Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/a560d0-0368-49c3-9b88-eb1139a33d0a/1/6SAjfnJc8KU-9Dp0tVaVUa_3TgQ.mft
File: 6SAjfnJc8KU-9Dp0tVaVUa_3TgQ.mft (raw, json)
Hash identifier: seYifyoZ0BRuvJm8yLDnGTafE+UBbTUZqs+Q3L2+NPY=
Subject key identifier: 3F:7B:21:56:60:2B:F0:E9:5E:64:CE:20:5B:7C:59:12:69:07:DD:CA
Authority key identifier: E9:20:23:7E:72:5C:F0:A5:3E:F4:3A:74:B5:56:95:51:AF:F7:4E:04
Certificate issuer: /CN=e920237e725cf0a53ef43a74b5569551aff74e04
Certificate serial: 0199FBEBA848E1B11BB3552B41715E603B1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6SAjfnJc8KU-9Dp0tVaVUa_3TgQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/a560d0-0368-49c3-9b88-eb1139a33d0a/1/6SAjfnJc8KU-9Dp0tVaVUa_3TgQ.mft
Manifest number: 091A
Signing time: Sun 19 Oct 2025 10:02:29 +0000
Manifest this update: Sun 19 Oct 2025 10:02:29 +0000
Manifest next update: Mon 20 Oct 2025 10:02:29 +0000
Files and hashes: 1: 6SAjfnJc8KU-9Dp0tVaVUa_3TgQ.crl (hash: f7my2YLX+GrFSIL2lIyqGkiC93ZDMiGXu1KNna4Aks0=)
2: bYwJVKNEie6jgjCIP7suKHbkq0A.roa (hash: gBYweOoSxODSbbYi3S03mFZJ+Vs6bHOyqwK1v3lQMdI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/a560d0-0368-49c3-9b88-eb1139a33d0a/1/6SAjfnJc8KU-9Dp0tVaVUa_3TgQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/a560d0-0368-49c3-9b88-eb1139a33d0a/1/6SAjfnJc8KU-9Dp0tVaVUa_3TgQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/6SAjfnJc8KU-9Dp0tVaVUa_3TgQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:a8:48:e1:b1:1b:b3:55:2b:41:71:5e:60:3b:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e920237e725cf0a53ef43a74b5569551aff74e04
Validity
Not Before: Oct 19 10:02:29 2025 GMT
Not After : Oct 20 10:02:29 2025 GMT
Subject: CN=3f7b2156602bf0e95e64ce205b7c59126907ddca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:13:73:17:aa:ec:f6:aa:71:aa:b1:d7:09:98:
07:db:d5:05:0c:ee:fa:a4:8f:cc:29:2b:4c:0f:dc:
ee:ed:bf:42:24:4c:59:0c:c5:12:a0:e8:02:cb:5f:
d6:73:28:5c:07:6f:3e:ef:5c:b7:39:83:ed:16:36:
5e:b9:d2:d2:50:4b:65:6d:30:37:18:d1:d8:ca:63:
68:5b:49:b3:ae:3c:27:59:38:10:0b:47:a6:96:94:
c1:54:6a:52:f8:19:00:91:87:03:09:88:ab:2a:96:
8c:46:7d:c8:84:8e:68:39:95:87:e4:fc:38:41:a1:
6b:2e:79:c0:7a:e9:46:c5:4e:00:ea:75:59:a2:10:
7b:f1:0b:8a:e8:84:b8:c6:0e:da:c6:c7:9f:34:6f:
ca:01:88:36:58:12:4c:de:41:3a:7f:63:aa:cc:86:
0f:2b:f9:66:65:2f:b7:f6:3f:62:a2:00:21:ec:c6:
6e:e1:f6:1d:e9:e6:37:9d:25:fb:6e:95:d6:bd:e3:
5a:b5:81:7e:7c:09:d1:a3:e8:66:5e:45:b1:ec:c8:
49:03:8d:6f:53:b4:ba:94:35:b6:3f:c6:62:ae:e8:
bd:34:0a:84:d3:0d:c2:04:3a:05:9e:9d:7e:10:1f:
6f:0f:a1:05:49:8d:22:e7:80:db:28:e2:e0:10:10:
04:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:7B:21:56:60:2B:F0:E9:5E:64:CE:20:5B:7C:59:12:69:07:DD:CA
X509v3 Authority Key Identifier:
keyid:E9:20:23:7E:72:5C:F0:A5:3E:F4:3A:74:B5:56:95:51:AF:F7:4E:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6SAjfnJc8KU-9Dp0tVaVUa_3TgQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/a560d0-0368-49c3-9b88-eb1139a33d0a/1/6SAjfnJc8KU-9Dp0tVaVUa_3TgQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/a560d0-0368-49c3-9b88-eb1139a33d0a/1/6SAjfnJc8KU-9Dp0tVaVUa_3TgQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:b6:25:83:a9:a5:27:3e:e3:f4:0c:2a:64:cc:d8:64:c8:6e:
ba:6a:eb:89:b1:30:4c:86:6a:6e:ae:59:bd:83:78:6d:8e:10:
09:ec:9e:00:88:90:8d:a4:1f:00:7e:54:3a:99:79:65:49:36:
e8:42:d4:17:02:e4:20:7b:37:69:03:17:6a:9b:2b:7d:92:52:
72:f6:ba:21:72:bf:74:39:ee:65:9f:33:4d:f1:57:57:b1:6d:
d2:5b:29:dc:db:21:cb:aa:fc:a3:30:76:bd:c9:35:38:c0:4b:
bc:13:8f:ab:ce:53:31:37:c3:db:16:79:35:60:e4:df:5a:77:
a6:69:c1:31:55:23:81:9c:2c:08:5b:05:47:b1:1d:b6:04:2e:
73:57:0c:ad:58:9f:7b:53:43:3c:56:a4:d2:5b:e1:bc:08:b6:
17:6d:7d:b4:40:44:5b:59:c9:11:77:90:41:db:4a:73:2c:b9:
b7:4b:a8:c2:a7:4f:f2:23:9b:cc:c5:6e:73:d5:7d:72:e8:9f:
7e:55:7b:42:0a:1f:e4:2f:4b:aa:eb:d0:32:ae:6e:0c:01:b7:
0f:47:60:59:47:ef:78:57:fa:e1:0d:ee:74:f8:11:e1:86:c0:
ca:87:38:61:ec:31:af:c1:1d:c5:89:23:b2:c9:a5:cc:71:aa:
01:c1:bb:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn766hI4bEbs1UrQXFeYDscMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5MjAyMzdlNzI1Y2YwYTUzZWY0M2E3NGI1NTY5NTUxYWZm
NzRlMDQwHhcNMjUxMDE5MTAwMjI5WhcNMjUxMDIwMTAwMjI5WjAzMTEwLwYDVQQD
EygzZjdiMjE1NjYwMmJmMGU5NWU2NGNlMjA1YjdjNTkxMjY5MDdkZGNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0BNzF6rs9qpxqrHXCZgH29UFDO76
pI/MKStMD9zu7b9CJExZDMUSoOgCy1/WcyhcB28+71y3OYPtFjZeudLSUEtlbTA3
GNHYymNoW0mzrjwnWTgQC0emlpTBVGpS+BkAkYcDCYirKpaMRn3IhI5oOZWH5Pw4
QaFrLnnAeulGxU4A6nVZohB78QuK6IS4xg7axsefNG/KAYg2WBJM3kE6f2OqzIYP
K/lmZS+39j9iogAh7MZu4fYd6eY3nSX7bpXWveNatYF+fAnRo+hmXkWx7MhJA41v
U7S6lDW2P8Zirui9NAqE0w3CBDoFnp1+EB9vD6EFSY0i54DbKOLgEBAE2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD97IVZgK/DpXmTOIFt8WRJpB93KMB8GA1UdIwQY
MBaAFOkgI35yXPClPvQ6dLVWlVGv904EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlNBamZuSmM4S1UtOURwMHRWYVZVYV8zVGdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9hNTYwZDAtMDM2OC00OWMzLTliODgt
ZWIxMTM5YTMzZDBhLzEvNlNBamZuSmM4S1UtOURwMHRWYVZVYV8zVGdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy9hNTYwZDAtMDM2OC00OWMzLTliODgtZWIxMTM5YTMzZDBh
LzEvNlNBamZuSmM4S1UtOURwMHRWYVZVYV8zVGdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR7Ylg6ml
Jz7j9AwqZMzYZMhuumrribEwTIZqbq5ZvYN4bY4QCeyeAIiQjaQfAH5UOpl5ZUk2
6ELUFwLkIHs3aQMXapsrfZJScva6IXK/dDnuZZ8zTfFXV7Ft0lsp3Nshy6r8ozB2
vck1OMBLvBOPq85TMTfD2xZ5NWDk31p3pmnBMVUjgZwsCFsFR7EdtgQuc1cMrVif
e1NDPFak0lvhvAi2F219tEBEW1nJEXeQQdtKcyy5t0uowqdP8iObzMVuc9V9cuif
flV7Qgof5C9LquvQMq5uDAG3D0dgWUfveFf64Q3udPgR4YbAyoc4Yewxr8EdxYkj
ssmlzHGqAcG71A==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:23:45 2025 by rpki-client