
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/7f1a8c-48e4-4d97-b042-1d4246d7f155/1/6CLYReFTmSp46PRFIyZNJhSxe50.mft
File: 6CLYReFTmSp46PRFIyZNJhSxe50.mft (raw, json)
Hash identifier: ZmmktbIWRZipgy/87/DGE3j/f+tEy/zdM2GnuR9/xNk=
Subject key identifier: 5C:09:52:E1:18:BE:B5:9A:4F:66:12:D4:80:D2:2E:6B:E9:51:85:F4
Authority key identifier: E8:22:D8:45:E1:53:99:2A:78:E8:F4:45:23:26:4D:26:14:B1:7B:9D
Certificate issuer: /CN=e822d845e153992a78e8f44523264d2614b17b9d
Certificate serial: 0198D584033C16706313EB588B126FE0EE8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6CLYReFTmSp46PRFIyZNJhSxe50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/7f1a8c-48e4-4d97-b042-1d4246d7f155/1/6CLYReFTmSp46PRFIyZNJhSxe50.mft
Manifest number: 05DE
Signing time: Sat 23 Aug 2025 06:00:55 +0000
Manifest this update: Sat 23 Aug 2025 06:00:55 +0000
Manifest next update: Sun 24 Aug 2025 06:00:55 +0000
Files and hashes: 1: 6CLYReFTmSp46PRFIyZNJhSxe50.crl (hash: NlRiUAciuUr8GDYF9TAwqaqe1tHW45ogzQ/Ge/W/jTk=)
2: KH0zl9xVnMF_15rIoZ2wT-co_AI.roa (hash: DoRE8smcciehWgwMQwu6I7Myolux2OWQiEW7g5i3MyM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/7f1a8c-48e4-4d97-b042-1d4246d7f155/1/6CLYReFTmSp46PRFIyZNJhSxe50.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/7f1a8c-48e4-4d97-b042-1d4246d7f155/1/6CLYReFTmSp46PRFIyZNJhSxe50.mft
rsync://rpki.ripe.net/repository/DEFAULT/6CLYReFTmSp46PRFIyZNJhSxe50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:84:03:3c:16:70:63:13:eb:58:8b:12:6f:e0:ee:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e822d845e153992a78e8f44523264d2614b17b9d
Validity
Not Before: Aug 23 06:00:55 2025 GMT
Not After : Aug 24 06:00:55 2025 GMT
Subject: CN=5c0952e118beb59a4f6612d480d22e6be95185f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:2f:d0:ff:b7:c0:b5:29:45:ef:16:e0:a2:dd:
05:63:92:90:b1:cd:ef:2c:65:27:5a:e7:b1:04:2a:
5a:05:85:e0:36:f2:f9:ab:4c:d4:e6:6e:49:8b:41:
af:f0:c3:0f:de:d6:ac:77:c0:a3:7c:98:f4:be:fd:
f1:cc:e9:2e:2e:9e:ba:39:1d:50:d6:6b:f6:a9:e9:
92:25:1e:f8:16:2b:4e:d6:b6:d6:ac:f9:d4:4f:48:
6a:d7:f2:2f:7a:c0:05:e5:7e:b9:d0:bc:5a:03:0d:
01:4f:23:54:b3:c5:2b:fc:4f:c0:77:7b:f9:4c:9b:
66:f8:d6:e2:2e:fb:4d:34:db:4e:55:77:12:9b:85:
ab:a4:82:5c:66:2f:b2:8a:c8:d7:9e:10:ac:99:37:
5e:fa:7e:84:05:10:2c:56:0c:07:27:0a:61:c0:30:
3d:94:7a:62:f2:a4:1c:b3:21:a7:43:b5:e6:c8:8d:
a7:8c:c3:1e:60:57:13:8e:24:14:be:93:7c:06:63:
d3:10:68:52:9c:cb:fe:1c:ee:c8:75:15:2a:12:d2:
ac:c3:96:86:7a:9a:1f:a3:c4:f7:41:3c:3c:79:1b:
bd:e6:2a:20:6e:a0:58:a2:ab:b7:37:41:26:c6:88:
c8:79:58:78:87:d9:7e:40:d3:23:5a:cd:52:f1:34:
71:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:09:52:E1:18:BE:B5:9A:4F:66:12:D4:80:D2:2E:6B:E9:51:85:F4
X509v3 Authority Key Identifier:
