Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/07bab4-2ff9-4554-8234-be7771f18249/1/CS6YqFX-4C89_wcy1-GHkvOv92c.mft
File: CS6YqFX-4C89_wcy1-GHkvOv92c.mft (raw, json)
Hash identifier: 0R0Cf0S2nBfix3xa6NCtveeRex9Ta5esWftUIc3HqCU=
Subject key identifier: E5:50:39:3F:72:E5:70:5B:2E:68:BA:DD:EA:45:6C:8A:01:07:D6:5D
Authority key identifier: 09:2E:98:A8:55:FE:E0:2F:3D:FF:07:32:D7:E1:87:92:F3:AF:F7:67
Certificate issuer: /CN=092e98a855fee02f3dff0732d7e18792f3aff767
Certificate serial: 019A7293BD7880E090552FF269C58BFE8D9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CS6YqFX-4C89_wcy1-GHkvOv92c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/07bab4-2ff9-4554-8234-be7771f18249/1/CS6YqFX-4C89_wcy1-GHkvOv92c.mft
Manifest number: 059E
Signing time: Tue 11 Nov 2025 11:01:16 +0000
Manifest this update: Tue 11 Nov 2025 11:01:16 +0000
Manifest next update: Wed 12 Nov 2025 11:01:16 +0000
Files and hashes: 1: CS6YqFX-4C89_wcy1-GHkvOv92c.crl (hash: OXyhHkdqVBhN0hImsJpj2cmxU8MUQWDJGhlKzTlmQ8g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/07bab4-2ff9-4554-8234-be7771f18249/1/CS6YqFX-4C89_wcy1-GHkvOv92c.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/07bab4-2ff9-4554-8234-be7771f18249/1/CS6YqFX-4C89_wcy1-GHkvOv92c.mft
rsync://rpki.ripe.net/repository/DEFAULT/CS6YqFX-4C89_wcy1-GHkvOv92c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:bd:78:80:e0:90:55:2f:f2:69:c5:8b:fe:8d:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=092e98a855fee02f3dff0732d7e18792f3aff767
Validity
Not Before: Nov 11 11:01:16 2025 GMT
Not After : Nov 12 11:01:16 2025 GMT
Subject: CN=e550393f72e5705b2e68baddea456c8a0107d65d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4e:4f:be:ea:3d:ef:cd:1a:52:c4:f2:e3:2e:
b8:76:69:0f:84:87:e8:d0:81:51:d5:fa:dd:23:18:
70:0f:97:34:26:63:24:25:bb:b5:b2:78:97:bf:c0:
e9:d6:23:ba:8e:12:5b:b7:fd:82:aa:1f:f6:ca:86:
a7:fd:82:b0:e0:6f:5b:b8:15:c9:a2:a9:40:8f:4c:
f9:61:5b:e5:5a:20:90:15:20:ec:c9:80:c8:ff:c2:
9f:5b:47:a4:0b:6b:65:dc:b3:b1:d6:f1:02:b4:cb:
cf:ed:c6:2a:d4:b8:21:92:cd:9e:1e:fb:65:84:3e:
ab:3b:d5:6a:ee:0d:f3:55:5a:4e:3c:5c:c2:31:b1:
81:da:4d:1f:4d:f6:80:5b:b1:fa:ce:95:b6:8a:e1:
bd:33:1c:8d:00:d4:40:c5:aa:01:25:d1:c4:3e:74:
62:db:29:a3:ab:4d:2f:9a:8e:54:3b:65:81:e9:84:
c8:d9:ab:19:d2:bf:46:5d:80:d6:6c:08:5b:cb:b2:
84:f3:16:0d:fe:6d:43:be:43:4e:c7:36:fd:dd:b7:
ea:36:19:4b:44:80:10:06:86:57:eb:6f:73:f6:44:
0a:73:40:34:0a:24:77:6b:f1:7e:d3:06:5a:8a:a3:
cf:62:b3:06:04:81:9b:9b:61:1c:a0:1f:ce:ff:53:
a3:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:50:39:3F:72:E5:70:5B:2E:68:BA:DD:EA:45:6C:8A:01:07:D6:5D
X509v3 Authority Key Identifier:
keyid:09:2E:98:A8:55:FE:E0:2F:3D:FF:07:32:D7:E1:87:92:F3:AF:F7:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CS6YqFX-4C89_wcy1-GHkvOv92c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/07bab4-2ff9-4554-8234-be7771f18249/1/CS6YqFX-4C89_wcy1-GHkvOv92c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/07bab4-2ff9-4554-8234-be7771f18249/1/CS6YqFX-4C89_wcy1-GHkvOv92c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:b3:fa:bc:fa:ab:c7:a1:dd:d9:d9:2c:f6:b5:ec:78:b5:79:
f7:56:cb:99:1f:e2:21:a4:d5:3d:e3:d9:0b:50:98:c2:7b:ec:
01:e0:51:00:ab:c9:32:d8:bf:63:b5:d8:74:8a:af:6b:d7:40:
ba:db:87:e4:17:0d:f4:86:65:29:4c:9f:46:fe:7e:87:8d:b4:
83:22:6f:a3:26:94:66:07:d4:b0:27:22:0f:76:b8:11:0e:43:
33:56:a8:81:bd:f2:7d:14:c6:a7:48:8e:62:bc:03:ec:8b:8e:
e5:0b:8c:81:f4:0f:b4:9a:34:38:ff:ab:ef:17:df:1f:33:e9:
5c:6b:34:79:53:fd:6c:b0:20:0d:1b:1e:a9:a1:41:c4:40:e0:
57:d8:37:56:63:63:97:77:a9:b6:d8:b2:9e:00:73:b1:a0:94:
d8:48:c2:37:c5:2b:ea:86:f3:16:86:76:9a:94:52:44:db:e7:
62:35:3f:08:54:54:df:1a:03:49:3d:03:2a:79:a5:c9:f9:45:
09:cf:01:8b:3b:79:3e:ea:81:73:86:d8:0f:b9:64:75:cc:34:
93:cb:41:77:88:fd:1a:c9:e1:c1:26:15:c1:fd:08:35:c0:e1:
14:be:04:33:2e:94:61:a4:20:e7:8a:d4:c2:1c:da:26:8c:fb:
f5:f4:a5:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyk714gOCQVS/yacWL/o2aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5MmU5OGE4NTVmZWUwMmYzZGZmMDczMmQ3ZTE4NzkyZjNh
ZmY3NjcwHhcNMjUxMTExMTEwMTE2WhcNMjUxMTEyMTEwMTE2WjAzMTEwLwYDVQQD
EyhlNTUwMzkzZjcyZTU3MDViMmU2OGJhZGRlYTQ1NmM4YTAxMDdkNjVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxk5Pvuo9780aUsTy4y64dmkPhIfo
0IFR1frdIxhwD5c0JmMkJbu1sniXv8Dp1iO6jhJbt/2Cqh/2yoan/YKw4G9buBXJ
oqlAj0z5YVvlWiCQFSDsyYDI/8KfW0ekC2tl3LOx1vECtMvP7cYq1Lghks2eHvtl
hD6rO9Vq7g3zVVpOPFzCMbGB2k0fTfaAW7H6zpW2iuG9MxyNANRAxaoBJdHEPnRi
2ymjq00vmo5UO2WB6YTI2asZ0r9GXYDWbAhby7KE8xYN/m1DvkNOxzb93bfqNhlL
RIAQBoZX629z9kQKc0A0CiR3a/F+0wZaiqPPYrMGBIGbm2EcoB/O/1Oj0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOVQOT9y5XBbLmi63epFbIoBB9ZdMB8GA1UdIwQY
MBaAFAkumKhV/uAvPf8HMtfhh5Lzr/dnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1M2WXFGWC00Qzg5X3djeTEtR0hrdk92OTJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi8wN2JhYjQtMmZmOS00NTU0LTgyMzQt
YmU3NzcxZjE4MjQ5LzEvQ1M2WXFGWC00Qzg5X3djeTEtR0hrdk92OTJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi8wN2JhYjQtMmZmOS00NTU0LTgyMzQtYmU3NzcxZjE4MjQ5
LzEvQ1M2WXFGWC00Qzg5X3djeTEtR0hrdk92OTJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAirP6vPqr
x6Hd2dks9rXseLV591bLmR/iIaTVPePZC1CYwnvsAeBRAKvJMti/Y7XYdIqva9dA
utuH5BcN9IZlKUyfRv5+h420gyJvoyaUZgfUsCciD3a4EQ5DM1aogb3yfRTGp0iO
YrwD7IuO5QuMgfQPtJo0OP+r7xffHzPpXGs0eVP9bLAgDRseqaFBxEDgV9g3VmNj
l3epttiyngBzsaCU2EjCN8Ur6obzFoZ2mpRSRNvnYjU/CFRU3xoDST0DKnmlyflF
Cc8Bizt5PuqBc4bYD7lkdcw0k8tBd4j9GsnhwSYVwf0INcDhFL4EMy6UYaQg54rU
whzaJoz79fSlNg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:42:48 2025 by rpki-client