Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.mft
File: 6EA7XkXNWL5fbF0z-lZatJIj49s.mft (raw, json)
Hash identifier: 5S7i4wf/XObJmqjih2sLo0UMV+kLnDpu3+NhAhmKzBM=
Subject key identifier: 0B:66:9C:44:D2:E6:2C:11:EF:5F:26:58:DB:C4:D7:94:A4:6D:AD:BB
Authority key identifier: E8:40:3B:5E:45:CD:58:BE:5F:6C:5D:33:FA:56:5A:B4:92:23:E3:DB
Certificate issuer: /CN=e8403b5e45cd58be5f6c5d33fa565ab49223e3db
Certificate serial: 01992F3565254FC46AC32290EF48D24A2222
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6EA7XkXNWL5fbF0z-lZatJIj49s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.mft
Manifest number: 168D
Signing time: Tue 09 Sep 2025 16:00:52 +0000
Manifest this update: Tue 09 Sep 2025 16:00:52 +0000
Manifest next update: Wed 10 Sep 2025 16:00:52 +0000
Files and hashes: 1: 6EA7XkXNWL5fbF0z-lZatJIj49s.crl (hash: gxSWS4CzDsuQLaJyO09CgFX/T9kIx8/+56qCmUneaHk=)
2: 8ifx7KKJ18pryNHwF1j4-Fc64gM.roa (hash: VaIkHBJSp4yitHY1eixtkQXqBMvBgkd5WICUJNcd2K8=)
3: BO1ltB2867u60oaiDsy_-XsvL88.roa (hash: N3BRFXxAhwO4FPIhN2IGyHjmICRkpQTCZFJQ4I0pqRI=)
4: FoWNQ1gpwJC_vJTYQPjNq4EOPsk.roa (hash: y3YmRhUlwwI5SoZwTRIclzEsG8VBx6W5icxmsvJXHic=)
5: Q_XBBiAk4qHgl5xyRFCeUl8e3VE.roa (hash: sADh7knGI+0KPR0TD0XBdBdTNm9tN3/eGMw1gHZe2VI=)
6: cPczL7BSG5C-UOorLa44AbTPVd4.roa (hash: iC/fXBJJkXo1CbjOzv3JUUnSB7oUYt0rT8G7YWmNXm4=)
7: jIQE6oG-USVQsaVIsuMgVZrbPS8.roa (hash: tj3eChM7EThfXzNYj4xO6MKRf71fqyAWWs5gIA5ClkU=)
8: nCj-HurrM8I6ZuYeTftMdm0Nisw.roa (hash: f4dhcwMgx6vMMDpRWe3qOH6ZusltLaqZhMj8z/Gm8hQ=)
9: wPWSAuQLoLC84i_wxl8zAMN7M_I.roa (hash: AX93UGQS0hHBTCeSbLVGxtGmi8vpmUf8TykhODf8ipI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.mft
rsync://rpki.ripe.net/repository/DEFAULT/6EA7XkXNWL5fbF0z-lZatJIj49s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 15:12:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2f:35:65:25:4f:c4:6a:c3:22:90:ef:48:d2:4a:22:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8403b5e45cd58be5f6c5d33fa565ab49223e3db
Validity
Not Before: Sep 9 16:00:52 2025 GMT
Not After : Sep 10 16:00:52 2025 GMT
Subject: CN=0b669c44d2e62c11ef5f2658dbc4d794a46dadbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:68:b1:3b:59:07:95:52:65:26:8d:18:96:81:
33:fc:d2:a3:de:84:97:ed:3a:16:71:d1:15:87:3e:
85:9e:ae:ee:7b:eb:e3:99:a9:8e:3d:5e:b5:bf:03:
ec:59:f2:bb:e0:ca:e7:6b:4e:77:31:ea:d6:19:91:
66:58:58:15:79:c7:b4:e9:7e:41:3c:9a:5a:74:fa:
1e:6f:8a:e1:a7:9a:b3:68:44:1b:9b:a6:13:d1:22:
26:e9:4f:af:27:b2:04:1e:3d:24:27:28:13:dd:fe:
9e:63:dc:c6:de:d1:d2:66:83:b7:22:55:f5:10:2a:
c1:31:7d:bb:ae:9b:cf:a4:ee:db:14:1f:5b:46:23:
54:7f:42:bd:4f:65:c0:e4:51:a7:ac:1b:e4:3c:a2:
0f:85:f3:90:33:e3:5d:d6:01:d3:c7:03:dc:b5:c0:
0f:36:47:28:32:2f:29:7d:56:48:d8:cf:62:97:ee:
31:b3:54:a6:2c:59:7b:7b:77:26:37:cb:b9:45:d7:
91:05:18:9f:75:df:b7:f9:aa:6b:c4:29:d3:99:2c:
72:bb:a1:c5:47:fe:b5:e5:e4:b5:cf:34:df:25:b8:
4d:f0:92:89:8d:3d:f8:a5:df:be:e0:b3:65:d9:bc:
f4:15:b1:07:c9:70:11:2d:ba:3a:92:b5:b9:e5:5c:
70:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:66:9C:44:D2:E6:2C:11:EF:5F:26:58:DB:C4:D7:94:A4:6D:AD:BB
X509v3 Authority Key Identifier:
keyid:E8:40:3B:5E:45:CD:58:BE:5F:6C:5D:33:FA:56:5A:B4:92:23:E3:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EA7XkXNWL5fbF0z-lZatJIj49s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:0a:bb:de:83:31:11:70:36:84:41:d6:f3:52:4b:1c:9a:d7:
ac:78:b0:12:94:79:83:67:9d:20:f3:de:d3:e2:10:bb:46:1f:
1d:94:97:92:51:77:72:e9:31:99:dd:0f:f0:66:18:67:20:26:
41:27:b0:10:15:da:9b:7c:3f:43:01:bb:fd:e3:a6:45:b0:20:
a6:98:80:a5:5b:65:eb:0b:41:ea:04:a3:5b:57:85:78:52:e5:
45:72:06:6a:86:0f:04:fe:d0:be:be:8d:f4:4c:19:7d:cd:98:
c9:b4:30:72:09:fc:ad:a9:94:15:f0:8b:a7:9f:34:3f:c5:69:
4a:6e:e1:85:38:2a:3a:44:05:0f:45:26:31:1e:4d:bc:7d:f2:
cd:da:bb:ea:7b:f2:d9:24:44:7f:53:68:1e:91:e2:db:35:c9:
d9:bb:cd:a0:f7:bd:71:4c:21:f1:0e:fd:21:06:8c:2b:df:46:
34:ca:ee:e6:20:e7:20:68:60:54:6d:b2:12:46:24:24:9d:0b:
74:85:72:c8:d4:6a:47:ea:0e:bc:ee:f2:51:15:45:b9:65:c8:
c3:78:7b:51:15:1c:de:f3:98:5f:62:c3:f0:f3:e9:f2:af:86:
52:7e:da:56:e4:ba:15:ef:49:87:9a:ce:14:f5:f4:57:cb:69:
a4:8b:5d:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkvNWUlT8RqwyKQ70jSSiIiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4NDAzYjVlNDVjZDU4YmU1ZjZjNWQzM2ZhNTY1YWI0OTIy
M2UzZGIwHhcNMjUwOTA5MTYwMDUyWhcNMjUwOTEwMTYwMDUyWjAzMTEwLwYDVQQD
EygwYjY2OWM0NGQyZTYyYzExZWY1ZjI2NThkYmM0ZDc5NGE0NmRhZGJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWixO1kHlVJlJo0YloEz/NKj3oSX
7ToWcdEVhz6Fnq7ue+vjmamOPV61vwPsWfK74Mrna053MerWGZFmWFgVece06X5B
PJpadPoeb4rhp5qzaEQbm6YT0SIm6U+vJ7IEHj0kJygT3f6eY9zG3tHSZoO3IlX1
ECrBMX27rpvPpO7bFB9bRiNUf0K9T2XA5FGnrBvkPKIPhfOQM+Nd1gHTxwPctcAP
NkcoMi8pfVZI2M9il+4xs1SmLFl7e3cmN8u5RdeRBRifdd+3+aprxCnTmSxyu6HF
R/615eS1zzTfJbhN8JKJjT34pd++4LNl2bz0FbEHyXARLbo6krW55VxwawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAtmnETS5iwR718mWNvE15Skba27MB8GA1UdIwQY
MBaAFOhAO15FzVi+X2xdM/pWWrSSI+PbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkVBN1hrWE5XTDVmYkYwei1sWmF0SklqNDlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy84OTc2ZWQtZGEwYS00OWE1LWE3NTEt
YTg3MWVjYzIxMmE2LzEvNkVBN1hrWE5XTDVmYkYwei1sWmF0SklqNDlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy84OTc2ZWQtZGEwYS00OWE1LWE3NTEtYTg3MWVjYzIxMmE2
LzEvNkVBN1hrWE5XTDVmYkYwei1sWmF0SklqNDlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQwq73oMx
EXA2hEHW81JLHJrXrHiwEpR5g2edIPPe0+IQu0YfHZSXklF3cukxmd0P8GYYZyAm
QSewEBXam3w/QwG7/eOmRbAgppiApVtl6wtB6gSjW1eFeFLlRXIGaoYPBP7Qvr6N
9EwZfc2YybQwcgn8ramUFfCLp580P8VpSm7hhTgqOkQFD0UmMR5NvH3yzdq76nvy
2SREf1NoHpHi2zXJ2bvNoPe9cUwh8Q79IQaMK99GNMru5iDnIGhgVG2yEkYkJJ0L
dIVyyNRqR+oOvO7yURVFuWXIw3h7URUc3vOYX2LD8PPp8q+GUn7aVuS6Fe9Jh5rO
FPX0V8tppItdjw==
-----END CERTIFICATE-----
Generated at Tue Sep 9 18:15:21 2025 by rpki-client