Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/c3069e-5ffc-4c8c-91dc-31d197f139d8/1/6HVGTomBbvALA2lQIBin5Zzi02w.mft
File: 6HVGTomBbvALA2lQIBin5Zzi02w.mft (raw, json)
Hash identifier: XFzpthpf0juRhLs5nJUcvbwxvwjFALQWs8CyHiOQbw4=
Subject key identifier: 06:A2:2E:49:47:33:BB:53:DD:C8:30:6E:BA:5C:D5:07:B3:40:5C:29
Authority key identifier: E8:75:46:4E:89:81:6E:F0:0B:03:69:50:20:18:A7:E5:9C:E2:D3:6C
Certificate issuer: /CN=e875464e89816ef00b0369502018a7e59ce2d36c
Certificate serial: 0197B6D7C503941AF1CDF733C23F51696A52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6HVGTomBbvALA2lQIBin5Zzi02w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/c3069e-5ffc-4c8c-91dc-31d197f139d8/1/6HVGTomBbvALA2lQIBin5Zzi02w.mft
Manifest number: 1399
Signing time: Sat 28 Jun 2025 14:01:23 +0000
Manifest this update: Sat 28 Jun 2025 14:01:23 +0000
Manifest next update: Sun 29 Jun 2025 14:01:23 +0000
Files and hashes: 1: 1K9FnI645Yqoqp7v7ivnFFVcKlU.roa (hash: h6hzrhT4kJEWC7V4ecnqwx0o1Jw9Qh9TGp5gYGQjVLY=)
2: 6HVGTomBbvALA2lQIBin5Zzi02w.crl (hash: mQaeWt07mZKGEkb9wrrExjqDJ98IlX+HyutTVN4MoYg=)
3: E4_z-I5S9ncgaaSljqVssc0s8uk.roa (hash: qL0QuMiYtX65hwE3RBedT5Hnno1IGD+mzQYraz5OhWU=)
4: OuTJvGgTKVnEZq7gCAEHXIiEW0A.roa (hash: YXkZ09I/fBc9Mmxb3/951nvIEdnGhT1gbWVM1wiVQc8=)
5: TTqnLj3WpKYvdn_3GVellbdKkvo.roa (hash: pyP10mZYKwVtG3Ir/Zb6+G0oU3PtknfdfIV9uEh1OQ8=)
6: e1cwbcDkdgSRu6n5KfpwkuDdmxQ.roa (hash: aIDnnp2yTdzDu5j4SrtTH/gBGFH3XCan8aEwWj5RxWQ=)
7: i3rHyXPusCVWKugIUURPj5Z_2oI.roa (hash: 1gfDfF2rTo/9YCI3+WwxH/uMujAutjvVMJoVtYw6quc=)
8: r3ev4zBDd_GC35s0Kz0Ij7H3LQM.roa (hash: HdkG2O8mQ9D6IO4Hyed6rak9jpN8qftAs7DiwRIQwXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/c3069e-5ffc-4c8c-91dc-31d197f139d8/1/6HVGTomBbvALA2lQIBin5Zzi02w.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/c3069e-5ffc-4c8c-91dc-31d197f139d8/1/6HVGTomBbvALA2lQIBin5Zzi02w.mft
rsync://rpki.ripe.net/repository/DEFAULT/6HVGTomBbvALA2lQIBin5Zzi02w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:c5:03:94:1a:f1:cd:f7:33:c2:3f:51:69:6a:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e875464e89816ef00b0369502018a7e59ce2d36c
Validity
Not Before: Jun 28 14:01:23 2025 GMT
Not After : Jun 29 14:01:23 2025 GMT
Subject: CN=06a22e494733bb53ddc8306eba5cd507b3405c29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:07:1b:c7:f3:61:6f:cb:8a:98:86:23:ad:78:
6f:1a:23:b8:8f:56:67:55:6a:0f:14:e1:c3:fa:ed:
d5:a7:09:36:82:55:64:80:bd:92:d0:a3:41:29:0c:
62:b4:f2:5a:cb:fb:00:c6:ad:68:fe:dc:42:44:0b:
c1:8e:5e:d9:bc:7d:aa:38:ee:9c:15:49:84:01:c5:
2e:01:f8:78:f9:21:ad:5f:81:5c:29:7b:bb:da:66:
cd:65:3e:af:3f:5e:6c:18:53:44:79:bb:b0:92:34:
8c:8c:3c:76:8b:5a:15:b8:58:9c:c2:50:c9:d7:75:
6e:a4:c7:1c:da:2f:6c:f5:48:5e:04:10:43:af:a4:
83:c2:52:05:03:c6:60:db:57:05:7f:5e:32:09:b2:
f3:9a:5a:0e:b6:a4:70:db:e7:40:48:d7:9e:67:5c:
fd:92:99:52:89:46:f5:59:6a:7d:1e:98:54:f1:2e:
0f:4b:a3:cc:7c:1f:43:ba:08:13:9d:1a:8a:dc:7d:
b7:bb:c9:96:2d:0b:b4:18:70:64:d8:62:92:2d:32:
cd:e3:02:bf:1f:45:6c:c7:5f:bf:b9:37:ee:be:44:
d0:12:a0:95:13:45:42:f1:a3:b2:e0:ae:64:e9:46:
35:b3:0a:01:5e:b5:94:ad:0d:7f:03:4f:27:8d:4d:
83:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:A2:2E:49:47:33:BB:53:DD:C8:30:6E:BA:5C:D5:07:B3:40:5C:29
X509v3 Authority Key Identifier:
keyid:E8:75:46:4E:89:81:6E:F0:0B:03:69:50:20:18:A7:E5:9C:E2:D3:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6HVGTomBbvALA2lQIBin5Zzi02w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/c3069e-5ffc-4c8c-91dc-31d197f139d8/1/6HVGTomBbvALA2lQIBin5Zzi02w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/c3069e-5ffc-4c8c-91dc-31d197f139d8/1/6HVGTomBbvALA2lQIBin5Zzi02w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:ae:18:11:af:ed:67:ae:b0:f4:d5:d6:4e:ef:b1:e9:be:7e:
50:d1:92:89:d3:46:bb:3b:3b:61:73:c4:19:4d:48:12:f4:f9:
bb:31:f9:53:93:e4:f6:4b:77:7f:6e:08:05:cf:c5:bb:14:87:
04:0f:61:ea:9f:13:34:c9:01:83:f3:4a:ed:b6:59:81:3c:54:
a2:1e:d5:06:aa:d9:52:14:13:fd:04:a0:f8:21:2f:45:55:e2:
ea:c0:80:00:5b:47:8b:09:ce:34:b8:7e:52:7b:e7:a5:14:99:
47:be:a3:3d:95:73:e4:5c:a3:7b:bd:b1:72:94:91:22:bf:dd:
b0:bf:e7:76:a3:da:47:36:1d:43:e9:8d:47:d2:07:65:86:ca:
93:3c:0e:80:ca:ea:d8:44:8f:fd:92:10:c3:10:35:7f:ce:86:
38:ee:ab:08:71:3a:19:94:5f:b3:5d:bb:ff:3c:0e:f4:16:3f:
8c:11:ad:8b:4c:fd:60:84:d2:79:2b:44:36:09:02:a0:7c:72:
81:22:db:63:94:90:d5:4a:66:91:14:49:5d:dc:2d:5f:53:9b:
69:c2:48:18:62:af:e7:63:a1:d6:47:93:d6:c5:6f:a1:1f:7a:
ba:ae:f8:08:cf:b8:0f:76:e7:b4:08:ad:ae:07:18:a0:26:2d:
c3:9c:cf:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe218UDlBrxzfczwj9RaWpSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4NzU0NjRlODk4MTZlZjAwYjAzNjk1MDIwMThhN2U1OWNl
MmQzNmMwHhcNMjUwNjI4MTQwMTIzWhcNMjUwNjI5MTQwMTIzWjAzMTEwLwYDVQQD
EygwNmEyMmU0OTQ3MzNiYjUzZGRjODMwNmViYTVjZDUwN2IzNDA1YzI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAcbx/Nhb8uKmIYjrXhvGiO4j1Zn
VWoPFOHD+u3Vpwk2glVkgL2S0KNBKQxitPJay/sAxq1o/txCRAvBjl7ZvH2qOO6c
FUmEAcUuAfh4+SGtX4FcKXu72mbNZT6vP15sGFNEebuwkjSMjDx2i1oVuFicwlDJ
13VupMcc2i9s9UheBBBDr6SDwlIFA8Zg21cFf14yCbLzmloOtqRw2+dASNeeZ1z9
kplSiUb1WWp9HphU8S4PS6PMfB9DuggTnRqK3H23u8mWLQu0GHBk2GKSLTLN4wK/
H0Vsx1+/uTfuvkTQEqCVE0VC8aOy4K5k6UY1swoBXrWUrQ1/A08njU2D1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAaiLklHM7tT3cgwbrpc1QezQFwpMB8GA1UdIwQY
MBaAFOh1Rk6JgW7wCwNpUCAYp+Wc4tNsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkhWR1RvbUJidkFMQTJsUUlCaW41WnppMDJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9jMzA2OWUtNWZmYy00YzhjLTkxZGMt
MzFkMTk3ZjEzOWQ4LzEvNkhWR1RvbUJidkFMQTJsUUlCaW41WnppMDJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy9jMzA2OWUtNWZmYy00YzhjLTkxZGMtMzFkMTk3ZjEzOWQ4
LzEvNkhWR1RvbUJidkFMQTJsUUlCaW41WnppMDJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATq4YEa/t
Z66w9NXWTu+x6b5+UNGSidNGuzs7YXPEGU1IEvT5uzH5U5Pk9kt3f24IBc/FuxSH
BA9h6p8TNMkBg/NK7bZZgTxUoh7VBqrZUhQT/QSg+CEvRVXi6sCAAFtHiwnONLh+
UnvnpRSZR76jPZVz5Fyje72xcpSRIr/dsL/ndqPaRzYdQ+mNR9IHZYbKkzwOgMrq
2ESP/ZIQwxA1f86GOO6rCHE6GZRfs127/zwO9BY/jBGti0z9YITSeStENgkCoHxy
gSLbY5SQ1UpmkRRJXdwtX1ObacJIGGKv52Oh1keT1sVvoR96uq74CM+4D3bntAit
rgcYoCYtw5zPhQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:47:46 2025 by rpki-client