Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/57889a-50df-4abf-81e5-1b12641f493b/1/b6rlVhP8iVhve9beDtygl7hhWmo.mft
File: b6rlVhP8iVhve9beDtygl7hhWmo.mft (raw, json)
Hash identifier: yt6wl0NbtRCEAMlEF7N5eEJwhkIO9czkwtUb2eGuxt8=
Subject key identifier: A5:1F:E1:2E:8D:73:96:08:9A:5C:AE:43:CB:C4:23:AE:35:6E:B2:00
Authority key identifier: 6F:AA:E5:56:13:FC:89:58:6F:7B:D6:DE:0E:DC:A0:97:B8:61:5A:6A
Certificate issuer: /CN=6faae55613fc89586f7bd6de0edca097b8615a6a
Certificate serial: 0199C4FBC2A59D6440925CC0BF42A3ED2522
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b6rlVhP8iVhve9beDtygl7hhWmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/57889a-50df-4abf-81e5-1b12641f493b/1/b6rlVhP8iVhve9beDtygl7hhWmo.mft
Manifest number: 0A30
Signing time: Wed 08 Oct 2025 18:00:57 +0000
Manifest this update: Wed 08 Oct 2025 18:00:57 +0000
Manifest next update: Thu 09 Oct 2025 18:00:57 +0000
Files and hashes: 1: aOtm6U59mShACrUP4z50hrZCIxk.roa (hash: 8fQIVCesiryqBUIZoQ97a4j4i55DYNAa5i2DNRlMQ5M=)
2: b6rlVhP8iVhve9beDtygl7hhWmo.crl (hash: MMqJjRltGo21KHhGhRzz/jkI1qhvC2VLDsI6MXJSA4o=)
3: y4zgX7Lvz7a-J26BXsPiVoxb_IM.roa (hash: NtJpJ4/+lfRrM4AtabmrS2+ljg+xewyFLniZOgVUMdA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/57889a-50df-4abf-81e5-1b12641f493b/1/b6rlVhP8iVhve9beDtygl7hhWmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/57889a-50df-4abf-81e5-1b12641f493b/1/b6rlVhP8iVhve9beDtygl7hhWmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/b6rlVhP8iVhve9beDtygl7hhWmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 16:33:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c4:fb:c2:a5:9d:64:40:92:5c:c0:bf:42:a3:ed:25:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6faae55613fc89586f7bd6de0edca097b8615a6a
Validity
Not Before: Oct 8 18:00:57 2025 GMT
Not After : Oct 9 18:00:57 2025 GMT
Subject: CN=a51fe12e8d7396089a5cae43cbc423ae356eb200
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:34:cc:b2:cd:e1:c7:30:8c:53:11:10:c3:47:
fb:72:36:82:cf:9b:32:6a:42:b2:fd:62:4e:9d:ea:
f2:65:af:f2:ae:17:3d:59:b7:09:ef:d7:fc:29:0b:
c1:46:cb:55:c1:d3:ca:a1:88:33:2f:49:d3:6b:2b:
e2:c2:17:2c:7a:dc:1e:bf:5f:8b:57:df:dc:11:7b:
53:74:66:fd:1a:e6:2c:12:7a:ad:8c:de:d7:27:31:
43:96:d4:90:25:53:5c:96:2f:23:02:c5:97:4d:04:
4e:3f:e5:16:c1:79:d2:a8:de:fa:ca:36:3d:32:14:
2c:51:ee:e5:a1:3d:18:27:5b:b4:71:e4:20:73:42:
6e:5a:45:b5:fb:9e:55:1f:71:aa:41:1f:46:bb:52:
92:e7:16:39:c1:5c:68:d4:c4:9f:f6:65:ed:0c:e7:
14:e9:f5:9a:4e:fb:82:a8:f5:69:75:35:2d:d8:c9:
3f:bb:1d:40:5b:f6:fc:83:11:5b:0b:62:76:4d:48:
b7:13:b7:53:ae:30:c9:64:3a:0b:83:a8:f6:fc:08:
04:60:14:01:8a:c2:75:a4:9f:47:98:33:af:b7:f7:
f3:b4:ec:87:68:e8:2c:3a:a9:a4:77:56:57:06:d0:
8e:4a:70:d2:0b:9b:ec:15:30:e0:44:3a:cb:0b:6f:
23:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:1F:E1:2E:8D:73:96:08:9A:5C:AE:43:CB:C4:23:AE:35:6E:B2:00
X509v3 Authority Key Identifier:
