Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/85ca8e-d74b-4c05-81b6-770f0572c0e7/1/b6MuZYEYPyxIl6dlIzOQH39b7nM.mft
File: b6MuZYEYPyxIl6dlIzOQH39b7nM.mft (raw, json)
Hash identifier: k8GZdcFRDBCH6nVld/8JlbT8y1EE/7LCxmGIqbuB1FA=
Subject key identifier: 48:13:BC:49:D9:93:CA:07:6C:76:F6:FD:3F:56:AF:F6:C6:2B:11:21
Authority key identifier: 6F:A3:2E:65:81:18:3F:2C:48:97:A7:65:23:33:90:1F:7F:5B:EE:73
Certificate issuer: /CN=6fa32e6581183f2c4897a7652333901f7f5bee73
Certificate serial: 019A722624BBA4614126E32EDFD6FD1334AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b6MuZYEYPyxIl6dlIzOQH39b7nM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/85ca8e-d74b-4c05-81b6-770f0572c0e7/1/b6MuZYEYPyxIl6dlIzOQH39b7nM.mft
Manifest number: 0984
Signing time: Tue 11 Nov 2025 09:01:33 +0000
Manifest this update: Tue 11 Nov 2025 09:01:33 +0000
Manifest next update: Wed 12 Nov 2025 09:01:33 +0000
Files and hashes: 1: 6C-l-Krcx9diUb3Zftv9sijenyA.roa (hash: 8qEJJSdL4/1lUqWVRQzqlshhqS0031IQa9tDeTSS/GA=)
2: PHw1GAOmBnBvGouxlCLHPCg3QCo.roa (hash: M7Tf/O06Ds+1gFag6lHjuDXeoUB2izemcywbR990N8U=)
3: b6MuZYEYPyxIl6dlIzOQH39b7nM.crl (hash: lEI8yTW1BhYGYRLSCnm9vJY4N2orAJ5FsKqbhlWYoUg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/85ca8e-d74b-4c05-81b6-770f0572c0e7/1/b6MuZYEYPyxIl6dlIzOQH39b7nM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/85ca8e-d74b-4c05-81b6-770f0572c0e7/1/b6MuZYEYPyxIl6dlIzOQH39b7nM.mft
rsync://rpki.ripe.net/repository/DEFAULT/b6MuZYEYPyxIl6dlIzOQH39b7nM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:24:bb:a4:61:41:26:e3:2e:df:d6:fd:13:34:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fa32e6581183f2c4897a7652333901f7f5bee73
Validity
Not Before: Nov 11 09:01:33 2025 GMT
Not After : Nov 12 09:01:33 2025 GMT
Subject: CN=4813bc49d993ca076c76f6fd3f56aff6c62b1121
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ff:2f:9b:cc:3e:db:94:53:1e:44:cc:37:f3:
d0:3f:19:04:ec:a7:3a:47:51:12:f5:56:53:27:b3:
9c:98:22:5e:b1:10:dd:b1:39:61:75:af:4f:00:76:
38:db:2e:ca:d7:eb:8b:54:52:47:64:82:b8:82:f5:
ee:3b:0f:24:99:bd:70:59:79:88:1b:d2:be:af:85:
be:de:fb:0a:3f:85:2b:e4:c3:04:bd:e4:54:15:71:
6d:bd:65:5e:c5:63:d0:94:1b:9d:be:9b:b7:6b:61:
dc:bf:78:70:e7:31:c7:c3:c0:ce:2a:53:b2:8f:45:
42:49:5e:9a:8e:79:5c:aa:48:e5:a6:1b:99:4d:72:
69:47:fa:c5:58:3f:08:ae:61:d4:a2:57:f0:0a:8e:
2e:08:98:9f:01:10:69:a2:1a:9b:98:09:8e:2f:df:
f1:4b:06:bd:e0:93:5d:2e:ae:93:62:34:b1:71:85:
41:cd:a8:d8:63:52:bd:3e:82:18:38:ab:37:8f:5b:
e7:8d:55:ac:ba:09:3d:99:45:1f:b5:c8:0b:53:29:
5c:ac:7e:3b:ec:f0:51:71:af:03:d5:b6:11:1f:09:
0b:bf:f5:52:d4:10:72:1f:6f:d0:91:64:12:c6:ab:
9c:d5:db:63:d3:d9:80:aa:ec:09:83:01:ad:4a:49:
f9:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:13:BC:49:D9:93:CA:07:6C:76:F6:FD:3F:56:AF:F6:C6:2B:11:21
X509v3 Authority Key Identifier:
keyid:6F:A3:2E:65:81:18:3F:2C:48:97:A7:65:23:33:90:1F:7F:5B:EE:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6MuZYEYPyxIl6dlIzOQH39b7nM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/85ca8e-d74b-4c05-81b6-770f0572c0e7/1/b6MuZYEYPyxIl6dlIzOQH39b7nM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/85ca8e-d74b-4c05-81b6-770f0572c0e7/1/b6MuZYEYPyxIl6dlIzOQH39b7nM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:77:b3:b7:8e:96:e8:e8:67:ee:40:d1:cc:cc:0f:11:15:4e:
c9:26:0f:34:18:a6:c6:0d:01:69:ea:a6:1e:e8:22:31:61:d3:
3c:2b:7c:2d:7b:d9:2e:84:4f:b3:4e:ed:94:38:cd:5f:57:af:
9e:ac:c0:0d:ea:4b:9e:94:36:7d:ba:01:69:3e:46:b9:1f:f8:
8f:7b:03:93:7f:5d:31:cf:7d:50:81:97:97:ef:c6:26:bc:4d:
c4:52:69:82:04:14:89:38:dc:22:c9:10:8a:4d:e9:44:a8:b1:
d3:53:5f:cb:b1:96:b5:bb:6c:fb:31:f1:f6:b8:35:81:9c:af:
f1:44:73:44:0d:7f:f1:5d:30:4f:6d:e8:7e:06:0d:27:f7:3a:
09:87:6c:d7:40:a0:a0:87:14:2b:5b:f4:08:9b:60:b3:5d:62:
76:f9:a6:a1:7b:99:f7:e7:1a:ac:a7:32:61:c9:e9:38:28:3a:
f7:d8:87:91:f1:c4:76:d8:70:3e:78:f5:26:6e:c8:83:68:f6:
b6:31:b0:2c:e2:c9:a9:d9:01:d0:6f:a9:b9:e0:16:de:9b:07:
e2:7f:e3:07:ba:c9:ae:e9:af:7d:df:c3:c0:bb:38:04:c7:4c:
95:5f:57:42:dc:70:f0:6f:b2:7d:da:e7:b3:b9:4b:18:f2:31:
f4:21:9c:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJiS7pGFBJuMu39b9EzStMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmYTMyZTY1ODExODNmMmM0ODk3YTc2NTIzMzM5MDFmN2Y1
YmVlNzMwHhcNMjUxMTExMDkwMTMzWhcNMjUxMTEyMDkwMTMzWjAzMTEwLwYDVQQD
Eyg0ODEzYmM0OWQ5OTNjYTA3NmM3NmY2ZmQzZjU2YWZmNmM2MmIxMTIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz/8vm8w+25RTHkTMN/PQPxkE7Kc6
R1ES9VZTJ7OcmCJesRDdsTlhda9PAHY42y7K1+uLVFJHZIK4gvXuOw8kmb1wWXmI
G9K+r4W+3vsKP4Ur5MMEveRUFXFtvWVexWPQlBudvpu3a2Hcv3hw5zHHw8DOKlOy
j0VCSV6ajnlcqkjlphuZTXJpR/rFWD8IrmHUolfwCo4uCJifARBpohqbmAmOL9/x
Swa94JNdLq6TYjSxcYVBzajYY1K9PoIYOKs3j1vnjVWsugk9mUUftcgLUylcrH47
7PBRca8D1bYRHwkLv/VS1BByH2/QkWQSxquc1dtj09mAquwJgwGtSkn54wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEgTvEnZk8oHbHb2/T9Wr/bGKxEhMB8GA1UdIwQY
MBaAFG+jLmWBGD8sSJenZSMzkB9/W+5zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjZNdVpZRVlQeXhJbDZkbEl6T1FIMzliN25NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi84NWNhOGUtZDc0Yi00YzA1LTgxYjYt
NzcwZjA1NzJjMGU3LzEvYjZNdVpZRVlQeXhJbDZkbEl6T1FIMzliN25NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi84NWNhOGUtZDc0Yi00YzA1LTgxYjYtNzcwZjA1NzJjMGU3
LzEvYjZNdVpZRVlQeXhJbDZkbEl6T1FIMzliN25NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAnezt46W
6Ohn7kDRzMwPERVOySYPNBimxg0BaeqmHugiMWHTPCt8LXvZLoRPs07tlDjNX1ev
nqzADepLnpQ2fboBaT5GuR/4j3sDk39dMc99UIGXl+/GJrxNxFJpggQUiTjcIskQ
ik3pRKix01Nfy7GWtbts+zHx9rg1gZyv8URzRA1/8V0wT23ofgYNJ/c6CYds10Cg
oIcUK1v0CJtgs11idvmmoXuZ9+carKcyYcnpOCg699iHkfHEdthwPnj1Jm7Ig2j2
tjGwLOLJqdkB0G+pueAW3psH4n/jB7rJrumvfd/DwLs4BMdMlV9XQtxw8G+yfdrn
s7lLGPIx9CGcSw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:39:11 2025 by rpki-client