Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/02f85b-c4c5-4dfc-938f-71b938ae4ccd/1/6qwojPd47d1iHjNkW_VdfnqKboA.mft
File: 6qwojPd47d1iHjNkW_VdfnqKboA.mft (raw, json)
Hash identifier: jJfMVhTtW6Ns6+nReJ+xkeEMbybaxgvFpWNnThXSpVQ=
Subject key identifier: 0D:64:96:07:ED:2D:6A:7B:35:0A:BB:3C:01:67:E1:09:EE:09:D8:2B
Authority key identifier: EA:AC:28:8C:F7:78:ED:DD:62:1E:33:64:5B:F5:5D:7E:7A:8A:6E:80
Certificate issuer: /CN=eaac288cf778eddd621e33645bf55d7e7a8a6e80
Certificate serial: 019A22F71868ACCC1D0F09FE7F58D00A1461
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qwojPd47d1iHjNkW_VdfnqKboA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/02f85b-c4c5-4dfc-938f-71b938ae4ccd/1/6qwojPd47d1iHjNkW_VdfnqKboA.mft
Manifest number: 0209
Signing time: Mon 27 Oct 2025 00:00:10 +0000
Manifest this update: Mon 27 Oct 2025 00:00:10 +0000
Manifest next update: Tue 28 Oct 2025 00:00:10 +0000
Files and hashes: 1: 6qwojPd47d1iHjNkW_VdfnqKboA.crl (hash: mfx0efTOy7GK6SU2V99N5YxlS03Rxt/3P3B98bfk924=)
2: Z6Ua_m1uC5vkIPTZcIRy60EkawI.roa (hash: MctTd7jsNaKXKyaY6wZK28mWbw3asQJpuRF6a3Ofl8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/02f85b-c4c5-4dfc-938f-71b938ae4ccd/1/6qwojPd47d1iHjNkW_VdfnqKboA.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/02f85b-c4c5-4dfc-938f-71b938ae4ccd/1/6qwojPd47d1iHjNkW_VdfnqKboA.mft
rsync://rpki.ripe.net/repository/DEFAULT/6qwojPd47d1iHjNkW_VdfnqKboA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:f7:18:68:ac:cc:1d:0f:09:fe:7f:58:d0:0a:14:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaac288cf778eddd621e33645bf55d7e7a8a6e80
Validity
Not Before: Oct 27 00:00:10 2025 GMT
Not After : Oct 28 00:00:10 2025 GMT
Subject: CN=0d649607ed2d6a7b350abb3c0167e109ee09d82b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:52:61:0e:05:ea:09:c6:fa:2e:47:da:09:45:
8d:26:4e:94:02:df:f5:7b:35:bc:af:46:2d:bb:2f:
81:0b:8a:50:59:4a:8f:b7:41:a3:a2:a5:a6:28:7b:
8e:17:f4:12:1e:74:d6:f9:a7:0f:69:f5:33:9d:09:
33:5f:85:23:a6:c0:99:b9:6b:01:bd:6f:d0:16:ad:
66:45:09:ca:14:11:ad:6e:db:e5:a4:f6:2a:c8:ef:
44:de:87:b1:32:b8:cd:c2:3a:fa:af:df:0e:d0:59:
4a:06:e9:db:f8:67:6e:03:41:4f:68:40:23:aa:1f:
1c:90:d8:62:b7:a8:62:0b:fe:4a:91:ff:17:10:f6:
34:c4:ae:0f:8b:cc:5a:0f:6d:08:fd:fb:e9:5f:c5:
8f:d5:5e:68:41:01:18:c5:57:2b:a8:d9:53:1e:bf:
e2:7d:6f:a5:3a:56:ce:bb:3d:70:fe:a0:cb:11:8f:
93:05:60:98:76:26:4b:f7:61:50:41:41:85:fc:45:
35:ad:8b:82:ed:43:8f:e8:5a:1a:d1:c9:3a:39:e1:
bb:93:46:ea:fc:5d:f6:fb:4a:9e:e9:c5:bc:d4:89:
d7:6c:f2:a0:cc:df:d4:6f:60:2a:7d:18:47:62:64:
ec:c6:0e:84:f8:e6:6d:af:19:82:a9:05:3b:62:f0:
65:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:64:96:07:ED:2D:6A:7B:35:0A:BB:3C:01:67:E1:09:EE:09:D8:2B
X509v3 Authority Key Identifier:
keyid:EA:AC:28:8C:F7:78:ED:DD:62:1E:33:64:5B:F5:5D:7E:7A:8A:6E:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qwojPd47d1iHjNkW_VdfnqKboA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/02f85b-c4c5-4dfc-938f-71b938ae4ccd/1/6qwojPd47d1iHjNkW_VdfnqKboA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/02f85b-c4c5-4dfc-938f-71b938ae4ccd/1/6qwojPd47d1iHjNkW_VdfnqKboA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:e0:4a:76:da:67:36:ec:61:d1:cb:75:63:bf:31:54:5f:89:
e2:97:24:b9:a8:1f:21:d7:93:97:7d:18:bb:84:6d:c2:cb:9e:
6f:6e:9d:61:71:9c:2a:14:96:89:c7:cc:e2:76:6f:46:12:75:
b9:62:d5:57:80:51:a0:e1:48:1b:73:e0:60:40:98:f2:83:13:
e9:ec:c1:11:64:ae:e5:42:cf:bd:cd:af:4c:e7:90:46:83:c0:
3a:4e:79:d7:ec:00:06:b4:ac:46:1d:43:09:d3:76:5f:97:f1:
5a:54:d0:47:91:5f:b9:07:c3:cd:bc:48:65:1f:41:88:88:d9:
94:43:64:d0:e5:84:1f:4e:50:3c:85:1e:08:99:86:bf:97:73:
39:c7:62:43:29:ac:01:bf:51:61:67:f7:82:fc:0f:ea:4a:58:
2c:a1:07:61:cc:3d:a5:9a:ad:36:5a:e2:40:17:05:35:0d:7b:
8b:d9:ad:1c:75:9d:42:b9:dc:5a:c3:3d:a2:24:82:84:5c:67:
ce:2c:4e:94:b3:25:89:24:b1:a3:0f:a4:50:af:69:d3:4d:b1:
f5:da:46:a0:1f:d3:38:bb:0b:92:90:33:64:08:44:3f:29:60:
de:e8:20:2d:5f:4d:fd:ca:bd:33:a7:0e:85:e3:b4:0e:ce:c7:
eb:7e:60:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoi9xhorMwdDwn+f1jQChRhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhYWMyODhjZjc3OGVkZGQ2MjFlMzM2NDViZjU1ZDdlN2E4
YTZlODAwHhcNMjUxMDI3MDAwMDEwWhcNMjUxMDI4MDAwMDEwWjAzMTEwLwYDVQQD
EygwZDY0OTYwN2VkMmQ2YTdiMzUwYWJiM2MwMTY3ZTEwOWVlMDlkODJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAolJhDgXqCcb6LkfaCUWNJk6UAt/1
ezW8r0Ytuy+BC4pQWUqPt0GjoqWmKHuOF/QSHnTW+acPafUznQkzX4UjpsCZuWsB
vW/QFq1mRQnKFBGtbtvlpPYqyO9E3oexMrjNwjr6r98O0FlKBunb+GduA0FPaEAj
qh8ckNhit6hiC/5Kkf8XEPY0xK4Pi8xaD20I/fvpX8WP1V5oQQEYxVcrqNlTHr/i
fW+lOlbOuz1w/qDLEY+TBWCYdiZL92FQQUGF/EU1rYuC7UOP6Foa0ck6OeG7k0bq
/F32+0qe6cW81InXbPKgzN/Ub2AqfRhHYmTsxg6E+OZtrxmCqQU7YvBl4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA1klgftLWp7NQq7PAFn4QnuCdgrMB8GA1UdIwQY
MBaAFOqsKIz3eO3dYh4zZFv1XX56im6AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnF3b2pQZDQ3ZDFpSGpOa1dfVmRmbnFLYm9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS8wMmY4NWItYzRjNS00ZGZjLTkzOGYt
NzFiOTM4YWU0Y2NkLzEvNnF3b2pQZDQ3ZDFpSGpOa1dfVmRmbnFLYm9BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS8wMmY4NWItYzRjNS00ZGZjLTkzOGYtNzFiOTM4YWU0Y2Nk
LzEvNnF3b2pQZDQ3ZDFpSGpOa1dfVmRmbnFLYm9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkeBKdtpn
Nuxh0ct1Y78xVF+J4pckuagfIdeTl30Yu4Rtwsueb26dYXGcKhSWicfM4nZvRhJ1
uWLVV4BRoOFIG3PgYECY8oMT6ezBEWSu5ULPvc2vTOeQRoPAOk551+wABrSsRh1D
CdN2X5fxWlTQR5FfuQfDzbxIZR9BiIjZlENk0OWEH05QPIUeCJmGv5dzOcdiQyms
Ab9RYWf3gvwP6kpYLKEHYcw9pZqtNlriQBcFNQ17i9mtHHWdQrncWsM9oiSChFxn
zixOlLMliSSxow+kUK9p002x9dpGoB/TOLsLkpAzZAhEPylg3uggLV9N/cq9M6cO
heO0Ds7H635gZQ==
-----END CERTIFICATE-----
Generated at Mon Oct 27 04:33:42 2025 by rpki-client