Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/f95298-f909-45c9-9104-8a4f63ea9bf1/1/6lPzPM38X-hLhMFfBDIpBpka-ec.mft
File: 6lPzPM38X-hLhMFfBDIpBpka-ec.mft (raw, json)
Hash identifier: tY+F+KEwt5ArqJP0W5v17JavC1f797dfXFi3lzyoYRY=
Subject key identifier: EA:F1:56:64:6B:7B:5E:56:2D:03:1B:E9:B2:DF:90:BF:3C:A5:17:8E
Authority key identifier: EA:53:F3:3C:CD:FC:5F:E8:4B:84:C1:5F:04:32:29:06:99:1A:F9:E7
Certificate issuer: /CN=ea53f33ccdfc5fe84b84c15f04322906991af9e7
Certificate serial: 019A266646E6BCCF04D86C630841F33D5486
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6lPzPM38X-hLhMFfBDIpBpka-ec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/f95298-f909-45c9-9104-8a4f63ea9bf1/1/6lPzPM38X-hLhMFfBDIpBpka-ec.mft
Manifest number: 16F7
Signing time: Mon 27 Oct 2025 16:00:28 +0000
Manifest this update: Mon 27 Oct 2025 16:00:28 +0000
Manifest next update: Tue 28 Oct 2025 16:00:28 +0000
Files and hashes: 1: 6lPzPM38X-hLhMFfBDIpBpka-ec.crl (hash: bWXqoGrjLx7FeuWcOmcgI1hTztP3Ule07Qde/cnpDqY=)
2: xNXvRwm0cFi8tLLdb2nvNopZe5s.roa (hash: Ek+ehf6lVos9XeTSOdvg4+GzfPP9fwac2An5Jv96Lm0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/f95298-f909-45c9-9104-8a4f63ea9bf1/1/6lPzPM38X-hLhMFfBDIpBpka-ec.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/f95298-f909-45c9-9104-8a4f63ea9bf1/1/6lPzPM38X-hLhMFfBDIpBpka-ec.mft
rsync://rpki.ripe.net/repository/DEFAULT/6lPzPM38X-hLhMFfBDIpBpka-ec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 16:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:26:66:46:e6:bc:cf:04:d8:6c:63:08:41:f3:3d:54:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea53f33ccdfc5fe84b84c15f04322906991af9e7
Validity
Not Before: Oct 27 16:00:28 2025 GMT
Not After : Oct 28 16:00:28 2025 GMT
Subject: CN=eaf156646b7b5e562d031be9b2df90bf3ca5178e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:03:81:9f:ce:7c:1a:85:11:88:b4:35:d0:03:
b5:90:95:c5:ec:df:fd:11:a7:fe:4c:0d:54:fa:7b:
f7:0c:7a:f5:df:e3:2f:32:22:d5:97:71:0d:49:df:
f0:04:2e:25:b4:c7:83:88:58:c8:56:2f:90:00:56:
ed:a4:c5:fb:ec:8a:2a:86:ab:aa:ba:aa:6c:70:f8:
73:79:36:f6:dc:fa:ea:c8:c7:11:d8:89:92:ba:7e:
31:6a:9d:6b:c7:50:2d:92:51:99:12:ba:2e:aa:d3:
13:58:17:90:66:ee:63:bc:17:4b:57:9a:9a:4a:a8:
8e:0a:84:30:03:27:89:08:d5:39:bf:2a:75:e9:62:
3b:54:d1:27:07:c4:1b:6a:ee:8e:67:1f:fa:9f:0b:
b7:f2:d5:6a:4f:40:a9:1a:6f:c2:4d:ae:bb:cc:a2:
57:90:e6:85:a7:d1:d3:84:ae:5b:22:7c:b5:0c:cc:
ba:1a:76:50:c8:6e:68:a9:c0:b4:7b:a6:64:b8:df:
6b:13:c7:61:27:da:52:78:68:65:e6:66:56:15:be:
53:cc:7c:cc:32:bb:28:12:44:40:30:01:63:16:2e:
0a:f7:8c:40:91:1a:1a:5a:24:d7:e2:b9:dd:05:cd:
ae:c4:29:45:42:9a:9e:01:ba:f6:98:82:f9:7a:31:
16:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:F1:56:64:6B:7B:5E:56:2D:03:1B:E9:B2:DF:90:BF:3C:A5:17:8E
X509v3 Authority Key Identifier:
