Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/78a861-b918-4ea7-88a8-603cb083714b/1/C6VqvctPbwyGuDLswT9eJJch1vg.mft
File: C6VqvctPbwyGuDLswT9eJJch1vg.mft (raw, json)
Hash identifier: f7/ch36iJ1UUgXJ13oJXbdJtMc307w+5dz0dyANgYuo=
Subject key identifier: 74:1E:86:EF:29:DB:F4:86:EF:B3:B0:8E:F3:E6:CA:A2:3F:BD:C9:46
Authority key identifier: 0B:A5:6A:BD:CB:4F:6F:0C:86:B8:32:EC:C1:3F:5E:24:97:21:D6:F8
Certificate issuer: /CN=0ba56abdcb4f6f0c86b832ecc13f5e249721d6f8
Certificate serial: 0199FF22FBD0C63C3089F262B6E788393BF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C6VqvctPbwyGuDLswT9eJJch1vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/78a861-b918-4ea7-88a8-603cb083714b/1/C6VqvctPbwyGuDLswT9eJJch1vg.mft
Manifest number: 0D8C
Signing time: Mon 20 Oct 2025 01:01:46 +0000
Manifest this update: Mon 20 Oct 2025 01:01:46 +0000
Manifest next update: Tue 21 Oct 2025 01:01:46 +0000
Files and hashes: 1: 10gRzD3VrAGl4bbzZAnzRnZ-9NY.roa (hash: lcACm1XYWQGs+OoRyS5RawPhw9wP7Mmy1MtCSpjZTr8=)
2: C6VqvctPbwyGuDLswT9eJJch1vg.crl (hash: BFvuo2YIymOVsXprld3VTvP3uIGqiQblb8yjekBBn/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/78a861-b918-4ea7-88a8-603cb083714b/1/C6VqvctPbwyGuDLswT9eJJch1vg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/78a861-b918-4ea7-88a8-603cb083714b/1/C6VqvctPbwyGuDLswT9eJJch1vg.mft
rsync://rpki.ripe.net/repository/DEFAULT/C6VqvctPbwyGuDLswT9eJJch1vg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 01:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:22:fb:d0:c6:3c:30:89:f2:62:b6:e7:88:39:3b:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ba56abdcb4f6f0c86b832ecc13f5e249721d6f8
Validity
Not Before: Oct 20 01:01:46 2025 GMT
Not After : Oct 21 01:01:46 2025 GMT
Subject: CN=741e86ef29dbf486efb3b08ef3e6caa23fbdc946
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:bd:77:95:be:d2:d7:ac:dd:1d:bf:56:d7:52:
73:b3:6f:77:f8:0e:00:50:8b:e5:db:cc:8c:bb:09:
21:02:04:71:28:f8:44:6a:36:b4:62:c1:e9:b7:e7:
55:bb:b7:77:77:e6:d4:d0:65:c5:58:0a:aa:b9:eb:
88:53:54:ad:8c:c8:7f:1c:51:ad:58:9e:76:32:36:
a8:d6:e7:ea:6f:b8:fc:97:cf:52:9f:3d:fa:e9:e7:
08:22:71:43:a1:39:5d:a6:74:59:dc:22:b4:e0:1d:
e7:e7:9d:d7:2e:73:41:5f:5f:27:bf:01:dd:9f:d4:
6c:fe:2a:38:46:ed:c7:71:78:77:6a:2d:f2:33:10:
d6:94:82:69:aa:04:48:a5:89:50:91:81:70:b7:ef:
d6:1b:71:9e:6f:90:47:d6:e7:f1:e8:ca:b9:39:d7:
b5:7e:d0:dd:cf:f6:2e:53:84:0d:2c:7e:96:33:4e:
3a:8f:9c:a5:a5:5c:dc:26:5a:e6:de:44:b4:8c:84:
18:89:b5:fb:4e:c6:2e:0a:29:ed:04:d3:eb:97:ad:
0a:e3:68:f1:25:4b:79:0b:0a:4c:59:66:9f:13:b6:
1d:f4:a9:1f:d0:40:61:8d:ff:80:35:b4:df:bf:d9:
cc:3d:dd:50:43:c2:76:1a:9c:53:c3:49:5d:0a:c5:
db:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:1E:86:EF:29:DB:F4:86:EF:B3:B0:8E:F3:E6:CA:A2:3F:BD:C9:46
X509v3 Authority Key Identifier:
