Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/bdc45b-096a-493a-92d2-1a1ead2cd2b1/1/6cPULzspIbp0GPOCAy1rNccVm4g.mft
File: 6cPULzspIbp0GPOCAy1rNccVm4g.mft (raw, json)
Hash identifier: VYKE/gDrRNXxCqFx9lCUdybAPJHiK+lk5wJ1ZKRw/58=
Subject key identifier: 47:4A:C1:CB:B7:E7:01:BA:8E:B6:4A:B3:F0:7A:E9:10:F2:16:C5:ED
Authority key identifier: E9:C3:D4:2F:3B:29:21:BA:74:18:F3:82:03:2D:6B:35:C7:15:9B:88
Certificate issuer: /CN=e9c3d42f3b2921ba7418f382032d6b35c7159b88
Certificate serial: 019A72CA41F7111FB72F39F8B9D737CB0D7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6cPULzspIbp0GPOCAy1rNccVm4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/bdc45b-096a-493a-92d2-1a1ead2cd2b1/1/6cPULzspIbp0GPOCAy1rNccVm4g.mft
Manifest number: 0D91
Signing time: Tue 11 Nov 2025 12:00:48 +0000
Manifest this update: Tue 11 Nov 2025 12:00:48 +0000
Manifest next update: Wed 12 Nov 2025 12:00:48 +0000
Files and hashes: 1: 6cPULzspIbp0GPOCAy1rNccVm4g.crl (hash: 6nwT2PUPNq4BB8PWCOOEYSgvrAZEEqg5OAadyKPU5GA=)
2: YNj6jBY1WWdwBM-l9h2oiKXTYmA.roa (hash: koHDOBOLhPLlqLo5UxyVmvsrhs2UPLUKAfoxF2eIjW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/bdc45b-096a-493a-92d2-1a1ead2cd2b1/1/6cPULzspIbp0GPOCAy1rNccVm4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/bdc45b-096a-493a-92d2-1a1ead2cd2b1/1/6cPULzspIbp0GPOCAy1rNccVm4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/6cPULzspIbp0GPOCAy1rNccVm4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:41:f7:11:1f:b7:2f:39:f8:b9:d7:37:cb:0d:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9c3d42f3b2921ba7418f382032d6b35c7159b88
Validity
Not Before: Nov 11 12:00:48 2025 GMT
Not After : Nov 12 12:00:48 2025 GMT
Subject: CN=474ac1cbb7e701ba8eb64ab3f07ae910f216c5ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ae:ed:ca:a0:ae:80:bb:61:be:d4:03:34:0a:
c0:ce:03:e8:68:f2:32:e4:d4:86:cb:d0:f0:1f:38:
71:81:14:43:a9:fb:5c:06:fd:57:6a:be:93:46:2a:
94:01:b3:ad:d2:e8:b0:74:71:5a:6a:e9:5b:6c:9e:
60:13:1c:85:20:69:2e:d5:e2:d8:3d:1d:3c:03:25:
76:98:02:c2:4a:32:19:99:05:0f:b7:3e:3a:61:eb:
d9:45:4d:88:a0:1f:23:b1:dc:2a:96:aa:82:80:af:
53:2c:ee:e7:48:ce:0f:ab:76:02:b9:d7:c1:4f:ae:
f6:ef:29:86:2c:82:8f:96:c7:db:07:48:cb:c2:cc:
41:93:b7:88:be:be:43:f1:75:63:45:99:72:d0:0b:
30:8c:f1:a8:94:54:5b:1c:81:82:81:27:97:06:5f:
fc:d4:c5:43:60:23:c9:72:cb:fb:fa:d2:a5:10:01:
16:97:cb:b0:d4:7a:18:4c:1e:1d:4c:c5:9a:91:71:
0f:fe:d3:79:3f:65:81:ea:a0:c2:55:ab:34:be:c6:
96:fc:19:3e:da:51:00:63:10:b3:dc:3e:3b:6a:7b:
a5:69:ee:e6:20:06:c2:a4:57:87:90:c5:01:1a:92:
b7:ee:48:73:50:bc:22:cd:c6:2c:d9:89:db:62:90:
0a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:4A:C1:CB:B7:E7:01:BA:8E:B6:4A:B3:F0:7A:E9:10:F2:16:C5:ED
X509v3 Authority Key Identifier:
keyid:E9:C3:D4:2F:3B:29:21:BA:74:18:F3:82:03:2D:6B:35:C7:15:9B:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6cPULzspIbp0GPOCAy1rNccVm4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/bdc45b-096a-493a-92d2-1a1ead2cd2b1/1/6cPULzspIbp0GPOCAy1rNccVm4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/bdc45b-096a-493a-92d2-1a1ead2cd2b1/1/6cPULzspIbp0GPOCAy1rNccVm4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:78:8a:9c:ee:80:07:84:54:00:ef:e4:71:36:5e:45:14:ec:
15:61:7e:93:72:67:18:aa:69:ea:f2:f0:0c:4a:b6:6f:f5:7c:
68:72:7a:50:28:1e:b7:36:1d:d2:a6:2f:db:e4:d3:2d:5b:47:
83:b5:a3:f4:78:17:19:d0:f1:7d:72:4b:4c:bd:e7:8f:e7:00:
51:81:81:29:ea:44:40:7c:64:84:c0:4a:7b:59:0e:b1:3d:77:
46:df:84:1e:ba:63:77:1d:c4:49:82:14:33:5c:92:20:17:cb:
f3:eb:ef:27:74:bc:bb:33:0d:a3:9f:6b:2f:f3:6b:54:77:2e:
fe:f9:46:aa:0a:b6:35:b4:32:fa:97:a5:83:4f:42:99:e1:41:
66:00:66:63:99:8e:68:05:ad:c3:f0:37:12:d2:39:a6:19:77:
42:9f:fe:a4:5d:59:c7:ab:e2:28:b1:3b:1a:d3:40:68:e7:21:
ca:f7:c1:d8:c0:db:c6:a2:09:0c:6e:e3:e5:33:0b:32:b2:91:
2f:a5:28:29:10:ba:61:35:b1:22:cc:94:b4:7f:4b:13:9d:4b:
6a:15:03:75:6a:d3:fc:44:aa:67:92:23:88:46:90:53:94:d3:
61:d1:80:79:a2:b7:66:71:6c:b7:8c:40:da:43:a0:d1:0b:d1:
7d:e5:8b:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyykH3ER+3Lzn4udc3yw18MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5YzNkNDJmM2IyOTIxYmE3NDE4ZjM4MjAzMmQ2YjM1Yzcx
NTliODgwHhcNMjUxMTExMTIwMDQ4WhcNMjUxMTEyMTIwMDQ4WjAzMTEwLwYDVQQD
Eyg0NzRhYzFjYmI3ZTcwMWJhOGViNjRhYjNmMDdhZTkxMGYyMTZjNWVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAta7tyqCugLthvtQDNArAzgPoaPIy
5NSGy9DwHzhxgRRDqftcBv1Xar6TRiqUAbOt0uiwdHFaaulbbJ5gExyFIGku1eLY
PR08AyV2mALCSjIZmQUPtz46YevZRU2IoB8jsdwqlqqCgK9TLO7nSM4Pq3YCudfB
T6727ymGLIKPlsfbB0jLwsxBk7eIvr5D8XVjRZly0AswjPGolFRbHIGCgSeXBl/8
1MVDYCPJcsv7+tKlEAEWl8uw1HoYTB4dTMWakXEP/tN5P2WB6qDCVas0vsaW/Bk+
2lEAYxCz3D47anulae7mIAbCpFeHkMUBGpK37khzULwizcYs2YnbYpAKXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEdKwcu35wG6jrZKs/B66RDyFsXtMB8GA1UdIwQY
MBaAFOnD1C87KSG6dBjzggMtazXHFZuIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNmNQVUx6c3BJYnAwR1BPQ0F5MXJOY2NWbTRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9iZGM0NWItMDk2YS00OTNhLTkyZDIt
MWExZWFkMmNkMmIxLzEvNmNQVUx6c3BJYnAwR1BPQ0F5MXJOY2NWbTRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi9iZGM0NWItMDk2YS00OTNhLTkyZDItMWExZWFkMmNkMmIx
LzEvNmNQVUx6c3BJYnAwR1BPQ0F5MXJOY2NWbTRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHHiKnO6A
B4RUAO/kcTZeRRTsFWF+k3JnGKpp6vLwDEq2b/V8aHJ6UCgetzYd0qYv2+TTLVtH
g7Wj9HgXGdDxfXJLTL3nj+cAUYGBKepEQHxkhMBKe1kOsT13Rt+EHrpjdx3ESYIU
M1ySIBfL8+vvJ3S8uzMNo59rL/NrVHcu/vlGqgq2NbQy+pelg09CmeFBZgBmY5mO
aAWtw/A3EtI5phl3Qp/+pF1Zx6viKLE7GtNAaOchyvfB2MDbxqIJDG7j5TMLMrKR
L6UoKRC6YTWxIsyUtH9LE51LahUDdWrT/ESqZ5IjiEaQU5TTYdGAeaK3ZnFst4xA
2kOg0QvRfeWLcQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 18:38:14 2025 by rpki-client