Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/cd092e-6beb-4037-8a5a-fae8d42ae5e5/1/6EKkZljB0BusjUOWHGtJ54jjzMM.mft
File: 6EKkZljB0BusjUOWHGtJ54jjzMM.mft (raw, json)
Hash identifier: LB2UuWIeX03LpOFtsNjMyMLvVseSE7aE3Jc+xfF59gE=
Subject key identifier: 59:81:7C:D4:68:B2:E2:4F:13:8C:32:63:7B:C6:1A:4B:11:0B:6F:76
Authority key identifier: E8:42:A4:66:58:C1:D0:1B:AC:8D:43:96:1C:6B:49:E7:88:E3:CC:C3
Certificate issuer: /CN=e842a46658c1d01bac8d43961c6b49e788e3ccc3
Certificate serial: 019A7149A915DB1A462950C1FA7461E62BFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6EKkZljB0BusjUOWHGtJ54jjzMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/cd092e-6beb-4037-8a5a-fae8d42ae5e5/1/6EKkZljB0BusjUOWHGtJ54jjzMM.mft
Manifest number: 1722
Signing time: Tue 11 Nov 2025 05:00:44 +0000
Manifest this update: Tue 11 Nov 2025 05:00:44 +0000
Manifest next update: Wed 12 Nov 2025 05:00:44 +0000
Files and hashes: 1: 6EKkZljB0BusjUOWHGtJ54jjzMM.crl (hash: +H7uybpnDGdrdQSpIvsWKf/u50R7vxJPQSQVr45h2fM=)
2: xANWJIQxy5Izrn9gOyePr5tbhgY.roa (hash: BAFdEGijvRbR7pMhm3hhAYe67gFmqJkY0ASzrXKygw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/cd092e-6beb-4037-8a5a-fae8d42ae5e5/1/6EKkZljB0BusjUOWHGtJ54jjzMM.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/cd092e-6beb-4037-8a5a-fae8d42ae5e5/1/6EKkZljB0BusjUOWHGtJ54jjzMM.mft
rsync://rpki.ripe.net/repository/DEFAULT/6EKkZljB0BusjUOWHGtJ54jjzMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:a9:15:db:1a:46:29:50:c1:fa:74:61:e6:2b:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e842a46658c1d01bac8d43961c6b49e788e3ccc3
Validity
Not Before: Nov 11 05:00:44 2025 GMT
Not After : Nov 12 05:00:44 2025 GMT
Subject: CN=59817cd468b2e24f138c32637bc61a4b110b6f76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d7:5c:ff:c3:c4:2f:c4:fc:f7:a2:c4:ba:41:
1a:45:2a:a8:fa:bd:0b:1d:a7:3b:4a:cf:00:ec:c8:
93:29:21:14:36:d5:af:ba:02:ac:32:d1:fb:4e:b0:
7b:b3:ee:2f:e6:bc:80:71:b1:ae:06:f5:d5:40:86:
91:fd:6a:bf:a6:2e:9d:c3:68:3c:69:33:65:ad:bc:
56:53:64:64:f5:a5:f3:2f:e9:56:6b:2d:e9:23:22:
4b:d5:27:19:a1:be:f7:e3:4b:44:5d:0b:24:3a:61:
7d:31:fd:60:55:4a:6f:5b:1f:ab:83:94:4f:7f:4c:
ab:50:e6:54:97:e0:7c:8f:43:ee:9e:df:dc:2e:e0:
81:92:4e:13:60:5b:11:bf:8f:fc:e3:4b:57:f2:36:
ac:56:38:6c:06:bd:00:2f:b0:9f:36:4e:b5:c1:c7:
09:c5:f0:43:8a:9b:86:b1:4a:2e:18:29:66:68:af:
d2:8f:54:ba:f4:60:89:61:ef:41:d8:5f:48:2f:8e:
8b:68:81:4b:5c:a8:b5:b7:02:4c:a5:d1:df:d3:d0:
a5:77:3c:72:1c:a1:4d:d7:f3:b7:eb:3d:b5:0d:0c:
7c:d8:49:fc:df:42:83:57:fc:dd:e7:c6:e1:ca:43:
cc:bd:0d:1e:d4:48:3e:80:5e:d4:15:9e:d8:d5:9e:
5f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:81:7C:D4:68:B2:E2:4F:13:8C:32:63:7B:C6:1A:4B:11:0B:6F:76
X509v3 Authority Key Identifier:
keyid:E8:42:A4:66:58:C1:D0:1B:AC:8D:43:96:1C:6B:49:E7:88:E3:CC:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EKkZljB0BusjUOWHGtJ54jjzMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/cd092e-6beb-4037-8a5a-fae8d42ae5e5/1/6EKkZljB0BusjUOWHGtJ54jjzMM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/cd092e-6beb-4037-8a5a-fae8d42ae5e5/1/6EKkZljB0BusjUOWHGtJ54jjzMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:94:fe:71:09:35:77:69:ef:ef:6a:99:50:e4:58:b7:bb:64:
9c:2d:77:76:5a:f1:88:df:08:60:13:1a:59:5a:f8:a4:33:02:
87:b0:1d:6d:e8:35:03:8c:80:3b:d5:ec:be:af:ec:2e:23:35:
52:0b:26:dd:76:4a:39:7e:8f:3f:07:b5:2f:65:7f:50:b7:85:
a1:10:71:86:f4:1b:56:11:01:fa:7c:5e:10:65:2c:3f:68:98:
b2:49:f9:eb:7a:d6:97:4d:58:82:f6:a3:b7:ed:fa:3a:1a:f3:
08:3b:b4:a1:b9:69:77:22:7b:03:6d:17:a2:bd:fe:89:b9:83:
83:ab:41:3d:1e:7c:ae:80:6b:c4:7a:c6:ae:06:57:e2:14:b9:
bd:69:3b:d0:e0:f5:a0:c5:20:25:8e:e1:68:99:ee:69:8d:58:
fa:0d:1c:ea:6c:aa:eb:95:4e:c3:5f:c9:28:14:9c:4e:82:0f:
70:87:8b:dd:8c:cc:19:cf:00:16:25:f2:b0:db:fa:c2:ac:4e:
13:c1:fc:a4:0a:a0:19:f1:82:8d:6e:bb:82:75:c6:80:8a:fe:
9a:79:d4:b7:ef:56:63:e6:26:18:f0:ba:cd:b9:8b:df:c1:78:
99:87:2e:6a:74:1a:fe:77:57:6a:c4:0e:1b:42:28:02:f9:da:
df:21:a9:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxSakV2xpGKVDB+nRh5iv6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4NDJhNDY2NThjMWQwMWJhYzhkNDM5NjFjNmI0OWU3ODhl
M2NjYzMwHhcNMjUxMTExMDUwMDQ0WhcNMjUxMTEyMDUwMDQ0WjAzMTEwLwYDVQQD
Eyg1OTgxN2NkNDY4YjJlMjRmMTM4YzMyNjM3YmM2MWE0YjExMGI2Zjc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwNdc/8PEL8T896LEukEaRSqo+r0L
Hac7Ss8A7MiTKSEUNtWvugKsMtH7TrB7s+4v5ryAcbGuBvXVQIaR/Wq/pi6dw2g8
aTNlrbxWU2Rk9aXzL+lWay3pIyJL1ScZob7340tEXQskOmF9Mf1gVUpvWx+rg5RP
f0yrUOZUl+B8j0Punt/cLuCBkk4TYFsRv4/840tX8jasVjhsBr0AL7CfNk61wccJ
xfBDipuGsUouGClmaK/Sj1S69GCJYe9B2F9IL46LaIFLXKi1twJMpdHf09Cldzxy
HKFN1/O36z21DQx82En830KDV/zd58bhykPMvQ0e1Eg+gF7UFZ7Y1Z5ftQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFmBfNRosuJPE4wyY3vGGksRC292MB8GA1UdIwQY
MBaAFOhCpGZYwdAbrI1DlhxrSeeI48zDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkVLa1psakIwQnVzalVPV0hHdEo1NGpqek1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9jZDA5MmUtNmJlYi00MDM3LThhNWEt
ZmFlOGQ0MmFlNWU1LzEvNkVLa1psakIwQnVzalVPV0hHdEo1NGpqek1NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC9jZDA5MmUtNmJlYi00MDM3LThhNWEtZmFlOGQ0MmFlNWU1
LzEvNkVLa1psakIwQnVzalVPV0hHdEo1NGpqek1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdZT+cQk1
d2nv72qZUORYt7tknC13dlrxiN8IYBMaWVr4pDMCh7Adbeg1A4yAO9Xsvq/sLiM1
Ugsm3XZKOX6PPwe1L2V/ULeFoRBxhvQbVhEB+nxeEGUsP2iYskn563rWl01Ygvaj
t+36OhrzCDu0oblpdyJ7A20Xor3+ibmDg6tBPR58roBrxHrGrgZX4hS5vWk70OD1
oMUgJY7haJnuaY1Y+g0c6myq65VOw1/JKBScToIPcIeL3YzMGc8AFiXysNv6wqxO
E8H8pAqgGfGCjW67gnXGgIr+mnnUt+9WY+YmGPC6zbmL38F4mYcuanQa/ndXasQO
G0IoAvna3yGpcw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 13:14:24 2025 by rpki-client