Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/91d629-7d1f-45bd-a1e1-931cf798e412/1/6rBmxuGACj9b0uQG6aYg0qD29lM.mft
File: 6rBmxuGACj9b0uQG6aYg0qD29lM.mft (raw, json)
Hash identifier: IU/csg51fqGIXw6spTYlQ9zbWbkuMn6udh6MRQ3E2Nc=
Subject key identifier: 6D:DE:D4:6B:01:34:37:6B:8E:91:81:DA:0F:99:F4:DC:74:61:47:9D
Authority key identifier: EA:B0:66:C6:E1:80:0A:3F:5B:D2:E4:06:E9:A6:20:D2:A0:F6:F6:53
Certificate issuer: /CN=eab066c6e1800a3f5bd2e406e9a620d2a0f6f653
Certificate serial: 0198537B2ACA8DC400D1D6CDFFE95DA29AAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6rBmxuGACj9b0uQG6aYg0qD29lM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/91d629-7d1f-45bd-a1e1-931cf798e412/1/6rBmxuGACj9b0uQG6aYg0qD29lM.mft
Manifest number: 0C9A
Signing time: Tue 29 Jul 2025 00:00:37 +0000
Manifest this update: Tue 29 Jul 2025 00:00:37 +0000
Manifest next update: Wed 30 Jul 2025 00:00:37 +0000
Files and hashes: 1: 6rBmxuGACj9b0uQG6aYg0qD29lM.crl (hash: xvrfJjMThlzr295yduFkokilDKsZMoyvUX2RfxEsPuo=)
2: 9uvjekcau3PbfLrEyZwNzBwQO7Q.roa (hash: mH0HAaOf2X0fWHcxqJaO7mLzzy3VZpb8eqMe7h725z0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/91d629-7d1f-45bd-a1e1-931cf798e412/1/6rBmxuGACj9b0uQG6aYg0qD29lM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/91d629-7d1f-45bd-a1e1-931cf798e412/1/6rBmxuGACj9b0uQG6aYg0qD29lM.mft
rsync://rpki.ripe.net/repository/DEFAULT/6rBmxuGACj9b0uQG6aYg0qD29lM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:7b:2a:ca:8d:c4:00:d1:d6:cd:ff:e9:5d:a2:9a:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eab066c6e1800a3f5bd2e406e9a620d2a0f6f653
Validity
Not Before: Jul 29 00:00:37 2025 GMT
Not After : Jul 30 00:00:37 2025 GMT
Subject: CN=6dded46b0134376b8e9181da0f99f4dc7461479d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:a2:40:49:5f:f0:8f:a6:85:65:fb:b3:19:50:
a0:8b:4f:50:fc:1c:8e:24:a9:b2:8e:15:71:be:9b:
3c:31:43:db:b5:0a:09:74:38:fe:41:2b:49:d7:6d:
e5:71:63:72:99:bf:4a:0d:21:b0:15:bf:b9:af:d5:
97:2b:9f:75:8f:ba:95:5f:1b:13:64:65:e3:b3:6c:
14:e4:1f:51:e2:04:97:4b:a7:9c:c7:20:55:04:30:
95:ba:57:32:72:af:a4:54:c3:b7:65:7d:81:ac:7c:
64:ca:3c:f3:88:c5:94:b0:14:b5:a0:4b:dd:97:31:
d8:8c:b2:0d:79:5a:98:e3:c9:ed:ec:4b:43:7f:e5:
16:3a:55:bd:cf:29:56:f1:45:4c:a7:c8:c5:c9:41:
40:95:eb:41:45:d7:2e:16:96:ab:b8:8b:4e:50:11:
26:d7:05:d5:86:08:c9:fb:9e:23:9e:15:e9:3b:15:
f5:2c:3f:8c:87:2e:28:e2:93:d4:7d:eb:9e:ac:44:
1e:ff:0d:fe:aa:98:de:bc:ab:d3:31:a6:92:53:7b:
ca:63:bb:ef:46:0f:dc:f5:98:0c:63:2a:44:19:27:
e5:bb:16:0a:bc:58:3a:58:a7:2a:1c:34:4f:03:aa:
90:48:1f:66:39:e0:e6:f6:72:15:10:5a:b2:4f:a0:
cc:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:DE:D4:6B:01:34:37:6B:8E:91:81:DA:0F:99:F4:DC:74:61:47:9D
X509v3 Authority Key Identifier:
keyid:EA:B0:66:C6:E1:80:0A:3F:5B:D2:E4:06:E9:A6:20:D2:A0:F6:F6:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6rBmxuGACj9b0uQG6aYg0qD29lM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/91d629-7d1f-45bd-a1e1-931cf798e412/1/6rBmxuGACj9b0uQG6aYg0qD29lM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/91d629-7d1f-45bd-a1e1-931cf798e412/1/6rBmxuGACj9b0uQG6aYg0qD29lM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:95:72:e3:42:7a:0d:71:06:46:b9:40:79:0a:e4:e8:ce:c2:
16:87:14:6a:03:92:ff:7f:cd:74:d8:b1:ab:44:38:c0:20:42:
d7:95:b5:09:a4:9a:d8:b3:f6:f5:46:b1:c5:a5:63:96:87:bb:
73:53:b8:de:29:7f:ad:99:af:ef:03:fc:ff:77:6c:ef:d8:32:
94:0a:c2:20:8c:00:84:ad:73:94:98:e8:14:6e:ca:05:b8:2c:
81:38:91:f4:16:3a:13:b6:b0:3b:80:a0:08:c8:b8:d1:fa:df:
77:b1:2c:d1:82:26:5b:ee:48:03:98:67:e7:6a:42:8f:68:9b:
1f:eb:04:c1:8f:73:5c:95:86:51:29:55:f8:36:43:3f:2c:f5:
5f:f4:28:07:2d:ce:90:42:5f:14:e2:d3:1c:ec:a7:55:7c:27:
f0:2c:d4:33:e3:4b:f3:ac:22:89:54:f0:c6:12:a7:8c:72:f8:
15:f9:27:90:cf:d9:8c:c2:40:69:9a:8d:ad:42:ae:ea:5a:6b:
51:56:ac:a2:11:ec:03:dd:66:a3:6f:13:56:1c:83:c8:85:8e:
8d:19:28:e1:92:5a:51:ae:ac:1c:49:dc:ee:b0:20:4b:0a:e9:
64:67:0e:6a:2b:31:f8:ff:e1:53:be:99:dd:d0:11:c7:01:34:
79:97:c6:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhTeyrKjcQA0dbN/+ldopqtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhYjA2NmM2ZTE4MDBhM2Y1YmQyZTQwNmU5YTYyMGQyYTBm
NmY2NTMwHhcNMjUwNzI5MDAwMDM3WhcNMjUwNzMwMDAwMDM3WjAzMTEwLwYDVQQD
Eyg2ZGRlZDQ2YjAxMzQzNzZiOGU5MTgxZGEwZjk5ZjRkYzc0NjE0NzlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjKJASV/wj6aFZfuzGVCgi09Q/ByO
JKmyjhVxvps8MUPbtQoJdDj+QStJ123lcWNymb9KDSGwFb+5r9WXK591j7qVXxsT
ZGXjs2wU5B9R4gSXS6ecxyBVBDCVulcycq+kVMO3ZX2BrHxkyjzziMWUsBS1oEvd
lzHYjLINeVqY48nt7EtDf+UWOlW9zylW8UVMp8jFyUFAletBRdcuFparuItOUBEm
1wXVhgjJ+54jnhXpOxX1LD+Mhy4o4pPUfeuerEQe/w3+qpjevKvTMaaSU3vKY7vv
Rg/c9ZgMYypEGSfluxYKvFg6WKcqHDRPA6qQSB9mOeDm9nIVEFqyT6DMsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG3e1GsBNDdrjpGB2g+Z9Nx0YUedMB8GA1UdIwQY
MBaAFOqwZsbhgAo/W9LkBummINKg9vZTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnJCbXh1R0FDajliMHVRRzZhWWcwcUQyOWxNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi85MWQ2MjktN2QxZi00NWJkLWExZTEt
OTMxY2Y3OThlNDEyLzEvNnJCbXh1R0FDajliMHVRRzZhWWcwcUQyOWxNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi85MWQ2MjktN2QxZi00NWJkLWExZTEtOTMxY2Y3OThlNDEy
LzEvNnJCbXh1R0FDajliMHVRRzZhWWcwcUQyOWxNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkZVy40J6
DXEGRrlAeQrk6M7CFocUagOS/3/NdNixq0Q4wCBC15W1CaSa2LP29UaxxaVjloe7
c1O43il/rZmv7wP8/3ds79gylArCIIwAhK1zlJjoFG7KBbgsgTiR9BY6E7awO4Cg
CMi40frfd7Es0YImW+5IA5hn52pCj2ibH+sEwY9zXJWGUSlV+DZDPyz1X/QoBy3O
kEJfFOLTHOynVXwn8CzUM+NL86wiiVTwxhKnjHL4FfknkM/ZjMJAaZqNrUKu6lpr
UVasohHsA91mo28TVhyDyIWOjRko4ZJaUa6sHEnc7rAgSwrpZGcOaisx+P/hU76Z
3dARxwE0eZfGUg==
-----END CERTIFICATE-----
Generated at Tue Jul 29 04:43:31 2025 by rpki-client