Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/7f3561-1ce7-43e1-89db-070b4256262b/1/6T5Zf3uhSto19PbFD4plg6BPzDU.mft
File: 6T5Zf3uhSto19PbFD4plg6BPzDU.mft (raw, json)
Hash identifier: lB5g8sTFu2U1Z7B78yaXxB9Z/Q3MP3TgS5FZj5+jE2o=
Subject key identifier: CE:DA:3D:75:02:80:43:97:4F:55:98:65:E4:AA:92:35:FD:DE:8B:0A
Authority key identifier: E9:3E:59:7F:7B:A1:4A:DA:35:F4:F6:C5:0F:8A:65:83:A0:4F:CC:35
Certificate issuer: /CN=e93e597f7ba14ada35f4f6c50f8a6583a04fcc35
Certificate serial: 019A70DC5CCC9A2D8FF33369D421C257868B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6T5Zf3uhSto19PbFD4plg6BPzDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/7f3561-1ce7-43e1-89db-070b4256262b/1/6T5Zf3uhSto19PbFD4plg6BPzDU.mft
Manifest number: 04AB
Signing time: Tue 11 Nov 2025 03:01:21 +0000
Manifest this update: Tue 11 Nov 2025 03:01:21 +0000
Manifest next update: Wed 12 Nov 2025 03:01:21 +0000
Files and hashes: 1: 6T5Zf3uhSto19PbFD4plg6BPzDU.crl (hash: ++qWPQgYS5DXgAaQGOsw+pdXzMhuAEn04IXvv40D+dg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/7f3561-1ce7-43e1-89db-070b4256262b/1/6T5Zf3uhSto19PbFD4plg6BPzDU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/7f3561-1ce7-43e1-89db-070b4256262b/1/6T5Zf3uhSto19PbFD4plg6BPzDU.mft
rsync://rpki.ripe.net/repository/DEFAULT/6T5Zf3uhSto19PbFD4plg6BPzDU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:5c:cc:9a:2d:8f:f3:33:69:d4:21:c2:57:86:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e93e597f7ba14ada35f4f6c50f8a6583a04fcc35
Validity
Not Before: Nov 11 03:01:21 2025 GMT
Not After : Nov 12 03:01:21 2025 GMT
Subject: CN=ceda3d75028043974f559865e4aa9235fdde8b0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:61:b4:93:b1:3b:92:16:2b:55:18:7f:66:46:
89:ff:6e:9b:37:ec:be:15:22:fe:97:48:be:4e:7d:
de:09:d0:e5:c6:85:e9:59:53:d5:92:5d:3f:9e:4b:
32:de:f8:b7:5d:50:06:eb:74:2e:e2:4c:d1:a7:7d:
64:f9:15:26:85:90:e0:a5:c0:06:91:8f:16:dc:bd:
3a:1e:a0:ab:dd:8e:e7:de:33:25:b1:dc:49:e1:06:
a9:f8:27:29:1a:3e:8a:60:89:27:fd:86:90:db:f4:
68:9f:00:65:3c:52:f7:07:fc:ff:47:bc:01:a8:83:
80:91:4b:2f:52:d0:da:e8:17:07:b6:5d:78:ca:7f:
2a:ec:0c:9b:9b:00:ba:04:72:bd:89:6e:5d:c0:30:
db:f6:ec:b2:f4:79:9f:56:d7:1d:65:cc:5e:4f:10:
e2:4d:40:d2:9b:56:ec:df:e0:22:75:dc:d1:51:93:
f4:b7:52:b2:c2:c7:12:96:b8:d7:40:dc:24:d6:c5:
19:0d:6f:85:4c:f3:15:4d:81:a4:23:4d:db:f6:85:
17:44:65:3f:5e:4e:cb:93:35:d0:78:a5:77:c2:a3:
b3:32:7a:03:6f:7c:2c:09:2d:64:cd:f4:07:59:04:
64:5f:b5:db:9e:cd:68:58:e1:ac:55:61:a8:3c:fc:
53:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:DA:3D:75:02:80:43:97:4F:55:98:65:E4:AA:92:35:FD:DE:8B:0A
X509v3 Authority Key Identifier:
keyid:E9:3E:59:7F:7B:A1:4A:DA:35:F4:F6:C5:0F:8A:65:83:A0:4F:CC:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6T5Zf3uhSto19PbFD4plg6BPzDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/7f3561-1ce7-43e1-89db-070b4256262b/1/6T5Zf3uhSto19PbFD4plg6BPzDU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/7f3561-1ce7-43e1-89db-070b4256262b/1/6T5Zf3uhSto19PbFD4plg6BPzDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:0f:dd:fe:01:8b:db:40:af:f4:58:0d:ef:c0:ff:b8:9a:0c:
e5:f9:a5:71:29:98:d7:ea:7b:a5:da:8d:e6:80:25:60:00:40:
ed:61:d1:63:ea:3e:22:0f:31:63:b9:f9:bd:95:35:e3:6d:61:
ed:b1:30:29:3a:a7:1e:34:f7:e5:18:b9:e6:0e:c2:28:1f:be:
50:f0:1e:29:51:1f:c8:23:64:a3:07:fa:20:20:14:7d:ef:19:
51:81:94:0b:ac:e4:9b:28:cd:26:f0:2b:1e:c8:39:6b:9b:61:
6c:61:45:48:1d:8f:74:f2:18:cd:90:e7:27:d3:96:99:d2:b1:
72:58:96:cc:40:d9:f5:e6:9a:e1:28:5c:29:ab:27:19:e2:19:
a2:b9:7f:c9:5a:85:48:24:d7:18:55:00:65:4e:00:ad:c8:58:
b9:04:65:00:82:72:bf:cc:e6:db:d4:7b:03:ee:88:6f:45:f7:
88:36:b7:3a:ff:0d:00:d5:9f:8e:53:e9:1b:03:98:92:9c:c6:
8d:01:4f:97:01:ab:8d:7a:f4:68:59:07:7a:cb:b3:2a:39:e9:
48:c7:69:68:be:03:34:33:38:1f:31:57:de:be:88:2e:2b:02:
6b:73:25:e6:e3:73:f9:06:04:5c:c9:90:3d:7c:d0:23:f8:d7:
ea:5e:77:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpw3FzMmi2P8zNp1CHCV4aLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5M2U1OTdmN2JhMTRhZGEzNWY0ZjZjNTBmOGE2NTgzYTA0
ZmNjMzUwHhcNMjUxMTExMDMwMTIxWhcNMjUxMTEyMDMwMTIxWjAzMTEwLwYDVQQD
EyhjZWRhM2Q3NTAyODA0Mzk3NGY1NTk4NjVlNGFhOTIzNWZkZGU4YjBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2G0k7E7khYrVRh/ZkaJ/26bN+y+
FSL+l0i+Tn3eCdDlxoXpWVPVkl0/nksy3vi3XVAG63Qu4kzRp31k+RUmhZDgpcAG
kY8W3L06HqCr3Y7n3jMlsdxJ4Qap+CcpGj6KYIkn/YaQ2/RonwBlPFL3B/z/R7wB
qIOAkUsvUtDa6BcHtl14yn8q7AybmwC6BHK9iW5dwDDb9uyy9HmfVtcdZcxeTxDi
TUDSm1bs3+AiddzRUZP0t1KywscSlrjXQNwk1sUZDW+FTPMVTYGkI03b9oUXRGU/
Xk7LkzXQeKV3wqOzMnoDb3wsCS1kzfQHWQRkX7Xbns1oWOGsVWGoPPxTdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM7aPXUCgEOXT1WYZeSqkjX93osKMB8GA1UdIwQY
MBaAFOk+WX97oUraNfT2xQ+KZYOgT8w1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlQ1WmYzdWhTdG8xOVBiRkQ0cGxnNkJQekRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC83ZjM1NjEtMWNlNy00M2UxLTg5ZGIt
MDcwYjQyNTYyNjJiLzEvNlQ1WmYzdWhTdG8xOVBiRkQ0cGxnNkJQekRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC83ZjM1NjEtMWNlNy00M2UxLTg5ZGItMDcwYjQyNTYyNjJi
LzEvNlQ1WmYzdWhTdG8xOVBiRkQ0cGxnNkJQekRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuw/d/gGL
20Cv9FgN78D/uJoM5fmlcSmY1+p7pdqN5oAlYABA7WHRY+o+Ig8xY7n5vZU1421h
7bEwKTqnHjT35Ri55g7CKB++UPAeKVEfyCNkowf6ICAUfe8ZUYGUC6zkmyjNJvAr
Hsg5a5thbGFFSB2PdPIYzZDnJ9OWmdKxcliWzEDZ9eaa4ShcKasnGeIZorl/yVqF
SCTXGFUAZU4ArchYuQRlAIJyv8zm29R7A+6Ib0X3iDa3Ov8NANWfjlPpGwOYkpzG
jQFPlwGrjXr0aFkHesuzKjnpSMdpaL4DNDM4HzFX3r6ILisCa3Ml5uNz+QYEXMmQ
PXzQI/jX6l539w==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:34 2025 by rpki-client