Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/c42160-d6f4-482c-bf62-62140b202eb4/1/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.mft
File: 6nUDuD-gmnW8uRB1QA-DB6ZnuO0.mft (raw, json)
Hash identifier: 6YOzABuciZ42w4sCVfdBWfqAlojlkxA9S1JGa5sjhdU=
Subject key identifier: BB:94:4A:1E:AB:A9:ED:53:7C:E9:55:78:5A:1F:63:7E:66:B2:F4:33
Authority key identifier: EA:75:03:B8:3F:A0:9A:75:BC:B9:10:75:40:0F:83:07:A6:67:B8:ED
Certificate issuer: /CN=ea7503b83fa09a75bcb91075400f8307a667b8ed
Certificate serial: 01993236BCBCB51E5E2BAA3445E1A724DA1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/c42160-d6f4-482c-bf62-62140b202eb4/1/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.mft
Manifest number: 0D6F
Signing time: Wed 10 Sep 2025 06:01:11 +0000
Manifest this update: Wed 10 Sep 2025 06:01:11 +0000
Manifest next update: Thu 11 Sep 2025 06:01:11 +0000
Files and hashes: 1: 534vF5sjkwJDGuUSMSbyeoXyx-w.roa (hash: yaE3+RBNj5kJXWkdpo0vdtCXgmh99gzWa0o0cozuQ7M=)
2: 6nUDuD-gmnW8uRB1QA-DB6ZnuO0.crl (hash: deh99ahBP+tBqwqdd2k5F9nSEGVEQy0AtmxmFtzWIkA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/c42160-d6f4-482c-bf62-62140b202eb4/1/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/c42160-d6f4-482c-bf62-62140b202eb4/1/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.mft
rsync://rpki.ripe.net/repository/DEFAULT/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 06:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:32:36:bc:bc:b5:1e:5e:2b:aa:34:45:e1:a7:24:da:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea7503b83fa09a75bcb91075400f8307a667b8ed
Validity
Not Before: Sep 10 06:01:11 2025 GMT
Not After : Sep 11 06:01:11 2025 GMT
Subject: CN=bb944a1eaba9ed537ce955785a1f637e66b2f433
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:15:56:2b:f5:4e:ec:47:df:7c:b8:62:4e:b8:
0d:82:4f:07:03:81:54:87:15:25:93:dc:59:80:21:
23:71:3b:a1:fe:84:e6:83:24:76:b7:4a:20:f7:c5:
de:6e:87:15:da:55:41:04:4c:5b:df:7d:6f:c8:59:
d2:82:63:4f:0c:a0:2d:f9:3d:bf:c8:61:d7:54:d4:
a6:c3:a3:5d:79:9a:41:d9:91:8c:76:fa:d3:95:7b:
1f:44:8e:5a:b1:b2:95:fa:cd:b9:1e:7c:14:63:9a:
84:cd:c3:ed:4f:ed:4d:a9:a4:0a:12:e7:73:c2:a8:
58:44:07:a1:16:05:ff:ba:b8:86:1a:05:20:67:56:
90:38:38:d9:d4:0f:ae:00:5d:29:c0:c5:a9:3f:2a:
43:1c:ff:8a:a4:39:7f:b3:12:4e:f5:7f:55:92:f7:
e5:f5:55:6c:8a:98:f7:eb:fc:a4:98:25:07:7d:2d:
db:5c:87:30:b8:82:b6:99:2b:87:6b:0b:6f:f6:f5:
6f:41:76:dd:f7:7d:ae:3e:51:81:b3:e0:50:f2:81:
8f:eb:fd:0e:bc:85:7b:0c:f6:83:b7:c4:b7:ff:f9:
e4:6b:c0:8b:5a:25:38:23:45:51:12:3a:7a:f3:09:
ba:f6:ae:b9:89:cc:27:f0:06:41:b1:75:92:16:f1:
f6:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:94:4A:1E:AB:A9:ED:53:7C:E9:55:78:5A:1F:63:7E:66:B2:F4:33
X509v3 Authority Key Identifier:
keyid:EA:75:03:B8:3F:A0:9A:75:BC:B9:10:75:40:0F:83:07:A6:67:B8:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c42160-d6f4-482c-bf62-62140b202eb4/1/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c42160-d6f4-482c-bf62-62140b202eb4/1/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:4e:3a:91:03:a8:25:65:7f:6e:4b:4d:c9:d9:1c:2e:bb:3a:
11:cc:d8:9b:c4:1c:9a:48:ae:a1:41:1e:13:a8:3e:58:e2:cb:
99:a1:16:cd:c4:b8:b8:96:82:3f:40:ca:ad:43:7b:9e:9f:b7:
88:f2:13:a3:4e:c6:b8:75:6c:64:70:9a:38:b6:71:81:3c:bd:
14:c2:ef:90:99:0a:b5:62:1a:12:6f:eb:52:0d:61:03:1f:62:
d9:8c:d2:60:61:51:d7:8f:3f:d1:a1:b9:36:cf:72:8f:e5:a3:
7e:b4:cc:78:db:37:46:b5:e8:db:55:9d:f7:10:9c:9a:3d:95:
2c:72:a8:5f:55:d3:82:85:35:ff:69:eb:df:3d:06:7e:a9:36:
4a:e8:1e:e0:3e:8a:05:3c:25:69:56:d9:5c:df:9d:fa:73:d9:
56:4d:6f:6d:b0:c6:4b:20:62:4e:1d:d7:f9:e2:a0:6d:67:7f:
88:36:ce:d5:d0:47:3d:d3:9a:8b:ee:15:1f:8b:f3:f8:91:d1:
99:e0:04:ad:f4:f8:d4:9b:e9:77:b3:0b:3f:72:8f:97:b4:98:
07:6c:f6:dd:6d:a8:53:62:56:29:77:46:cc:d4:d5:80:b7:74:
73:e2:9c:33:d5:18:ad:dd:ec:d4:f2:f3:aa:0b:3d:5a:48:cc:
1a:1a:13:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkyNry8tR5eK6o0ReGnJNofMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhNzUwM2I4M2ZhMDlhNzViY2I5MTA3NTQwMGY4MzA3YTY2
N2I4ZWQwHhcNMjUwOTEwMDYwMTExWhcNMjUwOTExMDYwMTExWjAzMTEwLwYDVQQD
EyhiYjk0NGExZWFiYTllZDUzN2NlOTU1Nzg1YTFmNjM3ZTY2YjJmNDMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxBVWK/VO7EfffLhiTrgNgk8HA4FU
hxUlk9xZgCEjcTuh/oTmgyR2t0og98XebocV2lVBBExb331vyFnSgmNPDKAt+T2/
yGHXVNSmw6NdeZpB2ZGMdvrTlXsfRI5asbKV+s25HnwUY5qEzcPtT+1NqaQKEudz
wqhYRAehFgX/uriGGgUgZ1aQODjZ1A+uAF0pwMWpPypDHP+KpDl/sxJO9X9Vkvfl
9VVsipj36/ykmCUHfS3bXIcwuIK2mSuHawtv9vVvQXbd932uPlGBs+BQ8oGP6/0O
vIV7DPaDt8S3//nka8CLWiU4I0VREjp68wm69q65icwn8AZBsXWSFvH27wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLuUSh6rqe1TfOlVeFofY35msvQzMB8GA1UdIwQY
MBaAFOp1A7g/oJp1vLkQdUAPgwemZ7jtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNm5VRHVELWdtblc4dVJCMVFBLURCNlpudU8wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9jNDIxNjAtZDZmNC00ODJjLWJmNjIt
NjIxNDBiMjAyZWI0LzEvNm5VRHVELWdtblc4dVJCMVFBLURCNlpudU8wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS9jNDIxNjAtZDZmNC00ODJjLWJmNjItNjIxNDBiMjAyZWI0
LzEvNm5VRHVELWdtblc4dVJCMVFBLURCNlpudU8wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX046kQOo
JWV/bktNydkcLrs6EczYm8QcmkiuoUEeE6g+WOLLmaEWzcS4uJaCP0DKrUN7np+3
iPITo07GuHVsZHCaOLZxgTy9FMLvkJkKtWIaEm/rUg1hAx9i2YzSYGFR148/0aG5
Ns9yj+WjfrTMeNs3RrXo21Wd9xCcmj2VLHKoX1XTgoU1/2nr3z0Gfqk2Suge4D6K
BTwlaVbZXN+d+nPZVk1vbbDGSyBiTh3X+eKgbWd/iDbO1dBHPdOai+4VH4vz+JHR
meAErfT41Jvpd7MLP3KPl7SYB2z23W2oU2JWKXdGzNTVgLd0c+KcM9UYrd3s1PLz
qgs9WkjMGhoT1w==
-----END CERTIFICATE-----
Generated at Wed Sep 10 16:07:09 2025 by rpki-client