Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/e76f15-6853-4dfb-b6bf-344bbb724249/1/6u-o-3F64LhsHl1nA1DSxzuefE4.mft
File: 6u-o-3F64LhsHl1nA1DSxzuefE4.mft (raw, json)
Hash identifier: dlSknIWiw5dEUNr2xgAt65w15Y/K0WsHe9SRFhQfGBg=
Subject key identifier: 54:F9:9F:CF:26:36:D5:B8:62:41:8A:13:B8:26:40:50:D1:5B:49:21
Authority key identifier: EA:EF:A8:FB:71:7A:E0:B8:6C:1E:5D:67:03:50:D2:C7:3B:9E:7C:4E
Certificate issuer: /CN=eaefa8fb717ae0b86c1e5d670350d2c73b9e7c4e
Certificate serial: 019A71B7BBB468B5EB6A1687FED5F089600D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6u-o-3F64LhsHl1nA1DSxzuefE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/e76f15-6853-4dfb-b6bf-344bbb724249/1/6u-o-3F64LhsHl1nA1DSxzuefE4.mft
Manifest number: 11
Signing time: Tue 11 Nov 2025 07:00:57 +0000
Manifest this update: Tue 11 Nov 2025 07:00:57 +0000
Manifest next update: Wed 12 Nov 2025 07:00:57 +0000
Files and hashes: 1: 6u-o-3F64LhsHl1nA1DSxzuefE4.crl (hash: g7n0WDky0/Ze4TsyGBeLB9SxPVMyA7UlCndM14brAAM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/e76f15-6853-4dfb-b6bf-344bbb724249/1/6u-o-3F64LhsHl1nA1DSxzuefE4.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/e76f15-6853-4dfb-b6bf-344bbb724249/1/6u-o-3F64LhsHl1nA1DSxzuefE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/6u-o-3F64LhsHl1nA1DSxzuefE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:bb:b4:68:b5:eb:6a:16:87:fe:d5:f0:89:60:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaefa8fb717ae0b86c1e5d670350d2c73b9e7c4e
Validity
Not Before: Nov 11 07:00:57 2025 GMT
Not After : Nov 12 07:00:57 2025 GMT
Subject: CN=54f99fcf2636d5b862418a13b8264050d15b4921
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:29:36:d3:d3:7a:fb:0a:d3:f3:3e:a3:bf:41:
75:7e:ec:99:69:d8:e8:17:e3:e8:56:91:d9:73:20:
fd:db:35:a5:dd:c0:df:37:1a:55:64:3c:f5:68:ea:
8c:d4:97:78:56:5c:17:f1:75:18:c2:a1:42:40:ba:
83:ee:10:5d:09:6a:c1:3c:07:1e:d0:ce:ca:77:38:
8d:e9:04:d7:fd:4d:8d:c1:be:3b:6d:a9:a7:47:d1:
f4:b0:31:cf:a4:c8:74:de:50:1e:19:ac:32:59:3f:
3e:44:67:ae:94:bf:0d:e4:92:2a:dc:d4:0b:7c:64:
2d:28:58:67:c5:e6:a7:9c:ec:5f:f8:3f:94:93:d2:
51:35:db:6d:bc:36:a6:8d:e7:89:38:87:4a:88:5d:
f4:44:0e:ec:37:72:c4:b3:3c:57:82:8a:93:e5:2e:
bc:3d:22:3f:0a:df:39:13:cb:65:88:e1:c1:d8:38:
29:a6:66:27:ca:3d:13:15:7c:81:57:87:e5:75:4c:
97:54:01:c0:e5:ef:cf:d7:2b:20:5a:8d:67:dd:2c:
cd:45:7a:04:39:28:bd:83:7c:c2:6a:bf:92:13:8e:
9f:87:0f:82:e7:84:23:72:5b:51:84:65:f2:16:05:
ad:b5:1c:91:90:1d:5a:02:1d:0d:49:1c:8d:89:fb:
5f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:F9:9F:CF:26:36:D5:B8:62:41:8A:13:B8:26:40:50:D1:5B:49:21
X509v3 Authority Key Identifier:
keyid:EA:EF:A8:FB:71:7A:E0:B8:6C:1E:5D:67:03:50:D2:C7:3B:9E:7C:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6u-o-3F64LhsHl1nA1DSxzuefE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/e76f15-6853-4dfb-b6bf-344bbb724249/1/6u-o-3F64LhsHl1nA1DSxzuefE4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/e76f15-6853-4dfb-b6bf-344bbb724249/1/6u-o-3F64LhsHl1nA1DSxzuefE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:c3:dc:e4:c6:7e:4a:12:ed:1b:91:75:19:27:f5:1a:89:7d:
36:06:d6:34:71:66:01:b9:b1:38:d5:f7:68:87:0e:a4:5d:22:
34:3c:91:78:e4:df:d6:10:a7:c9:11:38:db:dc:bc:0a:1e:76:
88:fc:7c:d2:a8:a6:d8:5c:ca:ad:c1:cb:19:62:1e:7e:fe:0f:
0f:cd:1c:f7:ca:50:a3:29:64:04:30:ed:a9:d4:a1:03:8d:c5:
52:0f:30:f3:5e:c0:0a:99:2d:41:ff:c0:24:b1:7a:bc:12:27:
92:21:33:8f:65:e6:8d:b1:6d:82:67:7d:a2:5b:06:9b:91:f5:
00:5c:39:5a:fc:d0:e1:98:b9:5a:a7:18:90:ad:f5:ab:63:03:
16:ed:c8:fc:25:51:05:de:1d:b3:a1:6e:34:dd:31:58:01:d0:
62:cf:88:34:a4:39:e5:3c:78:2b:b7:13:60:5c:19:ed:1d:9f:
19:20:6d:b8:ab:6f:ef:ef:f6:cc:33:1a:c9:12:d3:11:9a:12:
02:8b:22:13:cd:3e:7c:cb:2e:9b:9d:fb:aa:7a:3c:8e:68:b2:
b6:3a:ea:f0:4a:67:ff:01:a4:59:4d:23:95:44:0d:d2:5a:58:
04:23:7b:91:79:e1:9d:3a:f3:d3:b3:05:8f:e7:5b:c4:5c:31:
fd:f6:7c:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxt7u0aLXrahaH/tXwiWANMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhZWZhOGZiNzE3YWUwYjg2YzFlNWQ2NzAzNTBkMmM3M2I5
ZTdjNGUwHhcNMjUxMTExMDcwMDU3WhcNMjUxMTEyMDcwMDU3WjAzMTEwLwYDVQQD
Eyg1NGY5OWZjZjI2MzZkNWI4NjI0MThhMTNiODI2NDA1MGQxNWI0OTIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCk209N6+wrT8z6jv0F1fuyZadjo
F+PoVpHZcyD92zWl3cDfNxpVZDz1aOqM1Jd4VlwX8XUYwqFCQLqD7hBdCWrBPAce
0M7KdziN6QTX/U2Nwb47bamnR9H0sDHPpMh03lAeGawyWT8+RGeulL8N5JIq3NQL
fGQtKFhnxeannOxf+D+Uk9JRNdttvDamjeeJOIdKiF30RA7sN3LEszxXgoqT5S68
PSI/Ct85E8tliOHB2DgppmYnyj0TFXyBV4fldUyXVAHA5e/P1ysgWo1n3SzNRXoE
OSi9g3zCar+SE46fhw+C54QjcltRhGXyFgWttRyRkB1aAh0NSRyNiftfIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFT5n88mNtW4YkGKE7gmQFDRW0khMB8GA1UdIwQY
MBaAFOrvqPtxeuC4bB5dZwNQ0sc7nnxOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnUtby0zRjY0TGhzSGwxbkExRFN4enVlZkU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni9lNzZmMTUtNjg1My00ZGZiLWI2YmYt
MzQ0YmJiNzI0MjQ5LzEvNnUtby0zRjY0TGhzSGwxbkExRFN4enVlZkU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni9lNzZmMTUtNjg1My00ZGZiLWI2YmYtMzQ0YmJiNzI0MjQ5
LzEvNnUtby0zRjY0TGhzSGwxbkExRFN4enVlZkU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdMPc5MZ+
ShLtG5F1GSf1Gol9NgbWNHFmAbmxONX3aIcOpF0iNDyReOTf1hCnyRE429y8Ch52
iPx80qim2FzKrcHLGWIefv4PD80c98pQoylkBDDtqdShA43FUg8w817ACpktQf/A
JLF6vBInkiEzj2XmjbFtgmd9olsGm5H1AFw5WvzQ4Zi5WqcYkK31q2MDFu3I/CVR
Bd4ds6FuNN0xWAHQYs+INKQ55Tx4K7cTYFwZ7R2fGSBtuKtv7+/2zDMayRLTEZoS
AosiE80+fMsum537qno8jmiytjrq8Epn/wGkWU0jlUQN0lpYBCN7kXnhnTrz07MF
j+dbxFwx/fZ8Ag==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:24:50 2025 by rpki-client