Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/db4658-4275-43ba-9da9-6d810b0ada0a/1/6MPmRSpj-OR6JX5Twaj_p1-R6kA.mft
File: 6MPmRSpj-OR6JX5Twaj_p1-R6kA.mft (raw, json)
Hash identifier: 7EYYgEN5rq0C3vscRriVuIIfrUa1rkyvt+9XyMmg9E8=
Subject key identifier: 5A:FF:63:22:36:B9:1D:1E:18:5A:22:86:23:FA:88:82:2D:CB:64:3D
Authority key identifier: E8:C3:E6:45:2A:63:F8:E4:7A:25:7E:53:C1:A8:FF:A7:5F:91:EA:40
Certificate issuer: /CN=e8c3e6452a63f8e47a257e53c1a8ffa75f91ea40
Certificate serial: 019849D3C0B35E4A3C1EEB280143E3ECB948
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6MPmRSpj-OR6JX5Twaj_p1-R6kA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/db4658-4275-43ba-9da9-6d810b0ada0a/1/6MPmRSpj-OR6JX5Twaj_p1-R6kA.mft
Manifest number: 1601
Signing time: Sun 27 Jul 2025 03:01:10 +0000
Manifest this update: Sun 27 Jul 2025 03:01:10 +0000
Manifest next update: Mon 28 Jul 2025 03:01:10 +0000
Files and hashes: 1: 6MPmRSpj-OR6JX5Twaj_p1-R6kA.crl (hash: Dq0mM1KCj+WGnCVZgfELmOaz6U+MLPyp60aRQHLsV9E=)
2: GK0Bp6TP9K4-qwdEgsDkQHad0Jw.roa (hash: vbPhg+vd0Vmphw6uDH8Qj3C//m4qsvwfSx93uUcGgb8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/db4658-4275-43ba-9da9-6d810b0ada0a/1/6MPmRSpj-OR6JX5Twaj_p1-R6kA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/db4658-4275-43ba-9da9-6d810b0ada0a/1/6MPmRSpj-OR6JX5Twaj_p1-R6kA.mft
rsync://rpki.ripe.net/repository/DEFAULT/6MPmRSpj-OR6JX5Twaj_p1-R6kA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:c0:b3:5e:4a:3c:1e:eb:28:01:43:e3:ec:b9:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8c3e6452a63f8e47a257e53c1a8ffa75f91ea40
Validity
Not Before: Jul 27 03:01:10 2025 GMT
Not After : Jul 28 03:01:10 2025 GMT
Subject: CN=5aff632236b91d1e185a228623fa88822dcb643d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:15:d8:01:ba:21:51:69:db:65:9c:08:72:08:
f6:02:3e:50:76:e3:16:37:8b:69:76:04:ec:7d:41:
7c:58:c3:58:5f:4f:d5:7d:ab:45:ff:09:28:ef:b6:
96:02:99:4a:dc:06:7d:e4:36:a0:e1:10:d1:d3:15:
16:10:7d:30:03:f3:25:65:ab:13:56:86:1f:db:03:
00:66:ac:55:74:8d:1e:61:ea:07:68:4c:18:bc:2b:
b2:a1:76:a7:9b:c3:c6:80:5a:e4:f5:60:06:f6:31:
79:9e:92:3c:fb:76:91:62:1b:a5:a7:5c:76:2e:67:
32:07:0a:13:48:3e:74:18:ef:c9:68:1a:25:ba:b9:
d2:a3:f1:16:4a:0d:ac:a0:75:32:c8:d9:38:e3:1e:
57:11:cf:58:7d:34:87:d6:07:64:a2:79:62:0a:43:
09:b9:70:1b:66:13:24:6b:4f:78:68:52:40:20:6f:
54:2f:ea:36:dd:63:a3:3c:67:32:2e:39:0e:e7:28:
7e:f1:18:5b:e6:01:97:a0:2c:c2:1b:7b:22:b8:c4:
7c:ad:81:e7:7f:6e:12:60:ab:ff:8d:59:b8:d7:3b:
ae:eb:e8:e8:a9:79:43:f2:79:f0:85:45:12:ac:ef:
63:55:0a:ee:29:63:97:97:cc:6c:ae:3e:4b:75:a0:
2c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:FF:63:22:36:B9:1D:1E:18:5A:22:86:23:FA:88:82:2D:CB:64:3D
X509v3 Authority Key Identifier:
