Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/e177f7-6348-4744-ad9c-76189bd4a040/1/6GNg24H1BcXpqbWtEKgcZPSoW9I.mft
File: 6GNg24H1BcXpqbWtEKgcZPSoW9I.mft (raw, json)
Hash identifier: oyMvBp69Ncsb2qixXtuMaO3FdlBOGk3yOvD+UnXniVM=
Subject key identifier: 10:38:0A:E7:AB:DC:C7:BC:3D:90:58:D9:2A:5B:25:FB:5C:4E:B7:75
Authority key identifier: E8:63:60:DB:81:F5:05:C5:E9:A9:B5:AD:10:A8:1C:64:F4:A8:5B:D2
Certificate issuer: /CN=e86360db81f505c5e9a9b5ad10a81c64f4a85bd2
Certificate serial: 019A71EE62A799EC1E3BC81AFEACE29536B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6GNg24H1BcXpqbWtEKgcZPSoW9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/e177f7-6348-4744-ad9c-76189bd4a040/1/6GNg24H1BcXpqbWtEKgcZPSoW9I.mft
Manifest number: 16B1
Signing time: Tue 11 Nov 2025 08:00:39 +0000
Manifest this update: Tue 11 Nov 2025 08:00:39 +0000
Manifest next update: Wed 12 Nov 2025 08:00:39 +0000
Files and hashes: 1: 6GNg24H1BcXpqbWtEKgcZPSoW9I.crl (hash: PAdz/1kveeiBpZ4a4kDiWUVYl2pfeoEGp04AFapfUMM=)
2: njlinsmP7gnmt4n7VDuZ0b4k0ZQ.roa (hash: 8omn75JjRFfw43kmGbnsTzRzp9iit4iIDtbQyHgj6GQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/e177f7-6348-4744-ad9c-76189bd4a040/1/6GNg24H1BcXpqbWtEKgcZPSoW9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/e177f7-6348-4744-ad9c-76189bd4a040/1/6GNg24H1BcXpqbWtEKgcZPSoW9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/6GNg24H1BcXpqbWtEKgcZPSoW9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:62:a7:99:ec:1e:3b:c8:1a:fe:ac:e2:95:36:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e86360db81f505c5e9a9b5ad10a81c64f4a85bd2
Validity
Not Before: Nov 11 08:00:39 2025 GMT
Not After : Nov 12 08:00:39 2025 GMT
Subject: CN=10380ae7abdcc7bc3d9058d92a5b25fb5c4eb775
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:22:4f:0b:d5:39:6c:4e:25:9d:d7:5d:ab:03:
e5:2c:96:46:b7:67:28:32:c3:36:f7:5d:2e:26:11:
5a:1f:d7:b6:e8:9f:a1:47:05:50:23:8f:20:75:95:
bb:89:0e:b6:9d:64:66:37:90:69:fe:3b:c9:51:b6:
66:72:65:86:c0:fa:a7:d9:d9:13:de:8c:0c:38:5e:
22:b3:b6:53:e1:1a:07:6c:15:6d:d6:f8:0d:bb:28:
9f:76:8d:8b:0c:7f:72:78:a7:ed:d8:80:fa:1c:5f:
3b:2f:39:61:0d:5a:24:ce:7a:6b:5a:e5:58:58:2d:
cc:76:7f:20:2d:5f:46:8a:57:4b:6b:01:d3:20:67:
d9:28:31:24:75:df:57:4a:00:af:7d:c4:32:32:64:
e8:44:2a:24:d7:7a:8c:4d:4b:67:0d:fb:e2:5f:e9:
5b:71:54:35:7d:1e:0a:1c:d1:78:d9:8f:89:c8:c0:
59:52:cf:4d:6d:b2:74:f5:ec:50:24:22:30:0d:78:
0c:1e:f8:fe:7b:e4:0c:21:fd:98:9f:5b:ee:6a:6c:
e3:b4:3b:3a:49:40:0a:0f:62:c0:a2:73:41:e2:7c:
d6:e6:a7:ea:17:18:9e:4a:08:85:89:f8:b4:ff:13:
ea:2f:6a:0e:4b:cf:4a:5f:af:2f:ea:5d:39:a7:43:
92:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:38:0A:E7:AB:DC:C7:BC:3D:90:58:D9:2A:5B:25:FB:5C:4E:B7:75
X509v3 Authority Key Identifier:
keyid:E8:63:60:DB:81:F5:05:C5:E9:A9:B5:AD:10:A8:1C:64:F4:A8:5B:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6GNg24H1BcXpqbWtEKgcZPSoW9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e177f7-6348-4744-ad9c-76189bd4a040/1/6GNg24H1BcXpqbWtEKgcZPSoW9I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e177f7-6348-4744-ad9c-76189bd4a040/1/6GNg24H1BcXpqbWtEKgcZPSoW9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:38:cb:53:be:b0:31:b1:6e:22:31:8d:60:97:95:b5:75:a3:
0f:fd:a8:7b:c1:56:8f:79:6b:0c:12:7a:db:51:cc:e9:48:4b:
be:4b:3c:34:4f:aa:91:c6:e5:e8:8b:12:56:b4:e2:d7:81:3a:
3d:05:22:96:57:f0:a6:d9:a3:1c:c8:f5:a1:c1:c8:31:4f:72:
8d:a6:ac:26:31:e4:e7:22:6c:3f:77:b1:42:e3:1f:04:d3:ca:
a6:aa:ac:a5:91:3a:da:bc:7f:79:55:65:f7:a9:a4:2d:49:b6:
51:e7:7e:1f:58:82:8c:15:92:29:f5:88:38:21:fe:87:ec:54:
42:68:ff:7b:db:ee:99:dd:f0:14:32:67:2b:16:74:78:dc:28:
c0:90:04:9a:a4:84:08:97:49:37:3b:66:00:a3:bd:7d:de:2b:
86:3a:b8:b3:04:7f:b8:ca:48:67:a4:37:40:e8:d1:ec:d7:2e:
ea:11:57:d5:1a:d9:85:85:e5:c5:4f:82:d7:b4:b2:03:cf:c7:
7d:eb:ed:f9:f0:d3:79:27:27:e1:f4:85:c6:8c:20:c8:7c:8f:
bf:71:ce:ec:a0:70:44:a0:e5:a0:dc:bc:c5:8d:58:03:d5:c9:
9c:cf:47:93:08:c1:53:66:7c:74:05:03:98:39:65:4c:c4:92:
54:ef:e0:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpx7mKnmeweO8ga/qzilTawMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4NjM2MGRiODFmNTA1YzVlOWE5YjVhZDEwYTgxYzY0ZjRh
ODViZDIwHhcNMjUxMTExMDgwMDM5WhcNMjUxMTEyMDgwMDM5WjAzMTEwLwYDVQQD
EygxMDM4MGFlN2FiZGNjN2JjM2Q5MDU4ZDkyYTViMjVmYjVjNGViNzc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyyJPC9U5bE4lndddqwPlLJZGt2co
MsM2910uJhFaH9e26J+hRwVQI48gdZW7iQ62nWRmN5Bp/jvJUbZmcmWGwPqn2dkT
3owMOF4is7ZT4RoHbBVt1vgNuyifdo2LDH9yeKft2ID6HF87LzlhDVokznprWuVY
WC3Mdn8gLV9GildLawHTIGfZKDEkdd9XSgCvfcQyMmToRCok13qMTUtnDfviX+lb
cVQ1fR4KHNF42Y+JyMBZUs9NbbJ09exQJCIwDXgMHvj+e+QMIf2Yn1vuamzjtDs6
SUAKD2LAonNB4nzW5qfqFxieSgiFifi0/xPqL2oOS89KX68v6l05p0OS2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBA4Cuer3Me8PZBY2SpbJftcTrd1MB8GA1UdIwQY
MBaAFOhjYNuB9QXF6am1rRCoHGT0qFvSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkdOZzI0SDFCY1hwcWJXdEVLZ2NaUFNvVzlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9lMTc3ZjctNjM0OC00NzQ0LWFkOWMt
NzYxODliZDRhMDQwLzEvNkdOZzI0SDFCY1hwcWJXdEVLZ2NaUFNvVzlJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9lMTc3ZjctNjM0OC00NzQ0LWFkOWMtNzYxODliZDRhMDQw
LzEvNkdOZzI0SDFCY1hwcWJXdEVLZ2NaUFNvVzlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAijjLU76w
MbFuIjGNYJeVtXWjD/2oe8FWj3lrDBJ621HM6UhLvks8NE+qkcbl6IsSVrTi14E6
PQUillfwptmjHMj1ocHIMU9yjaasJjHk5yJsP3exQuMfBNPKpqqspZE62rx/eVVl
96mkLUm2Ued+H1iCjBWSKfWIOCH+h+xUQmj/e9vumd3wFDJnKxZ0eNwowJAEmqSE
CJdJNztmAKO9fd4rhjq4swR/uMpIZ6Q3QOjR7Ncu6hFX1RrZhYXlxU+C17SyA8/H
fevt+fDTeScn4fSFxowgyHyPv3HO7KBwRKDloNy8xY1YA9XJnM9HkwjBU2Z8dAUD
mDllTMSSVO/g7w==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:35:19 2025 by rpki-client