Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/228efe-ff30-4328-a915-0f3b6f96990b/1/6BWbaM5BNoqZ_hB57FTDbJuxv5Q.mft
File: 6BWbaM5BNoqZ_hB57FTDbJuxv5Q.mft (raw, json)
Hash identifier: ao7U/oawhlq4RLbhtDB/F16HEUGpRSUxeF1EV2ZHdhc=
Subject key identifier: 66:4A:B2:55:F6:DC:6A:0C:63:C8:4F:D8:B9:72:1B:3F:19:20:1A:66
Authority key identifier: E8:15:9B:68:CE:41:36:8A:99:FE:10:79:EC:54:C3:6C:9B:B1:BF:94
Certificate issuer: /CN=e8159b68ce41368a99fe1079ec54c36c9bb1bf94
Certificate serial: 019A0F3B2E81208FCC5AA86B503E5683F82A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6BWbaM5BNoqZ_hB57FTDbJuxv5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/228efe-ff30-4328-a915-0f3b6f96990b/1/6BWbaM5BNoqZ_hB57FTDbJuxv5Q.mft
Manifest number: 1198
Signing time: Thu 23 Oct 2025 04:02:08 +0000
Manifest this update: Thu 23 Oct 2025 04:02:08 +0000
Manifest next update: Fri 24 Oct 2025 04:02:08 +0000
Files and hashes: 1: 6BWbaM5BNoqZ_hB57FTDbJuxv5Q.crl (hash: DoXn1cxmWZXxNhsDmqSu3VFWQU9m1vQuP9mfuxMBo4M=)
2: YgG0lEHEtjr1mC92HjSEXF6DaCY.roa (hash: U16htSk1oaeIqosXWc0EGaYjohQFI01/iP1fxjLlYZE=)
3: mF0VnTUC-VE7tOehsB99pmMnMp4.roa (hash: qBC6VjnyODjzw3i+7pIjQeMUTdYeihdx4axoA9L+eAk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/228efe-ff30-4328-a915-0f3b6f96990b/1/6BWbaM5BNoqZ_hB57FTDbJuxv5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/228efe-ff30-4328-a915-0f3b6f96990b/1/6BWbaM5BNoqZ_hB57FTDbJuxv5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/6BWbaM5BNoqZ_hB57FTDbJuxv5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 22:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0f:3b:2e:81:20:8f:cc:5a:a8:6b:50:3e:56:83:f8:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8159b68ce41368a99fe1079ec54c36c9bb1bf94
Validity
Not Before: Oct 23 04:02:08 2025 GMT
Not After : Oct 24 04:02:08 2025 GMT
Subject: CN=664ab255f6dc6a0c63c84fd8b9721b3f19201a66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:7e:24:2b:ae:6d:22:8e:d2:79:71:b9:77:1d:
e3:82:21:aa:69:92:1d:46:5c:63:12:dd:d4:dd:8d:
84:8d:52:f0:b0:61:6a:a2:76:91:4d:2b:0e:aa:47:
af:f8:1a:e6:27:33:11:b3:2e:c4:c8:27:9d:84:14:
06:dc:3a:73:a5:6c:55:fb:c7:90:78:d1:4f:58:44:
bc:de:ab:8e:53:9b:3e:e8:cd:79:b2:b3:41:3e:96:
25:fd:98:0c:29:a5:98:18:ae:93:3d:64:a8:c0:7e:
c7:28:79:7f:70:6f:c7:5a:08:27:29:49:d1:2e:02:
fb:cc:69:08:92:7a:28:c7:d6:66:67:90:6e:df:80:
67:9a:04:4c:1c:ab:87:0f:29:40:38:c6:60:cf:64:
a9:14:13:a7:4d:93:e8:67:3b:a5:1f:9d:d0:cf:9a:
fa:1e:29:12:6f:b1:a5:00:4e:cf:d0:ab:7a:1e:ae:
89:43:ba:b6:8d:9d:37:c8:09:b6:65:cc:93:07:6b:
62:c0:31:ba:cb:a7:80:a8:e6:17:fb:14:11:e3:a7:
e7:2c:f6:33:e4:11:7c:18:76:39:be:6c:6d:d8:49:
7d:d3:58:c7:02:1d:40:bf:16:08:f7:31:35:e4:ad:
f9:46:cd:02:ec:60:8b:07:ad:ff:58:f6:e2:2b:1a:
31:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:4A:B2:55:F6:DC:6A:0C:63:C8:4F:D8:B9:72:1B:3F:19:20:1A:66
X509v3 Authority Key Identifier:
keyid:E8:15:9B:68:CE:41:36:8A:99:FE:10:79:EC:54:C3:6C:9B:B1:BF:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6BWbaM5BNoqZ_hB57FTDbJuxv5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/228efe-ff30-4328-a915-0f3b6f96990b/1/6BWbaM5BNoqZ_hB57FTDbJuxv5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/228efe-ff30-4328-a915-0f3b6f96990b/1/6BWbaM5BNoqZ_hB57FTDbJuxv5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:ae:91:34:57:06:4a:c0:9d:55:2e:07:dd:70:b9:fa:0b:6f:
56:b1:ae:1b:de:18:9b:fd:90:a2:0b:32:88:d2:a4:21:d7:dd:
6f:c0:e0:72:61:c0:dd:54:0d:a6:00:50:03:9e:72:d4:b3:5e:
3e:96:f7:50:5b:f4:3c:4d:a9:b5:c3:0c:e8:e3:ed:c8:38:41:
9c:85:c7:e8:ee:1a:03:73:d2:ad:96:15:08:c0:ce:24:4d:91:
e6:7b:5e:2a:f1:75:1b:bb:86:f8:18:4e:bf:e1:ca:06:1d:f1:
15:dd:ef:10:a7:da:f6:d1:e7:76:50:ed:cf:5d:a9:0d:b2:39:
9b:07:0e:a1:56:d3:39:94:2e:95:4c:6f:9e:c1:f2:4f:3f:23:
0d:5a:b2:74:94:e0:13:ee:84:22:97:d6:b8:e6:97:62:67:e4:
33:3f:5c:fd:67:c6:48:c7:ee:cf:39:9a:02:a2:c5:13:ab:b8:
8f:3f:ed:9f:06:47:31:e7:34:67:c1:0b:17:36:66:0b:de:04:
1c:98:05:0e:3f:ab:99:ed:cf:5c:9c:f9:8e:fa:79:7e:7b:f2:
16:05:76:de:31:35:e4:48:63:1d:63:a0:30:dc:37:d5:b5:e3:
e6:ff:7b:36:bf:63:c9:6c:42:bc:08:b2:93:df:f8:14:65:e6:
cc:8c:7c:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoPOy6BII/MWqhrUD5Wg/gqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4MTU5YjY4Y2U0MTM2OGE5OWZlMTA3OWVjNTRjMzZjOWJi
MWJmOTQwHhcNMjUxMDIzMDQwMjA4WhcNMjUxMDI0MDQwMjA4WjAzMTEwLwYDVQQD
Eyg2NjRhYjI1NWY2ZGM2YTBjNjNjODRmZDhiOTcyMWIzZjE5MjAxYTY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6n4kK65tIo7SeXG5dx3jgiGqaZId
RlxjEt3U3Y2EjVLwsGFqonaRTSsOqkev+BrmJzMRsy7EyCedhBQG3DpzpWxV+8eQ
eNFPWES83quOU5s+6M15srNBPpYl/ZgMKaWYGK6TPWSowH7HKHl/cG/HWggnKUnR
LgL7zGkIknoox9ZmZ5Bu34BnmgRMHKuHDylAOMZgz2SpFBOnTZPoZzulH53Qz5r6
HikSb7GlAE7P0Kt6Hq6JQ7q2jZ03yAm2ZcyTB2tiwDG6y6eAqOYX+xQR46fnLPYz
5BF8GHY5vmxt2El901jHAh1AvxYI9zE15K35Rs0C7GCLB63/WPbiKxoxvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGZKslX23GoMY8hP2LlyGz8ZIBpmMB8GA1UdIwQY
MBaAFOgVm2jOQTaKmf4QeexUw2ybsb+UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkJXYmFNNUJOb3FaX2hCNTdGVERiSnV4djVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8yMjhlZmUtZmYzMC00MzI4LWE5MTUt
MGYzYjZmOTY5OTBiLzEvNkJXYmFNNUJOb3FaX2hCNTdGVERiSnV4djVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi8yMjhlZmUtZmYzMC00MzI4LWE5MTUtMGYzYjZmOTY5OTBi
LzEvNkJXYmFNNUJOb3FaX2hCNTdGVERiSnV4djVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtK6RNFcG
SsCdVS4H3XC5+gtvVrGuG94Ym/2QogsyiNKkIdfdb8DgcmHA3VQNpgBQA55y1LNe
Ppb3UFv0PE2ptcMM6OPtyDhBnIXH6O4aA3PSrZYVCMDOJE2R5nteKvF1G7uG+BhO
v+HKBh3xFd3vEKfa9tHndlDtz12pDbI5mwcOoVbTOZQulUxvnsHyTz8jDVqydJTg
E+6EIpfWuOaXYmfkMz9c/WfGSMfuzzmaAqLFE6u4jz/tnwZHMec0Z8ELFzZmC94E
HJgFDj+rme3PXJz5jvp5fnvyFgV23jE15EhjHWOgMNw31bXj5v97Nr9jyWxCvAiy
k9/4FGXmzIx8+w==
-----END CERTIFICATE-----
Generated at Thu Oct 23 07:35:28 2025 by rpki-client