Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.mft
File: 6EA7XkXNWL5fbF0z-lZatJIj49s.mft (raw, json)
Hash identifier: PH3lYmF//MZ1XnxGshpDrBXbJF4OScim7Rk905m6HSk=
Subject key identifier: 41:65:DC:12:F9:26:FB:B0:ED:C4:20:67:52:1B:C9:0A:7E:FC:58:50
Authority key identifier: E8:40:3B:5E:45:CD:58:BE:5F:6C:5D:33:FA:56:5A:B4:92:23:E3:DB
Certificate issuer: /CN=e8403b5e45cd58be5f6c5d33fa565ab49223e3db
Certificate serial: 019A24795150AD0857D82A0A90A7235E2AC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6EA7XkXNWL5fbF0z-lZatJIj49s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.mft
Manifest number: 170C
Signing time: Mon 27 Oct 2025 07:02:01 +0000
Manifest this update: Mon 27 Oct 2025 07:02:01 +0000
Manifest next update: Tue 28 Oct 2025 07:02:01 +0000
Files and hashes: 1: 6EA7XkXNWL5fbF0z-lZatJIj49s.crl (hash: 0Vibjb2b62GK5O4/dduMm60MBy9SaQp76v6aRixpK9c=)
2: 8ifx7KKJ18pryNHwF1j4-Fc64gM.roa (hash: VaIkHBJSp4yitHY1eixtkQXqBMvBgkd5WICUJNcd2K8=)
3: BO1ltB2867u60oaiDsy_-XsvL88.roa (hash: N3BRFXxAhwO4FPIhN2IGyHjmICRkpQTCZFJQ4I0pqRI=)
4: FoWNQ1gpwJC_vJTYQPjNq4EOPsk.roa (hash: y3YmRhUlwwI5SoZwTRIclzEsG8VBx6W5icxmsvJXHic=)
5: Q_XBBiAk4qHgl5xyRFCeUl8e3VE.roa (hash: sADh7knGI+0KPR0TD0XBdBdTNm9tN3/eGMw1gHZe2VI=)
6: cPczL7BSG5C-UOorLa44AbTPVd4.roa (hash: iC/fXBJJkXo1CbjOzv3JUUnSB7oUYt0rT8G7YWmNXm4=)
7: jIQE6oG-USVQsaVIsuMgVZrbPS8.roa (hash: tj3eChM7EThfXzNYj4xO6MKRf71fqyAWWs5gIA5ClkU=)
8: nCj-HurrM8I6ZuYeTftMdm0Nisw.roa (hash: f4dhcwMgx6vMMDpRWe3qOH6ZusltLaqZhMj8z/Gm8hQ=)
9: wPWSAuQLoLC84i_wxl8zAMN7M_I.roa (hash: AX93UGQS0hHBTCeSbLVGxtGmi8vpmUf8TykhODf8ipI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.mft
rsync://rpki.ripe.net/repository/DEFAULT/6EA7XkXNWL5fbF0z-lZatJIj49s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 07:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:79:51:50:ad:08:57:d8:2a:0a:90:a7:23:5e:2a:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8403b5e45cd58be5f6c5d33fa565ab49223e3db
Validity
Not Before: Oct 27 07:02:01 2025 GMT
Not After : Oct 28 07:02:01 2025 GMT
Subject: CN=4165dc12f926fbb0edc42067521bc90a7efc5850
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:fb:c5:cc:38:c9:cb:b8:51:e7:6b:71:ab:8c:
d9:72:4c:2e:7c:9d:c1:62:cc:ab:cc:0a:3e:e0:13:
f1:a2:3b:f8:3d:d2:0c:8c:68:2d:bf:b2:75:6f:c3:
46:ba:bc:51:8c:c5:3b:aa:49:73:c1:82:93:17:b5:
96:a5:a2:74:cf:68:59:b4:dc:f8:5c:32:93:5b:42:
e4:91:43:94:f9:f0:a5:40:b2:82:16:16:51:ae:49:
53:fd:16:86:55:bd:78:b9:4f:db:9d:f2:a1:68:17:
dc:0a:a9:77:e5:95:85:ac:14:d8:7a:ba:e3:10:7c:
ad:44:76:bc:78:16:0f:81:6a:ea:43:33:2c:94:a5:
67:e0:6e:4a:50:9f:4e:d3:e3:ea:70:45:0e:25:82:
f5:6f:fa:3c:68:20:45:c3:aa:ea:2b:52:56:ca:a0:
e8:99:2b:63:45:28:24:5f:4d:26:48:fc:ee:d6:59:
c9:3f:eb:af:c2:49:34:56:3d:09:ef:54:f3:49:b8:
59:51:93:45:69:10:ac:8f:9a:f6:52:74:ec:68:39:
7b:62:82:85:91:93:02:a0:44:f8:58:be:b8:cc:46:
7e:8f:28:be:15:13:68:1c:76:b4:ef:49:74:b2:c3:
26:58:b4:b4:34:0c:1b:ac:70:c4:d7:1f:82:cf:78:
7b:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:65:DC:12:F9:26:FB:B0:ED:C4:20:67:52:1B:C9:0A:7E:FC:58:50
X509v3 Authority Key Identifier:
keyid:E8:40:3B:5E:45:CD:58:BE:5F:6C:5D:33:FA:56:5A:B4:92:23:E3:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EA7XkXNWL5fbF0z-lZatJIj49s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:e4:51:b8:5d:90:1f:9d:18:0c:24:a1:e7:ed:a1:ea:35:dd:
34:91:2d:36:d9:68:6b:1f:aa:3f:cb:a1:76:43:76:59:90:fc:
b2:20:72:87:88:75:d7:81:e1:dc:55:03:b3:00:b2:a9:64:93:
5a:e8:86:7d:97:7f:bf:60:43:a1:b3:97:b4:15:e4:77:7e:a5:
eb:85:e1:17:a6:2a:98:46:94:cf:40:cc:e1:67:4f:57:b2:6f:
c3:1b:c4:9b:31:67:cd:b8:aa:4a:9e:fb:85:10:86:d9:73:1b:
dd:77:57:95:12:27:2f:af:0f:ff:40:1e:9d:43:a6:4b:05:b5:
8f:83:6b:ed:17:fb:c6:e2:85:84:94:a2:a4:fc:2d:d2:b1:39:
a6:76:fa:75:e4:1b:0f:64:17:34:f0:34:8f:db:55:ce:54:47:
5a:ea:52:cf:d9:11:6b:c6:16:1e:80:37:cd:86:e4:29:2a:21:
cd:24:d3:dd:42:02:9d:12:d0:64:25:9d:69:9a:57:ab:3f:a6:
4b:75:6e:3b:32:9d:e3:b7:4d:1c:92:ba:ff:c4:dd:58:a6:51:
1b:ba:01:00:a9:9f:2f:55:e7:e1:4b:77:40:8a:b3:96:88:dd:
84:d4:cf:65:65:b3:41:7f:a3:1d:3c:d2:b8:fd:34:ca:11:af:
76:89:bf:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZokeVFQrQhX2CoKkKcjXirJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4NDAzYjVlNDVjZDU4YmU1ZjZjNWQzM2ZhNTY1YWI0OTIy
M2UzZGIwHhcNMjUxMDI3MDcwMjAxWhcNMjUxMDI4MDcwMjAxWjAzMTEwLwYDVQQD
Eyg0MTY1ZGMxMmY5MjZmYmIwZWRjNDIwNjc1MjFiYzkwYTdlZmM1ODUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfvFzDjJy7hR52txq4zZckwufJ3B
YsyrzAo+4BPxojv4PdIMjGgtv7J1b8NGurxRjMU7qklzwYKTF7WWpaJ0z2hZtNz4
XDKTW0LkkUOU+fClQLKCFhZRrklT/RaGVb14uU/bnfKhaBfcCql35ZWFrBTYerrj
EHytRHa8eBYPgWrqQzMslKVn4G5KUJ9O0+PqcEUOJYL1b/o8aCBFw6rqK1JWyqDo
mStjRSgkX00mSPzu1lnJP+uvwkk0Vj0J71TzSbhZUZNFaRCsj5r2UnTsaDl7YoKF
kZMCoET4WL64zEZ+jyi+FRNoHHa070l0ssMmWLS0NAwbrHDE1x+Cz3h7hQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEFl3BL5Jvuw7cQgZ1IbyQp+/FhQMB8GA1UdIwQY
MBaAFOhAO15FzVi+X2xdM/pWWrSSI+PbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkVBN1hrWE5XTDVmYkYwei1sWmF0SklqNDlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy84OTc2ZWQtZGEwYS00OWE1LWE3NTEt
YTg3MWVjYzIxMmE2LzEvNkVBN1hrWE5XTDVmYkYwei1sWmF0SklqNDlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy84OTc2ZWQtZGEwYS00OWE1LWE3NTEtYTg3MWVjYzIxMmE2
LzEvNkVBN1hrWE5XTDVmYkYwei1sWmF0SklqNDlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaeRRuF2Q
H50YDCSh5+2h6jXdNJEtNtloax+qP8uhdkN2WZD8siByh4h114Hh3FUDswCyqWST
WuiGfZd/v2BDobOXtBXkd36l64XhF6YqmEaUz0DM4WdPV7JvwxvEmzFnzbiqSp77
hRCG2XMb3XdXlRInL68P/0AenUOmSwW1j4Nr7Rf7xuKFhJSipPwt0rE5pnb6deQb
D2QXNPA0j9tVzlRHWupSz9kRa8YWHoA3zYbkKSohzSTT3UICnRLQZCWdaZpXqz+m
S3VuOzKd47dNHJK6/8TdWKZRG7oBAKmfL1Xn4Ut3QIqzlojdhNTPZWWzQX+jHTzS
uP00yhGvdom/Zg==
-----END CERTIFICATE-----
Generated at Mon Oct 27 14:34:40 2025 by rpki-client