Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/1de86c-5f1e-402e-9ef4-637b261ab179/1/k6mJwXstoMUUMVWCDrxWv-c6Ot8.mft
File: k6mJwXstoMUUMVWCDrxWv-c6Ot8.mft (raw, json)
Hash identifier: M2E7Opu/3Wlqft/wrfig1FJ2VWhkwnauTEZ3T6lfSpI=
Subject key identifier: E8:08:07:BB:6C:1E:7A:BB:CF:34:25:21:A3:C2:FD:D2:A9:12:40:0E
Authority key identifier: 93:A9:89:C1:7B:2D:A0:C5:14:31:55:82:0E:BC:56:BF:E7:3A:3A:DF
Certificate issuer: /CN=93a989c17b2da0c5143155820ebc56bfe73a3adf
Certificate serial: 019A575261C8DAF97A9F45AFFA0F686F3107
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k6mJwXstoMUUMVWCDrxWv-c6Ot8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/1de86c-5f1e-402e-9ef4-637b261ab179/1/k6mJwXstoMUUMVWCDrxWv-c6Ot8.mft
Manifest number: 0686
Signing time: Thu 06 Nov 2025 04:00:08 +0000
Manifest this update: Thu 06 Nov 2025 04:00:08 +0000
Manifest next update: Fri 07 Nov 2025 04:00:08 +0000
Files and hashes: 1: k6mJwXstoMUUMVWCDrxWv-c6Ot8.crl (hash: LRAwpsXVbHQPPKTQDBjmFvMrVbrZoD3EnsTCbU1/xiI=)
2: rbPUmPqkKgwyzbr9KUKLWQwPFN4.roa (hash: q/Zy1zhtJFPNtR3NeMdcOz6lj9MRNn8je4kBturksZ0=)
3: tQFFGYfebId9C-wg4RS84BnFaNo.roa (hash: nMK/gVKD2fq6p/yTSA4UB4aZvcBtj7xYtsaQACWORBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/1de86c-5f1e-402e-9ef4-637b261ab179/1/k6mJwXstoMUUMVWCDrxWv-c6Ot8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/1de86c-5f1e-402e-9ef4-637b261ab179/1/k6mJwXstoMUUMVWCDrxWv-c6Ot8.mft
rsync://rpki.ripe.net/repository/DEFAULT/k6mJwXstoMUUMVWCDrxWv-c6Ot8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 07 Nov 2025 04:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:57:52:61:c8:da:f9:7a:9f:45:af:fa:0f:68:6f:31:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93a989c17b2da0c5143155820ebc56bfe73a3adf
Validity
Not Before: Nov 6 04:00:08 2025 GMT
Not After : Nov 7 04:00:08 2025 GMT
Subject: CN=e80807bb6c1e7abbcf342521a3c2fdd2a912400e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:64:96:e0:c3:4d:87:3f:f2:49:61:7c:b3:16:
87:4e:f2:d2:f4:58:17:cf:bb:65:e2:b1:2f:31:0b:
7f:86:5a:ce:49:91:45:24:75:57:75:b2:fe:c3:8a:
3a:22:d9:59:27:b7:dc:d7:37:42:6e:3f:e5:a3:40:
7b:ad:0f:53:9d:f2:4f:ec:dc:08:7c:b7:a6:58:7d:
86:ef:31:4e:b2:e9:c8:e2:af:37:16:d2:c4:98:dd:
4b:83:6e:3d:03:65:b6:3f:f8:d8:92:27:3e:91:6e:
b4:fa:5f:86:ce:8d:f5:e3:a0:6d:f1:0e:56:e8:ee:
e4:17:07:32:fa:9a:7f:86:b5:50:ad:23:28:6c:67:
cb:ed:96:16:7c:6c:62:a5:43:96:74:14:e2:7a:d0:
69:08:89:20:74:c9:e9:be:3a:87:4e:8e:74:24:85:
30:5f:ac:6d:55:2e:49:1a:ed:6c:f7:ef:88:ad:55:
06:39:f5:f3:82:c5:55:04:53:d9:62:2d:f5:3d:4b:
79:21:53:e5:45:e0:da:e8:e5:2d:8c:8b:1a:cd:93:
09:8f:c9:9c:35:cd:ab:dd:34:57:97:a7:70:f6:81:
da:5d:a5:47:14:08:9e:f8:d5:53:ee:2c:c4:21:3c:
f5:0a:4b:ac:d2:ea:96:5a:c9:4d:69:98:43:d5:6b:
4d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:08:07:BB:6C:1E:7A:BB:CF:34:25:21:A3:C2:FD:D2:A9:12:40:0E
X509v3 Authority Key Identifier:
keyid:93:A9:89:C1:7B:2D:A0:C5:14:31:55:82:0E:BC:56:BF:E7:3A:3A:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k6mJwXstoMUUMVWCDrxWv-c6Ot8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1de86c-5f1e-402e-9ef4-637b261ab179/1/k6mJwXstoMUUMVWCDrxWv-c6Ot8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1de86c-5f1e-402e-9ef4-637b261ab179/1/k6mJwXstoMUUMVWCDrxWv-c6Ot8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:7e:15:35:73:28:0c:16:58:76:ff:44:ee:c7:1a:38:0c:65:
4c:83:6f:a7:8d:fc:64:5c:50:70:ce:c0:4a:6d:94:9e:e4:75:
47:fd:14:cb:04:db:b9:b2:45:a8:35:5f:cf:2a:bf:2b:ba:a7:
3e:eb:8f:f0:62:98:cb:f6:2e:89:05:d6:ec:14:30:05:28:61:
75:e6:b7:b2:4a:a7:42:35:05:62:98:0b:40:56:39:0a:50:e4:
b8:07:cf:36:15:5f:9c:fc:02:b2:29:20:9d:98:ef:12:ab:e8:
43:9e:ad:02:74:13:5c:fa:cb:24:8a:25:08:dc:64:86:51:ef:
e4:ad:3f:37:cf:65:c2:b7:90:d5:88:75:b3:d4:72:16:63:f2:
d4:c5:eb:01:96:f3:82:82:65:9f:60:ea:e4:61:4d:0d:3c:00:
4c:b2:61:c8:00:23:5d:21:c3:c4:df:dd:4b:dc:fb:3b:f5:51:
10:59:9c:88:70:5b:cc:07:c9:7d:61:9c:25:0a:f8:db:30:ec:
ca:96:d4:00:f1:a8:d8:34:15:09:97:7d:b1:3e:5e:f1:4f:bf:
02:92:97:00:5d:4c:d5:18:7f:d7:e0:8f:04:fe:42:8e:c3:88:
30:79:bb:8b:3f:26:84:c9:f3:dc:8f:b7:b5:11:49:8b:bb:d2:
4c:4d:cc:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpXUmHI2vl6n0Wv+g9obzEHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzYTk4OWMxN2IyZGEwYzUxNDMxNTU4MjBlYmM1NmJmZTcz
YTNhZGYwHhcNMjUxMTA2MDQwMDA4WhcNMjUxMTA3MDQwMDA4WjAzMTEwLwYDVQQD
EyhlODA4MDdiYjZjMWU3YWJiY2YzNDI1MjFhM2MyZmRkMmE5MTI0MDBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0mSW4MNNhz/ySWF8sxaHTvLS9FgX
z7tl4rEvMQt/hlrOSZFFJHVXdbL+w4o6ItlZJ7fc1zdCbj/lo0B7rQ9TnfJP7NwI
fLemWH2G7zFOsunI4q83FtLEmN1Lg249A2W2P/jYkic+kW60+l+Gzo3146Bt8Q5W
6O7kFwcy+pp/hrVQrSMobGfL7ZYWfGxipUOWdBTietBpCIkgdMnpvjqHTo50JIUw
X6xtVS5JGu1s9++IrVUGOfXzgsVVBFPZYi31PUt5IVPlReDa6OUtjIsazZMJj8mc
Nc2r3TRXl6dw9oHaXaVHFAie+NVT7izEITz1Ckus0uqWWslNaZhD1WtNEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOgIB7tsHnq7zzQlIaPC/dKpEkAOMB8GA1UdIwQY
MBaAFJOpicF7LaDFFDFVgg68Vr/nOjrfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazZtSndYc3RvTVVVTVZXQ0RyeFd2LWM2T3Q4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS8xZGU4NmMtNWYxZS00MDJlLTllZjQt
NjM3YjI2MWFiMTc5LzEvazZtSndYc3RvTVVVTVZXQ0RyeFd2LWM2T3Q4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS8xZGU4NmMtNWYxZS00MDJlLTllZjQtNjM3YjI2MWFiMTc5
LzEvazZtSndYc3RvTVVVTVZXQ0RyeFd2LWM2T3Q4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADH4VNXMo
DBZYdv9E7scaOAxlTINvp438ZFxQcM7ASm2UnuR1R/0UywTbubJFqDVfzyq/K7qn
PuuP8GKYy/YuiQXW7BQwBShhdea3skqnQjUFYpgLQFY5ClDkuAfPNhVfnPwCsikg
nZjvEqvoQ56tAnQTXPrLJIolCNxkhlHv5K0/N89lwreQ1Yh1s9RyFmPy1MXrAZbz
goJln2Dq5GFNDTwATLJhyAAjXSHDxN/dS9z7O/VREFmciHBbzAfJfWGcJQr42zDs
ypbUAPGo2DQVCZd9sT5e8U+/ApKXAF1M1Rh/1+CPBP5CjsOIMHm7iz8mhMnz3I+3
tRFJi7vSTE3MJg==
-----END CERTIFICATE-----
Generated at Thu Nov 6 12:11:16 2025 by rpki-client