Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/8e7e1d-158f-4c6e-aba3-39f13e76afa3/1/6ixOp53bewA94B8dBfbb9xaxEzY.mft
File: 6ixOp53bewA94B8dBfbb9xaxEzY.mft (raw, json)
Hash identifier: tkt1sX5nPlVdQg9UxhXuPF2qx5u2YgK6sJhqGtzE3wE=
Subject key identifier: AC:E6:EA:D3:2F:93:61:31:60:B6:42:C8:68:C4:65:14:D8:95:11:D2
Authority key identifier: EA:2C:4E:A7:9D:DB:7B:00:3D:E0:1F:1D:05:F6:DB:F7:16:B1:13:36
Certificate issuer: /CN=ea2c4ea79ddb7b003de01f1d05f6dbf716b11336
Certificate serial: 019A71B79559D93E9998164C7D03960936AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6ixOp53bewA94B8dBfbb9xaxEzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/8e7e1d-158f-4c6e-aba3-39f13e76afa3/1/6ixOp53bewA94B8dBfbb9xaxEzY.mft
Manifest number: 16B1
Signing time: Tue 11 Nov 2025 07:00:47 +0000
Manifest this update: Tue 11 Nov 2025 07:00:47 +0000
Manifest next update: Wed 12 Nov 2025 07:00:47 +0000
Files and hashes: 1: 6ixOp53bewA94B8dBfbb9xaxEzY.crl (hash: mFNslA13fGvAZccgLzQsxEKEZsgvuRVdXuDpIR3c9nM=)
2: UBg5H2PYYwmFwtuuB5TxJD258zc.roa (hash: mETMUQGm3Ge4vPrABQSGfrYWzYlfLqVqloDe3yUr+lM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/8e7e1d-158f-4c6e-aba3-39f13e76afa3/1/6ixOp53bewA94B8dBfbb9xaxEzY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/8e7e1d-158f-4c6e-aba3-39f13e76afa3/1/6ixOp53bewA94B8dBfbb9xaxEzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6ixOp53bewA94B8dBfbb9xaxEzY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:95:59:d9:3e:99:98:16:4c:7d:03:96:09:36:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea2c4ea79ddb7b003de01f1d05f6dbf716b11336
Validity
Not Before: Nov 11 07:00:47 2025 GMT
Not After : Nov 12 07:00:47 2025 GMT
Subject: CN=ace6ead32f93613160b642c868c46514d89511d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c2:a7:dd:a4:1b:98:4b:4f:96:27:6c:80:45:
a7:7b:0d:71:76:34:15:60:24:3e:28:a3:14:e7:ea:
88:70:0d:55:0b:0a:7a:fe:02:3a:9b:00:44:f8:c9:
bd:68:36:2b:ab:b1:aa:b9:50:c0:9c:14:17:02:c3:
a6:dd:69:21:d7:96:ea:dd:ef:83:78:7d:c5:cc:c3:
f5:74:31:d5:a6:53:d5:51:2d:11:a4:1e:79:73:0a:
42:51:33:42:37:a5:bc:11:c5:f2:d3:67:ca:db:87:
9d:7f:2c:d9:79:ff:67:b1:1e:4f:6d:a3:a6:51:e8:
68:26:48:0b:05:40:c2:67:da:96:e5:a4:0f:32:eb:
3b:2a:bd:8f:9a:2f:70:ab:76:e1:51:3f:0f:33:34:
45:6c:ef:9e:15:19:b9:bc:68:54:ea:24:1f:db:4d:
79:3c:ae:f9:3c:a5:22:5e:f3:9f:51:fa:ad:3e:b3:
c4:ac:f7:5b:cf:2d:f6:4c:b3:f0:2e:b9:47:04:38:
60:1d:10:42:5a:62:94:ed:2f:5e:c3:ee:ff:a9:56:
21:e2:4d:66:02:c7:6e:04:cd:c0:ee:e5:05:5d:b6:
3e:6d:19:14:12:a6:07:cd:b9:fa:c9:03:66:64:d3:
02:72:fa:06:33:b3:1d:0c:cd:e7:38:1f:90:1e:59:
51:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:E6:EA:D3:2F:93:61:31:60:B6:42:C8:68:C4:65:14:D8:95:11:D2
X509v3 Authority Key Identifier:
keyid:EA:2C:4E:A7:9D:DB:7B:00:3D:E0:1F:1D:05:F6:DB:F7:16:B1:13:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ixOp53bewA94B8dBfbb9xaxEzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/8e7e1d-158f-4c6e-aba3-39f13e76afa3/1/6ixOp53bewA94B8dBfbb9xaxEzY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/8e7e1d-158f-4c6e-aba3-39f13e76afa3/1/6ixOp53bewA94B8dBfbb9xaxEzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:66:7e:00:df:6c:d2:8e:7f:8e:fe:18:43:c1:8d:9b:67:f4:
b7:f0:e4:f9:2c:f0:f7:62:83:6c:4d:a2:d6:f6:db:24:b3:26:
10:e4:5d:9c:e9:6b:83:71:be:1e:f7:91:e9:59:e5:9b:eb:84:
f1:d3:9f:46:da:73:21:c0:4f:c7:38:1f:d7:91:78:1e:0a:84:
c3:f7:09:ff:06:0e:45:d7:bf:93:db:ef:ae:8c:68:c7:e1:38:
0c:e0:95:e3:d5:a4:d8:3f:a5:2d:96:90:e6:3a:1d:69:79:38:
d1:c0:5b:76:4c:fe:98:bb:e2:1e:bb:43:5e:c9:ce:f9:a3:73:
17:af:f9:b9:6e:40:0e:81:03:f7:9d:8d:63:92:be:7b:0b:bf:
3e:e5:00:06:57:c2:7b:b9:e9:9d:4c:72:27:98:c7:b8:d7:3c:
19:2a:a3:6f:83:f8:12:c3:4c:8f:3f:af:47:27:4b:d7:3f:30:
bf:48:5a:f4:53:e6:42:1b:e6:09:9c:6f:e5:f3:72:d5:79:d4:
7b:29:b6:05:26:2a:a0:0b:68:03:0a:1b:3f:8e:a7:80:6a:5f:
d9:4c:b7:00:85:16:39:eb:db:2a:68:b1:ee:c4:e8:cc:06:cf:
82:d9:52:77:b1:eb:c2:41:50:fe:2a:ac:10:d9:bb:59:d4:07:
fb:42:02:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxt5VZ2T6ZmBZMfQOWCTarMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhMmM0ZWE3OWRkYjdiMDAzZGUwMWYxZDA1ZjZkYmY3MTZi
MTEzMzYwHhcNMjUxMTExMDcwMDQ3WhcNMjUxMTEyMDcwMDQ3WjAzMTEwLwYDVQQD
EyhhY2U2ZWFkMzJmOTM2MTMxNjBiNjQyYzg2OGM0NjUxNGQ4OTUxMWQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyMKn3aQbmEtPlidsgEWnew1xdjQV
YCQ+KKMU5+qIcA1VCwp6/gI6mwBE+Mm9aDYrq7GquVDAnBQXAsOm3Wkh15bq3e+D
eH3FzMP1dDHVplPVUS0RpB55cwpCUTNCN6W8EcXy02fK24edfyzZef9nsR5PbaOm
UehoJkgLBUDCZ9qW5aQPMus7Kr2Pmi9wq3bhUT8PMzRFbO+eFRm5vGhU6iQf2015
PK75PKUiXvOfUfqtPrPErPdbzy32TLPwLrlHBDhgHRBCWmKU7S9ew+7/qVYh4k1m
AsduBM3A7uUFXbY+bRkUEqYHzbn6yQNmZNMCcvoGM7MdDM3nOB+QHllR5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKzm6tMvk2ExYLZCyGjEZRTYlRHSMB8GA1UdIwQY
MBaAFOosTqed23sAPeAfHQX22/cWsRM2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNml4T3A1M2Jld0E5NEI4ZEJmYmI5eGF4RXpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC84ZTdlMWQtMTU4Zi00YzZlLWFiYTMt
MzlmMTNlNzZhZmEzLzEvNml4T3A1M2Jld0E5NEI4ZEJmYmI5eGF4RXpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC84ZTdlMWQtMTU4Zi00YzZlLWFiYTMtMzlmMTNlNzZhZmEz
LzEvNml4T3A1M2Jld0E5NEI4ZEJmYmI5eGF4RXpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsmZ+AN9s
0o5/jv4YQ8GNm2f0t/Dk+Szw92KDbE2i1vbbJLMmEORdnOlrg3G+HveR6Vnlm+uE
8dOfRtpzIcBPxzgf15F4HgqEw/cJ/wYORde/k9vvroxox+E4DOCV49Wk2D+lLZaQ
5jodaXk40cBbdkz+mLviHrtDXsnO+aNzF6/5uW5ADoED952NY5K+ewu/PuUABlfC
e7npnUxyJ5jHuNc8GSqjb4P4EsNMjz+vRydL1z8wv0ha9FPmQhvmCZxv5fNy1XnU
eym2BSYqoAtoAwobP46ngGpf2Uy3AIUWOevbKmix7sTozAbPgtlSd7HrwkFQ/iqs
ENm7WdQH+0ICnw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:16 2025 by rpki-client