keyid:E8:22:D8:45:E1:53:99:2A:78:E8:F4:45:23:26:4D:26:14:B1:7B:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6CLYReFTmSp46PRFIyZNJhSxe50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/7f1a8c-48e4-4d97-b042-1d4246d7f155/1/6CLYReFTmSp46PRFIyZNJhSxe50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/7f1a8c-48e4-4d97-b042-1d4246d7f155/1/6CLYReFTmSp46PRFIyZNJhSxe50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:51:6a:6b:86:d4:70:cb:5a:ad:53:62:f0:4f:6e:00:c2:fc:
46:d1:5a:93:c1:d4:3c:4a:6e:85:45:ef:3d:2b:37:f0:d6:e9:
cc:c2:d0:97:d6:0d:81:64:a6:37:19:ae:b6:6e:45:ff:26:5a:
d9:e2:55:5e:70:47:83:11:7a:b8:8a:c8:a3:8c:50:98:ab:be:
bf:a0:9f:9e:93:4b:b2:3c:48:89:a7:0c:7f:a7:66:a1:01:75:
b5:ff:fe:eb:75:9c:4a:00:96:a7:55:bc:fb:5e:14:e1:69:35:
e6:c4:31:d4:e5:e2:26:94:c4:bb:68:75:73:04:05:a8:e5:b5:
af:a4:2e:dd:16:8b:f3:80:93:8a:7e:be:96:aa:ce:60:66:43:
dc:3e:79:0f:96:fb:e9:10:47:93:72:c9:a4:3c:ca:65:54:52:
04:21:6f:ed:cc:b5:d9:75:ba:f4:9a:f1:58:d1:64:71:34:55:
56:b5:d6:e7:95:9b:02:4e:65:29:7f:db:00:5c:2b:04:44:26:
24:4b:98:64:0e:40:b6:39:9f:6c:5e:0f:a1:71:15:62:f3:56:
93:ee:11:3e:ef:dd:1f:74:9c:fe:78:30:29:84:a1:68:b0:4d:
4d:44:7b:87:0b:5b:f7:80:73:19:9f:fd:8a:e1:c2:63:c5:02:
9b:1e:06:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVhAM8FnBjE+tYixJv4O6PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4MjJkODQ1ZTE1Mzk5MmE3OGU4ZjQ0NTIzMjY0ZDI2MTRi
MTdiOWQwHhcNMjUwODIzMDYwMDU1WhcNMjUwODI0MDYwMDU1WjAzMTEwLwYDVQQD
Eyg1YzA5NTJlMTE4YmViNTlhNGY2NjEyZDQ4MGQyMmU2YmU5NTE4NWY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjy/Q/7fAtSlF7xbgot0FY5KQsc3v
LGUnWuexBCpaBYXgNvL5q0zU5m5Ji0Gv8MMP3tasd8CjfJj0vv3xzOkuLp66OR1Q
1mv2qemSJR74FitO1rbWrPnUT0hq1/IvesAF5X650LxaAw0BTyNUs8Ur/E/Ad3v5
TJtm+NbiLvtNNNtOVXcSm4WrpIJcZi+yisjXnhCsmTde+n6EBRAsVgwHJwphwDA9
lHpi8qQcsyGnQ7XmyI2njMMeYFcTjiQUvpN8BmPTEGhSnMv+HO7IdRUqEtKsw5aG
epofo8T3QTw8eRu95iogbqBYoqu3N0EmxojIeVh4h9l+QNMjWs1S8TRx1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFwJUuEYvrWaT2YS1IDSLmvpUYX0MB8GA1UdIwQY
MBaAFOgi2EXhU5kqeOj0RSMmTSYUsXudMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkNMWVJlRlRtU3A0NlBSRkl5Wk5KaFN4ZTUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC83ZjFhOGMtNDhlNC00ZDk3LWIwNDIt
MWQ0MjQ2ZDdmMTU1LzEvNkNMWVJlRlRtU3A0NlBSRkl5Wk5KaFN4ZTUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZC83ZjFhOGMtNDhlNC00ZDk3LWIwNDItMWQ0MjQ2ZDdmMTU1
LzEvNkNMWVJlRlRtU3A0NlBSRkl5Wk5KaFN4ZTUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAslFqa4bU
cMtarVNi8E9uAML8RtFak8HUPEpuhUXvPSs38NbpzMLQl9YNgWSmNxmutm5F/yZa
2eJVXnBHgxF6uIrIo4xQmKu+v6CfnpNLsjxIiacMf6dmoQF1tf/+63WcSgCWp1W8
+14U4Wk15sQx1OXiJpTEu2h1cwQFqOW1r6Qu3RaL84CTin6+lqrOYGZD3D55D5b7
6RBHk3LJpDzKZVRSBCFv7cy12XW69JrxWNFkcTRVVrXW55WbAk5lKX/bAFwrBEQm
JEuYZA5AtjmfbF4PoXEVYvNWk+4RPu/dH3Sc/ngwKYShaLBNTUR7hwtb94BzGZ/9
iuHCY8UCmx4GQA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:01:09 2025 by rpki-client