Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/74592e-aa80-400b-b479-39c550f0a4e4/1/6ySQqKEzr8STmogtt1JsFfiS6Mg.mft
File: 6ySQqKEzr8STmogtt1JsFfiS6Mg.mft (raw, json)
Hash identifier: 6rkmNqlFa6nHeZuu5re1A6/CxSfm+Z1rOP4g4+WCOk8=
Subject key identifier: E5:84:DF:78:8B:0C:2A:5D:3A:DF:C2:A9:AC:9F:CD:0B:70:10:12:99
Authority key identifier: EB:24:90:A8:A1:33:AF:C4:93:9A:88:2D:B7:52:6C:15:F8:92:E8:C8
Certificate issuer: /CN=eb2490a8a133afc4939a882db7526c15f892e8c8
Certificate serial: 019A711343783FEAEC30481A54779B443456
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6ySQqKEzr8STmogtt1JsFfiS6Mg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/74592e-aa80-400b-b479-39c550f0a4e4/1/6ySQqKEzr8STmogtt1JsFfiS6Mg.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 04:01:19 +0000
Manifest this update: Tue 11 Nov 2025 04:01:19 +0000
Manifest next update: Wed 12 Nov 2025 04:01:19 +0000
Files and hashes: 1: 6ySQqKEzr8STmogtt1JsFfiS6Mg.crl (hash: dNLrIEp29LkkCyrSFvdZCyjzHu1Kvt05AyDauaYEQU4=)
2: dp2EkQj5_zKrlsEr5C_rrbMhRyA.roa (hash: mX2VEnqBHs2wq24qAd7nrxxeH5xEJp3U/9aLReWzccA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/74592e-aa80-400b-b479-39c550f0a4e4/1/6ySQqKEzr8STmogtt1JsFfiS6Mg.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/74592e-aa80-400b-b479-39c550f0a4e4/1/6ySQqKEzr8STmogtt1JsFfiS6Mg.mft
rsync://rpki.ripe.net/repository/DEFAULT/6ySQqKEzr8STmogtt1JsFfiS6Mg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:43:78:3f:ea:ec:30:48:1a:54:77:9b:44:34:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb2490a8a133afc4939a882db7526c15f892e8c8
Validity
Not Before: Nov 11 04:01:19 2025 GMT
Not After : Nov 12 04:01:19 2025 GMT
Subject: CN=e584df788b0c2a5d3adfc2a9ac9fcd0b70101299
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:6f:17:73:19:b9:92:7f:95:31:05:91:5d:99:
e8:a8:30:49:7f:3a:3a:fd:3a:9d:c7:13:af:ac:15:
7b:23:d3:0d:df:65:e0:46:1f:6c:de:cd:ef:57:7a:
7c:d6:fc:5e:90:52:de:e8:6b:b3:fe:ad:f5:05:34:
90:d8:2c:e0:08:6c:27:15:0e:01:72:5f:e6:a0:c4:
23:85:a3:85:f4:3c:ba:66:96:78:bb:a5:8d:d6:67:
47:c4:0a:15:6d:ef:e9:f5:4b:62:de:8b:fd:2d:ce:
9d:f6:ca:7f:ef:8c:c7:06:6f:a9:29:a6:fd:85:59:
ed:bf:3d:91:2f:7c:dc:c3:03:66:1e:a0:59:f3:0f:
d0:a0:31:4d:77:3f:05:9c:59:7a:76:14:8e:82:23:
9f:a8:1a:4c:69:9c:7c:8d:bb:b4:60:77:bf:df:ec:
e3:16:b4:0a:51:06:55:a3:26:86:51:37:3e:3a:56:
b2:c6:28:5d:30:4d:c6:f0:d3:a3:ac:9f:ec:44:01:
26:3b:89:f5:29:33:1d:ff:cd:2d:a7:7f:95:f7:49:
5e:23:bc:b3:38:53:64:e2:3d:77:bf:95:b3:86:bf:
13:f8:1e:5a:93:29:73:89:8c:2a:72:67:32:b5:a1:
81:c6:b1:de:d7:b2:67:15:a3:bd:68:0e:fe:a5:40:
83:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:84:DF:78:8B:0C:2A:5D:3A:DF:C2:A9:AC:9F:CD:0B:70:10:12:99
X509v3 Authority Key Identifier:
keyid:EB:24:90:A8:A1:33:AF:C4:93:9A:88:2D:B7:52:6C:15:F8:92:E8:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ySQqKEzr8STmogtt1JsFfiS6Mg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/74592e-aa80-400b-b479-39c550f0a4e4/1/6ySQqKEzr8STmogtt1JsFfiS6Mg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/74592e-aa80-400b-b479-39c550f0a4e4/1/6ySQqKEzr8STmogtt1JsFfiS6Mg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:5a:01:8e:29:f2:3d:df:fc:ff:96:48:c4:94:8c:1e:1a:ab:
1f:d0:e9:44:4d:cf:da:72:29:cd:61:ea:9d:46:3d:3b:ca:61:
f8:7b:5e:bb:f9:e5:63:e5:30:59:9c:98:15:8c:11:25:86:d0:
24:4a:38:f6:7e:e7:20:e5:4c:6f:f9:80:b3:89:67:f2:d8:56:
2c:8d:78:77:30:15:1c:5a:ad:56:35:e7:00:33:a3:71:6b:6e:
94:99:96:ed:aa:75:fd:bc:dd:8c:c2:73:a7:e7:77:37:05:a7:
07:34:9e:30:69:69:26:37:0b:09:82:86:b0:86:04:e3:a5:b0:
c8:d4:66:6c:a5:2e:ec:08:f3:da:17:37:26:bc:18:7e:d7:fb:
0b:df:16:98:71:49:7f:56:0e:6a:f6:9c:dc:53:94:7a:47:05:
ab:dd:41:51:7e:3d:6f:fb:a8:3c:e5:5b:31:89:7e:a1:53:5c:
51:34:71:bd:0c:02:4f:7a:2e:a2:56:a8:38:05:89:52:16:f5:
b1:26:9a:70:62:df:7f:ec:28:35:2d:89:5f:75:ad:86:ad:f3:
74:6a:2c:08:0e:15:88:db:32:8a:4a:ea:d7:b1:c9:8a:f6:ba:
5b:02:fd:c8:64:9a:15:98:ce:90:33:c7:83:8c:36:24:0e:b0:
2d:78:12:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxE0N4P+rsMEgaVHebRDRWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViMjQ5MGE4YTEzM2FmYzQ5MzlhODgyZGI3NTI2YzE1Zjg5
MmU4YzgwHhcNMjUxMTExMDQwMTE5WhcNMjUxMTEyMDQwMTE5WjAzMTEwLwYDVQQD
EyhlNTg0ZGY3ODhiMGMyYTVkM2FkZmMyYTlhYzlmY2QwYjcwMTAxMjk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3G8Xcxm5kn+VMQWRXZnoqDBJfzo6
/TqdxxOvrBV7I9MN32XgRh9s3s3vV3p81vxekFLe6Guz/q31BTSQ2CzgCGwnFQ4B
cl/moMQjhaOF9Dy6ZpZ4u6WN1mdHxAoVbe/p9Uti3ov9Lc6d9sp/74zHBm+pKab9
hVntvz2RL3zcwwNmHqBZ8w/QoDFNdz8FnFl6dhSOgiOfqBpMaZx8jbu0YHe/3+zj
FrQKUQZVoyaGUTc+OlayxihdME3G8NOjrJ/sRAEmO4n1KTMd/80tp3+V90leI7yz
OFNk4j13v5Wzhr8T+B5akylziYwqcmcytaGBxrHe17JnFaO9aA7+pUCDswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOWE33iLDCpdOt/CqayfzQtwEBKZMB8GA1UdIwQY
MBaAFOskkKihM6/Ek5qILbdSbBX4kujIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnlTUXFLRXpyOFNUbW9ndHQxSnNGZmlTNk1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS83NDU5MmUtYWE4MC00MDBiLWI0Nzkt
MzljNTUwZjBhNGU0LzEvNnlTUXFLRXpyOFNUbW9ndHQxSnNGZmlTNk1nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS83NDU5MmUtYWE4MC00MDBiLWI0NzktMzljNTUwZjBhNGU0
LzEvNnlTUXFLRXpyOFNUbW9ndHQxSnNGZmlTNk1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYFoBjiny
Pd/8/5ZIxJSMHhqrH9DpRE3P2nIpzWHqnUY9O8ph+Hteu/nlY+UwWZyYFYwRJYbQ
JEo49n7nIOVMb/mAs4ln8thWLI14dzAVHFqtVjXnADOjcWtulJmW7ap1/bzdjMJz
p+d3NwWnBzSeMGlpJjcLCYKGsIYE46WwyNRmbKUu7Ajz2hc3JrwYftf7C98WmHFJ
f1YOavac3FOUekcFq91BUX49b/uoPOVbMYl+oVNcUTRxvQwCT3ouolaoOAWJUhb1
sSaacGLff+woNS2JX3Wthq3zdGosCA4ViNsyikrq17HJiva6WwL9yGSaFZjOkDPH
g4w2JA6wLXgS5w==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:47:35 2025 by rpki-client