Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/09830e-0ffe-4682-bc4d-eb77e9571152/1/M6kkrVm0WTV6Ge4KR_N5Uw4tJEw.mft
File: M6kkrVm0WTV6Ge4KR_N5Uw4tJEw.mft (raw, json)
Hash identifier: E0uUz+dqTjP1G0HhaxGSMtoOLTNpq1hFOPJ4MqHLpkg=
Subject key identifier: CF:98:6C:92:9B:1F:BE:5E:B9:44:01:AC:F9:2B:8E:5B:F8:3E:EC:9A
Authority key identifier: 33:A9:24:AD:59:B4:59:35:7A:19:EE:0A:47:F3:79:53:0E:2D:24:4C
Certificate issuer: /CN=33a924ad59b459357a19ee0a47f379530e2d244c
Certificate serial: 019A70A562D63ED59924E1DD8CB2EB0EEA39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M6kkrVm0WTV6Ge4KR_N5Uw4tJEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/09830e-0ffe-4682-bc4d-eb77e9571152/1/M6kkrVm0WTV6Ge4KR_N5Uw4tJEw.mft
Manifest number: 0B93
Signing time: Tue 11 Nov 2025 02:01:17 +0000
Manifest this update: Tue 11 Nov 2025 02:01:17 +0000
Manifest next update: Wed 12 Nov 2025 02:01:17 +0000
Files and hashes: 1: M6kkrVm0WTV6Ge4KR_N5Uw4tJEw.crl (hash: rZ3O96NZHx7c2SoYsuz1xh/EVUWUxKYVqlk15d+lqcI=)
2: _khA_VnUk6WIR9HzLzBYy21gjiY.roa (hash: zYMvT2aBQ62Uw/oOkoXmLb0oW9+P5GMgEJxD27Pzif4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/09830e-0ffe-4682-bc4d-eb77e9571152/1/M6kkrVm0WTV6Ge4KR_N5Uw4tJEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/09830e-0ffe-4682-bc4d-eb77e9571152/1/M6kkrVm0WTV6Ge4KR_N5Uw4tJEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/M6kkrVm0WTV6Ge4KR_N5Uw4tJEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:62:d6:3e:d5:99:24:e1:dd:8c:b2:eb:0e:ea:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33a924ad59b459357a19ee0a47f379530e2d244c
Validity
Not Before: Nov 11 02:01:17 2025 GMT
Not After : Nov 12 02:01:17 2025 GMT
Subject: CN=cf986c929b1fbe5eb94401acf92b8e5bf83eec9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:e5:cb:69:d1:0e:c3:a6:08:94:92:2a:d1:98:
d7:c1:7f:3c:19:fc:8b:06:30:93:45:4d:b0:9f:e4:
e4:98:4e:01:eb:9c:38:f2:30:57:ae:ab:8d:7f:12:
f1:2c:a7:5b:fd:9f:4e:16:13:9e:a7:b8:a7:f7:f3:
05:6e:0a:af:40:4f:a4:84:3b:04:35:c0:5a:8f:c4:
30:4a:e2:98:8e:19:d3:e3:f6:f6:a1:d9:92:1b:7a:
18:40:25:fa:b2:ce:63:27:5d:29:df:d1:a4:32:d8:
a9:1c:ac:da:22:9b:a7:44:1f:10:e5:70:ae:3d:1c:
e8:1b:ea:81:f6:d0:25:ac:14:93:00:fb:82:65:38:
fb:e2:96:d8:7e:3a:da:67:c9:54:fd:ba:ad:2f:0e:
88:62:e1:a8:ef:ed:f3:bb:35:d5:23:dc:93:e6:3e:
85:8b:7c:6b:de:56:49:c7:12:76:69:76:18:fc:fb:
aa:78:44:6e:d8:2f:81:3c:89:52:f3:ce:11:d4:3b:
6e:80:08:db:7a:ef:71:f8:e1:66:a8:ef:1e:bc:90:
dd:62:93:9d:71:9f:7b:77:92:48:ad:0d:c1:22:86:
6f:fb:b2:ca:45:85:e9:c5:eb:57:a1:93:6c:79:37:
17:4c:f5:c6:72:42:14:d1:eb:f0:81:b7:1e:74:ed:
96:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:98:6C:92:9B:1F:BE:5E:B9:44:01:AC:F9:2B:8E:5B:F8:3E:EC:9A
X509v3 Authority Key Identifier:
keyid:33:A9:24:AD:59:B4:59:35:7A:19:EE:0A:47:F3:79:53:0E:2D:24:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M6kkrVm0WTV6Ge4KR_N5Uw4tJEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/09830e-0ffe-4682-bc4d-eb77e9571152/1/M6kkrVm0WTV6Ge4KR_N5Uw4tJEw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/09830e-0ffe-4682-bc4d-eb77e9571152/1/M6kkrVm0WTV6Ge4KR_N5Uw4tJEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:ea:6f:ca:dd:ed:a8:e9:f2:d1:99:04:61:8f:7a:2b:08:72:
d9:12:b8:45:e2:22:39:44:ef:10:21:18:5f:e0:69:c9:d6:39:
a7:b8:a1:0b:a2:8b:01:60:df:b7:20:1b:24:ec:0a:f8:03:46:
7e:bb:af:d2:7e:1e:d5:a5:58:70:17:5d:e4:31:78:fe:6e:00:
d9:04:ed:d9:62:06:18:17:9c:bb:3a:38:0b:6d:8c:af:0a:59:
28:8f:75:9e:4a:89:0b:21:e1:3a:9e:af:1b:2c:70:21:8c:f8:
75:c7:7e:eb:ef:b4:8d:2f:7f:c2:6f:c2:31:00:73:b3:90:47:
58:9c:8f:3e:95:a0:44:7a:77:58:0b:7b:1f:d4:e5:b3:76:b6:
20:06:fe:78:67:92:13:bc:b2:1b:d2:f0:b6:d9:aa:d7:77:b9:
cd:d2:eb:75:f7:73:a4:cb:9a:46:64:77:77:e2:45:2f:ee:f2:
33:4e:4a:54:0d:1d:f1:f0:f4:90:b1:66:e0:0e:0c:6b:87:29:
c0:d7:f4:78:56:7f:b1:1a:57:66:bd:8d:f5:89:5f:27:f1:06:
4d:e6:75:e6:90:8b:1a:9f:c3:22:2b:60:f1:f6:71:e2:ae:f0:
e3:a3:14:e8:ee:4c:4c:ed:04:c6:67:2d:fb:a5:f3:24:6b:79:
82:f0:df:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpwpWLWPtWZJOHdjLLrDuo5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzYTkyNGFkNTliNDU5MzU3YTE5ZWUwYTQ3ZjM3OTUzMGUy
ZDI0NGMwHhcNMjUxMTExMDIwMTE3WhcNMjUxMTEyMDIwMTE3WjAzMTEwLwYDVQQD
EyhjZjk4NmM5MjliMWZiZTVlYjk0NDAxYWNmOTJiOGU1YmY4M2VlYzlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj+XLadEOw6YIlJIq0ZjXwX88GfyL
BjCTRU2wn+TkmE4B65w48jBXrquNfxLxLKdb/Z9OFhOep7in9/MFbgqvQE+khDsE
NcBaj8QwSuKYjhnT4/b2odmSG3oYQCX6ss5jJ10p39GkMtipHKzaIpunRB8Q5XCu
PRzoG+qB9tAlrBSTAPuCZTj74pbYfjraZ8lU/bqtLw6IYuGo7+3zuzXVI9yT5j6F
i3xr3lZJxxJ2aXYY/PuqeERu2C+BPIlS884R1DtugAjbeu9x+OFmqO8evJDdYpOd
cZ97d5JIrQ3BIoZv+7LKRYXpxetXoZNseTcXTPXGckIU0evwgbcedO2WHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM+YbJKbH75euUQBrPkrjlv4PuyaMB8GA1UdIwQY
MBaAFDOpJK1ZtFk1ehnuCkfzeVMOLSRMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTTZra3JWbTBXVFY2R2U0S1JfTjVVdzR0SkV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC8wOTgzMGUtMGZmZS00NjgyLWJjNGQt
ZWI3N2U5NTcxMTUyLzEvTTZra3JWbTBXVFY2R2U0S1JfTjVVdzR0SkV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC8wOTgzMGUtMGZmZS00NjgyLWJjNGQtZWI3N2U5NTcxMTUy
LzEvTTZra3JWbTBXVFY2R2U0S1JfTjVVdzR0SkV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZOpvyt3t
qOny0ZkEYY96Kwhy2RK4ReIiOUTvECEYX+BpydY5p7ihC6KLAWDftyAbJOwK+ANG
fruv0n4e1aVYcBdd5DF4/m4A2QTt2WIGGBecuzo4C22MrwpZKI91nkqJCyHhOp6v
GyxwIYz4dcd+6++0jS9/wm/CMQBzs5BHWJyPPpWgRHp3WAt7H9Tls3a2IAb+eGeS
E7yyG9Lwttmq13e5zdLrdfdzpMuaRmR3d+JFL+7yM05KVA0d8fD0kLFm4A4Ma4cp
wNf0eFZ/sRpXZr2N9YlfJ/EGTeZ15pCLGp/DIitg8fZx4q7w46MU6O5MTO0Exmct
+6XzJGt5gvDf4w==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:55 2025 by rpki-client