Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/376662-87eb-4c97-9373-a1dce6ad150c/1/6Fgzjepq5N27JIUKBwf0OqF5TD8.mft
File: 6Fgzjepq5N27JIUKBwf0OqF5TD8.mft (raw, json)
Hash identifier: Q0eJA0ACUTzrvgfoAYKGJxUB0iWYKUf16QxnVAgxnWU=
Subject key identifier: 02:CA:F1:26:DF:49:7A:7C:34:57:A8:43:33:92:DA:8B:52:4C:0A:87
Authority key identifier: E8:58:33:8D:EA:6A:E4:DD:BB:24:85:0A:07:07:F4:3A:A1:79:4C:3F
Certificate issuer: /CN=e858338dea6ae4ddbb24850a0707f43aa1794c3f
Certificate serial: 019A2E214EE3AF0815D934A764141CC16F06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Fgzjepq5N27JIUKBwf0OqF5TD8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/376662-87eb-4c97-9373-a1dce6ad150c/1/6Fgzjepq5N27JIUKBwf0OqF5TD8.mft
Manifest number: 16C9
Signing time: Wed 29 Oct 2025 04:02:05 +0000
Manifest this update: Wed 29 Oct 2025 04:02:05 +0000
Manifest next update: Thu 30 Oct 2025 04:02:05 +0000
Files and hashes: 1: 6Fgzjepq5N27JIUKBwf0OqF5TD8.crl (hash: gfGUfUFJZKMiFk+sIg0soNJt2BaYLmUqlTSuwnoPzG4=)
2: KqaueV9hoJCow2ggLZVEN6Aq14w.roa (hash: m49ywOVO+P5/nCXp3LP+DFkgcnb10IgZ5YOzfhx6zR4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/376662-87eb-4c97-9373-a1dce6ad150c/1/6Fgzjepq5N27JIUKBwf0OqF5TD8.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/376662-87eb-4c97-9373-a1dce6ad150c/1/6Fgzjepq5N27JIUKBwf0OqF5TD8.mft
rsync://rpki.ripe.net/repository/DEFAULT/6Fgzjepq5N27JIUKBwf0OqF5TD8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2e:21:4e:e3:af:08:15:d9:34:a7:64:14:1c:c1:6f:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e858338dea6ae4ddbb24850a0707f43aa1794c3f
Validity
Not Before: Oct 29 04:02:05 2025 GMT
Not After : Oct 30 04:02:05 2025 GMT
Subject: CN=02caf126df497a7c3457a8433392da8b524c0a87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:56:fb:49:c9:0b:b7:3d:58:d5:99:c1:65:38:
67:2f:aa:d8:e6:f9:20:2f:c4:dd:5a:6f:b5:8a:c6:
7a:ff:f7:10:e4:a7:04:10:6f:72:ea:b5:ba:7a:b4:
df:9f:16:3f:e6:b1:8a:26:7c:81:fd:a7:27:cf:f6:
0f:7b:24:57:5d:97:a0:f8:41:de:fa:1a:54:56:54:
b0:7f:91:f2:4c:7a:8e:be:09:ac:ee:45:0b:45:40:
3d:ec:c0:95:25:5b:3a:54:59:31:01:02:a9:e0:0a:
96:73:ba:f1:65:bb:d0:db:89:ce:ee:ea:74:ea:d1:
cb:82:d9:4c:9f:5f:11:b7:62:88:01:7d:ec:a2:6d:
fd:8b:1d:95:75:91:34:e4:94:45:b6:76:76:33:08:
be:7b:49:0d:cf:2c:3b:53:c0:7f:a7:6e:86:03:1d:
a4:f3:dc:ef:e0:ad:e7:b4:c6:5b:9e:87:5f:53:1c:
10:57:b2:13:37:de:8f:18:54:c2:95:ce:d2:35:b1:
9c:a4:b3:42:2c:0a:21:28:61:e4:98:35:16:4b:1b:
0a:4a:e4:4d:84:99:eb:2d:d8:70:d4:c2:f7:f9:a5:
d1:4e:3b:62:f3:74:54:de:1a:ff:54:39:95:74:a8:
8d:71:7e:40:3c:29:2e:75:c7:eb:76:a6:5f:e2:f8:
36:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:CA:F1:26:DF:49:7A:7C:34:57:A8:43:33:92:DA:8B:52:4C:0A:87
X509v3 Authority Key Identifier:
keyid:E8:58:33:8D:EA:6A:E4:DD:BB:24:85:0A:07:07:F4:3A:A1:79:4C:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Fgzjepq5N27JIUKBwf0OqF5TD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/376662-87eb-4c97-9373-a1dce6ad150c/1/6Fgzjepq5N27JIUKBwf0OqF5TD8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/376662-87eb-4c97-9373-a1dce6ad150c/1/6Fgzjepq5N27JIUKBwf0OqF5TD8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:b8:ec:0b:49:47:8c:73:06:fc:07:b1:c2:be:5d:4b:85:88:
b2:e7:ea:8a:32:78:07:12:d2:1f:cf:78:20:e9:f6:9f:5d:74:
de:5b:66:89:6c:ea:95:46:2e:43:97:37:10:69:8b:4a:60:bd:
53:b2:e2:36:a7:18:4b:b4:95:94:dc:31:b7:94:7b:d5:70:a0:
65:91:12:a5:db:3a:98:c2:87:af:b6:2f:e5:20:d2:b0:9b:f8:
d1:4a:26:30:a1:2e:4b:53:8c:b6:96:a6:b4:0f:b5:71:24:98:
e2:44:da:43:42:ad:29:17:87:f2:18:03:90:93:38:af:96:54:
da:27:a4:c9:f2:54:46:66:bf:bd:d5:4d:d4:bc:b9:93:7e:13:
3d:ce:e9:9b:3d:dc:88:ea:9b:c4:c4:89:69:42:e9:4f:07:27:
48:51:0d:9f:17:73:c1:26:e8:50:26:00:28:09:88:c3:25:7a:
58:7e:5c:c5:61:92:fa:01:0d:96:e9:8a:f0:a6:13:42:f6:12:
e9:ad:c6:62:dc:15:2a:2b:7e:c8:a2:95:b8:2a:2d:50:aa:b9:
15:16:f3:ff:dc:0a:b2:c7:bf:e3:a2:c2:38:60:3d:60:4e:8a:
e3:4e:20:81:f3:4a:e9:38:f9:ce:0f:c8:9a:96:98:b6:92:b9:
f3:f1:d7:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZouIU7jrwgV2TSnZBQcwW8GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4NTgzMzhkZWE2YWU0ZGRiYjI0ODUwYTA3MDdmNDNhYTE3
OTRjM2YwHhcNMjUxMDI5MDQwMjA1WhcNMjUxMDMwMDQwMjA1WjAzMTEwLwYDVQQD
EygwMmNhZjEyNmRmNDk3YTdjMzQ1N2E4NDMzMzkyZGE4YjUyNGMwYTg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlb7SckLtz1Y1ZnBZThnL6rY5vkg
L8TdWm+1isZ6//cQ5KcEEG9y6rW6erTfnxY/5rGKJnyB/acnz/YPeyRXXZeg+EHe
+hpUVlSwf5HyTHqOvgms7kULRUA97MCVJVs6VFkxAQKp4AqWc7rxZbvQ24nO7up0
6tHLgtlMn18Rt2KIAX3som39ix2VdZE05JRFtnZ2Mwi+e0kNzyw7U8B/p26GAx2k
89zv4K3ntMZbnodfUxwQV7ITN96PGFTClc7SNbGcpLNCLAohKGHkmDUWSxsKSuRN
hJnrLdhw1ML3+aXRTjti83RU3hr/VDmVdKiNcX5APCkudcfrdqZf4vg2EQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFALK8SbfSXp8NFeoQzOS2otSTAqHMB8GA1UdIwQY
MBaAFOhYM43qauTduySFCgcH9DqheUw/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkZnemplcHE1TjI3SklVS0J3ZjBPcUY1VEQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8zNzY2NjItODdlYi00Yzk3LTkzNzMt
YTFkY2U2YWQxNTBjLzEvNkZnemplcHE1TjI3SklVS0J3ZjBPcUY1VEQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi8zNzY2NjItODdlYi00Yzk3LTkzNzMtYTFkY2U2YWQxNTBj
LzEvNkZnemplcHE1TjI3SklVS0J3ZjBPcUY1VEQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPrjsC0lH
jHMG/Aexwr5dS4WIsufqijJ4BxLSH894IOn2n1103ltmiWzqlUYuQ5c3EGmLSmC9
U7LiNqcYS7SVlNwxt5R71XCgZZESpds6mMKHr7Yv5SDSsJv40UomMKEuS1OMtpam
tA+1cSSY4kTaQ0KtKReH8hgDkJM4r5ZU2iekyfJURma/vdVN1Ly5k34TPc7pmz3c
iOqbxMSJaULpTwcnSFENnxdzwSboUCYAKAmIwyV6WH5cxWGS+gENlumK8KYTQvYS
6a3GYtwVKit+yKKVuCotUKq5FRbz/9wKsse/46LCOGA9YE6K404ggfNK6Tj5zg/I
mpaYtpK58/HXdA==
-----END CERTIFICATE-----
Generated at Wed Oct 29 09:07:12 2025 by rpki-client