Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/aa06b6-e766-4ad9-aa7a-a4bbb1bc98c6/1/b_57IbYhg9Xj1K4bk_8AkJKCyRI.mft
File: b_57IbYhg9Xj1K4bk_8AkJKCyRI.mft (raw, json)
Hash identifier: z6+ljjHC0KAdFyIzF5yWXrhHIyLNHZVZ2nIady7ZTMQ=
Subject key identifier: 3F:42:CB:BA:2B:E4:0F:B0:34:0A:DD:DA:CE:6C:37:58:2E:5F:0C:98
Authority key identifier: 6F:FE:7B:21:B6:21:83:D5:E3:D4:AE:1B:93:FF:00:90:92:82:C9:12
Certificate issuer: /CN=6ffe7b21b62183d5e3d4ae1b93ff00909282c912
Certificate serial: 019A2A79B4597B7A6AD4B1BEA1DBB8D60058
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b_57IbYhg9Xj1K4bk_8AkJKCyRI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/aa06b6-e766-4ad9-aa7a-a4bbb1bc98c6/1/b_57IbYhg9Xj1K4bk_8AkJKCyRI.mft
Manifest number: 0750
Signing time: Tue 28 Oct 2025 11:00:10 +0000
Manifest this update: Tue 28 Oct 2025 11:00:10 +0000
Manifest next update: Wed 29 Oct 2025 11:00:10 +0000
Files and hashes: 1: HzyW06_qFMHD7FoonuBI96cfqI0.roa (hash: tww5NCEvuHGOvnxV6oYkbLx4biv3u6Go3vXrACuAJA4=)
2: b_57IbYhg9Xj1K4bk_8AkJKCyRI.crl (hash: vl5SaqFRIuuwBN1gnt++hdsM+wNNn/+gVWbixA/+14s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/aa06b6-e766-4ad9-aa7a-a4bbb1bc98c6/1/b_57IbYhg9Xj1K4bk_8AkJKCyRI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/aa06b6-e766-4ad9-aa7a-a4bbb1bc98c6/1/b_57IbYhg9Xj1K4bk_8AkJKCyRI.mft
rsync://rpki.ripe.net/repository/DEFAULT/b_57IbYhg9Xj1K4bk_8AkJKCyRI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2a:79:b4:59:7b:7a:6a:d4:b1:be:a1:db:b8:d6:00:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ffe7b21b62183d5e3d4ae1b93ff00909282c912
Validity
Not Before: Oct 28 11:00:10 2025 GMT
Not After : Oct 29 11:00:10 2025 GMT
Subject: CN=3f42cbba2be40fb0340adddace6c37582e5f0c98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:5c:b6:e5:4b:2e:85:31:88:46:52:e8:95:f6:
f7:74:36:ab:3e:ad:87:50:c0:dc:ca:96:78:3e:17:
f8:28:9d:12:c9:42:5e:84:a6:82:51:93:e4:e5:6c:
5c:07:b9:b8:28:4e:94:7e:31:f6:15:4e:18:40:8f:
dd:57:c6:2f:aa:66:e4:f1:a6:df:66:6d:46:f2:7e:
6c:ce:3d:89:e1:9d:38:c7:27:0b:b4:45:58:11:2c:
02:71:c9:2c:45:db:76:1d:d4:6f:22:3e:45:03:42:
bd:24:b6:fc:61:ed:04:4c:26:22:43:a8:43:1a:79:
e9:91:c3:61:a0:8d:19:c4:1a:18:a8:77:1f:4b:98:
7e:72:4d:b3:95:6b:63:2f:a2:af:9e:a9:ef:29:a6:
52:f4:1a:bb:6c:f1:3d:e8:88:d6:51:13:b4:92:68:
9d:9e:db:4f:25:7e:da:f8:5d:30:1b:8a:77:f2:b1:
45:6c:5a:6c:10:82:24:a1:4f:47:58:d3:c3:aa:44:
e3:1e:03:16:c0:ad:f5:9c:50:2c:29:ad:d5:3e:e3:
13:47:5a:45:24:61:b9:3a:b5:ea:07:59:e7:06:e6:
9c:bb:28:89:fe:d1:fa:dc:81:09:dd:b6:6d:41:77:
1d:af:7c:86:2f:10:4d:94:b3:62:0c:6d:78:d5:43:
ac:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:42:CB:BA:2B:E4:0F:B0:34:0A:DD:DA:CE:6C:37:58:2E:5F:0C:98
X509v3 Authority Key Identifier:
keyid:6F:FE:7B:21:B6:21:83:D5:E3:D4:AE:1B:93:FF:00:90:92:82:C9:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b_57IbYhg9Xj1K4bk_8AkJKCyRI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/aa06b6-e766-4ad9-aa7a-a4bbb1bc98c6/1/b_57IbYhg9Xj1K4bk_8AkJKCyRI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/aa06b6-e766-4ad9-aa7a-a4bbb1bc98c6/1/b_57IbYhg9Xj1K4bk_8AkJKCyRI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:25:32:c9:4e:8b:e7:2a:18:10:98:95:17:11:36:15:83:89:
30:5a:6e:c2:6d:7c:2a:73:ed:9f:37:c4:45:73:fe:0f:b9:26:
9e:75:f0:46:0c:70:ae:33:5f:a8:9d:c9:c6:ac:e5:6d:77:83:
df:f1:08:0f:60:15:92:b6:ff:c3:82:55:96:1a:ac:77:0e:19:
d0:ea:4a:e4:3b:06:a4:88:4a:79:41:b8:d2:ff:bc:5c:aa:a8:
13:d3:f5:d9:53:33:d7:03:d4:a3:c4:07:52:cb:eb:f0:b4:71:
bb:d5:f8:08:e7:50:fd:a0:b4:e1:bb:08:8f:26:50:13:65:ab:
6f:29:ff:00:2c:4f:40:11:3d:f3:b1:fd:8f:fa:38:d8:1a:e1:
46:f2:d5:b1:a3:6c:8e:ee:33:e9:45:8a:18:ec:63:e3:e6:27:
00:2b:6f:30:26:9e:30:61:e1:84:44:f4:da:74:45:59:a9:97:
60:03:9e:09:8a:c8:51:64:9e:81:c2:5e:9e:bd:52:1f:eb:79:
95:0d:1f:58:11:fb:73:3b:3c:67:e7:a1:30:47:50:e8:51:12:
e0:67:35:03:2b:db:17:17:41:a6:01:c3:e3:77:eb:da:c5:5f:
90:aa:53:f0:e8:f0:26:9b:69:22:f5:d8:13:8c:a0:f7:92:7b:
2e:bb:42:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoqebRZe3pq1LG+odu41gBYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmZmU3YjIxYjYyMTgzZDVlM2Q0YWUxYjkzZmYwMDkwOTI4
MmM5MTIwHhcNMjUxMDI4MTEwMDEwWhcNMjUxMDI5MTEwMDEwWjAzMTEwLwYDVQQD
EygzZjQyY2JiYTJiZTQwZmIwMzQwYWRkZGFjZTZjMzc1ODJlNWYwYzk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwVy25UsuhTGIRlLolfb3dDarPq2H
UMDcypZ4Phf4KJ0SyUJehKaCUZPk5WxcB7m4KE6UfjH2FU4YQI/dV8Yvqmbk8abf
Zm1G8n5szj2J4Z04xycLtEVYESwCccksRdt2HdRvIj5FA0K9JLb8Ye0ETCYiQ6hD
GnnpkcNhoI0ZxBoYqHcfS5h+ck2zlWtjL6KvnqnvKaZS9Bq7bPE96IjWURO0kmid
nttPJX7a+F0wG4p38rFFbFpsEIIkoU9HWNPDqkTjHgMWwK31nFAsKa3VPuMTR1pF
JGG5OrXqB1nnBuacuyiJ/tH63IEJ3bZtQXcdr3yGLxBNlLNiDG141UOsdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD9Cy7or5A+wNArd2s5sN1guXwyYMB8GA1UdIwQY
MBaAFG/+eyG2IYPV49SuG5P/AJCSgskSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYl81N0liWWhnOVhqMUs0YmtfOEFrSktDeVJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9hYTA2YjYtZTc2Ni00YWQ5LWFhN2Et
YTRiYmIxYmM5OGM2LzEvYl81N0liWWhnOVhqMUs0YmtfOEFrSktDeVJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi9hYTA2YjYtZTc2Ni00YWQ5LWFhN2EtYTRiYmIxYmM5OGM2
LzEvYl81N0liWWhnOVhqMUs0YmtfOEFrSktDeVJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADyUyyU6L
5yoYEJiVFxE2FYOJMFpuwm18KnPtnzfERXP+D7kmnnXwRgxwrjNfqJ3JxqzlbXeD
3/EID2AVkrb/w4JVlhqsdw4Z0OpK5DsGpIhKeUG40v+8XKqoE9P12VMz1wPUo8QH
Usvr8LRxu9X4COdQ/aC04bsIjyZQE2Wrbyn/ACxPQBE987H9j/o42BrhRvLVsaNs
ju4z6UWKGOxj4+YnACtvMCaeMGHhhET02nRFWamXYAOeCYrIUWSegcJenr1SH+t5
lQ0fWBH7czs8Z+ehMEdQ6FES4Gc1AyvbFxdBpgHD43fr2sVfkKpT8OjwJptpIvXY
E4yg95J7LrtC7Q==
-----END CERTIFICATE-----
Generated at Tue Oct 28 12:50:31 2025 by rpki-client