Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/1de86c-5f1e-402e-9ef4-637b261ab179/1/k6mJwXstoMUUMVWCDrxWv-c6Ot8.mft
File: k6mJwXstoMUUMVWCDrxWv-c6Ot8.mft (raw, json)
Hash identifier: tYcMrM9O9KZ9CZkZkO6fyoXad0xIW6B4R647oAVpRCM=
Subject key identifier: 60:56:39:16:80:45:8A:33:81:EB:EC:F0:CD:18:23:64:AD:AF:E1:28
Authority key identifier: 93:A9:89:C1:7B:2D:A0:C5:14:31:55:82:0E:BC:56:BF:E7:3A:3A:DF
Certificate issuer: /CN=93a989c17b2da0c5143155820ebc56bfe73a3adf
Certificate serial: 019965ED18C56287F1F4FB38D7C0CFB2D5A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k6mJwXstoMUUMVWCDrxWv-c6Ot8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/1de86c-5f1e-402e-9ef4-637b261ab179/1/k6mJwXstoMUUMVWCDrxWv-c6Ot8.mft
Manifest number: 0609
Signing time: Sat 20 Sep 2025 07:01:01 +0000
Manifest this update: Sat 20 Sep 2025 07:01:01 +0000
Manifest next update: Sun 21 Sep 2025 07:01:01 +0000
Files and hashes: 1: k6mJwXstoMUUMVWCDrxWv-c6Ot8.crl (hash: kcqSZaxqMtvTud34AgzDg9PaEyln8k6RsmBekTTya8U=)
2: rbPUmPqkKgwyzbr9KUKLWQwPFN4.roa (hash: q/Zy1zhtJFPNtR3NeMdcOz6lj9MRNn8je4kBturksZ0=)
3: tQFFGYfebId9C-wg4RS84BnFaNo.roa (hash: nMK/gVKD2fq6p/yTSA4UB4aZvcBtj7xYtsaQACWORBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/1de86c-5f1e-402e-9ef4-637b261ab179/1/k6mJwXstoMUUMVWCDrxWv-c6Ot8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/1de86c-5f1e-402e-9ef4-637b261ab179/1/k6mJwXstoMUUMVWCDrxWv-c6Ot8.mft
rsync://rpki.ripe.net/repository/DEFAULT/k6mJwXstoMUUMVWCDrxWv-c6Ot8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Sep 2025 00:54:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:65:ed:18:c5:62:87:f1:f4:fb:38:d7:c0:cf:b2:d5:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93a989c17b2da0c5143155820ebc56bfe73a3adf
Validity
Not Before: Sep 20 07:01:01 2025 GMT
Not After : Sep 21 07:01:01 2025 GMT
Subject: CN=6056391680458a3381ebecf0cd182364adafe128
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:85:6b:89:15:60:e7:54:22:01:10:4e:23:ba:
dd:0d:da:93:c5:5f:55:ad:a5:a6:67:3e:d4:f6:ce:
00:55:22:b4:ac:49:3b:ae:da:13:f0:ba:a1:d9:1b:
3d:91:58:56:f3:81:be:c0:a7:7c:43:75:4a:88:b1:
25:8e:54:97:a2:25:7b:01:d6:3a:12:98:04:a3:ee:
e9:db:39:2e:e4:54:e9:e2:52:7d:da:ef:b8:d4:dc:
a4:0c:09:b2:a1:58:1a:7c:ae:91:7e:33:0c:80:ea:
15:f9:07:a3:03:bc:79:bd:1a:c1:b5:59:ea:76:f5:
b1:50:bf:b5:13:00:4e:08:1a:24:f3:11:b5:8d:30:
1f:97:81:97:08:cf:87:d2:c6:3b:fd:1e:62:3e:6a:
92:ef:10:4f:e2:76:f3:97:e4:a8:7a:e5:f2:c0:37:
07:89:89:fd:76:1e:e7:03:73:8b:84:19:fe:3f:ce:
a8:cc:7b:ab:ce:62:1d:94:2b:53:d9:4a:c3:0c:11:
79:96:09:46:9d:5c:87:d0:f5:56:c5:65:5a:96:96:
15:df:eb:98:36:80:03:4e:a4:00:43:5b:fa:8f:3e:
4d:9b:1c:cb:0c:c6:82:97:ec:07:bb:d8:b6:ff:5e:
25:d4:be:3d:7b:a5:37:a4:d8:af:a5:d3:cc:5c:72:
56:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:56:39:16:80:45:8A:33:81:EB:EC:F0:CD:18:23:64:AD:AF:E1:28
X509v3 Authority Key Identifier:
