Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/1ff7ea-bc13-4b54-898d-1d1cd215275d/1/6oss0R-FmHiYVHRQySF4Efzeoos.mft
File: 6oss0R-FmHiYVHRQySF4Efzeoos.mft (raw, json)
Hash identifier: QnmVKjbjCYUVJVkYW7QvrChwwSPIqMUHks7M9RkrVGY=
Subject key identifier: C2:31:24:74:E7:E9:9F:EA:7D:B4:E1:6A:27:43:E0:33:A1:8C:9F:70
Authority key identifier: EA:8B:2C:D1:1F:85:98:78:98:54:74:50:C9:21:78:11:FC:DE:A2:8B
Certificate issuer: /CN=ea8b2cd11f85987898547450c9217811fcdea28b
Certificate serial: 019A23653C59D5DFA90FCC9D5220863810B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6oss0R-FmHiYVHRQySF4Efzeoos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/1ff7ea-bc13-4b54-898d-1d1cd215275d/1/6oss0R-FmHiYVHRQySF4Efzeoos.mft
Manifest number: 109B
Signing time: Mon 27 Oct 2025 02:00:28 +0000
Manifest this update: Mon 27 Oct 2025 02:00:28 +0000
Manifest next update: Tue 28 Oct 2025 02:00:28 +0000
Files and hashes: 1: 6oss0R-FmHiYVHRQySF4Efzeoos.crl (hash: iEUIT53d1bH8glfswVnphG0S2zrlTMAkf5HDItnSnzk=)
2: Wwi6glxCUUOadZqgxrOkdmMrALQ.roa (hash: ojxf/c/q5Kwb/LwjbQGsJ4lb3PD40U6FhYMP3ryQG10=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/1ff7ea-bc13-4b54-898d-1d1cd215275d/1/6oss0R-FmHiYVHRQySF4Efzeoos.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/1ff7ea-bc13-4b54-898d-1d1cd215275d/1/6oss0R-FmHiYVHRQySF4Efzeoos.mft
rsync://rpki.ripe.net/repository/DEFAULT/6oss0R-FmHiYVHRQySF4Efzeoos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 02:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:65:3c:59:d5:df:a9:0f:cc:9d:52:20:86:38:10:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea8b2cd11f85987898547450c9217811fcdea28b
Validity
Not Before: Oct 27 02:00:28 2025 GMT
Not After : Oct 28 02:00:28 2025 GMT
Subject: CN=c2312474e7e99fea7db4e16a2743e033a18c9f70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b8:41:a4:bd:84:59:66:bf:d8:a9:ce:e8:10:
16:b9:08:11:b4:b8:77:fc:dc:eb:f7:bd:de:4c:d3:
c0:dd:98:4c:c0:09:0a:b7:52:54:14:af:99:c4:11:
d9:f1:27:94:bb:5b:2d:85:5c:90:41:97:b3:92:a4:
6d:0e:84:8f:16:c8:d8:d0:04:1d:9d:b1:74:cf:d6:
fe:d8:21:d6:f8:99:2c:55:cd:13:f0:7d:dd:e1:99:
5b:64:f4:10:38:cc:c1:98:12:18:6d:ba:23:e7:90:
d8:27:b5:f1:8c:7d:97:ff:8b:c8:c1:5b:39:c2:31:
32:06:ca:be:7b:2a:0b:c4:0a:6b:e7:39:e4:c3:4a:
c6:fe:b4:b0:77:62:c5:9c:fe:5d:c7:0a:72:e7:7a:
78:54:6b:41:63:b7:a8:0f:ee:22:28:c6:26:b9:a6:
9f:82:41:98:55:3c:85:25:ef:73:14:72:24:cf:69:
2b:57:e9:da:f1:ca:ad:57:59:9c:3b:5a:22:fd:52:
44:ca:fe:65:9c:a0:05:72:f2:cc:27:9c:83:4b:5f:
34:11:3a:ae:f0:94:32:2e:dc:f2:84:99:ee:a0:ac:
89:cb:15:7b:7b:32:a6:08:ee:3c:a7:a4:2c:f1:69:
73:b2:57:fd:47:f2:84:d1:36:ce:ab:da:6b:49:ed:
4d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:31:24:74:E7:E9:9F:EA:7D:B4:E1:6A:27:43:E0:33:A1:8C:9F:70
X509v3 Authority Key Identifier:
keyid:EA:8B:2C:D1:1F:85:98:78:98:54:74:50:C9:21:78:11:FC:DE:A2:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6oss0R-FmHiYVHRQySF4Efzeoos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/1ff7ea-bc13-4b54-898d-1d1cd215275d/1/6oss0R-FmHiYVHRQySF4Efzeoos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/1ff7ea-bc13-4b54-898d-1d1cd215275d/1/6oss0R-FmHiYVHRQySF4Efzeoos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:e2:1f:0f:7b:d1:e8:27:0e:c0:29:e2:9a:ce:4a:14:da:67:
70:4a:86:9d:a7:eb:ce:92:fe:4d:c5:28:42:04:0b:31:e4:ea:
83:60:b9:f4:29:6f:ef:be:bf:4f:41:fb:ba:1c:9d:f7:a8:26:
d7:87:a4:71:c0:5d:9d:83:5f:2a:3e:8d:12:1b:9e:40:06:3b:
eb:f0:d8:04:62:f6:33:a4:18:00:0d:55:c1:2a:be:0d:f1:52:
68:d6:b8:5c:90:e2:ec:46:8a:1b:a7:97:c3:d6:5f:52:6d:bd:
c1:30:b7:fa:4f:04:a8:ed:02:99:6a:38:d5:3f:b3:bf:25:ef:
a0:4d:43:fc:83:1e:a3:dd:51:e2:70:ef:c7:9d:ce:d4:e3:3f:
d9:99:e8:03:ea:ae:7f:54:cf:6b:e5:99:ec:d6:47:64:52:d6:
b1:93:b6:09:15:6a:a3:0b:6f:1f:95:84:0f:38:32:80:19:33:
a2:19:dc:8b:bf:ce:7b:29:0d:b5:8f:90:f3:25:2e:64:73:d6:
21:1f:a7:57:37:a1:f3:76:2b:e5:99:7c:66:ce:6b:58:4e:84:
a9:f2:66:f5:bf:1a:0f:77:db:43:e4:38:85:c8:a4:e4:af:01:
de:ba:c6:b2:30:18:6a:8c:b6:c4:7d:c7:82:25:1e:54:7e:9f:
15:63:e2:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZojZTxZ1d+pD8ydUiCGOBCwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhOGIyY2QxMWY4NTk4Nzg5ODU0NzQ1MGM5MjE3ODExZmNk
ZWEyOGIwHhcNMjUxMDI3MDIwMDI4WhcNMjUxMDI4MDIwMDI4WjAzMTEwLwYDVQQD
EyhjMjMxMjQ3NGU3ZTk5ZmVhN2RiNGUxNmEyNzQzZTAzM2ExOGM5ZjcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7hBpL2EWWa/2KnO6BAWuQgRtLh3
/Nzr973eTNPA3ZhMwAkKt1JUFK+ZxBHZ8SeUu1sthVyQQZezkqRtDoSPFsjY0AQd
nbF0z9b+2CHW+JksVc0T8H3d4ZlbZPQQOMzBmBIYbboj55DYJ7XxjH2X/4vIwVs5
wjEyBsq+eyoLxApr5znkw0rG/rSwd2LFnP5dxwpy53p4VGtBY7eoD+4iKMYmuaaf
gkGYVTyFJe9zFHIkz2krV+na8cqtV1mcO1oi/VJEyv5lnKAFcvLMJ5yDS180ETqu
8JQyLtzyhJnuoKyJyxV7ezKmCO48p6Qs8Wlzslf9R/KE0TbOq9prSe1NRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMIxJHTn6Z/qfbThaidD4DOhjJ9wMB8GA1UdIwQY
MBaAFOqLLNEfhZh4mFR0UMkheBH83qKLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNm9zczBSLUZtSGlZVkhSUXlTRjRFZnplb29zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi8xZmY3ZWEtYmMxMy00YjU0LTg5OGQt
MWQxY2QyMTUyNzVkLzEvNm9zczBSLUZtSGlZVkhSUXlTRjRFZnplb29zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi8xZmY3ZWEtYmMxMy00YjU0LTg5OGQtMWQxY2QyMTUyNzVk
LzEvNm9zczBSLUZtSGlZVkhSUXlTRjRFZnplb29zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxOIfD3vR
6CcOwCnims5KFNpncEqGnafrzpL+TcUoQgQLMeTqg2C59Clv776/T0H7uhyd96gm
14ekccBdnYNfKj6NEhueQAY76/DYBGL2M6QYAA1VwSq+DfFSaNa4XJDi7EaKG6eX
w9ZfUm29wTC3+k8EqO0CmWo41T+zvyXvoE1D/IMeo91R4nDvx53O1OM/2ZnoA+qu
f1TPa+WZ7NZHZFLWsZO2CRVqowtvH5WEDzgygBkzohnci7/OeykNtY+Q8yUuZHPW
IR+nVzeh83Yr5Zl8Zs5rWE6EqfJm9b8aD3fbQ+Q4hcik5K8B3rrGsjAYaoy2xH3H
giUeVH6fFWPidQ==
-----END CERTIFICATE-----
Generated at Mon Oct 27 12:05:26 2025 by rpki-client