Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/35a1c8-e186-4ea8-b783-421d498b2092/1/6B8A4bRaGW0p_COM5zm6kUD2GUY.mft
File: 6B8A4bRaGW0p_COM5zm6kUD2GUY.mft (raw, json)
Hash identifier: buQ4HuGOTpW3PKbqG1E7K6I2O2h6ijymtqT8tjw44uU=
Subject key identifier: 8B:76:D7:E2:0B:3B:F5:71:DC:43:F0:00:9A:68:C5:FF:5E:AA:84:0F
Authority key identifier: E8:1F:00:E1:B4:5A:19:6D:29:FC:23:8C:E7:39:BA:91:40:F6:19:46
Certificate issuer: /CN=e81f00e1b45a196d29fc238ce739ba9140f61946
Certificate serial: 019A71B83790BFB945660CE58C2FD4FEB281
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6B8A4bRaGW0p_COM5zm6kUD2GUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/35a1c8-e186-4ea8-b783-421d498b2092/1/6B8A4bRaGW0p_COM5zm6kUD2GUY.mft
Manifest number: 02CB
Signing time: Tue 11 Nov 2025 07:01:29 +0000
Manifest this update: Tue 11 Nov 2025 07:01:29 +0000
Manifest next update: Wed 12 Nov 2025 07:01:29 +0000
Files and hashes: 1: 6B8A4bRaGW0p_COM5zm6kUD2GUY.crl (hash: 5w5ub/padlQ7PLQg2vx5CSNtxKXvY+48UodnZxtQx1k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/35a1c8-e186-4ea8-b783-421d498b2092/1/6B8A4bRaGW0p_COM5zm6kUD2GUY.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/35a1c8-e186-4ea8-b783-421d498b2092/1/6B8A4bRaGW0p_COM5zm6kUD2GUY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6B8A4bRaGW0p_COM5zm6kUD2GUY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:37:90:bf:b9:45:66:0c:e5:8c:2f:d4:fe:b2:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e81f00e1b45a196d29fc238ce739ba9140f61946
Validity
Not Before: Nov 11 07:01:29 2025 GMT
Not After : Nov 12 07:01:29 2025 GMT
Subject: CN=8b76d7e20b3bf571dc43f0009a68c5ff5eaa840f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:18:e5:e3:f5:45:46:2a:f9:94:bf:51:e8:42:
15:50:4c:bf:f8:d6:08:ce:cb:75:02:d9:10:1a:44:
06:95:0f:28:6c:63:b0:ad:2e:5c:7f:5a:be:c6:82:
94:35:8f:57:23:3d:e8:9a:45:00:82:9a:91:00:05:
7c:cd:1b:e5:ee:f9:7e:4d:b2:c1:dd:a8:1a:6d:95:
01:f6:ad:3e:bc:ca:50:13:9a:99:85:c8:9e:f5:20:
a5:97:91:1c:4f:47:c5:26:a4:5d:3e:f9:76:f2:6d:
ab:39:cd:c5:f7:e0:4a:fd:ce:2c:fa:bb:4c:da:ec:
d7:21:93:a4:6b:2f:f5:3d:93:6e:da:f1:8e:32:96:
3f:04:20:43:00:a9:5f:bc:80:c7:17:53:a0:b7:95:
c1:ab:1e:2a:4c:4b:1d:20:8c:b2:d5:3e:55:b5:12:
3a:b3:0e:ba:a2:4e:d8:53:fc:31:f9:c6:d5:ca:69:
9d:b9:24:77:82:ae:72:09:d3:3f:1e:fc:d0:50:9b:
0e:dd:bf:0f:e4:d9:a1:8a:d4:af:04:15:de:d8:87:
36:c4:6e:b3:95:ef:c6:fd:a5:ff:71:a6:fe:85:f3:
01:1e:b1:eb:8c:33:5c:e5:d2:3a:1f:ab:fb:3d:af:
cb:3b:a4:6c:2c:59:fc:a0:d8:6d:7c:30:09:58:d2:
07:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:76:D7:E2:0B:3B:F5:71:DC:43:F0:00:9A:68:C5:FF:5E:AA:84:0F
X509v3 Authority Key Identifier:
keyid:E8:1F:00:E1:B4:5A:19:6D:29:FC:23:8C:E7:39:BA:91:40:F6:19:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6B8A4bRaGW0p_COM5zm6kUD2GUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/35a1c8-e186-4ea8-b783-421d498b2092/1/6B8A4bRaGW0p_COM5zm6kUD2GUY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/35a1c8-e186-4ea8-b783-421d498b2092/1/6B8A4bRaGW0p_COM5zm6kUD2GUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:be:a0:83:78:3e:67:d0:1b:0d:22:c1:34:a2:0b:9b:9d:3c:
2e:28:b3:27:63:3c:95:c0:cd:b4:40:a5:4d:cb:77:ff:48:93:
88:29:83:a8:d2:b5:0f:ad:a6:d5:75:7b:e0:fd:fd:21:0f:ec:
58:ec:6d:35:30:0e:a3:08:d5:9c:cf:c8:09:79:03:c6:06:29:
76:29:50:dd:0c:56:4f:61:f3:bc:0a:7b:fa:c7:9e:7e:b3:5e:
6a:ad:06:fb:f2:5a:30:4f:7e:fd:53:f6:da:46:d4:86:b8:fc:
9c:e3:2d:6e:29:8c:af:4a:a7:12:dc:25:52:bd:d2:ad:b7:75:
56:09:ff:31:ed:06:ba:eb:ad:fc:cc:3b:06:6b:0f:5e:98:dc:
53:68:b2:b9:b9:4d:89:c5:49:2b:9b:f7:17:49:4f:f7:88:8c:
ec:d6:0b:2b:0c:dc:c9:7a:22:02:da:50:a2:11:d0:2f:0b:90:
76:f1:1b:c7:36:9d:b9:23:b2:b4:ab:30:96:b5:c9:5e:f5:bc:
c6:67:15:fc:4f:79:c2:e1:d6:78:ec:fd:33:1f:8e:1d:3c:80:
f0:1c:ab:0b:0f:6b:0a:0e:d0:5d:7a:b9:04:e3:eb:6d:83:c4:
ff:96:a0:88:d8:70:10:5f:a5:d8:95:b4:d4:d2:56:ca:04:4d:
d1:9a:eb:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuDeQv7lFZgzljC/U/rKBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4MWYwMGUxYjQ1YTE5NmQyOWZjMjM4Y2U3MzliYTkxNDBm
NjE5NDYwHhcNMjUxMTExMDcwMTI5WhcNMjUxMTEyMDcwMTI5WjAzMTEwLwYDVQQD
Eyg4Yjc2ZDdlMjBiM2JmNTcxZGM0M2YwMDA5YTY4YzVmZjVlYWE4NDBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Rjl4/VFRir5lL9R6EIVUEy/+NYI
zst1AtkQGkQGlQ8obGOwrS5cf1q+xoKUNY9XIz3omkUAgpqRAAV8zRvl7vl+TbLB
3agabZUB9q0+vMpQE5qZhcie9SCll5EcT0fFJqRdPvl28m2rOc3F9+BK/c4s+rtM
2uzXIZOkay/1PZNu2vGOMpY/BCBDAKlfvIDHF1Ogt5XBqx4qTEsdIIyy1T5VtRI6
sw66ok7YU/wx+cbVymmduSR3gq5yCdM/HvzQUJsO3b8P5NmhitSvBBXe2Ic2xG6z
le/G/aX/cab+hfMBHrHrjDNc5dI6H6v7Pa/LO6RsLFn8oNhtfDAJWNIHIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIt21+ILO/Vx3EPwAJpoxf9eqoQPMB8GA1UdIwQY
MBaAFOgfAOG0WhltKfwjjOc5upFA9hlGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkI4QTRiUmFHVzBwX0NPTTV6bTZrVUQyR1VZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My8zNWExYzgtZTE4Ni00ZWE4LWI3ODMt
NDIxZDQ5OGIyMDkyLzEvNkI4QTRiUmFHVzBwX0NPTTV6bTZrVUQyR1VZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My8zNWExYzgtZTE4Ni00ZWE4LWI3ODMtNDIxZDQ5OGIyMDky
LzEvNkI4QTRiUmFHVzBwX0NPTTV6bTZrVUQyR1VZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiL6gg3g+
Z9AbDSLBNKILm508LiizJ2M8lcDNtEClTct3/0iTiCmDqNK1D62m1XV74P39IQ/s
WOxtNTAOowjVnM/ICXkDxgYpdilQ3QxWT2HzvAp7+seefrNeaq0G+/JaME9+/VP2
2kbUhrj8nOMtbimMr0qnEtwlUr3Srbd1Vgn/Me0Guuut/Mw7BmsPXpjcU2iyublN
icVJK5v3F0lP94iM7NYLKwzcyXoiAtpQohHQLwuQdvEbxzaduSOytKswlrXJXvW8
xmcV/E95wuHWeOz9Mx+OHTyA8ByrCw9rCg7QXXq5BOPrbYPE/5agiNhwEF+l2JW0
1NJWygRN0Zrrkw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 13:16:11 2025 by rpki-client