Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/d3de43-aa3c-4692-a924-d98f5d076298/1/6uDCwN7m-e1l4FHqqQl9As9b9fI.mft
File: 6uDCwN7m-e1l4FHqqQl9As9b9fI.mft (raw, json)
Hash identifier: Q5tgwu++C9YkcbrTWdIK5cJftqCu+BwOKyQUeEIqZ9c=
Subject key identifier: 03:65:E6:6C:68:66:25:4F:83:CD:93:8F:68:00:9A:33:F3:98:04:9B
Authority key identifier: EA:E0:C2:C0:DE:E6:F9:ED:65:E0:51:EA:A9:09:7D:02:CF:5B:F5:F2
Certificate issuer: /CN=eae0c2c0dee6f9ed65e051eaa9097d02cf5bf5f2
Certificate serial: 019A7112A97076A4D49A3BEEEA9B3DB88A3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6uDCwN7m-e1l4FHqqQl9As9b9fI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/d3de43-aa3c-4692-a924-d98f5d076298/1/6uDCwN7m-e1l4FHqqQl9As9b9fI.mft
Manifest number: 024F
Signing time: Tue 11 Nov 2025 04:00:39 +0000
Manifest this update: Tue 11 Nov 2025 04:00:39 +0000
Manifest next update: Wed 12 Nov 2025 04:00:39 +0000
Files and hashes: 1: 6IiGbtawfoiQxqo4qA78f9bxvRI.roa (hash: DrAR4o5sI8QUSjE7+o4KN2antHg+KFLwwl7uXYw30VE=)
2: 6uDCwN7m-e1l4FHqqQl9As9b9fI.crl (hash: 9NUqrCTtDQwEPwqxP2RcWHFHa2sxmy5QW6afmFZFZUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/d3de43-aa3c-4692-a924-d98f5d076298/1/6uDCwN7m-e1l4FHqqQl9As9b9fI.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/d3de43-aa3c-4692-a924-d98f5d076298/1/6uDCwN7m-e1l4FHqqQl9As9b9fI.mft
rsync://rpki.ripe.net/repository/DEFAULT/6uDCwN7m-e1l4FHqqQl9As9b9fI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:a9:70:76:a4:d4:9a:3b:ee:ea:9b:3d:b8:8a:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eae0c2c0dee6f9ed65e051eaa9097d02cf5bf5f2
Validity
Not Before: Nov 11 04:00:39 2025 GMT
Not After : Nov 12 04:00:39 2025 GMT
Subject: CN=0365e66c6866254f83cd938f68009a33f398049b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:91:a6:4f:39:e5:94:7d:04:7c:09:7d:bc:4b:
5c:d5:18:ea:0e:97:43:f8:3f:31:10:26:da:28:58:
68:56:ce:81:6c:e7:f6:61:e6:c3:d5:f4:b9:78:ff:
61:c3:68:af:87:ea:48:7a:bd:4d:e5:8a:db:0c:e8:
02:11:7e:f5:53:60:b6:95:9c:0e:e1:2d:09:59:0a:
2e:5b:49:ea:b3:f0:49:b4:eb:af:18:8c:24:e8:41:
70:aa:27:f1:97:4e:20:21:30:57:9c:bf:af:e9:66:
93:ff:b0:6e:25:06:9c:47:14:eb:84:80:10:89:51:
99:cd:73:57:f8:16:c1:94:c2:a9:8f:7e:97:71:8e:
f9:85:ad:a8:46:b8:4c:6b:04:d9:4f:d0:e4:bc:0e:
bc:a3:e6:91:74:d1:0a:aa:19:d7:83:d0:90:ed:c2:
ed:ab:ac:43:c2:72:fb:5a:fd:2b:62:71:a6:e5:30:
b8:c4:c4:86:f4:b6:20:5c:a5:84:a9:08:31:86:97:
b5:88:3b:a3:c3:84:4b:64:ff:8c:af:87:f9:06:41:
df:fd:e9:ab:0d:50:a9:cd:36:01:72:0a:5e:55:f9:
c4:6b:e2:07:80:04:a9:e7:0f:15:d0:52:6e:4a:f8:
34:1b:b4:a7:42:28:3f:1b:17:ed:00:21:02:4c:c9:
73:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:65:E6:6C:68:66:25:4F:83:CD:93:8F:68:00:9A:33:F3:98:04:9B
X509v3 Authority Key Identifier:
