Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/c4bfd4-a0a1-4334-860a-4fa537dbe2e9/1/6KMuimrG9uw3hg7nwH6435MUd3k.mft
File: 6KMuimrG9uw3hg7nwH6435MUd3k.mft (raw, json)
Hash identifier: p3TRbGfa5EGjG2r0U59gNIOoOwKeaWsetkEVz3ilD+I=
Subject key identifier: A2:23:B4:4C:41:E0:A1:61:EF:33:7C:73:C9:8E:5C:F8:2A:2D:6E:C9
Authority key identifier: E8:A3:2E:8A:6A:C6:F6:EC:37:86:0E:E7:C0:7E:B8:DF:93:14:77:79
Certificate issuer: /CN=e8a32e8a6ac6f6ec37860ee7c07eb8df93147779
Certificate serial: 01992B8FDC65BDC7639D1687F94142FD8799
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6KMuimrG9uw3hg7nwH6435MUd3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/c4bfd4-a0a1-4334-860a-4fa537dbe2e9/1/6KMuimrG9uw3hg7nwH6435MUd3k.mft
Manifest number: 1677
Signing time: Mon 08 Sep 2025 23:01:12 +0000
Manifest this update: Mon 08 Sep 2025 23:01:12 +0000
Manifest next update: Tue 09 Sep 2025 23:01:12 +0000
Files and hashes: 1: 6KMuimrG9uw3hg7nwH6435MUd3k.crl (hash: QW1evV0GBD4knPfSZdsIVyWOunxLDM2tagiUEQyfNYk=)
2: IW2vrK3HcpopB_Br4A5_Kcu1YHA.roa (hash: jn7q3prF672ojCYbhHkipYPT+tMJuwcHdRX7fdgmul8=)
3: KQJWQNZZhN5fJ7Q5oCVgh_VAhjU.roa (hash: mRpx0bB3khjj82sXTsxVr+jlKn5E5ho7kq4lYObPEBI=)
4: oT8ZqtyuPG2bCnSuAma5RHBNbQM.roa (hash: JchFsffJ7J9U8adfMeuKKlBlUfa5a5FcVwQr7lJU+UI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/c4bfd4-a0a1-4334-860a-4fa537dbe2e9/1/6KMuimrG9uw3hg7nwH6435MUd3k.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/c4bfd4-a0a1-4334-860a-4fa537dbe2e9/1/6KMuimrG9uw3hg7nwH6435MUd3k.mft
rsync://rpki.ripe.net/repository/DEFAULT/6KMuimrG9uw3hg7nwH6435MUd3k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2b:8f:dc:65:bd:c7:63:9d:16:87:f9:41:42:fd:87:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8a32e8a6ac6f6ec37860ee7c07eb8df93147779
Validity
Not Before: Sep 8 23:01:12 2025 GMT
Not After : Sep 9 23:01:12 2025 GMT
Subject: CN=a223b44c41e0a161ef337c73c98e5cf82a2d6ec9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e4:c5:bb:11:70:2b:c2:0a:eb:ce:f8:02:00:
3a:4d:b4:32:c6:c9:f5:c3:a3:e5:59:5b:93:22:2b:
a6:30:fd:d2:60:99:92:63:a7:e2:79:59:19:60:44:
65:97:3a:c7:60:9f:d3:e5:71:ab:33:49:3d:ad:1d:
e1:68:51:03:f7:65:9b:ec:2a:47:44:dc:aa:86:92:
53:6e:3c:f6:14:a0:e9:59:ac:e4:9d:5e:a7:49:63:
ed:c0:bc:b3:37:f1:c0:46:7b:61:3a:b8:a9:58:2a:
c0:52:23:12:98:9a:ce:4d:be:df:76:b3:72:85:a1:
e4:3e:56:2f:47:01:56:18:48:d2:09:b0:52:4d:7b:
e0:f4:22:00:e1:87:28:2c:90:01:ec:7a:a6:81:25:
0c:1f:23:95:9a:48:4e:6b:4a:71:43:38:f4:fe:9a:
a9:ec:cb:f2:9c:8e:5a:51:ca:2f:36:4f:2e:ff:04:
f1:4c:b7:6f:d9:e7:c6:73:ce:1f:d0:2b:e8:2b:1b:
be:32:83:1c:dc:06:2c:f6:d2:3a:72:5f:62:7c:6c:
17:8d:8a:0c:b1:12:a9:ea:4e:53:bb:aa:27:61:84:
eb:65:71:5c:5e:26:d5:48:28:f0:32:ce:46:48:8d:
e8:5d:39:8a:98:d2:ae:e6:04:e8:f0:4f:c0:5a:e3:
ba:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:23:B4:4C:41:E0:A1:61:EF:33:7C:73:C9:8E:5C:F8:2A:2D:6E:C9
X509v3 Authority Key Identifier:
