Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/6c5eaf-9c44-4a5a-baa1-325aadd733c3/1/6GtO0zF8kqNLdsj60prpcID5Hzs.mft
File: 6GtO0zF8kqNLdsj60prpcID5Hzs.mft (raw, json)
Hash identifier: EhRggNRBC8/8UQMGlZUzdt7ARlzCVAtLcOExYKhVlXE=
Subject key identifier: 87:78:91:EC:4F:80:0D:D5:75:B2:C1:7E:58:C7:02:C6:CA:F7:56:29
Authority key identifier: E8:6B:4E:D3:31:7C:92:A3:4B:76:C8:FA:D2:9A:E9:70:80:F9:1F:3B
Certificate issuer: /CN=e86b4ed3317c92a34b76c8fad29ae97080f91f3b
Certificate serial: 0198D65F38988536011EEDDF1986E793DD62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6GtO0zF8kqNLdsj60prpcID5Hzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/6c5eaf-9c44-4a5a-baa1-325aadd733c3/1/6GtO0zF8kqNLdsj60prpcID5Hzs.mft
Manifest number: 1327
Signing time: Sat 23 Aug 2025 10:00:21 +0000
Manifest this update: Sat 23 Aug 2025 10:00:21 +0000
Manifest next update: Sun 24 Aug 2025 10:00:21 +0000
Files and hashes: 1: 6GtO0zF8kqNLdsj60prpcID5Hzs.crl (hash: VhMeL4ZY++5d9+VWxVUQ00CtDTvNOnRrtcFB4y3mY88=)
2: DEYi7WsKY2zM3uINUVpUki3PaVg.roa (hash: DRmT8SF6k5qeKVt2hMFQ+AwmgRFjXhlT847OzPWC7g8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/6c5eaf-9c44-4a5a-baa1-325aadd733c3/1/6GtO0zF8kqNLdsj60prpcID5Hzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/6c5eaf-9c44-4a5a-baa1-325aadd733c3/1/6GtO0zF8kqNLdsj60prpcID5Hzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/6GtO0zF8kqNLdsj60prpcID5Hzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:38:98:85:36:01:1e:ed:df:19:86:e7:93:dd:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e86b4ed3317c92a34b76c8fad29ae97080f91f3b
Validity
Not Before: Aug 23 10:00:21 2025 GMT
Not After : Aug 24 10:00:21 2025 GMT
Subject: CN=877891ec4f800dd575b2c17e58c702c6caf75629
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b3:f7:18:ef:50:57:dc:1d:7a:b7:65:67:95:
9e:5b:33:67:70:8e:53:e0:84:1e:fa:88:ce:ea:5f:
19:39:29:80:0f:d5:54:59:96:2e:86:10:d2:e2:ee:
7e:e3:16:c4:65:e0:b6:25:a9:60:d6:4a:e9:dc:30:
61:4d:f6:b6:92:d0:23:51:65:c5:96:ca:79:b1:64:
00:e8:32:c8:b7:7a:60:93:8e:8d:ae:ab:95:29:ed:
2e:ae:52:c0:d0:d3:d4:0b:fe:7d:d2:be:46:c5:3b:
8f:ac:9f:24:e7:2a:be:73:03:99:49:75:68:6c:27:
82:cc:e8:71:00:8a:f9:8c:b1:52:d6:43:42:02:55:
71:cb:e3:09:b1:69:79:6e:9c:43:bf:2d:82:8b:ba:
6e:49:1d:a2:86:58:d3:af:3a:50:5a:36:d6:e8:ae:
18:50:80:9e:c0:16:8d:a3:72:82:91:76:eb:8b:11:
eb:ba:b3:96:e8:74:3a:27:49:87:7d:e3:66:64:1e:
8d:a7:bd:56:be:a7:31:70:84:be:59:0e:db:91:66:
d8:8a:65:83:43:56:be:92:63:6f:6c:d8:fb:11:64:
f6:82:e2:41:1e:6e:a7:59:4a:8d:d0:4d:73:c9:75:
2e:07:3e:3b:71:96:08:60:7e:13:50:27:ea:0d:a2:
b2:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:78:91:EC:4F:80:0D:D5:75:B2:C1:7E:58:C7:02:C6:CA:F7:56:29
X509v3 Authority Key Identifier:
keyid:E8:6B:4E:D3:31:7C:92:A3:4B:76:C8:FA:D2:9A:E9:70:80:F9:1F:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6GtO0zF8kqNLdsj60prpcID5Hzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/6c5eaf-9c44-4a5a-baa1-325aadd733c3/1/6GtO0zF8kqNLdsj60prpcID5Hzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/6c5eaf-9c44-4a5a-baa1-325aadd733c3/1/6GtO0zF8kqNLdsj60prpcID5Hzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:90:f2:b5:0d:e5:31:26:28:a4:d1:74:8a:2f:cd:34:aa:f3:
7a:e0:f3:8b:6c:71:1c:40:bd:51:ab:7f:54:7b:ee:86:fe:80:
1b:75:2b:e9:63:a9:fe:eb:9b:03:df:14:41:46:a9:99:eb:ef:
fa:94:d7:07:7d:30:31:a4:ec:d7:1c:81:8e:cd:ed:10:bd:ba:
bc:28:d9:aa:5a:1e:db:b8:16:81:64:c4:97:1a:1b:04:5a:a8:
38:83:07:d1:d6:c2:40:71:8b:d4:d1:ee:5d:57:b1:46:52:55:
f2:86:d0:d5:26:75:e9:05:f0:19:da:ee:f5:0d:d2:d5:fc:17:
fd:88:e2:88:a7:3a:40:82:50:85:51:d6:9d:9c:f8:e8:43:b6:
53:bb:5b:30:40:08:2e:11:92:33:91:da:17:d4:6b:9e:be:b6:
a6:59:59:26:f6:d3:46:0b:bf:73:18:02:6f:53:4d:41:b4:14:
9d:0e:21:5a:0e:b8:35:d3:8d:95:76:82:cd:ea:f2:dc:99:d9:
64:a8:2b:88:81:a9:86:e3:87:ea:2d:fc:a2:88:ed:d0:b9:83:
e6:92:6a:83:6b:35:f2:e6:83:1f:8c:55:7c:9e:61:e3:67:81:
36:e1:6f:65:c3:d4:6b:33:5f:99:d5:50:bc:11:10:ae:97:51:
d8:cb:c2:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWXziYhTYBHu3fGYbnk91iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4NmI0ZWQzMzE3YzkyYTM0Yjc2YzhmYWQyOWFlOTcwODBm
OTFmM2IwHhcNMjUwODIzMTAwMDIxWhcNMjUwODI0MTAwMDIxWjAzMTEwLwYDVQQD
Eyg4Nzc4OTFlYzRmODAwZGQ1NzViMmMxN2U1OGM3MDJjNmNhZjc1NjI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqbP3GO9QV9wderdlZ5WeWzNncI5T
4IQe+ojO6l8ZOSmAD9VUWZYuhhDS4u5+4xbEZeC2Jalg1krp3DBhTfa2ktAjUWXF
lsp5sWQA6DLIt3pgk46NrquVKe0urlLA0NPUC/590r5GxTuPrJ8k5yq+cwOZSXVo
bCeCzOhxAIr5jLFS1kNCAlVxy+MJsWl5bpxDvy2Ci7puSR2ihljTrzpQWjbW6K4Y
UICewBaNo3KCkXbrixHrurOW6HQ6J0mHfeNmZB6Np71WvqcxcIS+WQ7bkWbYimWD
Q1a+kmNvbNj7EWT2guJBHm6nWUqN0E1zyXUuBz47cZYIYH4TUCfqDaKywwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFId4kexPgA3VdbLBfljHAsbK91YpMB8GA1UdIwQY
MBaAFOhrTtMxfJKjS3bI+tKa6XCA+R87MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkd0TzB6RjhrcU5MZHNqNjBwcnBjSUQ1SHpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy82YzVlYWYtOWM0NC00YTVhLWJhYTEt
MzI1YWFkZDczM2MzLzEvNkd0TzB6RjhrcU5MZHNqNjBwcnBjSUQ1SHpzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy82YzVlYWYtOWM0NC00YTVhLWJhYTEtMzI1YWFkZDczM2Mz
LzEvNkd0TzB6RjhrcU5MZHNqNjBwcnBjSUQ1SHpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ5DytQ3l
MSYopNF0ii/NNKrzeuDzi2xxHEC9Uat/VHvuhv6AG3Ur6WOp/uubA98UQUapmevv
+pTXB30wMaTs1xyBjs3tEL26vCjZqloe27gWgWTElxobBFqoOIMH0dbCQHGL1NHu
XVexRlJV8obQ1SZ16QXwGdru9Q3S1fwX/YjiiKc6QIJQhVHWnZz46EO2U7tbMEAI
LhGSM5HaF9Rrnr62pllZJvbTRgu/cxgCb1NNQbQUnQ4hWg64NdONlXaCzery3JnZ
ZKgriIGphuOH6i38oojt0LmD5pJqg2s18uaDH4xVfJ5h42eBNuFvZcPUazNfmdVQ
vBEQrpdR2MvCqQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 19:33:51 2025 by rpki-client