keyid:EA:E0:C2:C0:DE:E6:F9:ED:65:E0:51:EA:A9:09:7D:02:CF:5B:F5:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6uDCwN7m-e1l4FHqqQl9As9b9fI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d3de43-aa3c-4692-a924-d98f5d076298/1/6uDCwN7m-e1l4FHqqQl9As9b9fI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d3de43-aa3c-4692-a924-d98f5d076298/1/6uDCwN7m-e1l4FHqqQl9As9b9fI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:2e:54:d3:1b:f8:99:78:05:82:92:99:9d:27:ba:ac:9c:f5:
be:b9:18:ea:fb:f5:a1:68:8a:31:05:3d:e7:4b:66:a4:6c:48:
93:01:b8:84:f1:54:fb:46:a2:60:e5:40:04:8e:3f:69:40:79:
3a:6f:7a:6c:d1:2f:1a:11:b1:cf:14:79:2c:28:05:fb:a4:13:
e3:63:1f:55:31:4c:d5:92:3b:61:8c:80:3b:dc:a2:3a:5d:1b:
1b:97:8c:3c:ce:d3:eb:c7:6e:7d:2f:c4:6c:3c:f1:09:dd:8e:
61:99:46:90:68:08:79:2a:80:5f:33:d4:1a:c9:99:c4:61:5f:
94:d3:7b:01:74:be:c2:50:d7:d2:ed:90:b4:5c:de:91:b3:dd:
ad:76:3a:b8:67:85:1c:2d:4d:cb:f2:70:d5:f4:ff:e7:51:1f:
cd:10:14:15:a9:63:23:8f:04:74:02:a1:6b:0c:aa:f3:3d:9b:
44:e3:50:f2:49:95:ff:1e:46:39:61:71:fc:7d:54:c2:cc:e5:
45:9c:57:07:f9:f5:64:4e:27:24:f5:5f:f7:80:02:17:69:04:
10:61:3a:25:92:d3:5b:95:7c:5d:26:33:f2:fc:3c:33:86:dc:
56:83:c2:7c:c9:e9:08:61:e4:41:8b:19:2e:0d:33:0f:23:b4:
79:1b:d2:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxEqlwdqTUmjvu6ps9uIo8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhZTBjMmMwZGVlNmY5ZWQ2NWUwNTFlYWE5MDk3ZDAyY2Y1
YmY1ZjIwHhcNMjUxMTExMDQwMDM5WhcNMjUxMTEyMDQwMDM5WjAzMTEwLwYDVQQD
EygwMzY1ZTY2YzY4NjYyNTRmODNjZDkzOGY2ODAwOWEzM2YzOTgwNDliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZGmTznllH0EfAl9vEtc1RjqDpdD
+D8xECbaKFhoVs6BbOf2YebD1fS5eP9hw2ivh+pIer1N5YrbDOgCEX71U2C2lZwO
4S0JWQouW0nqs/BJtOuvGIwk6EFwqifxl04gITBXnL+v6WaT/7BuJQacRxTrhIAQ
iVGZzXNX+BbBlMKpj36XcY75ha2oRrhMawTZT9DkvA68o+aRdNEKqhnXg9CQ7cLt
q6xDwnL7Wv0rYnGm5TC4xMSG9LYgXKWEqQgxhpe1iDujw4RLZP+Mr4f5BkHf/emr
DVCpzTYBcgpeVfnEa+IHgASp5w8V0FJuSvg0G7SnQig/GxftACECTMlzWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFANl5mxoZiVPg82Tj2gAmjPzmASbMB8GA1UdIwQY
MBaAFOrgwsDe5vntZeBR6qkJfQLPW/XyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnVEQ3dON20tZTFsNEZIcXFRbDlBczliOWZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9kM2RlNDMtYWEzYy00NjkyLWE5MjQt
ZDk4ZjVkMDc2Mjk4LzEvNnVEQ3dON20tZTFsNEZIcXFRbDlBczliOWZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS9kM2RlNDMtYWEzYy00NjkyLWE5MjQtZDk4ZjVkMDc2Mjk4
LzEvNnVEQ3dON20tZTFsNEZIcXFRbDlBczliOWZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADy5U0xv4
mXgFgpKZnSe6rJz1vrkY6vv1oWiKMQU950tmpGxIkwG4hPFU+0aiYOVABI4/aUB5
Om96bNEvGhGxzxR5LCgF+6QT42MfVTFM1ZI7YYyAO9yiOl0bG5eMPM7T68dufS/E
bDzxCd2OYZlGkGgIeSqAXzPUGsmZxGFflNN7AXS+wlDX0u2QtFzekbPdrXY6uGeF
HC1Ny/Jw1fT/51EfzRAUFaljI48EdAKhawyq8z2bRONQ8kmV/x5GOWFx/H1Uwszl
RZxXB/n1ZE4nJPVf94ACF2kEEGE6JZLTW5V8XSYz8vw8M4bcVoPCfMnpCGHkQYsZ
Lg0zDyO0eRvSfA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 13:17:35 2025 by rpki-client