Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/45a04c-cb0d-4c0c-8bf1-48f39fde0eea/1/6YD7lTCjb_e3Qw1Q1EuPttbcqTc.mft
File: 6YD7lTCjb_e3Qw1Q1EuPttbcqTc.mft (raw, json)
Hash identifier: TiOJfLGxByPi7ziFNIh2FMTEe3L6LJb2HDjhmMOaM4k=
Subject key identifier: 36:FD:DC:5C:3E:B4:77:E1:44:A7:78:D0:A5:A0:6B:20:9C:60:B7:B7
Authority key identifier: E9:80:FB:95:30:A3:6F:F7:B7:43:0D:50:D4:4B:8F:B6:D6:DC:A9:37
Certificate issuer: /CN=e980fb9530a36ff7b7430d50d44b8fb6d6dca937
Certificate serial: 019A711346D7F1739E4EF27F9FDFE8CBC118
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6YD7lTCjb_e3Qw1Q1EuPttbcqTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/45a04c-cb0d-4c0c-8bf1-48f39fde0eea/1/6YD7lTCjb_e3Qw1Q1EuPttbcqTc.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 04:01:20 +0000
Manifest this update: Tue 11 Nov 2025 04:01:20 +0000
Manifest next update: Wed 12 Nov 2025 04:01:20 +0000
Files and hashes: 1: 6YD7lTCjb_e3Qw1Q1EuPttbcqTc.crl (hash: VrfEjYUkPjbNpIKuwZqCp5LRHX2Pmn71O7pnqOP4Mp4=)
2: hOUxeyZ4GUGm-ViSGta_EVCSneY.roa (hash: qqJoiI/uI9+nuUNJ0WHcG5fxVsdVi3S2HfiMZR4B1Xg=)
3: vhuqt87dQlwpLm6mImrsEtoMnS0.roa (hash: OYcjE2mSIdir4/5GLlaTPE0qszgr/jJDU6iPw1A8rm0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/45a04c-cb0d-4c0c-8bf1-48f39fde0eea/1/6YD7lTCjb_e3Qw1Q1EuPttbcqTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/45a04c-cb0d-4c0c-8bf1-48f39fde0eea/1/6YD7lTCjb_e3Qw1Q1EuPttbcqTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/6YD7lTCjb_e3Qw1Q1EuPttbcqTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:46:d7:f1:73:9e:4e:f2:7f:9f:df:e8:cb:c1:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e980fb9530a36ff7b7430d50d44b8fb6d6dca937
Validity
Not Before: Nov 11 04:01:20 2025 GMT
Not After : Nov 12 04:01:20 2025 GMT
Subject: CN=36fddc5c3eb477e144a778d0a5a06b209c60b7b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c8:81:04:ee:d9:9a:8c:36:41:db:b7:b1:f0:
be:a9:a1:9d:25:57:07:78:2e:b6:3d:4a:bc:a9:d0:
3f:e3:a3:2d:ce:ac:60:78:fc:f7:4c:83:fe:98:df:
2b:9d:4c:cb:b0:44:3b:2a:05:aa:63:83:05:eb:e1:
4a:be:e7:1e:c3:ab:ca:ce:0e:84:51:5c:2c:c6:0e:
6e:82:08:b1:04:8a:7c:96:7c:c3:da:72:b2:2a:f9:
90:a5:e4:4d:80:ac:95:5e:71:4f:b1:c5:2a:d1:b1:
c2:90:8d:86:29:d7:7e:52:39:58:4c:7a:30:0c:77:
a4:ed:a7:9e:21:f6:d5:3b:20:f5:af:48:d4:60:0d:
00:7b:e1:d2:a5:bc:22:97:8c:b1:cf:cb:a5:80:d5:
1c:97:9e:d5:73:b5:83:71:b6:41:77:1b:89:16:ad:
eb:e4:1f:01:7c:7b:72:c1:dd:d6:e6:5e:08:c4:74:
ea:00:aa:0f:b7:ef:c7:c7:b1:0e:be:e8:03:ed:63:
04:1b:ed:da:44:bb:24:99:83:02:d4:a8:bb:b3:7e:
8c:41:6b:56:ea:d6:fb:c7:57:0a:4a:6d:29:35:81:
2c:52:3b:5e:95:de:89:6a:62:eb:30:d1:b3:01:40:
31:a3:65:a8:39:4a:a9:9f:97:0a:d1:72:37:6e:b8:
89:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:FD:DC:5C:3E:B4:77:E1:44:A7:78:D0:A5:A0:6B:20:9C:60:B7:B7
X509v3 Authority Key Identifier:
keyid:E9:80:FB:95:30:A3:6F:F7:B7:43:0D:50:D4:4B:8F:B6:D6:DC:A9:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6YD7lTCjb_e3Qw1Q1EuPttbcqTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/45a04c-cb0d-4c0c-8bf1-48f39fde0eea/1/6YD7lTCjb_e3Qw1Q1EuPttbcqTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/45a04c-cb0d-4c0c-8bf1-48f39fde0eea/1/6YD7lTCjb_e3Qw1Q1EuPttbcqTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:26:1a:ab:7a:95:14:0e:d6:95:30:2d:60:5c:37:29:71:06:
16:67:55:f5:9c:47:3f:e0:5f:0d:84:d5:11:0b:f2:e3:2c:15:
fa:e4:f4:bd:dd:8e:d4:50:0c:a9:e2:c1:15:af:5b:88:4b:1f:
29:8b:7c:7a:66:7e:53:c5:71:da:c9:d6:19:72:6c:b5:3c:1b:
f5:08:3f:84:3b:93:60:49:f0:9d:90:7b:f1:bc:1b:1e:96:31:
aa:2f:0a:b9:ee:1e:27:5e:54:dd:02:43:66:e2:70:6e:5d:48:
27:d7:98:33:5b:1f:47:4e:8d:be:f9:7b:9d:82:50:09:31:ee:
68:74:b8:b1:bb:37:b2:4e:1b:f9:aa:6a:7e:d1:90:f6:b0:f4:
66:7a:fa:bd:e7:9d:e7:72:f0:52:21:68:2c:f7:90:1a:4f:12:
4a:d9:23:ee:f9:8a:4d:84:36:6e:31:f8:d6:54:4d:a4:a6:07:
78:13:3d:8d:71:16:9b:f2:3f:73:32:47:ff:ed:88:25:68:77:
b9:dd:9f:89:23:29:07:58:28:70:92:5c:6b:09:ba:fe:3f:7c:
79:9c:0d:27:a8:2d:8d:bc:0f:3f:2e:4a:18:82:16:3c:bd:48:
d9:f8:45:25:da:a9:23:50:ef:fa:3c:1a:e3:e7:80:28:4b:f6:
21:fb:2e:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxE0bX8XOeTvJ/n9/oy8EYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5ODBmYjk1MzBhMzZmZjdiNzQzMGQ1MGQ0NGI4ZmI2ZDZk
Y2E5MzcwHhcNMjUxMTExMDQwMTIwWhcNMjUxMTEyMDQwMTIwWjAzMTEwLwYDVQQD
EygzNmZkZGM1YzNlYjQ3N2UxNDRhNzc4ZDBhNWEwNmIyMDljNjBiN2I3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnsiBBO7Zmow2Qdu3sfC+qaGdJVcH
eC62PUq8qdA/46MtzqxgePz3TIP+mN8rnUzLsEQ7KgWqY4MF6+FKvucew6vKzg6E
UVwsxg5uggixBIp8lnzD2nKyKvmQpeRNgKyVXnFPscUq0bHCkI2GKdd+UjlYTHow
DHek7aeeIfbVOyD1r0jUYA0Ae+HSpbwil4yxz8ulgNUcl57Vc7WDcbZBdxuJFq3r
5B8BfHtywd3W5l4IxHTqAKoPt+/Hx7EOvugD7WMEG+3aRLskmYMC1Ki7s36MQWtW
6tb7x1cKSm0pNYEsUjteld6JamLrMNGzAUAxo2WoOUqpn5cK0XI3briJcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDb93Fw+tHfhRKd40KWgayCcYLe3MB8GA1UdIwQY
MBaAFOmA+5Uwo2/3t0MNUNRLj7bW3Kk3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNllEN2xUQ2piX2UzUXcxUTFFdVB0dGJjcVRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi80NWEwNGMtY2IwZC00YzBjLThiZjEt
NDhmMzlmZGUwZWVhLzEvNllEN2xUQ2piX2UzUXcxUTFFdVB0dGJjcVRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi80NWEwNGMtY2IwZC00YzBjLThiZjEtNDhmMzlmZGUwZWVh
LzEvNllEN2xUQ2piX2UzUXcxUTFFdVB0dGJjcVRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjyYaq3qV
FA7WlTAtYFw3KXEGFmdV9ZxHP+BfDYTVEQvy4ywV+uT0vd2O1FAMqeLBFa9biEsf
KYt8emZ+U8Vx2snWGXJstTwb9Qg/hDuTYEnwnZB78bwbHpYxqi8Kue4eJ15U3QJD
ZuJwbl1IJ9eYM1sfR06Nvvl7nYJQCTHuaHS4sbs3sk4b+apqftGQ9rD0Znr6veed
53LwUiFoLPeQGk8SStkj7vmKTYQ2bjH41lRNpKYHeBM9jXEWm/I/czJH/+2IJWh3
ud2fiSMpB1gocJJcawm6/j98eZwNJ6gtjbwPPy5KGIIWPL1I2fhFJdqpI1Dv+jwa
4+eAKEv2IfsudQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:38:55 2025 by rpki-client