Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/787a96-fb0d-432a-8428-710ef47732b0/1/6QUkmbAAPqDurqJCYzjDTgv4_c8.mft
File: 6QUkmbAAPqDurqJCYzjDTgv4_c8.mft (raw, json)
Hash identifier: pdqqlgrcJEE9N7xkmlKDZpvr8axeuD2vs+aobA83PjA=
Subject key identifier: 51:F9:3F:A9:ED:7D:F1:D6:F0:06:F5:0A:86:80:0A:BE:E9:4E:56:76
Authority key identifier: E9:05:24:99:B0:00:3E:A0:EE:AE:A2:42:63:38:C3:4E:0B:F8:FD:CF
Certificate issuer: /CN=e9052499b0003ea0eeaea2426338c34e0bf8fdcf
Certificate serial: 0199221F25DB9F1641422AB7EE6AA942A26A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6QUkmbAAPqDurqJCYzjDTgv4_c8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/787a96-fb0d-432a-8428-710ef47732b0/1/6QUkmbAAPqDurqJCYzjDTgv4_c8.mft
Manifest number: 0A5C
Signing time: Sun 07 Sep 2025 03:01:30 +0000
Manifest this update: Sun 07 Sep 2025 03:01:30 +0000
Manifest next update: Mon 08 Sep 2025 03:01:30 +0000
Files and hashes: 1: 53gBiMV-U5T_UTNr_H6y2uJN32c.roa (hash: loF7sBRMOPze87N7XZhvPgafCESVBxbr6i5uTn+lW9k=)
2: 6QUkmbAAPqDurqJCYzjDTgv4_c8.crl (hash: Lk6OI4yFfi+uD+d+ru6zbLl5VxZ2xIrikxQgIXYNw6Q=)
3: lUuN68-IxOYTjJomy5kGo9veb00.roa (hash: IB0rOxo9mML04bmfaPFamlA+rNBljWr4GfuyYt2d/RU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/787a96-fb0d-432a-8428-710ef47732b0/1/6QUkmbAAPqDurqJCYzjDTgv4_c8.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/787a96-fb0d-432a-8428-710ef47732b0/1/6QUkmbAAPqDurqJCYzjDTgv4_c8.mft
rsync://rpki.ripe.net/repository/DEFAULT/6QUkmbAAPqDurqJCYzjDTgv4_c8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1f:25:db:9f:16:41:42:2a:b7:ee:6a:a9:42:a2:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9052499b0003ea0eeaea2426338c34e0bf8fdcf
Validity
Not Before: Sep 7 03:01:30 2025 GMT
Not After : Sep 8 03:01:30 2025 GMT
Subject: CN=51f93fa9ed7df1d6f006f50a86800abee94e5676
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:cb:79:f1:a8:43:8d:34:51:48:52:48:2b:ad:
f6:05:f9:1a:a3:bc:7e:56:d8:0f:d6:fb:5e:6e:2f:
ba:00:dc:7b:d5:25:36:63:5c:15:e3:7b:c7:ab:74:
14:55:8e:8f:b2:02:c6:27:08:e4:10:8d:0d:2c:50:
62:b3:ce:9c:43:51:66:d4:69:92:7a:d6:88:b9:88:
b5:90:1f:f6:73:d0:c2:5f:9c:62:63:b2:4e:0c:dc:
02:f5:c0:8d:64:2d:e8:4e:71:70:ce:1b:fc:dd:25:
e9:f6:5c:88:4c:a8:75:11:4c:d9:47:8b:ac:a6:12:
fd:92:be:98:00:0b:28:89:cf:fd:0c:4b:e2:ee:5b:
9c:6b:fc:3f:41:fc:9a:24:6a:79:f0:f1:0b:e3:85:
02:43:37:93:f0:0d:db:3b:cd:64:74:5f:73:05:c8:
39:45:36:bd:02:12:65:10:d0:50:f2:b1:03:db:05:
e3:99:0a:ac:88:00:23:fe:7c:ed:67:52:b0:a2:2c:
0a:fe:e9:c1:5b:87:e4:91:16:e3:11:03:09:19:c7:
80:47:80:2c:ff:22:f7:c1:09:c5:44:76:32:cc:c8:
6c:4d:eb:cc:9c:8c:5c:95:0b:8c:51:7e:19:ba:80:
59:a2:d6:df:e6:17:8d:68:1d:02:fc:89:d3:a6:5f:
e0:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:F9:3F:A9:ED:7D:F1:D6:F0:06:F5:0A:86:80:0A:BE:E9:4E:56:76
X509v3 Authority Key Identifier:
keyid:E9:05:24:99:B0:00:3E:A0:EE:AE:A2:42:63:38:C3:4E:0B:F8:FD:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6QUkmbAAPqDurqJCYzjDTgv4_c8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/787a96-fb0d-432a-8428-710ef47732b0/1/6QUkmbAAPqDurqJCYzjDTgv4_c8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/787a96-fb0d-432a-8428-710ef47732b0/1/6QUkmbAAPqDurqJCYzjDTgv4_c8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:03:a4:14:bb:0d:76:1c:59:dd:d1:ed:b6:d4:3c:ef:a2:69:
33:d9:f2:a3:9a:f4:2d:ac:7d:85:77:41:c3:ad:c3:a5:5c:38:
51:03:40:d4:65:a8:dc:b5:c5:36:b3:c7:a8:ef:3c:85:1b:58:
b1:71:03:27:5d:12:7b:73:30:15:8c:3e:02:d8:28:d3:8e:03:
17:13:d9:a7:99:02:ff:2f:56:a1:c6:4d:d6:ed:e6:b0:0c:3e:
f9:22:a4:5b:5f:4a:49:d7:5b:d0:5c:93:6a:3c:95:7d:9b:16:
92:88:04:51:8b:55:09:7d:b3:3a:cf:dd:88:11:09:54:d8:ea:
b2:5a:d9:82:79:22:bd:76:6b:ad:b6:d7:9e:de:0e:24:66:85:
44:9d:cb:f4:da:23:87:44:c3:6b:1d:22:e8:71:aa:62:ba:f4:
3c:21:24:07:7a:de:21:e4:b1:72:5c:48:20:7f:29:04:6b:3a:
6e:99:da:28:af:17:da:75:79:87:26:0c:45:9e:ea:a0:29:03:
17:6f:79:60:dd:e3:46:ac:da:ac:d2:70:3d:3c:d7:15:25:28:
82:c2:f1:9a:8f:43:54:69:62:87:e5:7e:50:75:c7:4d:13:fd:
ec:34:5d:69:0b:3d:d2:20:76:3f:19:6a:61:8f:90:25:9b:00:
74:92:62:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiHyXbnxZBQiq37mqpQqJqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5MDUyNDk5YjAwMDNlYTBlZWFlYTI0MjYzMzhjMzRlMGJm
OGZkY2YwHhcNMjUwOTA3MDMwMTMwWhcNMjUwOTA4MDMwMTMwWjAzMTEwLwYDVQQD
Eyg1MWY5M2ZhOWVkN2RmMWQ2ZjAwNmY1MGE4NjgwMGFiZWU5NGU1Njc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz8t58ahDjTRRSFJIK632Bfkao7x+
VtgP1vtebi+6ANx71SU2Y1wV43vHq3QUVY6PsgLGJwjkEI0NLFBis86cQ1Fm1GmS
etaIuYi1kB/2c9DCX5xiY7JODNwC9cCNZC3oTnFwzhv83SXp9lyITKh1EUzZR4us
phL9kr6YAAsoic/9DEvi7luca/w/QfyaJGp58PEL44UCQzeT8A3bO81kdF9zBcg5
RTa9AhJlENBQ8rED2wXjmQqsiAAj/nztZ1KwoiwK/unBW4fkkRbjEQMJGceAR4As
/yL3wQnFRHYyzMhsTevMnIxclQuMUX4ZuoBZotbf5heNaB0C/InTpl/gxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFH5P6ntffHW8Ab1CoaACr7pTlZ2MB8GA1UdIwQY
MBaAFOkFJJmwAD6g7q6iQmM4w04L+P3PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlFVa21iQUFQcUR1cnFKQ1l6akRUZ3Y0X2M4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My83ODdhOTYtZmIwZC00MzJhLTg0Mjgt
NzEwZWY0NzczMmIwLzEvNlFVa21iQUFQcUR1cnFKQ1l6akRUZ3Y0X2M4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My83ODdhOTYtZmIwZC00MzJhLTg0MjgtNzEwZWY0NzczMmIw
LzEvNlFVa21iQUFQcUR1cnFKQ1l6akRUZ3Y0X2M4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhgOkFLsN
dhxZ3dHtttQ876JpM9nyo5r0Lax9hXdBw63DpVw4UQNA1GWo3LXFNrPHqO88hRtY
sXEDJ10Se3MwFYw+Atgo044DFxPZp5kC/y9WocZN1u3msAw++SKkW19KSddb0FyT
ajyVfZsWkogEUYtVCX2zOs/diBEJVNjqslrZgnkivXZrrbbXnt4OJGaFRJ3L9Noj
h0TDax0i6HGqYrr0PCEkB3reIeSxclxIIH8pBGs6bpnaKK8X2nV5hyYMRZ7qoCkD
F295YN3jRqzarNJwPTzXFSUogsLxmo9DVGlih+V+UHXHTRP97DRdaQs90iB2Pxlq
YY+QJZsAdJJiBA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:23:18 2025 by rpki-client