keyid:6F:AA:E5:56:13:FC:89:58:6F:7B:D6:DE:0E:DC:A0:97:B8:61:5A:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6rlVhP8iVhve9beDtygl7hhWmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/57889a-50df-4abf-81e5-1b12641f493b/1/b6rlVhP8iVhve9beDtygl7hhWmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/57889a-50df-4abf-81e5-1b12641f493b/1/b6rlVhP8iVhve9beDtygl7hhWmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:af:85:38:38:07:29:d7:f7:50:b1:47:84:02:ef:13:31:3d:
6d:f3:e5:c1:f0:2b:a7:55:b8:08:bc:1c:09:35:75:b2:aa:28:
bc:aa:e7:5e:84:c9:aa:ef:03:16:25:7f:15:8b:02:23:b2:29:
11:7d:0a:77:9e:c0:41:e8:7b:40:03:5b:b8:44:52:88:4d:5f:
2f:db:0c:70:94:16:43:19:ff:cb:4c:2d:0b:5b:67:e2:82:95:
fb:a5:fd:38:11:2d:61:50:71:75:8a:7e:50:9e:ad:f3:31:df:
e8:ec:ad:1f:4a:8c:e5:6d:ea:ac:ce:70:f8:77:a7:ac:b8:d5:
e1:a4:18:db:7f:82:48:85:db:1c:fa:29:d3:d9:59:a2:42:cb:
af:11:c4:89:0f:6e:b9:52:4f:a0:ae:d3:52:7d:b6:ea:07:1e:
ae:18:39:60:5e:43:49:49:84:6a:90:ed:f8:b1:38:d0:15:dc:
b2:75:46:71:a9:35:69:e7:6c:e1:74:af:11:f5:ed:17:2a:05:
08:98:83:2d:65:a9:cb:40:ce:64:57:7c:c9:d2:0b:c3:ed:6d:
9b:94:8a:dd:06:99:b9:0a:76:1c:11:3c:e0:7b:c2:37:8d:e7:
75:7a:37:7c:ed:9e:1a:63:ac:b2:66:1a:31:57:9e:b8:38:e2:
32:52:fe:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZnE+8KlnWRAklzAv0Kj7SUiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmYWFlNTU2MTNmYzg5NTg2ZjdiZDZkZTBlZGNhMDk3Yjg2
MTVhNmEwHhcNMjUxMDA4MTgwMDU3WhcNMjUxMDA5MTgwMDU3WjAzMTEwLwYDVQQD
EyhhNTFmZTEyZThkNzM5NjA4OWE1Y2FlNDNjYmM0MjNhZTM1NmViMjAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjTTMss3hxzCMUxEQw0f7cjaCz5sy
akKy/WJOneryZa/yrhc9WbcJ79f8KQvBRstVwdPKoYgzL0nTayviwhcsetwev1+L
V9/cEXtTdGb9GuYsEnqtjN7XJzFDltSQJVNcli8jAsWXTQROP+UWwXnSqN76yjY9
MhQsUe7loT0YJ1u0ceQgc0JuWkW1+55VH3GqQR9Gu1KS5xY5wVxo1MSf9mXtDOcU
6fWaTvuCqPVpdTUt2Mk/ux1AW/b8gxFbC2J2TUi3E7dTrjDJZDoLg6j2/AgEYBQB
isJ1pJ9HmDOvt/fztOyHaOgsOqmkd1ZXBtCOSnDSC5vsFTDgRDrLC28jhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKUf4S6Nc5YImlyuQ8vEI641brIAMB8GA1UdIwQY
MBaAFG+q5VYT/IlYb3vW3g7coJe4YVpqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjZybFZoUDhpVmh2ZTliZUR0eWdsN2hoV21vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi81Nzg4OWEtNTBkZi00YWJmLTgxZTUt
MWIxMjY0MWY0OTNiLzEvYjZybFZoUDhpVmh2ZTliZUR0eWdsN2hoV21vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi81Nzg4OWEtNTBkZi00YWJmLTgxZTUtMWIxMjY0MWY0OTNi
LzEvYjZybFZoUDhpVmh2ZTliZUR0eWdsN2hoV21vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlq+FODgH
Kdf3ULFHhALvEzE9bfPlwfArp1W4CLwcCTV1sqoovKrnXoTJqu8DFiV/FYsCI7Ip
EX0Kd57AQeh7QANbuERSiE1fL9sMcJQWQxn/y0wtC1tn4oKV+6X9OBEtYVBxdYp+
UJ6t8zHf6OytH0qM5W3qrM5w+HenrLjV4aQY23+CSIXbHPop09lZokLLrxHEiQ9u
uVJPoK7TUn226gcerhg5YF5DSUmEapDt+LE40BXcsnVGcak1aeds4XSvEfXtFyoF
CJiDLWWpy0DOZFd8ydILw+1tm5SK3QaZuQp2HBE84HvCN43ndXo3fO2eGmOssmYa
MVeeuDjiMlL+1Q==
-----END CERTIFICATE-----
Generated at Thu Oct 9 01:24:14 2025 by rpki-client