Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/e5dfe2-a967-4712-bee6-32187e24889f/1/6N8-nLacyliscCotXpE1w7yrcgA.mft
File: 6N8-nLacyliscCotXpE1w7yrcgA.mft (raw, json)
Hash identifier: 10FwqoZhri5L37Xi45tl/Y7CXRA7gTLpJJrzZHLgKUM=
Subject key identifier: 5A:83:43:E9:C0:C3:EC:61:1D:C2:EB:B9:4C:20:C1:7F:AE:A5:FE:3A
Authority key identifier: E8:DF:3E:9C:B6:9C:CA:58:AC:70:2A:2D:5E:91:35:C3:BC:AB:72:00
Certificate issuer: /CN=e8df3e9cb69cca58ac702a2d5e9135c3bcab7200
Certificate serial: 0199FEEC0F6172EDBA85A52E4BB327EE7CDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6N8-nLacyliscCotXpE1w7yrcgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/e5dfe2-a967-4712-bee6-32187e24889f/1/6N8-nLacyliscCotXpE1w7yrcgA.mft
Manifest number: 16EB
Signing time: Mon 20 Oct 2025 00:01:47 +0000
Manifest this update: Mon 20 Oct 2025 00:01:47 +0000
Manifest next update: Tue 21 Oct 2025 00:01:47 +0000
Files and hashes: 1: 6N8-nLacyliscCotXpE1w7yrcgA.crl (hash: /coWldmK21D5S0N6HXUMxS6KlmaPOleKJsqCjs6i9/A=)
2: 9EUnRRjK1DPEOpCFHKLbj6DnnwE.roa (hash: 5pOnqwDunio8ibNAPUzfXIZHCC6lmUXt91wi8md1CvM=)
3: gU67SonlohhDi8lWe_MYl6yJJsI.roa (hash: FLpgUzbj974ZgJCetR7gymMI2OHT8rOTBcexSYhxtZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/e5dfe2-a967-4712-bee6-32187e24889f/1/6N8-nLacyliscCotXpE1w7yrcgA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/e5dfe2-a967-4712-bee6-32187e24889f/1/6N8-nLacyliscCotXpE1w7yrcgA.mft
rsync://rpki.ripe.net/repository/DEFAULT/6N8-nLacyliscCotXpE1w7yrcgA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:ec:0f:61:72:ed:ba:85:a5:2e:4b:b3:27:ee:7c:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8df3e9cb69cca58ac702a2d5e9135c3bcab7200
Validity
Not Before: Oct 20 00:01:47 2025 GMT
Not After : Oct 21 00:01:47 2025 GMT
Subject: CN=5a8343e9c0c3ec611dc2ebb94c20c17faea5fe3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9a:e5:40:99:ff:6e:e8:e6:6e:9b:1b:08:59:
c6:cd:10:ad:d5:74:04:2d:4c:1d:7a:58:e3:20:06:
a7:f9:8e:d6:21:ab:f7:3d:f7:52:f1:a7:7f:a3:55:
6c:d8:f6:1a:75:37:bd:d7:e1:d6:37:f5:af:60:c6:
19:f3:4e:fc:a0:4e:2c:61:8b:6a:cc:06:e8:74:f7:
b5:e1:1e:9d:80:99:6c:7a:ef:00:1b:ee:be:7a:53:
4e:6f:a7:b6:42:14:e9:32:37:5a:97:e4:cd:4f:5c:
90:ea:69:af:59:cb:58:8b:74:69:35:cf:77:d1:99:
41:1f:40:55:33:1f:97:0e:b1:bc:5f:1e:16:57:f3:
5c:da:7b:5f:bd:06:7e:9f:a0:34:7e:ec:9f:ed:40:
50:eb:f1:10:d4:37:90:bf:c1:15:58:c8:1c:67:cf:
b0:69:9b:aa:f0:ae:46:43:9d:91:b1:f0:e6:21:be:
5a:dd:f0:05:2b:52:a5:4d:23:55:15:7b:0e:e2:90:
23:88:89:79:52:73:45:50:c4:67:6e:a4:e1:e9:86:
3a:fb:d2:05:1e:cb:95:75:47:30:51:7a:c0:81:b5:
02:62:86:e4:fb:ce:eb:a7:4f:96:d7:72:06:b0:6f:
17:90:7b:1e:58:23:86:76:0c:fa:36:f7:45:9f:35:
38:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:83:43:E9:C0:C3:EC:61:1D:C2:EB:B9:4C:20:C1:7F:AE:A5:FE:3A
X509v3 Authority Key Identifier:
keyid:E8:DF:3E:9C:B6:9C:CA:58:AC:70:2A:2D:5E:91:35:C3:BC:AB:72:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6N8-nLacyliscCotXpE1w7yrcgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/e5dfe2-a967-4712-bee6-32187e24889f/1/6N8-nLacyliscCotXpE1w7yrcgA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/e5dfe2-a967-4712-bee6-32187e24889f/1/6N8-nLacyliscCotXpE1w7yrcgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:5b:f4:67:00:86:94:7b:af:fa:e7:b8:ee:e5:25:60:29:c3:
da:60:da:d1:5a:15:8b:32:ee:7f:df:3a:36:c6:0d:9c:26:08:
ea:d3:3a:dc:92:36:58:1f:ea:d7:a9:a7:85:47:b5:ea:62:fd:
ec:e7:ab:02:67:6f:90:40:6d:98:a2:60:9b:2b:a0:2c:81:ed:
31:07:11:47:ee:1e:1c:89:a5:08:d3:8b:fc:d3:60:6e:17:e0:
78:34:f3:f8:5e:22:c2:32:91:e1:c4:5f:6b:02:1d:2a:89:4f:
b3:9e:1a:e7:f8:7b:c8:b7:d7:e7:e7:68:9e:82:af:7d:59:4f:
0b:c0:6a:bd:e3:f2:63:61:ed:43:a9:09:fe:d2:8c:6a:40:78:
04:61:61:c1:77:2a:4c:76:f1:0d:4d:aa:61:e7:42:c7:45:db:
91:27:98:50:92:a6:46:9a:b5:30:67:6c:e9:c5:82:bf:3f:c5:
e0:66:d0:0a:5f:ff:2e:b5:0f:bb:8b:77:87:24:e7:63:2f:aa:
90:56:ae:94:c4:16:71:4d:ab:9b:7f:aa:2d:f9:34:30:66:18:
43:62:34:57:16:41:0b:2a:ab:07:02:d1:ff:16:5c:c9:9d:7f:
45:a6:d8:d8:9b:d7:c7:68:6f:43:75:d5:40:1c:b9:5f:80:35:
b3:8b:19:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+7A9hcu26haUuS7Mn7nzbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4ZGYzZTljYjY5Y2NhNThhYzcwMmEyZDVlOTEzNWMzYmNh
YjcyMDAwHhcNMjUxMDIwMDAwMTQ3WhcNMjUxMDIxMDAwMTQ3WjAzMTEwLwYDVQQD
Eyg1YTgzNDNlOWMwYzNlYzYxMWRjMmViYjk0YzIwYzE3ZmFlYTVmZTNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5rlQJn/bujmbpsbCFnGzRCt1XQE
LUwdeljjIAan+Y7WIav3PfdS8ad/o1Vs2PYadTe91+HWN/WvYMYZ8078oE4sYYtq
zAbodPe14R6dgJlseu8AG+6+elNOb6e2QhTpMjdal+TNT1yQ6mmvWctYi3RpNc93
0ZlBH0BVMx+XDrG8Xx4WV/Nc2ntfvQZ+n6A0fuyf7UBQ6/EQ1DeQv8EVWMgcZ8+w
aZuq8K5GQ52RsfDmIb5a3fAFK1KlTSNVFXsO4pAjiIl5UnNFUMRnbqTh6YY6+9IF
HsuVdUcwUXrAgbUCYobk+87rp0+W13IGsG8XkHseWCOGdgz6NvdFnzU43wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFqDQ+nAw+xhHcLruUwgwX+upf46MB8GA1UdIwQY
MBaAFOjfPpy2nMpYrHAqLV6RNcO8q3IAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNk44LW5MYWN5bGlzY0NvdFhwRTF3N3lyY2dBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9lNWRmZTItYTk2Ny00NzEyLWJlZTYt
MzIxODdlMjQ4ODlmLzEvNk44LW5MYWN5bGlzY0NvdFhwRTF3N3lyY2dBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy9lNWRmZTItYTk2Ny00NzEyLWJlZTYtMzIxODdlMjQ4ODlm
LzEvNk44LW5MYWN5bGlzY0NvdFhwRTF3N3lyY2dBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB1v0ZwCG
lHuv+ue47uUlYCnD2mDa0VoVizLuf986NsYNnCYI6tM63JI2WB/q16mnhUe16mL9
7OerAmdvkEBtmKJgmyugLIHtMQcRR+4eHImlCNOL/NNgbhfgeDTz+F4iwjKR4cRf
awIdKolPs54a5/h7yLfX5+donoKvfVlPC8BqvePyY2HtQ6kJ/tKMakB4BGFhwXcq
THbxDU2qYedCx0XbkSeYUJKmRpq1MGds6cWCvz/F4GbQCl//LrUPu4t3hyTnYy+q
kFaulMQWcU2rm3+qLfk0MGYYQ2I0VxZBCyqrBwLR/xZcyZ1/RabY2JvXx2hvQ3XV
QBy5X4A1s4sZUQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 08:57:51 2025 by rpki-client