Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/1da070-509e-4297-a035-43fb70b4c13f/1/F6JcQ-cNH0HZiQ11U2GgyhdZB1Q.mft
File: F6JcQ-cNH0HZiQ11U2GgyhdZB1Q.mft (raw, json)
Hash identifier: mB1fz4Tebws/dmDPiBg9stptW2B/RGq8Ziu4MhqQbc4=
Subject key identifier: 06:18:0C:C8:B6:75:80:6D:01:FF:39:5F:81:BC:9A:6A:AB:68:BA:C2
Authority key identifier: 17:A2:5C:43:E7:0D:1F:41:D9:89:0D:75:53:61:A0:CA:17:59:07:54
Certificate issuer: /CN=17a25c43e70d1f41d9890d755361a0ca17590754
Certificate serial: 019A71EE6D5A7FEB116F1FCE837DD6A157AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F6JcQ-cNH0HZiQ11U2GgyhdZB1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/1da070-509e-4297-a035-43fb70b4c13f/1/F6JcQ-cNH0HZiQ11U2GgyhdZB1Q.mft
Manifest number: A8
Signing time: Tue 11 Nov 2025 08:00:42 +0000
Manifest this update: Tue 11 Nov 2025 08:00:42 +0000
Manifest next update: Wed 12 Nov 2025 08:00:42 +0000
Files and hashes: 1: F6JcQ-cNH0HZiQ11U2GgyhdZB1Q.crl (hash: CzEiXca741NSqHYfgPl7MBPmedDWAo6LaxTLTTgVvew=)
2: USUsZRSzJhQ4nbQlDk_Bak85cuY.roa (hash: xa3ZR5XAkS/+Z+9YWXUdvjxG49GLyLBv4EvvnE1arws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/1da070-509e-4297-a035-43fb70b4c13f/1/F6JcQ-cNH0HZiQ11U2GgyhdZB1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/1da070-509e-4297-a035-43fb70b4c13f/1/F6JcQ-cNH0HZiQ11U2GgyhdZB1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/F6JcQ-cNH0HZiQ11U2GgyhdZB1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:6d:5a:7f:eb:11:6f:1f:ce:83:7d:d6:a1:57:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17a25c43e70d1f41d9890d755361a0ca17590754
Validity
Not Before: Nov 11 08:00:42 2025 GMT
Not After : Nov 12 08:00:42 2025 GMT
Subject: CN=06180cc8b675806d01ff395f81bc9a6aab68bac2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:b2:b6:6e:6e:56:05:98:a5:15:71:ac:63:f3:
61:23:de:c4:5e:c5:f1:fa:12:d0:32:58:b1:6f:f7:
97:ca:2d:d4:3a:c4:50:54:75:d5:86:16:ec:b1:ee:
27:c6:a8:b3:cd:f0:06:37:79:98:80:30:9a:21:bc:
61:1d:e6:e2:0e:59:9e:93:f0:78:14:44:d7:eb:a1:
4a:d7:60:a1:f5:53:ba:b6:44:67:6f:b4:30:19:7a:
a5:44:12:15:14:97:f0:e6:ad:5b:8b:9f:fc:81:e8:
d3:60:f9:38:d5:ab:5e:83:7e:b2:0b:06:0c:8c:7e:
56:8b:9a:62:fa:41:59:fe:bc:4f:aa:70:7a:1e:fa:
6e:55:eb:f3:68:1b:3d:1e:7b:13:57:38:79:ce:87:
3c:46:c9:ca:c5:06:dd:3e:e4:d9:e4:0c:37:d1:a1:
71:9c:bf:ff:2b:29:fe:c5:45:e3:6e:a4:62:80:20:
8f:28:44:65:54:3d:c0:34:9d:c9:f4:32:5b:39:88:
39:a0:01:09:52:b4:3d:c8:a3:16:e9:4e:0a:81:de:
6b:61:a6:d8:0e:15:7c:38:43:ce:eb:03:c6:23:f6:
15:d3:62:be:26:a2:56:c6:f1:b4:70:75:76:ea:06:
a9:3c:69:3b:32:ad:cb:71:f3:ae:f3:be:30:8d:fa:
fa:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:18:0C:C8:B6:75:80:6D:01:FF:39:5F:81:BC:9A:6A:AB:68:BA:C2
X509v3 Authority Key Identifier:
keyid:17:A2:5C:43:E7:0D:1F:41:D9:89:0D:75:53:61:A0:CA:17:59:07:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F6JcQ-cNH0HZiQ11U2GgyhdZB1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1da070-509e-4297-a035-43fb70b4c13f/1/F6JcQ-cNH0HZiQ11U2GgyhdZB1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1da070-509e-4297-a035-43fb70b4c13f/1/F6JcQ-cNH0HZiQ11U2GgyhdZB1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dc:b7:38:24:84:07:89:c3:09:3b:7b:a8:c1:20:aa:af:f2:4b:
91:5b:f2:de:52:aa:90:54:e5:3f:b3:3b:20:74:a9:65:61:35:
14:be:c9:a9:40:a6:ff:67:51:c1:00:32:71:fb:49:90:3c:db:
f3:e4:3c:05:6b:95:f6:b0:d9:53:f6:d7:a8:56:20:76:89:7c:
75:24:f5:42:09:80:fd:31:b5:5d:d4:07:4f:af:72:2c:cd:41:
3f:4d:97:61:e5:f6:4c:4e:d1:e4:a6:18:da:2e:99:56:55:f0:
3f:62:cc:b8:69:4c:8d:48:63:4d:45:cc:47:46:78:a5:d8:dc:
bd:c3:14:a4:6a:38:18:7b:b4:24:5b:8b:22:f5:b6:b8:72:f8:
56:4c:f0:fc:4b:c1:39:c1:89:3c:ba:7c:a6:ff:db:8b:f5:4b:
52:05:1e:51:7d:bc:48:2c:1f:7e:52:0c:c1:fa:b9:92:62:24:
92:4a:6e:be:65:73:82:52:5f:1a:dd:c8:32:1e:4b:cb:c9:fd:
a2:21:45:53:5f:60:8d:de:e8:6b:c9:3e:c3:cb:14:19:bc:0f:
3e:6f:6b:b0:d9:f4:db:4e:27:4a:6c:90:33:95:3b:0d:81:5f:
cc:16:67:cf:64:8a:2d:e0:02:d7:97:49:3f:72:c1:46:7a:58:
fb:5b:f2:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpx7m1af+sRbx/Og33WoVetMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3YTI1YzQzZTcwZDFmNDFkOTg5MGQ3NTUzNjFhMGNhMTc1
OTA3NTQwHhcNMjUxMTExMDgwMDQyWhcNMjUxMTEyMDgwMDQyWjAzMTEwLwYDVQQD
EygwNjE4MGNjOGI2NzU4MDZkMDFmZjM5NWY4MWJjOWE2YWFiNjhiYWMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAirK2bm5WBZilFXGsY/NhI97EXsXx
+hLQMlixb/eXyi3UOsRQVHXVhhbsse4nxqizzfAGN3mYgDCaIbxhHebiDlmek/B4
FETX66FK12Ch9VO6tkRnb7QwGXqlRBIVFJfw5q1bi5/8gejTYPk41ateg36yCwYM
jH5Wi5pi+kFZ/rxPqnB6HvpuVevzaBs9HnsTVzh5zoc8RsnKxQbdPuTZ5Aw30aFx
nL//Kyn+xUXjbqRigCCPKERlVD3ANJ3J9DJbOYg5oAEJUrQ9yKMW6U4Kgd5rYabY
DhV8OEPO6wPGI/YV02K+JqJWxvG0cHV26gapPGk7Mq3LcfOu874wjfr6MwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAYYDMi2dYBtAf85X4G8mmqraLrCMB8GA1UdIwQY
MBaAFBeiXEPnDR9B2YkNdVNhoMoXWQdUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjZKY1EtY05IMEhaaVExMVUyR2d5aGRaQjFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS8xZGEwNzAtNTA5ZS00Mjk3LWEwMzUt
NDNmYjcwYjRjMTNmLzEvRjZKY1EtY05IMEhaaVExMVUyR2d5aGRaQjFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS8xZGEwNzAtNTA5ZS00Mjk3LWEwMzUtNDNmYjcwYjRjMTNm
LzEvRjZKY1EtY05IMEhaaVExMVUyR2d5aGRaQjFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3Lc4JIQH
icMJO3uowSCqr/JLkVvy3lKqkFTlP7M7IHSpZWE1FL7JqUCm/2dRwQAycftJkDzb
8+Q8BWuV9rDZU/bXqFYgdol8dST1QgmA/TG1XdQHT69yLM1BP02XYeX2TE7R5KYY
2i6ZVlXwP2LMuGlMjUhjTUXMR0Z4pdjcvcMUpGo4GHu0JFuLIvW2uHL4Vkzw/EvB
OcGJPLp8pv/bi/VLUgUeUX28SCwfflIMwfq5kmIkkkpuvmVzglJfGt3IMh5Ly8n9
oiFFU19gjd7oa8k+w8sUGbwPPm9rsNn0204nSmyQM5U7DYFfzBZnz2SKLeAC15dJ
P3LBRnpY+1vyPQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:24:47 2025 by rpki-client