Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/742a04-17af-4f40-a140-604584895925/1/6Ed60hy3iRQzE8QLGfjMACPeiKY.mft
File: 6Ed60hy3iRQzE8QLGfjMACPeiKY.mft (raw, json)
Hash identifier: ZasGRBGKIKETpW4UO3xUn4rF74cKJgyc/UknX1kS2Do=
Subject key identifier: CE:0B:AF:21:FD:29:C9:2D:38:5E:05:19:8B:8A:E7:1D:A6:BE:B7:37
Authority key identifier: E8:47:7A:D2:1C:B7:89:14:33:13:C4:0B:19:F8:CC:00:23:DE:88:A6
Certificate issuer: /CN=e8477ad21cb789143313c40b19f8cc0023de88a6
Certificate serial: 0199FCFDAE9DC25FE955F873C2C7291DAA3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Ed60hy3iRQzE8QLGfjMACPeiKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/742a04-17af-4f40-a140-604584895925/1/6Ed60hy3iRQzE8QLGfjMACPeiKY.mft
Manifest number: 01A8
Signing time: Sun 19 Oct 2025 15:01:47 +0000
Manifest this update: Sun 19 Oct 2025 15:01:47 +0000
Manifest next update: Mon 20 Oct 2025 15:01:47 +0000
Files and hashes: 1: 2M47-6eKALJ6FmiVAowRa7gLSUI.roa (hash: sTE5YWztn/a2MX2OSX/0Yz9OgI3CBWwdi/QI1zYZYUk=)
2: 6Ed60hy3iRQzE8QLGfjMACPeiKY.crl (hash: CTeKPERBk3Oa5ymTwChKfA38CA/pTK8RPD1rDyoPzB8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/742a04-17af-4f40-a140-604584895925/1/6Ed60hy3iRQzE8QLGfjMACPeiKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/742a04-17af-4f40-a140-604584895925/1/6Ed60hy3iRQzE8QLGfjMACPeiKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6Ed60hy3iRQzE8QLGfjMACPeiKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:ae:9d:c2:5f:e9:55:f8:73:c2:c7:29:1d:aa:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8477ad21cb789143313c40b19f8cc0023de88a6
Validity
Not Before: Oct 19 15:01:47 2025 GMT
Not After : Oct 20 15:01:47 2025 GMT
Subject: CN=ce0baf21fd29c92d385e05198b8ae71da6beb737
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:0e:6f:2e:0f:d9:f3:ab:b4:fb:d0:f8:44:15:
65:71:ad:43:71:29:81:0b:c7:41:24:c2:f2:94:7a:
7b:15:67:79:b8:e5:2f:a4:77:50:0d:ba:d7:e9:f3:
10:2d:c5:90:3b:77:7f:bb:b0:63:35:f0:57:d4:d2:
a8:0d:f5:ac:e9:09:0e:f9:6d:72:e2:ae:45:78:98:
39:80:ec:4c:cc:43:9a:6a:94:50:97:93:0f:4c:7d:
46:2b:4b:53:36:33:76:77:28:ea:97:37:c2:1c:19:
e3:57:9e:06:90:97:7b:fe:d2:3f:0d:c6:84:78:f4:
8b:f4:4b:65:97:c2:5c:e5:cf:67:8f:9a:71:cc:5a:
6c:5d:03:8e:dc:54:68:29:fa:2c:8b:b7:cb:12:41:
d6:c1:98:b9:4e:56:ff:88:da:30:b4:37:44:75:ad:
7c:cb:6d:3e:d5:9e:61:55:ec:25:20:7f:cd:a3:03:
ae:3f:3c:1b:c4:8f:66:3a:20:24:f0:64:11:dd:04:
1d:a5:4b:95:b0:e9:be:2f:55:d6:a6:64:45:51:de:
1b:6e:79:a9:49:c0:6e:33:d7:5b:d2:a5:75:3c:9e:
fc:f0:86:0c:13:b8:a4:40:61:77:9e:4c:c4:6e:ad:
b2:12:45:51:f9:c0:4b:a7:a8:73:aa:80:9d:7b:6f:
7d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:0B:AF:21:FD:29:C9:2D:38:5E:05:19:8B:8A:E7:1D:A6:BE:B7:37
X509v3 Authority Key Identifier:
keyid:E8:47:7A:D2:1C:B7:89:14:33:13:C4:0B:19:F8:CC:00:23:DE:88:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Ed60hy3iRQzE8QLGfjMACPeiKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/742a04-17af-4f40-a140-604584895925/1/6Ed60hy3iRQzE8QLGfjMACPeiKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/742a04-17af-4f40-a140-604584895925/1/6Ed60hy3iRQzE8QLGfjMACPeiKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:f9:2a:79:79:b0:6a:0b:77:cf:ab:36:28:ef:92:97:0b:65:
17:6a:a4:de:f4:fd:c1:d5:96:d0:fe:a7:7b:0e:a2:23:76:ba:
85:22:60:a5:cf:c6:f7:e1:2d:1e:a7:87:1b:0e:d9:51:eb:91:
5d:1d:2e:55:55:83:21:24:1d:be:6f:0f:3d:93:85:c1:40:e8:
81:62:37:37:ea:4d:5f:74:b3:11:d1:58:70:64:ec:d8:cb:32:
85:8c:b7:a4:2d:6e:19:76:c5:d8:d4:fa:65:3a:2b:c0:4e:75:
9d:bd:85:3a:6c:06:47:e7:d6:92:27:0e:d7:60:46:25:05:47:
c3:d0:ed:e0:4a:76:4b:f4:16:22:63:b7:87:74:2a:ba:e8:52:
15:91:ec:db:03:64:1b:9c:40:cd:eb:90:03:27:7d:1e:f1:41:
a7:9a:d2:03:82:d6:8a:22:d8:12:0c:f2:dd:c9:b0:df:d6:ff:
2b:0e:d7:af:de:28:5c:dc:13:ca:0a:a7:a5:bd:b5:b9:df:eb:
20:95:76:3f:93:2a:81:14:86:f0:49:3a:b8:74:1b:69:52:b6:
8b:4a:f1:ad:73:8c:cd:9b:76:57:d9:35:b7:9d:a4:d0:3a:e3:
38:b9:7e:42:08:4d:54:0c:23:43:e1:e3:50:27:ba:e9:a4:69:
f8:bc:5c:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8/a6dwl/pVfhzwscpHao9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4NDc3YWQyMWNiNzg5MTQzMzEzYzQwYjE5ZjhjYzAwMjNk
ZTg4YTYwHhcNMjUxMDE5MTUwMTQ3WhcNMjUxMDIwMTUwMTQ3WjAzMTEwLwYDVQQD
EyhjZTBiYWYyMWZkMjljOTJkMzg1ZTA1MTk4YjhhZTcxZGE2YmViNzM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Q5vLg/Z86u0+9D4RBVlca1DcSmB
C8dBJMLylHp7FWd5uOUvpHdQDbrX6fMQLcWQO3d/u7BjNfBX1NKoDfWs6QkO+W1y
4q5FeJg5gOxMzEOaapRQl5MPTH1GK0tTNjN2dyjqlzfCHBnjV54GkJd7/tI/DcaE
ePSL9Etll8Jc5c9nj5pxzFpsXQOO3FRoKfosi7fLEkHWwZi5Tlb/iNowtDdEda18
y20+1Z5hVewlIH/NowOuPzwbxI9mOiAk8GQR3QQdpUuVsOm+L1XWpmRFUd4bbnmp
ScBuM9db0qV1PJ788IYME7ikQGF3nkzEbq2yEkVR+cBLp6hzqoCde299oQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM4LryH9KcktOF4FGYuK5x2mvrc3MB8GA1UdIwQY
MBaAFOhHetIct4kUMxPECxn4zAAj3oimMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkVkNjBoeTNpUlF6RThRTEdmak1BQ1BlaUtZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi83NDJhMDQtMTdhZi00ZjQwLWExNDAt
NjA0NTg0ODk1OTI1LzEvNkVkNjBoeTNpUlF6RThRTEdmak1BQ1BlaUtZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi83NDJhMDQtMTdhZi00ZjQwLWExNDAtNjA0NTg0ODk1OTI1
LzEvNkVkNjBoeTNpUlF6RThRTEdmak1BQ1BlaUtZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOvkqeXmw
agt3z6s2KO+SlwtlF2qk3vT9wdWW0P6new6iI3a6hSJgpc/G9+EtHqeHGw7ZUeuR
XR0uVVWDISQdvm8PPZOFwUDogWI3N+pNX3SzEdFYcGTs2MsyhYy3pC1uGXbF2NT6
ZTorwE51nb2FOmwGR+fWkicO12BGJQVHw9Dt4Ep2S/QWImO3h3QquuhSFZHs2wNk
G5xAzeuQAyd9HvFBp5rSA4LWiiLYEgzy3cmw39b/Kw7Xr94oXNwTygqnpb21ud/r
IJV2P5MqgRSG8Ek6uHQbaVK2i0rxrXOMzZt2V9k1t52k0DrjOLl+QghNVAwjQ+Hj
UCe66aRp+Lxc9w==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:51:08 2025 by rpki-client