keyid:E8:C3:E6:45:2A:63:F8:E4:7A:25:7E:53:C1:A8:FF:A7:5F:91:EA:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6MPmRSpj-OR6JX5Twaj_p1-R6kA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/db4658-4275-43ba-9da9-6d810b0ada0a/1/6MPmRSpj-OR6JX5Twaj_p1-R6kA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/db4658-4275-43ba-9da9-6d810b0ada0a/1/6MPmRSpj-OR6JX5Twaj_p1-R6kA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:76:8a:cd:87:5a:d9:08:92:ac:19:06:7c:4e:20:0f:e8:7b:
1d:14:b2:50:4d:04:8e:bd:39:a4:22:0f:6b:10:da:ae:4d:32:
57:46:5c:af:62:92:c2:d3:19:f3:27:e2:5e:da:b7:28:f2:bd:
b3:fe:fc:a3:b6:98:79:f4:3d:4d:82:e8:37:37:62:75:a8:40:
88:32:2c:39:28:ae:ef:8d:ba:be:d1:36:ad:36:28:03:11:d7:
7f:33:c9:51:18:2d:37:3d:4d:5f:ac:d5:c4:44:d6:ed:37:df:
97:ad:79:64:56:af:da:86:ec:f1:28:44:3c:e5:1f:f3:5e:51:
4c:aa:f6:94:da:e0:fb:b0:be:04:99:e5:d5:c8:1e:da:45:8d:
e8:47:a2:f0:10:95:a8:6d:00:d3:26:87:57:19:31:fd:b0:59:
8d:ca:69:eb:6f:47:cf:cf:48:68:50:da:7e:18:f1:de:a5:12:
a3:04:40:26:6a:b8:0b:f3:2f:4a:3d:77:d3:e3:40:36:9d:18:
27:5c:b4:2a:e5:0b:80:09:7b:d1:60:03:bf:29:f1:ae:62:bd:
72:79:fa:73:77:2d:34:85:fa:8b:0d:12:aa:08:df:67:e0:cf:
bf:76:bb:f3:90:59:a2:31:37:81:84:b8:12:09:51:16:ce:29:
0e:79:95:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJ08CzXko8HusoAUPj7LlIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4YzNlNjQ1MmE2M2Y4ZTQ3YTI1N2U1M2MxYThmZmE3NWY5
MWVhNDAwHhcNMjUwNzI3MDMwMTEwWhcNMjUwNzI4MDMwMTEwWjAzMTEwLwYDVQQD
Eyg1YWZmNjMyMjM2YjkxZDFlMTg1YTIyODYyM2ZhODg4MjJkY2I2NDNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRXYAbohUWnbZZwIcgj2Aj5QduMW
N4tpdgTsfUF8WMNYX0/VfatF/wko77aWAplK3AZ95Dag4RDR0xUWEH0wA/MlZasT
VoYf2wMAZqxVdI0eYeoHaEwYvCuyoXanm8PGgFrk9WAG9jF5npI8+3aRYhulp1x2
LmcyBwoTSD50GO/JaBolurnSo/EWSg2soHUyyNk44x5XEc9YfTSH1gdkonliCkMJ
uXAbZhMka094aFJAIG9UL+o23WOjPGcyLjkO5yh+8Rhb5gGXoCzCG3siuMR8rYHn
f24SYKv/jVm41zuu6+joqXlD8nnwhUUSrO9jVQruKWOXl8xsrj5LdaAscwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFr/YyI2uR0eGFoihiP6iIIty2Q9MB8GA1UdIwQY
MBaAFOjD5kUqY/jkeiV+U8Go/6dfkepAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNk1QbVJTcGotT1I2Slg1VHdhal9wMS1SNmtBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9kYjQ2NTgtNDI3NS00M2JhLTlkYTkt
NmQ4MTBiMGFkYTBhLzEvNk1QbVJTcGotT1I2Slg1VHdhal9wMS1SNmtBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC9kYjQ2NTgtNDI3NS00M2JhLTlkYTktNmQ4MTBiMGFkYTBh
LzEvNk1QbVJTcGotT1I2Slg1VHdhal9wMS1SNmtBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABHaKzYda
2QiSrBkGfE4gD+h7HRSyUE0Ejr05pCIPaxDark0yV0Zcr2KSwtMZ8yfiXtq3KPK9
s/78o7aYefQ9TYLoNzdidahAiDIsOSiu7426vtE2rTYoAxHXfzPJURgtNz1NX6zV
xETW7Tffl615ZFav2obs8ShEPOUf815RTKr2lNrg+7C+BJnl1cge2kWN6Eei8BCV
qG0A0yaHVxkx/bBZjcpp629Hz89IaFDafhjx3qUSowRAJmq4C/MvSj130+NANp0Y
J1y0KuULgAl70WADvynxrmK9cnn6c3ctNIX6iw0SqgjfZ+DPv3a785BZojE3gYS4
EglRFs4pDnmVOA==
-----END CERTIFICATE-----
Generated at Sun Jul 27 08:37:55 2025 by rpki-client