Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/a9916a-13bf-4770-8e44-58b6a5784ab7/1/6NBiqWnSFCu4UGpXEYC0W9D6uTQ.mft
File: 6NBiqWnSFCu4UGpXEYC0W9D6uTQ.mft (raw, json)
Hash identifier: SLWcKVqC69rD5XcLt6gJ/CkxUlUP1otXU8CxJHtxs1c=
Subject key identifier: E5:61:D5:DB:A3:3D:04:AA:F9:19:85:76:A6:CE:4E:29:73:F0:1B:DE
Authority key identifier: E8:D0:62:A9:69:D2:14:2B:B8:50:6A:57:11:80:B4:5B:D0:FA:B9:34
Certificate issuer: /CN=e8d062a969d2142bb8506a571180b45bd0fab934
Certificate serial: 019A725CB57990B316E9F7EE077A496905AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6NBiqWnSFCu4UGpXEYC0W9D6uTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/a9916a-13bf-4770-8e44-58b6a5784ab7/1/6NBiqWnSFCu4UGpXEYC0W9D6uTQ.mft
Manifest number: 1724
Signing time: Tue 11 Nov 2025 10:01:09 +0000
Manifest this update: Tue 11 Nov 2025 10:01:09 +0000
Manifest next update: Wed 12 Nov 2025 10:01:09 +0000
Files and hashes: 1: 6NBiqWnSFCu4UGpXEYC0W9D6uTQ.crl (hash: 8dv1ortQkLbmBJOLr8UnpxwnWsE1obp3uahNT7RFrSQ=)
2: rLcT__1y2Z0MCSBiT6_-YE4Q91I.roa (hash: 0aZ57+4HyGjyCi96NHu8lhNftEY/9TGUygRLm0qsl7Q=)
3: wTZUnAUsUUhPr2sXpZ8wRWxEN9c.roa (hash: /FD/PFrkkMvE4jKcijgxG0y9RWdd1hzm3r0Kxcyvp8o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/a9916a-13bf-4770-8e44-58b6a5784ab7/1/6NBiqWnSFCu4UGpXEYC0W9D6uTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/a9916a-13bf-4770-8e44-58b6a5784ab7/1/6NBiqWnSFCu4UGpXEYC0W9D6uTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/6NBiqWnSFCu4UGpXEYC0W9D6uTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:b5:79:90:b3:16:e9:f7:ee:07:7a:49:69:05:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8d062a969d2142bb8506a571180b45bd0fab934
Validity
Not Before: Nov 11 10:01:09 2025 GMT
Not After : Nov 12 10:01:09 2025 GMT
Subject: CN=e561d5dba33d04aaf9198576a6ce4e2973f01bde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:5e:3e:4c:ce:d5:fb:e7:3a:ce:54:d5:29:c2:
fb:9f:58:97:ee:dd:16:f7:9d:dc:5e:0a:24:cb:7f:
ea:52:63:ce:6c:70:35:b6:07:29:b9:a4:cd:bb:47:
8d:2b:03:ea:f3:17:ef:b5:2a:61:5f:5b:07:87:08:
d1:60:8c:8f:6a:a2:09:75:60:4b:f5:34:32:60:15:
83:f6:f2:27:86:7e:fb:d0:f5:da:0a:e5:39:38:57:
cd:24:d8:a3:c5:d7:d5:d4:d5:6f:20:05:eb:5b:5e:
6b:e6:7a:b8:f4:1c:f2:31:ac:a5:e1:4f:f0:87:b6:
b8:da:fe:cf:25:b2:f8:5e:1e:07:c3:f1:f6:e5:e2:
f3:9b:65:a2:d7:7d:6c:df:4b:0b:54:da:24:59:0d:
fc:ea:52:4c:61:ab:73:0e:80:a8:51:15:a2:eb:10:
13:54:e2:a4:b1:0c:c5:ba:06:c8:4d:d1:2f:4c:9f:
6b:ae:ea:24:2a:91:71:00:d6:93:7d:fd:c9:57:02:
7d:1e:4f:4b:52:b8:2b:86:3e:d8:94:73:ab:db:46:
2b:7b:eb:25:12:63:58:25:73:7c:50:4a:4b:4a:62:
38:dd:55:ff:15:c4:a3:d5:07:93:39:04:12:0b:0d:
3c:46:36:0a:be:3d:c1:80:f1:2f:36:ca:39:00:bb:
85:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:61:D5:DB:A3:3D:04:AA:F9:19:85:76:A6:CE:4E:29:73:F0:1B:DE
X509v3 Authority Key Identifier:
keyid:E8:D0:62:A9:69:D2:14:2B:B8:50:6A:57:11:80:B4:5B:D0:FA:B9:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6NBiqWnSFCu4UGpXEYC0W9D6uTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/a9916a-13bf-4770-8e44-58b6a5784ab7/1/6NBiqWnSFCu4UGpXEYC0W9D6uTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/a9916a-13bf-4770-8e44-58b6a5784ab7/1/6NBiqWnSFCu4UGpXEYC0W9D6uTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:4b:91:81:a5:42:d2:2c:dd:4d:64:a1:a3:00:20:5e:a5:b3:
56:d0:df:99:d7:ae:5f:0f:43:72:3b:a6:9b:2e:6c:4c:f8:36:
6e:33:cf:2d:99:3c:c5:25:c4:60:50:55:6a:4c:0d:00:7f:6b:
73:5f:5c:34:db:c8:cb:b5:86:b1:fa:c4:ef:df:a5:c9:d3:4e:
d2:b5:e6:e8:98:f4:9e:1f:ed:be:64:3a:fc:a3:14:17:ea:75:
d8:30:30:a4:04:87:0a:9f:cb:21:b4:f4:04:8d:d4:f2:c2:fa:
3b:bb:1b:e0:a8:c0:14:b3:58:1b:98:97:c4:c8:51:b6:a5:ca:
64:2a:61:5b:78:65:14:76:2f:bc:42:17:c3:78:52:50:21:51:
d4:b8:10:5b:54:c1:14:66:92:70:89:cc:e8:01:34:eb:86:be:
67:8d:40:4a:8a:c6:b8:47:d0:f9:ea:f9:b5:f2:5f:6b:6f:d2:
66:98:a5:af:50:37:00:2a:3a:b7:35:22:d5:a0:45:d0:fa:f6:
cf:b5:e7:98:63:a3:33:de:ec:37:df:5a:87:0c:fa:65:0a:5c:
cd:57:4c:5c:b1:67:a0:63:b3:27:47:18:61:6e:61:fb:36:6d:
7f:c7:3c:49:60:d7:aa:89:72:54:92:63:9a:5f:a7:2f:27:4b:
92:32:19:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyXLV5kLMW6ffuB3pJaQWqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4ZDA2MmE5NjlkMjE0MmJiODUwNmE1NzExODBiNDViZDBm
YWI5MzQwHhcNMjUxMTExMTAwMTA5WhcNMjUxMTEyMTAwMTA5WjAzMTEwLwYDVQQD
EyhlNTYxZDVkYmEzM2QwNGFhZjkxOTg1NzZhNmNlNGUyOTczZjAxYmRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqV4+TM7V++c6zlTVKcL7n1iX7t0W
953cXgoky3/qUmPObHA1tgcpuaTNu0eNKwPq8xfvtSphX1sHhwjRYIyPaqIJdWBL
9TQyYBWD9vInhn770PXaCuU5OFfNJNijxdfV1NVvIAXrW15r5nq49BzyMayl4U/w
h7a42v7PJbL4Xh4Hw/H25eLzm2Wi131s30sLVNokWQ386lJMYatzDoCoURWi6xAT
VOKksQzFugbITdEvTJ9rruokKpFxANaTff3JVwJ9Hk9LUrgrhj7YlHOr20Yre+sl
EmNYJXN8UEpLSmI43VX/FcSj1QeTOQQSCw08RjYKvj3BgPEvNso5ALuFcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOVh1dujPQSq+RmFdqbOTilz8BveMB8GA1UdIwQY
MBaAFOjQYqlp0hQruFBqVxGAtFvQ+rk0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNk5CaXFXblNGQ3U0VUdwWEVZQzBXOUQ2dVRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9hOTkxNmEtMTNiZi00NzcwLThlNDQt
NThiNmE1Nzg0YWI3LzEvNk5CaXFXblNGQ3U0VUdwWEVZQzBXOUQ2dVRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC9hOTkxNmEtMTNiZi00NzcwLThlNDQtNThiNmE1Nzg0YWI3
LzEvNk5CaXFXblNGQ3U0VUdwWEVZQzBXOUQ2dVRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIkuRgaVC
0izdTWShowAgXqWzVtDfmdeuXw9Dcjummy5sTPg2bjPPLZk8xSXEYFBVakwNAH9r
c19cNNvIy7WGsfrE79+lydNO0rXm6Jj0nh/tvmQ6/KMUF+p12DAwpASHCp/LIbT0
BI3U8sL6O7sb4KjAFLNYG5iXxMhRtqXKZCphW3hlFHYvvEIXw3hSUCFR1LgQW1TB
FGaScInM6AE064a+Z41ASorGuEfQ+er5tfJfa2/SZpilr1A3ACo6tzUi1aBF0Pr2
z7XnmGOjM97sN99ahwz6ZQpczVdMXLFnoGOzJ0cYYW5h+zZtf8c8SWDXqolyVJJj
ml+nLydLkjIZCg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 17:16:56 2025 by rpki-client