:1b:17:e4:02:56:6f:
86:8c:3c:91:2a:d8:34:4f:af:05:2c:a5:81:f0:3a:
7c:4e:98:87:43:cc:90:43:5a:02:27:67:92:86:36:
22:48:33:b8:37:40:9c:d3:6c:c6:b2:bc:78:19:bb:
8d:1b:90:ff:dd:4a:d2:04:97:75:1c:f8:57:b7:04:
3d:71:59:91:db:ac:db:51:9a:5d:85:86:ab:e2:85:
c2:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:6A:6E:D3:61:94:F9:75:0D:AB:5C:9F:C7:D1:97:02:EC:01:05:2C
X509v3 Authority Key Identifier:
keyid:E8:CF:AB:B2:B5:D7:8F:F9:FB:BD:C1:E3:7D:D3:7B:6F:C3:4F:11:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6M-rsrXXj_n7vcHjfdN7b8NPEdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/a82b65-8565-4f86-bbe8-b370084a27f7/1/6M-rsrXXj_n7vcHjfdN7b8NPEdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/a82b65-8565-4f86-bbe8-b370084a27f7/1/6M-rsrXXj_n7vcHjfdN7b8NPEdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:71:fb:cb:52:37:08:92:61:30:ca:5d:27:34:c4:6e:cd:26:
1f:22:1b:81:65:69:34:c6:9b:3a:47:7c:a6:bb:d5:7c:e8:28:
79:95:80:9e:95:c4:9e:03:1d:7c:d0:2e:8d:8f:73:78:6a:3e:
2f:6c:fe:f4:19:bc:b0:c9:cc:ae:c8:bf:97:ed:f4:73:7b:8a:
be:71:5c:0c:8e:11:f5:4d:ac:1c:f9:56:00:3a:a6:8a:69:11:
a5:9a:df:54:51:e6:8b:34:e1:ec:2b:cd:09:99:bc:f4:2a:6c:
a0:9b:b9:10:76:14:f5:36:9e:20:5f:4f:4d:5d:7e:9e:6c:46:
a0:33:57:c4:9d:23:55:3c:69:79:0d:0b:94:20:f2:8e:3b:57:
89:8f:98:a1:c8:89:e4:79:b7:5e:a8:26:d3:7c:bd:e5:7a:96:
f0:56:80:f3:f8:a5:63:aa:e0:32:33:90:73:d6:34:e4:63:51:
80:ff:ef:1a:ee:79:fe:0b:81:81:d9:a7:ca:7c:4a:da:dc:aa:
ee:0c:f5:2d:1c:30:22:07:36:ff:c0:96:af:a0:f6:59:02:e7:
23:38:41:88:5f:84:29:ee:b4:2b:ae:63:50:90:60:06:3e:9b:
d7:b9:3a:ca:1d:2a:24:70:80:60:f8:c8:ce:5a:bf:50:c8:5b:
a5:de:27:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/Wd4NCcHTpOraSPRh03A+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4Y2ZhYmIyYjVkNzhmZjlmYmJkYzFlMzdkZDM3YjZmYzM0
ZjExZDkwHhcNMjUxMDIwMDIwMTQzWhcNMjUxMDIxMDIwMTQzWjAzMTEwLwYDVQQD
Eyg5OTZhNmVkMzYxOTRmOTc1MGRhYjVjOWZjN2QxOTcwMmVjMDEwNTJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIhlkm6WNxI2cyItEuSg8ZIJh4Jz
h6caZ/qYOX6rpfJzQByVhnXWo5lTr3a5B5UIivNZgPshxzt9W6W5dAbRcOS5vvPq
brbD9MIShU5vWHiIuM3vKQbWxV3j92Jm07tgCtIgZe6PUV7L3jgF9l0nD7Pevj3g
weTTxbW4juB/52v3K9MDVcQvxH9TpFrwfiUox9axge9v2tR3Zh3P4542QwJUsPnf
q+Q3sRNqdewbF+QCVm+GjDyRKtg0T68FLKWB8Dp8TpiHQ8yQQ1oCJ2eShjYiSDO4
N0Cc02zGsrx4GbuNG5D/3UrSBJd1HPhXtwQ9cVmR26zbUZpdhYar4oXC3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJlqbtNhlPl1Datcn8fRlwLsAQUsMB8GA1UdIwQY
MBaAFOjPq7K114/5+73B433Te2/DTxHZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNk0tcnNyWFhqX243dmNIamZkTjdiOE5QRWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9hODJiNjUtODU2NS00Zjg2LWJiZTgt
YjM3MDA4NGEyN2Y3LzEvNk0tcnNyWFhqX243dmNIamZkTjdiOE5QRWRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC9hODJiNjUtODU2NS00Zjg2LWJiZTgtYjM3MDA4NGEyN2Y3
LzEvNk0tcnNyWFhqX243dmNIamZkTjdiOE5QRWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPnH7y1I3
CJJhMMpdJzTEbs0mHyIbgWVpNMabOkd8prvVfOgoeZWAnpXEngMdfNAujY9zeGo+
L2z+9Bm8sMnMrsi/l+30c3uKvnFcDI4R9U2sHPlWADqmimkRpZrfVFHmizTh7CvN
CZm89CpsoJu5EHYU9TaeIF9PTV1+nmxGoDNXxJ0jVTxpeQ0LlCDyjjtXiY+YociJ
5Hm3Xqgm03y95XqW8FaA8/ilY6rgMjOQc9Y05GNRgP/vGu55/guBgdmnynxK2tyq
7gz1LRwwIgc2/8CWr6D2WQLnIzhBiF+EKe60K65jUJBgBj6b17k6yh0qJHCAYPjI
zlq/UMhbpd4ndg==
-----END CERTIFICATE-----
Generated at Mon Oct 20 08:47:26 2025 by rpki-client