Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/9f5523-269c-45b0-aa6e-1106b047f6e0/1/6WM0sHIQirro8yHsTM50lMEPDvE.mft
File: 6WM0sHIQirro8yHsTM50lMEPDvE.mft (raw, json)
Hash identifier: mhZD1F9Q8uXNQRNMCyn1fJK+BeWbMvVl2bj3iEz5ovk=
Subject key identifier: 71:AB:43:2C:A2:86:65:54:DA:1B:57:7F:E7:F1:F9:D9:04:7F:F7:38
Authority key identifier: E9:63:34:B0:72:10:8A:BA:E8:F3:21:EC:4C:CE:74:94:C1:0F:0E:F1
Certificate issuer: /CN=e96334b072108abae8f321ec4cce7494c10f0ef1
Certificate serial: 019A01B4DDF88647D73E94071287A59F23D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6WM0sHIQirro8yHsTM50lMEPDvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/9f5523-269c-45b0-aa6e-1106b047f6e0/1/6WM0sHIQirro8yHsTM50lMEPDvE.mft
Manifest number: 09DE
Signing time: Mon 20 Oct 2025 13:00:21 +0000
Manifest this update: Mon 20 Oct 2025 13:00:21 +0000
Manifest next update: Tue 21 Oct 2025 13:00:21 +0000
Files and hashes: 1: 6WM0sHIQirro8yHsTM50lMEPDvE.crl (hash: DUJ2QfbnlIRwTwekpXuQAEPx/t0sNQ1RM+ABWa6/Vxw=)
2: IyqYG6lxn2QMSQZwtCxgUFCeJz8.roa (hash: p83I4mzsEqptIUVslTxPYw5YgkTpPheBBTxPCVXji0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/9f5523-269c-45b0-aa6e-1106b047f6e0/1/6WM0sHIQirro8yHsTM50lMEPDvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/9f5523-269c-45b0-aa6e-1106b047f6e0/1/6WM0sHIQirro8yHsTM50lMEPDvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/6WM0sHIQirro8yHsTM50lMEPDvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:b4:dd:f8:86:47:d7:3e:94:07:12:87:a5:9f:23:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e96334b072108abae8f321ec4cce7494c10f0ef1
Validity
Not Before: Oct 20 13:00:21 2025 GMT
Not After : Oct 21 13:00:21 2025 GMT
Subject: CN=71ab432ca2866554da1b577fe7f1f9d9047ff738
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:56:bf:70:c7:46:0b:70:f2:30:42:58:6c:a8:
7c:9e:04:6a:26:31:e4:8d:34:02:43:8f:0d:b0:78:
b4:58:d0:52:78:94:63:69:c7:dd:cc:af:21:8a:30:
0c:1e:b5:ff:8f:32:c8:97:5f:74:8e:a8:2d:ec:c3:
a6:cb:75:2c:22:8e:c1:9e:90:46:29:6f:42:5b:b3:
9f:8a:9a:e0:93:6c:3a:11:23:4d:6f:16:81:b7:47:
ad:23:b0:d5:fe:0d:5b:9b:3e:4f:0f:f0:c1:c5:ee:
8c:20:54:76:13:58:fd:31:83:67:8c:bb:1b:3f:fe:
c5:9c:aa:2e:6b:fd:ac:5c:b7:95:45:b1:7f:fd:71:
e3:72:40:69:7d:d6:48:c7:1b:9a:4e:c8:2e:35:85:
0d:c3:2e:bd:f9:e1:19:7d:be:38:4c:fc:2d:7f:a7:
4f:8c:bd:2d:6b:e9:1c:65:13:2f:e5:38:7d:0e:9f:
fe:84:83:af:7b:97:21:50:bd:d3:21:31:eb:a4:3b:
2b:83:b2:40:44:3f:f7:88:54:3b:66:12:c9:9e:6e:
0e:bc:67:fb:47:c5:35:41:51:e6:68:e0:12:54:c9:
36:13:38:a2:04:2f:24:e9:ba:b7:0c:19:74:ac:c8:
c3:25:e7:ad:d2:82:96:f5:99:98:a3:1c:8b:df:05:
29:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:AB:43:2C:A2:86:65:54:DA:1B:57:7F:E7:F1:F9:D9:04:7F:F7:38
X509v3 Authority Key Identifier:
keyid:E9:63:34:B0:72:10:8A:BA:E8:F3:21:EC:4C:CE:74:94:C1:0F:0E:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6WM0sHIQirro8yHsTM50lMEPDvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/9f5523-269c-45b0-aa6e-1106b047f6e0/1/6WM0sHIQirro8yHsTM50lMEPDvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/9f5523-269c-45b0-aa6e-1106b047f6e0/1/6WM0sHIQirro8yHsTM50lMEPDvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:d8:fd:6b:ec:e0:1f:ed:fd:a3:f2:79:b4:da:89:3f:17:4b:
c2:f8:a3:6e:f4:4e:44:15:19:2f:e2:82:ba:14:7f:71:05:10:
a7:82:a4:a6:8c:93:ef:8b:1d:0b:2e:36:44:05:66:c5:96:60:
a3:14:b2:af:1a:96:36:0a:c8:9d:e3:dc:2f:9a:fe:a2:41:72:
70:73:ef:69:36:03:12:d8:99:03:c9:b3:f5:53:92:fc:0b:ac:
24:03:d5:05:21:98:45:cc:b7:e4:55:65:31:65:41:53:f9:a7:
d0:de:e0:84:ba:92:7e:b7:81:f1:ec:1c:5a:ee:7f:a1:17:62:
dd:cc:ab:28:80:11:89:6e:72:87:5c:77:e4:9b:df:bf:6e:af:
96:81:99:dd:ad:e3:7b:43:50:2a:b0:47:c9:40:44:e6:90:cd:
ce:46:2f:18:c0:88:7c:35:01:db:e7:59:9c:1a:27:ef:7c:c7:
12:00:d4:74:09:85:e2:18:8b:f2:b0:3e:b4:91:80:c7:7e:d8:
2b:80:cc:9e:80:5d:4c:e4:aa:e6:3b:9e:f7:c6:e8:63:a1:d0:
a8:6c:ed:b9:f8:af:dd:fb:60:4c:12:ce:dd:7c:14:e5:20:99:
42:a3:6c:52:d6:2d:6f:e4:e8:87:c9:2d:25:74:8e:01:d0:21:
e9:be:79:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoBtN34hkfXPpQHEoelnyPYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5NjMzNGIwNzIxMDhhYmFlOGYzMjFlYzRjY2U3NDk0YzEw
ZjBlZjEwHhcNMjUxMDIwMTMwMDIxWhcNMjUxMDIxMTMwMDIxWjAzMTEwLwYDVQQD
Eyg3MWFiNDMyY2EyODY2NTU0ZGExYjU3N2ZlN2YxZjlkOTA0N2ZmNzM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVa/cMdGC3DyMEJYbKh8ngRqJjHk
jTQCQ48NsHi0WNBSeJRjacfdzK8hijAMHrX/jzLIl190jqgt7MOmy3UsIo7BnpBG
KW9CW7Ofiprgk2w6ESNNbxaBt0etI7DV/g1bmz5PD/DBxe6MIFR2E1j9MYNnjLsb
P/7FnKoua/2sXLeVRbF//XHjckBpfdZIxxuaTsguNYUNwy69+eEZfb44TPwtf6dP
jL0ta+kcZRMv5Th9Dp/+hIOve5chUL3TITHrpDsrg7JARD/3iFQ7ZhLJnm4OvGf7
R8U1QVHmaOASVMk2EziiBC8k6bq3DBl0rMjDJeet0oKW9ZmYoxyL3wUpVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHGrQyyihmVU2htXf+fx+dkEf/c4MB8GA1UdIwQY
MBaAFOljNLByEIq66PMh7EzOdJTBDw7xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNldNMHNISVFpcnJvOHlIc1RNNTBsTUVQRHZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC85ZjU1MjMtMjY5Yy00NWIwLWFhNmUt
MTEwNmIwNDdmNmUwLzEvNldNMHNISVFpcnJvOHlIc1RNNTBsTUVQRHZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC85ZjU1MjMtMjY5Yy00NWIwLWFhNmUtMTEwNmIwNDdmNmUw
LzEvNldNMHNISVFpcnJvOHlIc1RNNTBsTUVQRHZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmtj9a+zg
H+39o/J5tNqJPxdLwvijbvRORBUZL+KCuhR/cQUQp4KkpoyT74sdCy42RAVmxZZg
oxSyrxqWNgrInePcL5r+okFycHPvaTYDEtiZA8mz9VOS/AusJAPVBSGYRcy35FVl
MWVBU/mn0N7ghLqSfreB8ewcWu5/oRdi3cyrKIARiW5yh1x35Jvfv26vloGZ3a3j
e0NQKrBHyUBE5pDNzkYvGMCIfDUB2+dZnBon73zHEgDUdAmF4hiL8rA+tJGAx37Y
K4DMnoBdTOSq5jue98boY6HQqGztufiv3ftgTBLO3XwU5SCZQqNsUtYtb+Toh8kt
JXSOAdAh6b55Mg==
-----END CERTIFICATE-----
Generated at Mon Oct 20 18:03:31 2025 by rpki-client