Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/1f61ac-02fe-4e4c-852e-4523a0e2b844/1/1-D6-KpBt1YcBJZkgnDHOEPKdV4U.mft
File: 1-D6-KpBt1YcBJZkgnDHOEPKdV4U.mft (raw, json)
Hash identifier: gyoeUlv1GkuQCZf9MRmCg0GDr1CnPAZY0vp4qAkt+xo=
Subject key identifier: 6F:A4:A3:EC:38:0C:14:DC:DA:13:24:4B:B2:79:2C:00:BD:5B:0F:6C
Authority key identifier: F8:3E:BE:2A:90:6D:D5:87:01:25:99:20:9C:31:CE:10:F2:9D:57:85
Certificate issuer: /CN=f83ebe2a906dd587012599209c31ce10f29d5785
Certificate serial: 019A54BFE2D560A73987749A2F49A62D52AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-D6-KpBt1YcBJZkgnDHOEPKdV4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/1f61ac-02fe-4e4c-852e-4523a0e2b844/1/1-D6-KpBt1YcBJZkgnDHOEPKdV4U.mft
Manifest number: 0254
Signing time: Wed 05 Nov 2025 16:00:52 +0000
Manifest this update: Wed 05 Nov 2025 16:00:52 +0000
Manifest next update: Thu 06 Nov 2025 16:00:52 +0000
Files and hashes: 1: 1-D6-KpBt1YcBJZkgnDHOEPKdV4U.crl (hash: miEYS97qiqh7ofoM/e+bJZmy7wYMeuDDYfRLe61VesQ=)
2: eOFwfpAp9t5Wr1bASPFmeWufZoc.roa (hash: BLw6LWDYgC59tC8PdTRtV9+Fp2Xo+9u/YLlHy2Sn+zE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/1f61ac-02fe-4e4c-852e-4523a0e2b844/1/1-D6-KpBt1YcBJZkgnDHOEPKdV4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/1f61ac-02fe-4e4c-852e-4523a0e2b844/1/1-D6-KpBt1YcBJZkgnDHOEPKdV4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-D6-KpBt1YcBJZkgnDHOEPKdV4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:bf:e2:d5:60:a7:39:87:74:9a:2f:49:a6:2d:52:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f83ebe2a906dd587012599209c31ce10f29d5785
Validity
Not Before: Nov 5 16:00:52 2025 GMT
Not After : Nov 6 16:00:52 2025 GMT
Subject: CN=6fa4a3ec380c14dcda13244bb2792c00bd5b0f6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:7a:25:31:ae:53:43:7d:a8:4d:d9:89:04:8a:
8e:01:5d:40:65:9b:c8:9e:46:8d:71:b7:80:ca:f7:
40:1c:be:dd:0a:c6:69:4b:82:a2:0b:9d:2d:75:d8:
eb:16:e3:cc:33:f2:76:98:10:63:43:b4:20:01:20:
f8:a1:8c:86:e2:f7:75:b1:eb:8e:47:ce:65:e7:fe:
f9:ee:aa:57:4c:34:b5:4e:ce:8d:c3:1d:c6:78:47:
09:ae:54:e4:16:a0:23:06:0c:25:c0:c5:ac:63:b2:
e7:ea:fe:7f:62:80:fd:67:6c:64:c8:52:51:9d:a7:
ea:f3:98:99:b1:db:80:d1:d9:73:56:29:95:48:05:
08:22:8e:f9:bb:9e:63:0b:d3:a9:58:75:1f:47:92:
64:a6:05:1c:87:9a:5e:99:d6:32:b7:fa:b0:7d:d8:
f6:c3:48:09:52:36:17:d3:8f:26:0d:e7:71:00:14:
90:b7:cd:f3:73:3c:1c:8b:91:c1:77:7f:6c:64:b7:
1f:d3:b0:39:c4:1c:90:60:fe:16:12:cf:b3:e8:7c:
34:90:84:e3:f3:ea:17:39:2f:f8:8d:cf:db:a6:ac:
ff:ac:3e:8d:0d:e8:07:b7:5c:d9:65:ba:57:aa:f4:
d6:fa:45:45:a0:ec:d7:4d:63:bd:81:6c:b6:2b:f2:
fb:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:A4:A3:EC:38:0C:14:DC:DA:13:24:4B:B2:79:2C:00:BD:5B:0F:6C
X509v3 Authority Key Identifier:
