Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/8a495d-c435-42dc-9123-ecd7fee7c1b0/1/a6TjY5dLLvkOywU0CvXa9rJBYMs.mft
File: a6TjY5dLLvkOywU0CvXa9rJBYMs.mft (raw, json)
Hash identifier: /28PDtjir1DwFfWwnNC0MHbF+IJCPmsuNyTc4OBiINw=
Subject key identifier: 22:B3:CF:83:7C:40:68:77:09:92:42:D9:7B:8D:FE:3D:5C:93:F9:03
Authority key identifier: 6B:A4:E3:63:97:4B:2E:F9:0E:CB:05:34:0A:F5:DA:F6:B2:41:60:CB
Certificate issuer: /CN=6ba4e363974b2ef90ecb05340af5daf6b24160cb
Certificate serial: 019921B1EF8D8172644478B0EA5870C0483A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a6TjY5dLLvkOywU0CvXa9rJBYMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/8a495d-c435-42dc-9123-ecd7fee7c1b0/1/a6TjY5dLLvkOywU0CvXa9rJBYMs.mft
Manifest number: 0BBA
Signing time: Sun 07 Sep 2025 01:02:13 +0000
Manifest this update: Sun 07 Sep 2025 01:02:13 +0000
Manifest next update: Mon 08 Sep 2025 01:02:13 +0000
Files and hashes: 1: 6m7j2x5GGq7W52qf5FgsTL2uZFM.roa (hash: yw3o2fOj27y6FNYr5DEC0pNcsBL8VcXlNTgJH2EfiEg=)
2: a6TjY5dLLvkOywU0CvXa9rJBYMs.crl (hash: dj4JIHYm8HrWadBmFrDWx9X5JFrPDr8PJ1AazpGfWNE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/8a495d-c435-42dc-9123-ecd7fee7c1b0/1/a6TjY5dLLvkOywU0CvXa9rJBYMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/8a495d-c435-42dc-9123-ecd7fee7c1b0/1/a6TjY5dLLvkOywU0CvXa9rJBYMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/a6TjY5dLLvkOywU0CvXa9rJBYMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:02:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b1:ef:8d:81:72:64:44:78:b0:ea:58:70:c0:48:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ba4e363974b2ef90ecb05340af5daf6b24160cb
Validity
Not Before: Sep 7 01:02:13 2025 GMT
Not After : Sep 8 01:02:13 2025 GMT
Subject: CN=22b3cf837c406877099242d97b8dfe3d5c93f903
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:1d:48:ca:62:b0:01:7b:91:90:82:f6:4d:b3:
9b:52:75:46:0a:0c:0c:41:a3:71:80:f6:ec:f0:73:
d3:65:9c:dc:84:5a:55:25:1b:49:43:43:72:ed:96:
a0:2b:a4:74:b3:52:91:0e:c4:35:f9:f0:3a:9e:b9:
5d:55:5e:cb:10:bc:5f:35:c2:36:23:4e:dd:e0:84:
c9:56:25:e2:eb:0e:6d:9f:c6:c4:23:92:80:03:2d:
a2:29:a0:e9:de:3d:91:d3:88:ec:fe:ce:5d:a7:ba:
0d:06:e6:bc:93:ad:a1:51:a6:f8:30:60:5d:d6:d2:
11:37:96:68:98:16:cd:de:23:9a:24:59:a2:b8:c3:
b3:a0:af:87:b7:21:fd:db:31:74:25:16:d9:a0:2b:
31:18:2c:5f:73:f7:03:6b:e3:c2:9a:bd:a0:f3:e0:
7a:49:a4:37:a5:a6:ff:d4:81:28:07:a4:fb:ee:8f:
db:07:1d:f3:ae:23:31:99:b6:52:07:2a:e5:47:37:
b2:31:c5:06:e8:f6:0f:9e:c6:bf:67:dd:7d:3d:c3:
e6:6d:c8:ab:35:db:e8:cf:e6:b1:98:66:7f:54:f9:
71:8f:0b:90:67:b8:ab:59:b3:f2:df:4d:78:0d:8a:
2b:c1:6d:d8:84:43:87:92:4e:22:94:25:5d:57:96:
1a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:B3:CF:83:7C:40:68:77:09:92:42:D9:7B:8D:FE:3D:5C:93:F9:03
X509v3 Authority Key Identifier:
keyid:6B:A4:E3:63:97:4B:2E:F9:0E:CB:05:34:0A:F5:DA:F6:B2:41:60:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6TjY5dLLvkOywU0CvXa9rJBYMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/8a495d-c435-42dc-9123-ecd7fee7c1b0/1/a6TjY5dLLvkOywU0CvXa9rJBYMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/8a495d-c435-42dc-9123-ecd7fee7c1b0/1/a6TjY5dLLvkOywU0CvXa9rJBYMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:40:35:25:85:99:b1:48:87:d4:25:09:6f:77:d9:7e:a0:5b:
ea:28:91:e0:e8:9f:d3:b3:60:b9:e5:6f:1f:d1:fb:12:7c:66:
02:4a:1a:9a:09:1c:ac:13:dc:90:c5:91:4d:87:f9:58:18:7b:
d8:3e:e7:4b:dd:80:19:64:06:c5:44:b7:6e:fe:94:e3:c0:c3:
93:3e:4c:cc:28:e7:8c:8e:d1:1e:54:18:17:51:41:62:9f:6d:
01:8d:a3:35:78:b2:04:2d:71:2d:d5:0a:85:b2:d3:9c:68:93:
f6:ec:56:95:bf:cc:0f:55:41:17:56:86:a5:6d:17:67:e1:22:
dc:b6:f6:f3:fa:b0:79:d2:44:9a:61:36:c9:13:09:8f:66:b2:
89:9d:b8:fa:9d:02:6d:3f:b1:cb:7b:b2:6d:b5:c9:22:6c:dc:
70:8d:48:80:84:64:cb:e0:0b:d3:72:17:11:64:cb:ac:42:e5:
5d:21:42:6b:c2:8f:8d:30:04:11:75:50:9c:9b:bc:8f:63:1e:
c0:ba:f8:aa:26:31:c5:c2:0b:1e:95:79:89:85:c5:8e:5b:91:
99:a2:aa:59:17:1b:db:e9:b0:30:9e:d5:7d:58:ee:80:79:5f:
72:e3:c1:56:4b:30:0d:97:9a:f9:5d:24:71:a9:96:14:cd:53:
22:33:18:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkhse+NgXJkRHiw6lhwwEg6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiYTRlMzYzOTc0YjJlZjkwZWNiMDUzNDBhZjVkYWY2YjI0
MTYwY2IwHhcNMjUwOTA3MDEwMjEzWhcNMjUwOTA4MDEwMjEzWjAzMTEwLwYDVQQD
EygyMmIzY2Y4MzdjNDA2ODc3MDk5MjQyZDk3YjhkZmUzZDVjOTNmOTAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnR1IymKwAXuRkIL2TbObUnVGCgwM
QaNxgPbs8HPTZZzchFpVJRtJQ0Ny7ZagK6R0s1KRDsQ1+fA6nrldVV7LELxfNcI2
I07d4ITJViXi6w5tn8bEI5KAAy2iKaDp3j2R04js/s5dp7oNBua8k62hUab4MGBd
1tIRN5ZomBbN3iOaJFmiuMOzoK+HtyH92zF0JRbZoCsxGCxfc/cDa+PCmr2g8+B6
SaQ3pab/1IEoB6T77o/bBx3zriMxmbZSByrlRzeyMcUG6PYPnsa/Z919PcPmbcir
Ndvoz+axmGZ/VPlxjwuQZ7irWbPy3014DYorwW3YhEOHkk4ilCVdV5YaGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCKzz4N8QGh3CZJC2XuN/j1ck/kDMB8GA1UdIwQY
MBaAFGuk42OXSy75DssFNAr12vayQWDLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTZUalk1ZExMdmtPeXdVMEN2WGE5ckpCWU1zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi84YTQ5NWQtYzQzNS00MmRjLTkxMjMt
ZWNkN2ZlZTdjMWIwLzEvYTZUalk1ZExMdmtPeXdVMEN2WGE5ckpCWU1zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi84YTQ5NWQtYzQzNS00MmRjLTkxMjMtZWNkN2ZlZTdjMWIw
LzEvYTZUalk1ZExMdmtPeXdVMEN2WGE5ckpCWU1zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALUA1JYWZ
sUiH1CUJb3fZfqBb6iiR4Oif07NgueVvH9H7EnxmAkoamgkcrBPckMWRTYf5WBh7
2D7nS92AGWQGxUS3bv6U48DDkz5MzCjnjI7RHlQYF1FBYp9tAY2jNXiyBC1xLdUK
hbLTnGiT9uxWlb/MD1VBF1aGpW0XZ+Ei3Lb28/qwedJEmmE2yRMJj2ayiZ24+p0C
bT+xy3uybbXJImzccI1IgIRky+AL03IXEWTLrELlXSFCa8KPjTAEEXVQnJu8j2Me
wLr4qiYxxcILHpV5iYXFjluRmaKqWRcb2+mwMJ7VfVjugHlfcuPBVkswDZea+V0k
camWFM1TIjMYLA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:25:30 2025 by rpki-client