Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/e487da-4d2a-4b4d-bfe5-57c7e6199b12/1/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.mft
File: 6CcUQ5BflAsTjZ1LSjSHy_vQIeM.mft (raw, json)
Hash identifier: 1+VL58I90A9aUu0qbkXPaqDiRSM3xSr1a6dghY4skmc=
Subject key identifier: 63:C8:FF:3A:92:9B:55:9B:E5:E1:2D:B5:1E:4A:24:F0:83:E1:BF:38
Authority key identifier: E8:27:14:43:90:5F:94:0B:13:8D:9D:4B:4A:34:87:CB:FB:D0:21:E3
Certificate issuer: /CN=e8271443905f940b138d9d4b4a3487cbfbd021e3
Certificate serial: 019A71B84A0127FE5DBC95EB2427E3D30C2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/e487da-4d2a-4b4d-bfe5-57c7e6199b12/1/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.mft
Manifest number: 0DEF
Signing time: Tue 11 Nov 2025 07:01:34 +0000
Manifest this update: Tue 11 Nov 2025 07:01:34 +0000
Manifest next update: Wed 12 Nov 2025 07:01:34 +0000
Files and hashes: 1: 6CcUQ5BflAsTjZ1LSjSHy_vQIeM.crl (hash: Dp/8WtMH4lTAiLcvJSWqsRaJRLfXy4ZKIJlUUF0WboE=)
2: r3X5pk5U2Z-5txOYvpcZbvrFurQ.roa (hash: 87QkeU5ku+ENNSsEiVa7il+EqGwoFRelcSgk+xC7ai4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/e487da-4d2a-4b4d-bfe5-57c7e6199b12/1/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/e487da-4d2a-4b4d-bfe5-57c7e6199b12/1/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.mft
rsync://rpki.ripe.net/repository/DEFAULT/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:4a:01:27:fe:5d:bc:95:eb:24:27:e3:d3:0c:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8271443905f940b138d9d4b4a3487cbfbd021e3
Validity
Not Before: Nov 11 07:01:34 2025 GMT
Not After : Nov 12 07:01:34 2025 GMT
Subject: CN=63c8ff3a929b559be5e12db51e4a24f083e1bf38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:05:b3:ca:84:cf:df:e9:b5:d8:45:62:7a:4d:
ab:bd:55:5b:6b:66:cc:11:54:df:94:45:e3:e5:e5:
43:e2:95:95:a7:32:3f:49:f0:f1:50:00:e0:74:1f:
74:66:0a:ca:06:28:a1:1e:07:37:d3:6a:4c:5c:cf:
4c:07:48:57:83:d3:da:73:3a:65:aa:fa:1f:da:e7:
e6:f8:1d:29:2f:e5:63:9b:ef:37:cf:30:0d:70:41:
b6:37:dc:42:7a:13:5d:7f:0e:ee:bd:6f:9f:9f:a5:
17:2b:89:65:19:1a:bc:6b:f5:60:02:74:e8:ec:68:
01:77:62:6c:01:b8:ec:8b:bb:5b:ce:35:9d:c8:92:
1a:49:b1:30:14:74:36:55:13:53:a2:8b:db:76:2e:
bf:bb:08:d4:b5:9c:db:7d:11:6d:ac:4f:08:63:99:
4d:a4:56:ea:a6:bc:03:0d:88:37:d3:2c:62:ef:b4:
24:64:28:2f:12:fd:2b:9b:3c:82:67:f8:97:2c:3d:
4d:c2:ef:bd:69:f8:74:76:55:99:62:dd:df:c9:9e:
6e:46:51:a5:49:ce:df:c3:64:24:25:8e:56:c2:d5:
70:10:57:14:6f:fe:97:c7:b4:aa:e3:35:e3:ee:8c:
3f:31:9f:7e:1b:88:37:2e:db:4b:51:68:9b:35:29:
db:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:C8:FF:3A:92:9B:55:9B:E5:E1:2D:B5:1E:4A:24:F0:83:E1:BF:38
X509v3 Authority Key Identifier:
keyid:E8:27:14:43:90:5F:94:0B:13:8D:9D:4B:4A:34:87:CB:FB:D0:21:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/e487da-4d2a-4b4d-bfe5-57c7e6199b12/1/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/e487da-4d2a-4b4d-bfe5-57c7e6199b12/1/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:a8:41:b4:f0:0b:55:91:5b:3a:32:82:6b:fc:26:69:0b:cd:
c1:37:27:0b:0b:29:1f:94:18:9c:b4:2b:3e:1b:d9:86:ce:7e:
06:26:8e:d4:d8:33:34:f4:56:81:7f:be:59:94:c5:34:9c:1a:
ed:83:2c:53:c4:ea:3a:89:5e:ee:e4:04:fd:9b:8d:4b:b8:60:
64:94:61:bb:1e:6d:a8:4d:09:b0:ce:76:af:60:dd:94:16:60:
67:82:23:51:b1:a1:49:d6:92:b8:0b:e4:8f:b2:46:dc:a8:7e:
12:02:f8:70:88:ed:5e:9f:b4:56:41:f1:db:71:1c:e8:fe:7a:
b3:cb:db:f1:a0:f7:59:e2:37:63:ee:6f:a8:c6:56:34:02:1b:
1c:48:7e:9c:19:04:76:e0:7b:3f:f8:a9:73:a7:16:e2:53:58:
37:c8:7f:c1:99:65:5b:b5:bc:6f:15:d6:7a:13:ba:98:21:89:
04:37:88:b9:bb:75:7e:c6:c3:ef:af:5a:e5:cc:98:01:fe:61:
92:ed:ad:a6:a7:7e:b9:b3:a1:17:cb:f1:36:4c:97:72:ac:6f:
84:b4:f3:3d:df:ab:cd:05:47:16:0d:2b:e6:26:65:95:ae:20:
b5:0c:10:7f:04:3c:55:03:0c:7e:07:dd:83:39:36:62:fd:c4:
23:6f:8b:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuEoBJ/5dvJXrJCfj0wwrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4MjcxNDQzOTA1Zjk0MGIxMzhkOWQ0YjRhMzQ4N2NiZmJk
MDIxZTMwHhcNMjUxMTExMDcwMTM0WhcNMjUxMTEyMDcwMTM0WjAzMTEwLwYDVQQD
Eyg2M2M4ZmYzYTkyOWI1NTliZTVlMTJkYjUxZTRhMjRmMDgzZTFiZjM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzQWzyoTP3+m12EViek2rvVVba2bM
EVTflEXj5eVD4pWVpzI/SfDxUADgdB90ZgrKBiihHgc302pMXM9MB0hXg9Paczpl
qvof2ufm+B0pL+Vjm+83zzANcEG2N9xCehNdfw7uvW+fn6UXK4llGRq8a/VgAnTo
7GgBd2JsAbjsi7tbzjWdyJIaSbEwFHQ2VRNToovbdi6/uwjUtZzbfRFtrE8IY5lN
pFbqprwDDYg30yxi77QkZCgvEv0rmzyCZ/iXLD1Nwu+9afh0dlWZYt3fyZ5uRlGl
Sc7fw2QkJY5WwtVwEFcUb/6Xx7Sq4zXj7ow/MZ9+G4g3LttLUWibNSnbrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGPI/zqSm1Wb5eEttR5KJPCD4b84MB8GA1UdIwQY
MBaAFOgnFEOQX5QLE42dS0o0h8v70CHjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkNjVVE1QmZsQXNUaloxTFNqU0h5X3ZRSWVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9lNDg3ZGEtNGQyYS00YjRkLWJmZTUt
NTdjN2U2MTk5YjEyLzEvNkNjVVE1QmZsQXNUaloxTFNqU0h5X3ZRSWVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi9lNDg3ZGEtNGQyYS00YjRkLWJmZTUtNTdjN2U2MTk5YjEy
LzEvNkNjVVE1QmZsQXNUaloxTFNqU0h5X3ZRSWVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF6hBtPAL
VZFbOjKCa/wmaQvNwTcnCwspH5QYnLQrPhvZhs5+BiaO1NgzNPRWgX++WZTFNJwa
7YMsU8TqOole7uQE/ZuNS7hgZJRhux5tqE0JsM52r2DdlBZgZ4IjUbGhSdaSuAvk
j7JG3Kh+EgL4cIjtXp+0VkHx23Ec6P56s8vb8aD3WeI3Y+5vqMZWNAIbHEh+nBkE
duB7P/ipc6cW4lNYN8h/wZllW7W8bxXWehO6mCGJBDeIubt1fsbD769a5cyYAf5h
ku2tpqd+ubOhF8vxNkyXcqxvhLTzPd+rzQVHFg0r5iZlla4gtQwQfwQ8VQMMfgfd
gzk2Yv3EI2+Leg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 17:19:44 2025 by rpki-client