keyid:F8:3E:BE:2A:90:6D:D5:87:01:25:99:20:9C:31:CE:10:F2:9D:57:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-D6-KpBt1YcBJZkgnDHOEPKdV4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/1f61ac-02fe-4e4c-852e-4523a0e2b844/1/1-D6-KpBt1YcBJZkgnDHOEPKdV4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/1f61ac-02fe-4e4c-852e-4523a0e2b844/1/1-D6-KpBt1YcBJZkgnDHOEPKdV4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:27:ff:f5:6f:44:18:b4:fe:b1:ed:e7:4f:66:52:9b:34:87:
8e:47:2a:c3:3e:c2:67:6c:7f:e2:30:58:cb:85:de:09:7a:29:
69:2b:75:35:9c:7a:76:68:67:5e:4a:8b:77:97:37:86:dd:60:
40:b7:c3:23:e0:fc:dc:dc:7a:fb:e4:65:ad:05:05:ff:d4:e7:
ef:94:66:8a:aa:37:f0:04:e1:0a:bf:1b:03:92:31:b0:77:4e:
bd:78:54:da:9e:30:a6:f9:33:7e:a8:10:b2:3e:90:41:a8:c0:
af:05:10:b5:8a:52:d7:d9:ac:52:00:87:6f:b4:79:7f:c2:ab:
e1:31:03:85:9c:30:aa:88:e3:94:63:5a:cd:a3:9a:08:3e:f8:
b1:bf:d1:dd:1f:94:62:5d:07:73:16:0a:91:05:d2:1a:f2:c1:
2a:d2:75:c6:d3:a8:1e:b2:40:e1:c5:54:e8:ac:ad:43:f9:78:
6b:7d:01:22:2b:1f:04:72:6d:dc:7d:07:cd:77:36:29:1b:c2:
bb:5a:65:c1:5b:fb:24:ae:f2:91:8d:15:89:43:ac:00:e4:13:
0c:f5:81:0a:67:06:89:d2:de:6b:0e:c8:c4:4b:0f:2e:6e:4c:
c0:95:66:7f:0e:3a:aa:7a:eb:93:42:10:0e:3b:b1:7c:cb:29:
11:e8:2a:17
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZpUv+LVYKc5h3SaL0mmLVKsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4M2ViZTJhOTA2ZGQ1ODcwMTI1OTkyMDljMzFjZTEwZjI5
ZDU3ODUwHhcNMjUxMTA1MTYwMDUyWhcNMjUxMTA2MTYwMDUyWjAzMTEwLwYDVQQD
Eyg2ZmE0YTNlYzM4MGMxNGRjZGExMzI0NGJiMjc5MmMwMGJkNWIwZjZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXolMa5TQ32oTdmJBIqOAV1AZZvI
nkaNcbeAyvdAHL7dCsZpS4KiC50tddjrFuPMM/J2mBBjQ7QgASD4oYyG4vd1seuO
R85l5/757qpXTDS1Ts6Nwx3GeEcJrlTkFqAjBgwlwMWsY7Ln6v5/YoD9Z2xkyFJR
nafq85iZsduA0dlzVimVSAUIIo75u55jC9OpWHUfR5JkpgUch5pemdYyt/qwfdj2
w0gJUjYX048mDedxABSQt83zczwci5HBd39sZLcf07A5xByQYP4WEs+z6Hw0kITj
8+oXOS/4jc/bpqz/rD6NDegHt1zZZbpXqvTW+kVFoOzXTWO9gWy2K/L7xwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFG+ko+w4DBTc2hMkS7J5LAC9Ww9sMB8GA1UdIwQY
MBaAFPg+viqQbdWHASWZIJwxzhDynVeFMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1ENi1LcEJ0MVljQkpaa2duREhPRVBLZFY0VS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmYvMWY2MWFjLTAyZmUtNGU0Yy04NTJl
LTQ1MjNhMGUyYjg0NC8xLzEtRDYtS3BCdDFZY0JKWmtnbkRIT0VQS2RWNFUubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzJmLzFmNjFhYy0wMmZlLTRlNGMtODUyZS00NTIzYTBlMmI4
NDQvMS8xLUQ2LUtwQnQxWWNCSlprZ25ESE9FUEtkVjRVLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYyf/
9W9EGLT+se3nT2ZSmzSHjkcqwz7CZ2x/4jBYy4XeCXopaSt1NZx6dmhnXkqLd5c3
ht1gQLfDI+D83Nx6++RlrQUF/9Tn75Rmiqo38AThCr8bA5IxsHdOvXhU2p4wpvkz
fqgQsj6QQajArwUQtYpS19msUgCHb7R5f8Kr4TEDhZwwqojjlGNazaOaCD74sb/R
3R+UYl0HcxYKkQXSGvLBKtJ1xtOoHrJA4cVU6KytQ/l4a30BIisfBHJt3H0HzXc2
KRvCu1plwVv7JK7ykY0ViUOsAOQTDPWBCmcGidLeaw7IxEsPLm5MwJVmfw46qnrr
k0IQDjuxfMspEegqFw==
-----END CERTIFICATE-----
Generated at Wed Nov 5 22:16:12 2025 by rpki-client