Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/083f01-71fc-43ad-81ab-7aff5c4307f0/1/6cvDMxrsyVdOdY4cg9ktkhkb1bE.mft
File: 6cvDMxrsyVdOdY4cg9ktkhkb1bE.mft (raw, json)
Hash identifier: 7htddTC32/7i3w79t0Gctjc2LM+ovQYrKjDg6HQ77JA=
Subject key identifier: 2B:53:A6:AC:1C:45:40:FB:97:11:F0:71:73:A9:D6:45:B8:9A:9B:CA
Authority key identifier: E9:CB:C3:33:1A:EC:C9:57:4E:75:8E:1C:83:D9:2D:92:19:1B:D5:B1
Certificate issuer: /CN=e9cbc3331aecc9574e758e1c83d92d92191bd5b1
Certificate serial: 0199239F6E9312CC93A550236ACD6A2AF99B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6cvDMxrsyVdOdY4cg9ktkhkb1bE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/083f01-71fc-43ad-81ab-7aff5c4307f0/1/6cvDMxrsyVdOdY4cg9ktkhkb1bE.mft
Manifest number: 10DE
Signing time: Sun 07 Sep 2025 10:01:14 +0000
Manifest this update: Sun 07 Sep 2025 10:01:14 +0000
Manifest next update: Mon 08 Sep 2025 10:01:14 +0000
Files and hashes: 1: 6cvDMxrsyVdOdY4cg9ktkhkb1bE.crl (hash: npxfETyGEYfVbqNuCFZIgkcWpcKsL8RbAie6cXBxjx4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/083f01-71fc-43ad-81ab-7aff5c4307f0/1/6cvDMxrsyVdOdY4cg9ktkhkb1bE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/083f01-71fc-43ad-81ab-7aff5c4307f0/1/6cvDMxrsyVdOdY4cg9ktkhkb1bE.mft
rsync://rpki.ripe.net/repository/DEFAULT/6cvDMxrsyVdOdY4cg9ktkhkb1bE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:6e:93:12:cc:93:a5:50:23:6a:cd:6a:2a:f9:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9cbc3331aecc9574e758e1c83d92d92191bd5b1
Validity
Not Before: Sep 7 10:01:14 2025 GMT
Not After : Sep 8 10:01:14 2025 GMT
Subject: CN=2b53a6ac1c4540fb9711f07173a9d645b89a9bca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:62:cf:bc:c9:e9:57:91:cb:ea:16:7b:7c:b9:
d3:a8:59:ac:30:7c:62:64:6b:35:1d:e6:b7:bc:61:
61:fe:85:4c:a2:fe:6a:0f:95:e2:37:12:66:6a:02:
cb:63:c6:82:a6:1f:56:7f:1c:21:b6:8c:05:84:43:
64:30:c4:5f:71:35:f9:57:97:1a:40:19:1e:80:dd:
05:13:56:76:78:c0:79:09:76:d5:d7:4a:eb:a3:f0:
de:f2:7d:eb:69:bc:93:c1:66:8c:ed:69:7b:45:e5:
22:6a:3a:82:cc:b8:14:0d:72:f8:a7:09:2e:ff:39:
5e:3b:9e:47:16:07:e1:d6:61:cf:e9:cd:5a:30:2a:
e3:bc:3c:81:ae:46:ae:67:bd:c8:59:28:02:f9:d1:
c6:f8:a0:eb:9c:6e:f2:46:01:79:6f:ca:5f:06:24:
3a:dd:e8:81:24:53:aa:a8:ee:6c:83:98:7e:3c:b5:
5c:2e:7f:16:ca:ba:cd:4f:a2:e6:b9:5e:dc:3a:45:
a3:28:b1:c0:97:8a:38:6f:03:c3:c9:d5:e3:c2:b8:
80:95:2b:08:88:e4:7d:d9:ea:0c:37:d2:89:52:c8:
44:38:19:39:32:c0:9a:93:97:c0:a2:a8:65:4a:40:
63:4e:a5:5c:f0:b0:e4:8c:d6:79:63:04:8b:6b:63:
52:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:53:A6:AC:1C:45:40:FB:97:11:F0:71:73:A9:D6:45:B8:9A:9B:CA
X509v3 Authority Key Identifier:
keyid:E9:CB:C3:33:1A:EC:C9:57:4E:75:8E:1C:83:D9:2D:92:19:1B:D5:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6cvDMxrsyVdOdY4cg9ktkhkb1bE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/083f01-71fc-43ad-81ab-7aff5c4307f0/1/6cvDMxrsyVdOdY4cg9ktkhkb1bE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/083f01-71fc-43ad-81ab-7aff5c4307f0/1/6cvDMxrsyVdOdY4cg9ktkhkb1bE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:1c:38:b6:4a:e0:9d:bc:b9:01:fb:77:77:6e:d8:02:19:70:
f7:70:05:a9:1c:03:55:71:92:1a:b6:2e:47:29:7e:a4:53:e9:
2a:1c:f8:95:9c:70:0c:92:a0:e0:dc:54:df:af:24:ea:df:04:
16:56:0c:18:9e:4d:03:d5:31:c8:56:bc:29:5b:3b:66:ff:30:
cf:4c:7a:b9:ca:b8:cf:3b:4c:c8:89:f6:b5:9a:5c:34:dd:cb:
c0:de:86:9a:cf:a2:c4:e1:1f:2c:ca:5d:88:6f:68:4c:f6:ce:
2c:cb:5a:60:af:ed:f1:df:cc:14:25:08:77:c0:4c:0d:2c:7d:
4b:45:b8:21:91:8a:2a:3a:ca:52:50:ee:30:ac:a4:c4:cd:2c:
77:53:f9:e5:b5:c3:9f:5e:61:10:7c:8e:f8:cc:4e:ef:be:f5:
a1:40:15:38:51:b3:48:83:12:f0:ea:46:bc:18:04:c6:45:a2:
58:e5:c2:ce:6d:31:8e:8f:ff:d3:27:4f:ba:c3:57:11:b4:69:
da:d0:33:85:4b:4c:a4:53:d7:4c:6b:09:fa:4a:cd:f8:7e:42:
47:c2:45:4f:37:07:b7:91:ad:7a:2e:1f:0c:c3:da:e3:5d:17:
58:72:84:e1:8a:17:9b:98:48:29:b7:98:4a:e1:eb:96:9d:95:
37:20:44:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjn26TEsyTpVAjas1qKvmbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5Y2JjMzMzMWFlY2M5NTc0ZTc1OGUxYzgzZDkyZDkyMTkx
YmQ1YjEwHhcNMjUwOTA3MTAwMTE0WhcNMjUwOTA4MTAwMTE0WjAzMTEwLwYDVQQD
EygyYjUzYTZhYzFjNDU0MGZiOTcxMWYwNzE3M2E5ZDY0NWI4OWE5YmNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlWLPvMnpV5HL6hZ7fLnTqFmsMHxi
ZGs1Hea3vGFh/oVMov5qD5XiNxJmagLLY8aCph9WfxwhtowFhENkMMRfcTX5V5ca
QBkegN0FE1Z2eMB5CXbV10rro/De8n3rabyTwWaM7Wl7ReUiajqCzLgUDXL4pwku
/zleO55HFgfh1mHP6c1aMCrjvDyBrkauZ73IWSgC+dHG+KDrnG7yRgF5b8pfBiQ6
3eiBJFOqqO5sg5h+PLVcLn8WyrrNT6LmuV7cOkWjKLHAl4o4bwPDydXjwriAlSsI
iOR92eoMN9KJUshEOBk5MsCak5fAoqhlSkBjTqVc8LDkjNZ5YwSLa2NSiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCtTpqwcRUD7lxHwcXOp1kW4mpvKMB8GA1UdIwQY
MBaAFOnLwzMa7MlXTnWOHIPZLZIZG9WxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNmN2RE14cnN5VmRPZFk0Y2c5a3RraGtiMWJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC8wODNmMDEtNzFmYy00M2FkLTgxYWIt
N2FmZjVjNDMwN2YwLzEvNmN2RE14cnN5VmRPZFk0Y2c5a3RraGtiMWJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC8wODNmMDEtNzFmYy00M2FkLTgxYWItN2FmZjVjNDMwN2Yw
LzEvNmN2RE14cnN5VmRPZFk0Y2c5a3RraGtiMWJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXhw4tkrg
nby5Aft3d27YAhlw93AFqRwDVXGSGrYuRyl+pFPpKhz4lZxwDJKg4NxU368k6t8E
FlYMGJ5NA9UxyFa8KVs7Zv8wz0x6ucq4zztMyIn2tZpcNN3LwN6Gms+ixOEfLMpd
iG9oTPbOLMtaYK/t8d/MFCUId8BMDSx9S0W4IZGKKjrKUlDuMKykxM0sd1P55bXD
n15hEHyO+MxO7771oUAVOFGzSIMS8OpGvBgExkWiWOXCzm0xjo//0ydPusNXEbRp
2tAzhUtMpFPXTGsJ+krN+H5CR8JFTzcHt5Gtei4fDMPa410XWHKE4YoXm5hIKbeY
SuHrlp2VNyBEqQ==
-----END CERTIFICATE-----
Generated at Sun Sep 7 13:49:26 2025 by rpki-client