keyid:EA:53:F3:3C:CD:FC:5F:E8:4B:84:C1:5F:04:32:29:06:99:1A:F9:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6lPzPM38X-hLhMFfBDIpBpka-ec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f95298-f909-45c9-9104-8a4f63ea9bf1/1/6lPzPM38X-hLhMFfBDIpBpka-ec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f95298-f909-45c9-9104-8a4f63ea9bf1/1/6lPzPM38X-hLhMFfBDIpBpka-ec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:0c:30:a1:df:2a:e5:e5:99:8e:83:4a:d7:86:2d:39:93:8f:
2b:40:a7:ed:7d:d5:e9:51:7c:2b:d1:2b:11:a3:d0:67:cf:1d:
fa:74:c8:ad:c4:bc:f2:75:ab:66:23:12:46:10:21:ff:b7:b9:
3d:01:f0:b4:2c:e0:74:66:ca:a3:7a:27:d3:28:cc:22:17:45:
cf:c1:44:1c:95:50:8d:11:21:56:71:24:db:b2:5f:e7:8c:36:
6b:c1:64:a6:66:4b:7f:35:db:2e:96:81:c3:ca:e4:81:62:7e:
d8:5d:de:69:2e:c5:6f:4b:58:bb:6e:d8:dc:56:df:1d:88:0b:
fe:7f:b1:e0:d7:c7:33:51:18:03:53:31:33:10:db:8d:e6:36:
b7:bb:e2:b6:0e:0c:6c:a5:1d:af:bc:00:7d:7c:3a:c8:63:10:
2d:f6:ef:ee:a5:12:af:5d:b8:8c:df:ca:ca:84:52:f0:b9:a2:
b7:92:e9:9a:fa:fc:11:e7:77:15:e2:c9:e3:54:8c:9f:17:71:
c4:04:45:6c:67:95:74:47:d9:f5:fe:d0:b3:43:49:1a:c1:46:
7d:76:07:dc:4c:9e:55:d9:2e:ad:8f:62:ad:15:c4:8d:6f:2b:
63:a3:38:5a:13:f3:02:14:f5:46:87:95:bf:b2:48:1a:bf:38:
db:8f:e9:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZomZkbmvM8E2GxjCEHzPVSGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhNTNmMzNjY2RmYzVmZTg0Yjg0YzE1ZjA0MzIyOTA2OTkx
YWY5ZTcwHhcNMjUxMDI3MTYwMDI4WhcNMjUxMDI4MTYwMDI4WjAzMTEwLwYDVQQD
EyhlYWYxNTY2NDZiN2I1ZTU2MmQwMzFiZTliMmRmOTBiZjNjYTUxNzhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5AOBn858GoURiLQ10AO1kJXF7N/9
Eaf+TA1U+nv3DHr13+MvMiLVl3ENSd/wBC4ltMeDiFjIVi+QAFbtpMX77Ioqhquq
uqpscPhzeTb23PrqyMcR2ImSun4xap1rx1AtklGZErouqtMTWBeQZu5jvBdLV5qa
SqiOCoQwAyeJCNU5vyp16WI7VNEnB8Qbau6OZx/6nwu38tVqT0CpGm/CTa67zKJX
kOaFp9HThK5bIny1DMy6GnZQyG5oqcC0e6ZkuN9rE8dhJ9pSeGhl5mZWFb5TzHzM
MrsoEkRAMAFjFi4K94xAkRoaWiTX4rndBc2uxClFQpqeAbr2mIL5ejEWGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOrxVmRre15WLQMb6bLfkL88pReOMB8GA1UdIwQY
MBaAFOpT8zzN/F/oS4TBXwQyKQaZGvnnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNmxQelBNMzhYLWhMaE1GZkJESXBCcGthLWVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9mOTUyOTgtZjkwOS00NWM5LTkxMDQt
OGE0ZjYzZWE5YmYxLzEvNmxQelBNMzhYLWhMaE1GZkJESXBCcGthLWVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9mOTUyOTgtZjkwOS00NWM5LTkxMDQtOGE0ZjYzZWE5YmYx
LzEvNmxQelBNMzhYLWhMaE1GZkJESXBCcGthLWVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWwwwod8q
5eWZjoNK14YtOZOPK0Cn7X3V6VF8K9ErEaPQZ88d+nTIrcS88nWrZiMSRhAh/7e5
PQHwtCzgdGbKo3on0yjMIhdFz8FEHJVQjREhVnEk27Jf54w2a8FkpmZLfzXbLpaB
w8rkgWJ+2F3eaS7Fb0tYu27Y3FbfHYgL/n+x4NfHM1EYA1MxMxDbjeY2t7vitg4M
bKUdr7wAfXw6yGMQLfbv7qUSr124jN/KyoRS8Lmit5Lpmvr8Eed3FeLJ41SMnxdx
xARFbGeVdEfZ9f7Qs0NJGsFGfXYH3EyeVdkurY9irRXEjW8rY6M4WhPzAhT1RoeV
v7JIGr8424/pQg==
-----END CERTIFICATE-----
Generated at Tue Oct 28 02:25:28 2025 by rpki-client