Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/a00d12-8603-4bfa-9b62-0a037d78cf03/1/6xCwm6DBDPB25RB5MdPWkaQ5ZSg.mft
File: 6xCwm6DBDPB25RB5MdPWkaQ5ZSg.mft (raw, json)
Hash identifier: 85cfWL8x8ZnVu9Ms1q75T8VZVfN0qBYh6QZ6VdQp2Vk=
Subject key identifier: 48:77:DA:6C:ED:66:AF:30:8C:00:17:C1:39:CA:4D:79:15:4F:54:51
Authority key identifier: EB:10:B0:9B:A0:C1:0C:F0:76:E5:10:79:31:D3:D6:91:A4:39:65:28
Certificate issuer: /CN=eb10b09ba0c10cf076e5107931d3d691a4396528
Certificate serial: 019846649F064D63E25657098913570C6689
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6xCwm6DBDPB25RB5MdPWkaQ5ZSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/a00d12-8603-4bfa-9b62-0a037d78cf03/1/6xCwm6DBDPB25RB5MdPWkaQ5ZSg.mft
Manifest number: 044C
Signing time: Sat 26 Jul 2025 11:00:56 +0000
Manifest this update: Sat 26 Jul 2025 11:00:56 +0000
Manifest next update: Sun 27 Jul 2025 11:00:56 +0000
Files and hashes: 1: 1-TEAa7vqhDR8MFmfWosBtb41wek.roa (hash: eqiD9H7n4ulTtrxau5diRG8AJtoZzGM451rZtgj6RWo=)
2: 6xCwm6DBDPB25RB5MdPWkaQ5ZSg.crl (hash: ehEpL3CFP4kbhSTeDibkIyeznndQm0SsU7ll+z+fe58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/a00d12-8603-4bfa-9b62-0a037d78cf03/1/6xCwm6DBDPB25RB5MdPWkaQ5ZSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/a00d12-8603-4bfa-9b62-0a037d78cf03/1/6xCwm6DBDPB25RB5MdPWkaQ5ZSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/6xCwm6DBDPB25RB5MdPWkaQ5ZSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:64:9f:06:4d:63:e2:56:57:09:89:13:57:0c:66:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb10b09ba0c10cf076e5107931d3d691a4396528
Validity
Not Before: Jul 26 11:00:56 2025 GMT
Not After : Jul 27 11:00:56 2025 GMT
Subject: CN=4877da6ced66af308c0017c139ca4d79154f5451
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c2:88:20:bd:fc:19:02:f1:95:8c:60:8f:cb:
a8:9c:f0:0d:6f:26:61:ae:cf:d8:eb:ad:9c:5e:ed:
90:d9:9e:94:af:93:4a:6d:97:f3:9a:5a:f6:b7:04:
a9:bd:71:ec:d1:dc:69:07:80:7d:9b:12:ff:be:08:
23:ef:b2:d1:7d:f6:19:ea:6c:41:4f:d1:78:2e:92:
9e:0e:70:6f:b9:ce:18:8b:17:b1:b3:57:b8:2e:7d:
34:a5:d9:06:13:4a:3c:28:ce:49:77:33:2c:28:78:
b5:cd:04:23:eb:48:a5:ff:1d:3b:de:1c:10:0e:93:
71:b4:d8:50:1d:f5:0f:e3:ff:c6:a4:81:80:2b:26:
44:25:36:12:3e:17:cf:f7:15:23:08:50:75:0a:51:
28:fc:a4:ab:e0:dc:fc:b1:47:dd:b3:b3:fa:60:0d:
a6:0f:8d:88:c3:0f:e4:3d:51:71:df:55:fe:35:0a:
14:b6:72:ff:cf:d4:53:16:fe:ea:dd:c0:3f:06:d7:
f6:8d:4c:47:7e:a7:32:97:39:b9:6e:de:e7:d7:6d:
dd:f6:fe:7f:c5:de:80:39:24:46:82:78:f7:f2:4a:
97:be:51:36:45:f1:b4:ee:90:e5:ce:e3:b5:c2:1b:
ad:12:d4:fb:cf:7c:96:48:2a:b3:23:c3:11:04:08:
6e:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:77:DA:6C:ED:66:AF:30:8C:00:17:C1:39:CA:4D:79:15:4F:54:51
X509v3 Authority Key Identifier:
keyid:EB:10:B0:9B:A0:C1:0C:F0:76:E5:10:79:31:D3:D6:91:A4:39:65:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6xCwm6DBDPB25RB5MdPWkaQ5ZSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/a00d12-8603-4bfa-9b62-0a037d78cf03/1/6xCwm6DBDPB25RB5MdPWkaQ5ZSg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/a00d12-8603-4bfa-9b62-0a037d78cf03/1/6xCwm6DBDPB25RB5MdPWkaQ5ZSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:1f:76:cb:f8:33:ca:8c:53:89:68:72:a9:8a:b8:e9:a3:8a:
4d:3b:27:39:10:04:f4:29:7c:fb:a0:18:40:83:1b:f2:dd:76:
d3:ad:05:f2:bf:0d:48:a8:35:e1:c4:fa:aa:35:d4:94:5c:7b:
e2:37:db:a5:71:c2:31:8d:40:ef:9a:9d:84:b2:94:af:9f:5f:
c0:0c:ac:bb:5a:12:ef:3e:23:5b:a6:ed:97:a6:28:be:c7:9b:
2a:ac:c3:6e:cc:65:aa:a9:61:2e:fb:86:fc:1f:d0:b4:46:09:
25:59:75:b0:ca:f7:f3:9a:1b:9e:7a:f1:5a:5f:91:a6:3f:77:
98:14:24:47:ec:5f:10:d6:94:a9:c6:d4:3e:10:43:49:f9:c2:
11:18:78:c1:17:0f:63:5e:c0:fe:53:20:6f:ca:4f:d4:d5:8c:
12:20:f8:5d:3c:a9:8f:19:77:58:32:c4:45:4a:72:1c:fe:ca:
02:5b:1e:03:6a:b1:9d:d8:cd:bc:b6:fa:61:6e:8c:53:1d:dd:
f0:bf:ba:71:0f:6a:05:83:17:6c:d6:24:8b:42:2e:a7:c4:96:
77:34:47:f6:c0:a2:11:35:ac:a5:62:77:a0:95:79:6f:19:93:
16:84:e1:74:77:2b:87:b2:94:a0:cb:38:87:5a:71:3a:a5:ae:
cb:55:d0:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhGZJ8GTWPiVlcJiRNXDGaJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViMTBiMDliYTBjMTBjZjA3NmU1MTA3OTMxZDNkNjkxYTQz
OTY1MjgwHhcNMjUwNzI2MTEwMDU2WhcNMjUwNzI3MTEwMDU2WjAzMTEwLwYDVQQD
Eyg0ODc3ZGE2Y2VkNjZhZjMwOGMwMDE3YzEzOWNhNGQ3OTE1NGY1NDUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcKIIL38GQLxlYxgj8uonPANbyZh
rs/Y662cXu2Q2Z6Ur5NKbZfzmlr2twSpvXHs0dxpB4B9mxL/vggj77LRffYZ6mxB
T9F4LpKeDnBvuc4Yixexs1e4Ln00pdkGE0o8KM5JdzMsKHi1zQQj60il/x073hwQ
DpNxtNhQHfUP4//GpIGAKyZEJTYSPhfP9xUjCFB1ClEo/KSr4Nz8sUfds7P6YA2m
D42Iww/kPVFx31X+NQoUtnL/z9RTFv7q3cA/Btf2jUxHfqcylzm5bt7n123d9v5/
xd6AOSRGgnj38kqXvlE2RfG07pDlzuO1whutEtT7z3yWSCqzI8MRBAhu6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEh32mztZq8wjAAXwTnKTXkVT1RRMB8GA1UdIwQY
MBaAFOsQsJugwQzwduUQeTHT1pGkOWUoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnhDd202REJEUEIyNVJCNU1kUFdrYVE1WlNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9hMDBkMTItODYwMy00YmZhLTliNjIt
MGEwMzdkNzhjZjAzLzEvNnhDd202REJEUEIyNVJCNU1kUFdrYVE1WlNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC9hMDBkMTItODYwMy00YmZhLTliNjItMGEwMzdkNzhjZjAz
LzEvNnhDd202REJEUEIyNVJCNU1kUFdrYVE1WlNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACR92y/gz
yoxTiWhyqYq46aOKTTsnORAE9Cl8+6AYQIMb8t12060F8r8NSKg14cT6qjXUlFx7
4jfbpXHCMY1A75qdhLKUr59fwAysu1oS7z4jW6btl6YovsebKqzDbsxlqqlhLvuG
/B/QtEYJJVl1sMr385obnnrxWl+Rpj93mBQkR+xfENaUqcbUPhBDSfnCERh4wRcP
Y17A/lMgb8pP1NWMEiD4XTypjxl3WDLERUpyHP7KAlseA2qxndjNvLb6YW6MUx3d
8L+6cQ9qBYMXbNYki0Iup8SWdzRH9sCiETWspWJ3oJV5bxmTFoThdHcrh7KUoMs4
h1pxOqWuy1XQkA==
-----END CERTIFICATE-----
Generated at Sat Jul 26 20:25:50 2025 by rpki-client