keyid:0B:A5:6A:BD:CB:4F:6F:0C:86:B8:32:EC:C1:3F:5E:24:97:21:D6:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C6VqvctPbwyGuDLswT9eJJch1vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/78a861-b918-4ea7-88a8-603cb083714b/1/C6VqvctPbwyGuDLswT9eJJch1vg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/78a861-b918-4ea7-88a8-603cb083714b/1/C6VqvctPbwyGuDLswT9eJJch1vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:99:2d:b8:5d:da:64:22:01:ca:16:b4:51:e7:e9:52:48:c7:
6a:94:56:5d:c9:ca:0f:90:ce:ce:fa:33:ae:31:0d:6a:6d:f8:
df:70:12:78:d3:9e:e2:59:dd:8a:cb:35:7b:02:e3:a5:ef:c4:
3f:8b:32:d2:91:2a:33:d5:eb:dc:64:60:9b:42:a7:e8:03:95:
47:73:4a:7d:a8:dc:d2:7b:7d:9c:96:dc:22:89:86:2f:1b:46:
99:52:4a:54:16:eb:56:87:10:e6:7d:0e:a8:1e:a6:30:dc:09:
40:b0:29:5a:66:bd:f0:33:d7:a6:cc:a7:14:b7:03:e0:99:62:
a9:c8:6f:6d:2a:a3:84:0c:48:89:17:9b:7a:a1:1c:48:c1:31:
e0:09:ba:c2:20:5a:18:e4:15:59:eb:c6:47:ee:d5:97:01:21:
ea:d3:87:ce:90:d4:1d:10:d6:ec:88:17:c2:85:b7:b5:7a:bb:
40:99:32:c8:34:8c:90:93:02:6d:9e:a1:e9:ae:01:f0:03:e3:
c0:8b:4a:45:87:39:0a:10:9c:27:fc:2f:c7:3f:b2:40:fb:71:
72:dd:3b:fb:d0:0e:d4:b7:03:71:6d:c4:ce:fc:0f:56:a1:7a:
ae:e0:ff:39:e6:9d:51:33:52:62:5b:f6:6c:b4:68:60:7b:78:
6b:dd:b5:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/IvvQxjwwifJitueIOTvyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiYTU2YWJkY2I0ZjZmMGM4NmI4MzJlY2MxM2Y1ZTI0OTcy
MWQ2ZjgwHhcNMjUxMDIwMDEwMTQ2WhcNMjUxMDIxMDEwMTQ2WjAzMTEwLwYDVQQD
Eyg3NDFlODZlZjI5ZGJmNDg2ZWZiM2IwOGVmM2U2Y2FhMjNmYmRjOTQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsr13lb7S16zdHb9W11Jzs293+A4A
UIvl28yMuwkhAgRxKPhEaja0YsHpt+dVu7d3d+bU0GXFWAqqueuIU1StjMh/HFGt
WJ52Mjao1ufqb7j8l89Snz366ecIInFDoTldpnRZ3CK04B3n553XLnNBX18nvwHd
n9Rs/io4Ru3HcXh3ai3yMxDWlIJpqgRIpYlQkYFwt+/WG3Geb5BH1ufx6Mq5Ode1
ftDdz/YuU4QNLH6WM046j5ylpVzcJlrm3kS0jIQYibX7TsYuCintBNPrl60K42jx
JUt5CwpMWWafE7Yd9Kkf0EBhjf+ANbTfv9nMPd1QQ8J2GpxTw0ldCsXb/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHQehu8p2/SG77OwjvPmyqI/vclGMB8GA1UdIwQY
MBaAFAular3LT28Mhrgy7ME/XiSXIdb4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzZWcXZjdFBid3lHdURMc3dUOWVKSmNoMXZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC83OGE4NjEtYjkxOC00ZWE3LTg4YTgt
NjAzY2IwODM3MTRiLzEvQzZWcXZjdFBid3lHdURMc3dUOWVKSmNoMXZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC83OGE4NjEtYjkxOC00ZWE3LTg4YTgtNjAzY2IwODM3MTRi
LzEvQzZWcXZjdFBid3lHdURMc3dUOWVKSmNoMXZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQZktuF3a
ZCIByha0UefpUkjHapRWXcnKD5DOzvozrjENam3433ASeNOe4lndiss1ewLjpe/E
P4sy0pEqM9Xr3GRgm0Kn6AOVR3NKfajc0nt9nJbcIomGLxtGmVJKVBbrVocQ5n0O
qB6mMNwJQLApWma98DPXpsynFLcD4JliqchvbSqjhAxIiRebeqEcSMEx4Am6wiBa
GOQVWevGR+7VlwEh6tOHzpDUHRDW7IgXwoW3tXq7QJkyyDSMkJMCbZ6h6a4B8APj
wItKRYc5ChCcJ/wvxz+yQPtxct07+9AO1LcDcW3EzvwPVqF6ruD/OeadUTNSYlv2
bLRoYHt4a921oA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 11:08:15 2025 by rpki-client