keyid:93:A9:89:C1:7B:2D:A0:C5:14:31:55:82:0E:BC:56:BF:E7:3A:3A:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k6mJwXstoMUUMVWCDrxWv-c6Ot8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1de86c-5f1e-402e-9ef4-637b261ab179/1/k6mJwXstoMUUMVWCDrxWv-c6Ot8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1de86c-5f1e-402e-9ef4-637b261ab179/1/k6mJwXstoMUUMVWCDrxWv-c6Ot8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:cb:95:db:79:bd:1a:27:3a:36:81:07:22:32:4e:21:4d:37:
8d:eb:eb:f0:4d:b3:16:92:88:0f:96:fd:99:7e:b8:88:a0:84:
e4:c6:fa:0e:d0:25:22:36:c3:9a:55:bd:2a:26:a0:4c:ec:7d:
bc:fd:22:39:c1:45:81:a7:ac:4a:c1:53:cf:91:67:2d:2a:89:
4b:1a:a1:a2:88:ac:5e:99:2d:d3:0a:3d:1f:ed:3a:7a:78:2b:
28:d3:19:83:bf:55:54:02:f8:1c:5c:b8:c2:57:88:de:34:80:
64:6f:2e:af:5a:65:b2:62:c3:2b:7b:7a:cc:f0:5a:c5:a3:d1:
0b:23:7e:24:cd:7a:90:62:53:e4:bc:3c:fe:73:fd:dc:56:5b:
72:0f:a0:64:6f:f0:88:fb:34:e3:f2:84:8f:fb:43:d7:b5:af:
c3:84:65:91:06:c8:d7:d0:32:d3:e8:f4:28:29:7d:cb:4b:20:
c3:2b:59:11:4d:fc:6c:00:6e:a4:b3:cd:0a:9d:cf:47:d3:ac:
17:4f:4b:08:c3:4b:26:36:9d:c8:04:a1:1f:f0:9b:70:e1:c3:
17:c8:71:92:59:51:13:14:03:a0:9f:a0:eb:44:d4:65:80:2a:
cb:50:1d:cc:f7:53:46:ce:2a:6c:2b:b6:d1:fc:a6:8b:5a:19:
55:6c:47:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZll7RjFYofx9Ps418DPstWoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzYTk4OWMxN2IyZGEwYzUxNDMxNTU4MjBlYmM1NmJmZTcz
YTNhZGYwHhcNMjUwOTIwMDcwMTAxWhcNMjUwOTIxMDcwMTAxWjAzMTEwLwYDVQQD
Eyg2MDU2MzkxNjgwNDU4YTMzODFlYmVjZjBjZDE4MjM2NGFkYWZlMTI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnIVriRVg51QiARBOI7rdDdqTxV9V
raWmZz7U9s4AVSK0rEk7rtoT8Lqh2Rs9kVhW84G+wKd8Q3VKiLEljlSXoiV7AdY6
EpgEo+7p2zku5FTp4lJ92u+41NykDAmyoVgafK6RfjMMgOoV+QejA7x5vRrBtVnq
dvWxUL+1EwBOCBok8xG1jTAfl4GXCM+H0sY7/R5iPmqS7xBP4nbzl+SoeuXywDcH
iYn9dh7nA3OLhBn+P86ozHurzmIdlCtT2UrDDBF5lglGnVyH0PVWxWValpYV3+uY
NoADTqQAQ1v6jz5NmxzLDMaCl+wHu9i2/14l1L49e6U3pNivpdPMXHJW0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGBWORaARYozgevs8M0YI2Str+EoMB8GA1UdIwQY
MBaAFJOpicF7LaDFFDFVgg68Vr/nOjrfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazZtSndYc3RvTVVVTVZXQ0RyeFd2LWM2T3Q4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS8xZGU4NmMtNWYxZS00MDJlLTllZjQt
NjM3YjI2MWFiMTc5LzEvazZtSndYc3RvTVVVTVZXQ0RyeFd2LWM2T3Q4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS8xZGU4NmMtNWYxZS00MDJlLTllZjQtNjM3YjI2MWFiMTc5
LzEvazZtSndYc3RvTVVVTVZXQ0RyeFd2LWM2T3Q4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfcuV23m9
Gic6NoEHIjJOIU03jevr8E2zFpKID5b9mX64iKCE5Mb6DtAlIjbDmlW9KiagTOx9
vP0iOcFFgaesSsFTz5FnLSqJSxqhooisXpkt0wo9H+06engrKNMZg79VVAL4HFy4
wleI3jSAZG8ur1plsmLDK3t6zPBaxaPRCyN+JM16kGJT5Lw8/nP93FZbcg+gZG/w
iPs04/KEj/tD17Wvw4RlkQbI19Ay0+j0KCl9y0sgwytZEU38bABupLPNCp3PR9Os
F09LCMNLJjadyAShH/CbcOHDF8hxkllRExQDoJ+g60TUZYAqy1AdzPdTRs4qbCu2
0fymi1oZVWxH6w==
-----END CERTIFICATE-----
Generated at Sat Sep 20 09:06:48 2025 by rpki-client