
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/56cc91-ba62-4037-b57f-6bddb317e78b/1/B6BIbcC0unMJA3iP8_P3yCSbkh8.mft
File: B6BIbcC0unMJA3iP8_P3yCSbkh8.mft (raw, json)
Hash identifier: I5sA0PiLvqM28JGH7hkZ4HXR8qJ+I4xKHA0UAImdZZs=
Subject key identifier: 69:93:71:1B:75:D9:CC:3B:5B:E4:DD:CE:9A:35:FE:14:C4:AC:2E:54
Authority key identifier: 07:A0:48:6D:C0:B4:BA:73:09:03:78:8F:F3:F3:F7:C8:24:9B:92:1F
Certificate issuer: /CN=07a0486dc0b4ba730903788ff3f3f7c8249b921f
Certificate serial: 019A09DC564561732B5FAD77CE0961A4DB7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B6BIbcC0unMJA3iP8_P3yCSbkh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/56cc91-ba62-4037-b57f-6bddb317e78b/1/B6BIbcC0unMJA3iP8_P3yCSbkh8.mft
Manifest number: 16E9
Signing time: Wed 22 Oct 2025 03:00:26 +0000
Manifest this update: Wed 22 Oct 2025 03:00:26 +0000
Manifest next update: Thu 23 Oct 2025 03:00:26 +0000
Files and hashes: 1: B6BIbcC0unMJA3iP8_P3yCSbkh8.crl (hash: YInHDkYfRcgGsUKvzEZ8Cxygh2eSDVgIDZExQ4IR8Ko=)
2: xJFVozfHmoVSSAuYbjszEZbCInk.roa (hash: Gjo9VUU6W0ie3Sm+l3hGhli3h91M0ZQXuSrdhZEO8P0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/56cc91-ba62-4037-b57f-6bddb317e78b/1/B6BIbcC0unMJA3iP8_P3yCSbkh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/56cc91-ba62-4037-b57f-6bddb317e78b/1/B6BIbcC0unMJA3iP8_P3yCSbkh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/B6BIbcC0unMJA3iP8_P3yCSbkh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:09:dc:56:45:61:73:2b:5f:ad:77:ce:09:61:a4:db:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07a0486dc0b4ba730903788ff3f3f7c8249b921f
Validity
Not Before: Oct 22 03:00:26 2025 GMT
Not After : Oct 23 03:00:26 2025 GMT
Subject: CN=6993711b75d9cc3b5be4ddce9a35fe14c4ac2e54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:bb:08:ca:9b:fd:40:d3:38:c5:02:a9:db:72:
58:4b:91:b6:6b:7c:75:4b:d8:ce:2a:5e:32:98:a4:
22:25:d2:1d:77:14:22:d0:d1:0a:1d:84:44:15:20:
55:61:43:a6:33:c0:58:3f:a4:d2:79:30:eb:21:3e:
6b:a1:ef:15:7f:82:1b:cd:89:f5:6e:56:85:4e:c0:
ad:f0:64:e1:9e:76:d8:d9:dc:ac:7b:c1:53:ec:6c:
93:a6:10:1b:87:fb:3f:c7:01:2b:08:6b:c7:20:5e:
de:52:28:46:11:4c:ae:91:31:c0:a4:a6:4d:a9:52:
b1:31:7e:67:85:bc:b5:5c:16:90:f2:eb:95:e0:37:
c2:89:b6:48:0f:07:47:8a:f4:44:e2:70:87:d7:92:
45:52:a0:82:ba:da:f2:3f:28:9c:2d:f6:33:8e:85:
12:ed:ed:93:37:d9:4d:dc:26:7e:f3:3f:8b:8c:3b:
b1:ee:34:9a:6d:95:d8:f5:ed:c2:55:ba:e2:77:66:
13:5c:85:ca:a0:f2:a0:d4:ee:68:19:e7:d3:98:a6:
69:2f:14:47:83:8a:21:75:3b:2f:e9:b2:97:f5:8f:
41:55:21:0a:69:ad:87:23:b0:63:90:54:f4:0b:ce:
f6:c1:25:5d:46:e2:04:00:a9:50:2e:47:c0:00:dd:
57:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:93:71:1B:75:D9:CC:3B:5B:E4:DD:CE:9A:35:FE:14:C4:AC:2E:54
X509v3 Authority Key Identifier:
keyid:07:A0:48:6D:C0:B4:BA:73:09:03:78:8F:F3:F3:F7:C8:24:9B:92:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6BIbcC0unMJA3iP8_P3yCSbkh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/56cc91-ba62-4037-b57f-6bddb317e78b/1/B6BIbcC0unMJA3iP8_P3yCSbkh8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/56cc91-ba62-4037-b57f-6bddb317e78b/1/B6BIbcC0unMJA3iP8_P3yCSbkh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:a4:ac:08:7c:3a:71:a8:9e:02:4b:14:47:5e:77:32:0b:22:
ae:5e:49:d9:7d:74:94:25:2a:74:94:26:05:ea:40:9f:8b:69:
f6:68:01:73:e5:c1:45:b1:d1:17:d7:fc:96:e2:f3:1b:73:c5:
87:7b:e6:16:02:72:ab:a7:40:99:5e:60:74:d3:84:b6:28:50:
66:90:3c:8b:ff:2f:a0:2c:59:06:cc:fa:e6:c5:7c:5f:34:e9:
1f:97:00:d9:50:e9:20:05:b6:4a:5e:b2:00:2c:ed:58:96:b6:
c3:d1:ba:44:2d:e0:ac:e5:94:4e:9e:68:bd:67:4c:19:78:bd:
ff:ed:a7:11:e2:73:01:66:26:28:fc:6c:0d:d2:a4:4f:83:9a:
d2:7e:c1:de:87:9b:20:93:a8:1e:d5:67:cd:73:9c:b7:35:09:
00:65:8f:62:7e:55:b8:91:3f:54:3c:44:65:7b:59:ca:f0:4d:
7e:fb:80:1d:7f:cf:c5:7b:38:50:05:4c:2f:76:17:35:70:52:
7e:a3:06:9f:8e:7b:a5:dc:01:4f:7f:ff:4f:09:54:4a:1f:75:
98:10:59:34:51:7c:d4:a4:94:fc:15:b1:98:21:0a:aa:b7:0a:
7b:2b:cd:7c:9d:2d:6d:e5:0b:e5:f1:85:81:d2:45:6b:22:c5:
dd:a3:87:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoJ3FZFYXMrX613zglhpNt+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3YTA0ODZkYzBiNGJhNzMwOTAzNzg4ZmYzZjNmN2M4MjQ5
YjkyMWYwHhcNMjUxMDIyMDMwMDI2WhcNMjUxMDIzMDMwMDI2WjAzMTEwLwYDVQQD
Eyg2OTkzNzExYjc1ZDljYzNiNWJlNGRkY2U5YTM1ZmUxNGM0YWMyZTU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAursIypv9QNM4xQKp23JYS5G2a3x1
S9jOKl4ymKQiJdIddxQi0NEKHYREFSBVYUOmM8BYP6TSeTDrIT5roe8Vf4IbzYn1
blaFTsCt8GThnnbY2dyse8FT7GyTphAbh/s/xwErCGvHIF7eUihGEUyukTHApKZN
qVKxMX5nhby1XBaQ8uuV4DfCibZIDwdHivRE4nCH15JFUqCCutryPyicLfYzjoUS
7e2TN9lN3CZ+8z+LjDux7jSabZXY9e3CVbrid2YTXIXKoPKg1O5oGefTmKZpLxRH
g4ohdTsv6bKX9Y9BVSEKaa2HI7BjkFT0C872wSVdRuIEAKlQLkfAAN1XJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGmTcRt12cw7W+Tdzpo1/hTErC5UMB8GA1UdIwQY
MBaAFAegSG3AtLpzCQN4j/Pz98gkm5IfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjZCSWJjQzB1bk1KQTNpUDhfUDN5Q1Nia2g4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC81NmNjOTEtYmE2Mi00MDM3LWI1N2Yt
NmJkZGIzMTdlNzhiLzEvQjZCSWJjQzB1bk1KQTNpUDhfUDN5Q1Nia2g4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC81NmNjOTEtYmE2Mi00MDM3LWI1N2YtNmJkZGIzMTdlNzhi
LzEvQjZCSWJjQzB1bk1KQTNpUDhfUDN5Q1Nia2g4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiqSsCHw6
caieAksUR153Mgsirl5J2X10lCUqdJQmBepAn4tp9mgBc+XBRbHRF9f8luLzG3PF
h3vmFgJyq6dAmV5gdNOEtihQZpA8i/8voCxZBsz65sV8XzTpH5cA2VDpIAW2Sl6y
ACztWJa2w9G6RC3grOWUTp5ovWdMGXi9/+2nEeJzAWYmKPxsDdKkT4Oa0n7B3oeb
IJOoHtVnzXOctzUJAGWPYn5VuJE/VDxEZXtZyvBNfvuAHX/PxXs4UAVML3YXNXBS
fqMGn457pdwBT3//TwlUSh91mBBZNFF81KSU/BWxmCEKqrcKeyvNfJ0tbeUL5fGF
gdJFayLF3aOHHw==
-----END CERTIFICATE-----
Generated at Wed Oct 22 07:29:07 2025 by rpki-client