Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/494fc5-8370-4313-a775-4c7c6ee1d645/1/6Vv1iCFn0VKIW0akbDYJbscsEOg.mft
File: 6Vv1iCFn0VKIW0akbDYJbscsEOg.mft (raw, json)
Hash identifier: 6ppwvp8H2VghiqxalQt5+5liYk+dMuJfnv6MGxwK9kE=
Subject key identifier: EF:32:4E:83:A6:25:59:55:F8:01:BF:D0:24:9D:19:BC:85:E1:E3:67
Authority key identifier: E9:5B:F5:88:21:67:D1:52:88:5B:46:A4:6C:36:09:6E:C7:2C:10:E8
Certificate issuer: /CN=e95bf5882167d152885b46a46c36096ec72c10e8
Certificate serial: 0199FEB4DF6E5736061B8B8562B92B5BDB34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Vv1iCFn0VKIW0akbDYJbscsEOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/494fc5-8370-4313-a775-4c7c6ee1d645/1/6Vv1iCFn0VKIW0akbDYJbscsEOg.mft
Manifest number: DC
Signing time: Sun 19 Oct 2025 23:01:30 +0000
Manifest this update: Sun 19 Oct 2025 23:01:30 +0000
Manifest next update: Mon 20 Oct 2025 23:01:30 +0000
Files and hashes: 1: 6Vv1iCFn0VKIW0akbDYJbscsEOg.crl (hash: wMvOA8i7YdxeEQU9SOuQXGujygpUA6kiE0hOqUpV2io=)
2: ecPi4F9FvpvnnyN08rNPNOwyAw0.roa (hash: gVC4oBRFhWQMZYBIpFGSJSlbUZiFGdF6+OMg3NAk+j8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/494fc5-8370-4313-a775-4c7c6ee1d645/1/6Vv1iCFn0VKIW0akbDYJbscsEOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/494fc5-8370-4313-a775-4c7c6ee1d645/1/6Vv1iCFn0VKIW0akbDYJbscsEOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/6Vv1iCFn0VKIW0akbDYJbscsEOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b4:df:6e:57:36:06:1b:8b:85:62:b9:2b:5b:db:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e95bf5882167d152885b46a46c36096ec72c10e8
Validity
Not Before: Oct 19 23:01:30 2025 GMT
Not After : Oct 20 23:01:30 2025 GMT
Subject: CN=ef324e83a6255955f801bfd0249d19bc85e1e367
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:5e:80:12:0d:12:27:1b:f6:f3:57:20:bd:d1:
7d:d9:8d:08:68:fb:c1:c7:08:75:e2:c2:83:5c:f0:
95:1c:9f:50:ef:60:d5:a8:78:2b:ce:98:40:7b:8e:
b1:6f:9b:37:51:19:4f:ee:3f:35:f5:50:70:3a:3d:
c2:33:f5:be:31:b9:ff:15:91:d6:cb:28:eb:52:72:
80:ca:20:84:de:ed:fa:0a:1c:cb:3e:9d:d6:2b:9a:
47:9e:61:af:33:95:17:ce:f9:5c:81:0e:a5:c2:1a:
0a:59:60:2b:c9:f0:7d:5b:d6:f6:91:71:f8:c3:36:
2f:08:03:6e:d2:b1:ad:33:12:4d:f8:19:31:d5:22:
9b:6b:63:0d:54:05:11:9c:72:39:b6:da:62:f0:2d:
98:58:2e:32:ca:a1:9e:b4:83:a9:11:61:66:cd:62:
25:7b:36:8f:21:79:e8:87:4c:8d:e6:94:68:c7:7d:
b4:89:dd:1b:32:cd:55:4b:5b:db:04:7f:b1:0b:15:
0e:e3:34:65:c3:27:9e:5c:10:93:0e:25:ee:49:bb:
74:5f:fe:05:4c:7e:17:59:8d:4d:83:75:70:86:9f:
f0:18:7f:fa:f8:77:22:dc:84:a1:fa:d1:35:b6:6c:
fa:3a:fe:4f:d4:77:40:ec:8d:5d:f5:6b:6f:67:ce:
be:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:32:4E:83:A6:25:59:55:F8:01:BF:D0:24:9D:19:BC:85:E1:E3:67
X509v3 Authority Key Identifier:
keyid:E9:5B:F5:88:21:67:D1:52:88:5B:46:A4:6C:36:09:6E:C7:2C:10:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Vv1iCFn0VKIW0akbDYJbscsEOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/494fc5-8370-4313-a775-4c7c6ee1d645/1/6Vv1iCFn0VKIW0akbDYJbscsEOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/494fc5-8370-4313-a775-4c7c6ee1d645/1/6Vv1iCFn0VKIW0akbDYJbscsEOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:7f:10:6d:83:d5:31:1f:5a:17:36:e8:9f:54:a8:6e:a8:9a:
e4:4f:eb:cd:ab:50:d2:96:c0:74:34:99:e9:58:12:10:b6:59:
e2:01:f2:7c:2b:fc:d1:35:95:b6:d5:b9:d0:98:0a:63:22:08:
02:63:19:b1:ce:db:d7:40:15:de:a4:88:89:e3:c5:4d:03:7c:
35:6e:2f:a2:58:51:e8:20:f9:ef:fc:72:53:ed:e3:80:b5:c0:
8a:98:f7:40:24:04:fa:79:03:d3:cd:f8:94:98:e9:f8:72:ea:
4c:3a:18:b1:1e:af:99:7b:d3:55:d6:f9:9a:7e:e6:a6:65:e4:
b2:6a:a5:7b:64:0b:11:88:6e:83:b9:f4:ba:a1:1e:14:e7:42:
41:1d:aa:59:2a:02:4c:ec:d5:68:0a:3b:17:77:ce:c9:e3:03:
26:11:e8:e1:fa:2e:78:b9:30:4c:aa:6b:b1:c7:d2:ae:ea:57:
74:62:cd:b3:11:40:3f:d6:b5:d5:83:15:0f:00:14:14:13:7a:
17:d0:18:e6:4d:bc:fb:a1:5e:e6:fa:d0:85:86:14:64:e5:e3:
85:7a:ea:a2:77:a9:2f:3f:82:6b:d9:fe:72:6d:4d:18:9a:b1:
c8:1c:66:76:be:21:1d:04:0d:54:82:5a:7b:c7:fc:a8:a4:6e:
ae:5c:e7:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+tN9uVzYGG4uFYrkrW9s0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5NWJmNTg4MjE2N2QxNTI4ODViNDZhNDZjMzYwOTZlYzcy
YzEwZTgwHhcNMjUxMDE5MjMwMTMwWhcNMjUxMDIwMjMwMTMwWjAzMTEwLwYDVQQD
EyhlZjMyNGU4M2E2MjU1OTU1ZjgwMWJmZDAyNDlkMTliYzg1ZTFlMzY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjV6AEg0SJxv281cgvdF92Y0IaPvB
xwh14sKDXPCVHJ9Q72DVqHgrzphAe46xb5s3URlP7j819VBwOj3CM/W+Mbn/FZHW
yyjrUnKAyiCE3u36ChzLPp3WK5pHnmGvM5UXzvlcgQ6lwhoKWWAryfB9W9b2kXH4
wzYvCANu0rGtMxJN+Bkx1SKba2MNVAURnHI5ttpi8C2YWC4yyqGetIOpEWFmzWIl
ezaPIXnoh0yN5pRox320id0bMs1VS1vbBH+xCxUO4zRlwyeeXBCTDiXuSbt0X/4F
TH4XWY1Ng3Vwhp/wGH/6+Hci3ISh+tE1tmz6Ov5P1HdA7I1d9WtvZ86+9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO8yToOmJVlV+AG/0CSdGbyF4eNnMB8GA1UdIwQY
MBaAFOlb9YghZ9FSiFtGpGw2CW7HLBDoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlZ2MWlDRm4wVktJVzBha2JEWUpic2NzRU9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS80OTRmYzUtODM3MC00MzEzLWE3NzUt
NGM3YzZlZTFkNjQ1LzEvNlZ2MWlDRm4wVktJVzBha2JEWUpic2NzRU9nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS80OTRmYzUtODM3MC00MzEzLWE3NzUtNGM3YzZlZTFkNjQ1
LzEvNlZ2MWlDRm4wVktJVzBha2JEWUpic2NzRU9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI38QbYPV
MR9aFzbon1Sobqia5E/rzatQ0pbAdDSZ6VgSELZZ4gHyfCv80TWVttW50JgKYyII
AmMZsc7b10AV3qSIiePFTQN8NW4volhR6CD57/xyU+3jgLXAipj3QCQE+nkD0834
lJjp+HLqTDoYsR6vmXvTVdb5mn7mpmXksmqle2QLEYhug7n0uqEeFOdCQR2qWSoC
TOzVaAo7F3fOyeMDJhHo4foueLkwTKprscfSrupXdGLNsxFAP9a11YMVDwAUFBN6
F9AY5k28+6Fe5vrQhYYUZOXjhXrqonepLz+Ca9n+cm1NGJqxyBxmdr4hHQQNVIJa
e8f8qKRurlznVw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 07:03:43 2025 by rpki-client