keyid:E8:A3:2E:8A:6A:C6:F6:EC:37:86:0E:E7:C0:7E:B8:DF:93:14:77:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6KMuimrG9uw3hg7nwH6435MUd3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/c4bfd4-a0a1-4334-860a-4fa537dbe2e9/1/6KMuimrG9uw3hg7nwH6435MUd3k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/c4bfd4-a0a1-4334-860a-4fa537dbe2e9/1/6KMuimrG9uw3hg7nwH6435MUd3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:ba:63:01:64:67:a2:79:14:38:b1:ca:a8:b1:86:f2:a6:0e:
9e:68:67:c0:7a:16:20:91:16:97:01:8e:97:2b:fb:30:0c:3a:
c8:01:a1:fe:03:42:db:f3:04:ec:e6:a6:d8:2d:96:90:c8:2b:
4a:a2:9d:d3:1a:99:ae:17:48:ff:1f:21:71:18:da:12:f9:1b:
18:66:0e:06:b1:c4:69:e7:8f:84:22:73:8e:8c:49:5f:90:eb:
12:e2:8f:41:8e:dc:37:71:2a:ae:55:98:4d:5c:81:d3:e0:d7:
8f:59:94:27:3f:d2:95:9c:b2:8b:c3:55:f8:96:8c:c7:22:39:
1a:2b:05:07:a5:5c:22:e4:74:44:4d:43:5d:0a:2e:db:55:69:
58:a0:8e:0f:58:a3:55:6b:cd:ec:1f:6b:e1:21:a7:9e:f0:f3:
31:e0:0f:06:18:f6:0d:aa:c6:d4:29:57:94:4c:e9:86:3f:d4:
3a:3f:a6:26:17:df:95:40:35:ce:68:8c:c3:44:dc:af:38:46:
85:49:48:38:0c:75:7d:46:55:24:f6:ec:6c:4a:9c:7a:73:b7:
ab:38:6d:3e:b0:48:ed:19:46:af:8a:5a:33:99:b3:3b:34:7e:
d7:7f:00:5b:14:c3:e5:20:50:e5:ee:4f:98:88:f5:ca:2d:44:
c6:c8:90:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkrj9xlvcdjnRaH+UFC/YeZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4YTMyZThhNmFjNmY2ZWMzNzg2MGVlN2MwN2ViOGRmOTMx
NDc3NzkwHhcNMjUwOTA4MjMwMTEyWhcNMjUwOTA5MjMwMTEyWjAzMTEwLwYDVQQD
EyhhMjIzYjQ0YzQxZTBhMTYxZWYzMzdjNzNjOThlNWNmODJhMmQ2ZWM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOTFuxFwK8IK6874AgA6TbQyxsn1
w6PlWVuTIiumMP3SYJmSY6fieVkZYERllzrHYJ/T5XGrM0k9rR3haFED92Wb7CpH
RNyqhpJTbjz2FKDpWazknV6nSWPtwLyzN/HARnthOripWCrAUiMSmJrOTb7fdrNy
haHkPlYvRwFWGEjSCbBSTXvg9CIA4YcoLJAB7HqmgSUMHyOVmkhOa0pxQzj0/pqp
7MvynI5aUcovNk8u/wTxTLdv2efGc84f0CvoKxu+MoMc3AYs9tI6cl9ifGwXjYoM
sRKp6k5Tu6onYYTrZXFcXibVSCjwMs5GSI3oXTmKmNKu5gTo8E/AWuO64QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKIjtExB4KFh7zN8c8mOXPgqLW7JMB8GA1UdIwQY
MBaAFOijLopqxvbsN4YO58B+uN+TFHd5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNktNdWltckc5dXczaGc3bndINjQzNU1VZDNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9jNGJmZDQtYTBhMS00MzM0LTg2MGEt
NGZhNTM3ZGJlMmU5LzEvNktNdWltckc5dXczaGc3bndINjQzNU1VZDNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy9jNGJmZDQtYTBhMS00MzM0LTg2MGEtNGZhNTM3ZGJlMmU5
LzEvNktNdWltckc5dXczaGc3bndINjQzNU1VZDNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL7pjAWRn
onkUOLHKqLGG8qYOnmhnwHoWIJEWlwGOlyv7MAw6yAGh/gNC2/ME7Oam2C2WkMgr
SqKd0xqZrhdI/x8hcRjaEvkbGGYOBrHEaeePhCJzjoxJX5DrEuKPQY7cN3EqrlWY
TVyB0+DXj1mUJz/SlZyyi8NV+JaMxyI5GisFB6VcIuR0RE1DXQou21VpWKCOD1ij
VWvN7B9r4SGnnvDzMeAPBhj2DarG1ClXlEzphj/UOj+mJhfflUA1zmiMw0TcrzhG
hUlIOAx1fUZVJPbsbEqcenO3qzhtPrBI7RlGr4paM5mzOzR+138AWxTD5SBQ5e5P
mIj1yi1ExsiQcA==
-----END CERTIFICATE-----
Generated at Tue Sep 9 04:26:47 2025 by rpki-client