Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/37930a-288f-42b6-8c64-6603eb54bb3a/1/6QYQQQz4AUrB2-n2q8yBxmGHr74.mft
File: 6QYQQQz4AUrB2-n2q8yBxmGHr74.mft (raw, json)
Hash identifier: woFxdrfa+KEx79BKr22v+9WDIANFMhgZRPrRLKjuOrw=
Subject key identifier: FE:74:8B:79:70:14:0F:80:AF:D3:F8:AB:32:F0:9C:9A:FB:88:D9:F8
Authority key identifier: E9:06:10:41:0C:F8:01:4A:C1:DB:E9:F6:AB:CC:81:C6:61:87:AF:BE
Certificate issuer: /CN=e90610410cf8014ac1dbe9f6abcc81c66187afbe
Certificate serial: 019A71B7DF721C169F4403A30E0A5E54857A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6QYQQQz4AUrB2-n2q8yBxmGHr74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/37930a-288f-42b6-8c64-6603eb54bb3a/1/6QYQQQz4AUrB2-n2q8yBxmGHr74.mft
Manifest number: 0804
Signing time: Tue 11 Nov 2025 07:01:06 +0000
Manifest this update: Tue 11 Nov 2025 07:01:06 +0000
Manifest next update: Wed 12 Nov 2025 07:01:06 +0000
Files and hashes: 1: 6QYQQQz4AUrB2-n2q8yBxmGHr74.crl (hash: QDLzKVZlT25wd5LPs6f8/bJzxB2EKi4Bzs6uTACZR4A=)
2: QhkomV9_6ceJGU8VKTfbtyRNcXM.roa (hash: OB6SsMliHPSapAri1eb5Zi/y08KLAC6vdxvVZUeAlWU=)
3: gz7px3LCXwdOhvRIWMGfnzsiLoY.roa (hash: F70BUXb5RkAWoSm6MxaywQeDn9WJDpTvkQ2ap1NhBjE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/37930a-288f-42b6-8c64-6603eb54bb3a/1/6QYQQQz4AUrB2-n2q8yBxmGHr74.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/37930a-288f-42b6-8c64-6603eb54bb3a/1/6QYQQQz4AUrB2-n2q8yBxmGHr74.mft
rsync://rpki.ripe.net/repository/DEFAULT/6QYQQQz4AUrB2-n2q8yBxmGHr74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:df:72:1c:16:9f:44:03:a3:0e:0a:5e:54:85:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e90610410cf8014ac1dbe9f6abcc81c66187afbe
Validity
Not Before: Nov 11 07:01:06 2025 GMT
Not After : Nov 12 07:01:06 2025 GMT
Subject: CN=fe748b7970140f80afd3f8ab32f09c9afb88d9f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b4:84:b3:d1:b5:94:ba:7e:dc:1c:ef:c4:e2:
79:83:58:ef:d5:a4:36:20:f8:51:94:8c:51:ab:35:
1a:dd:44:91:f1:31:f4:b4:64:39:42:91:da:56:fe:
ae:6a:f4:53:21:bd:31:b6:70:bd:d5:f5:55:b7:49:
17:e2:08:a1:2a:f9:23:33:dd:22:23:b1:e1:51:51:
dc:f1:73:19:36:35:d6:85:a5:ca:b3:0e:58:9d:d6:
b5:b8:e8:3a:c3:c2:e6:14:e6:3d:88:8b:7f:2f:76:
d8:ea:5d:e8:5f:b2:9b:d3:74:7e:1f:6b:e5:31:0c:
8c:c6:32:d3:3f:b2:23:da:10:92:73:d7:e3:10:55:
e8:61:4d:76:16:73:70:c9:10:c2:1f:95:97:2e:39:
11:20:2f:77:20:40:11:33:43:c6:5f:56:38:c5:fe:
c6:89:5e:45:af:85:ce:94:b6:92:81:f1:fa:3a:9e:
15:6c:49:b0:74:97:2a:71:e7:7f:0e:97:0f:2f:19:
75:a6:22:2b:a7:02:84:8e:2f:d7:65:18:e4:16:a0:
c4:c1:6d:72:4a:09:cb:61:c7:7a:75:7e:3a:5b:f7:
25:6f:76:ff:52:56:bc:45:8b:68:4f:87:fa:87:dc:
c9:aa:f0:e5:2d:05:26:d9:58:be:7a:49:07:fe:28:
72:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:74:8B:79:70:14:0F:80:AF:D3:F8:AB:32:F0:9C:9A:FB:88:D9:F8
X509v3 Authority Key Identifier:
keyid:E9:06:10:41:0C:F8:01:4A:C1:DB:E9:F6:AB:CC:81:C6:61:87:AF:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6QYQQQz4AUrB2-n2q8yBxmGHr74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/37930a-288f-42b6-8c64-6603eb54bb3a/1/6QYQQQz4AUrB2-n2q8yBxmGHr74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/37930a-288f-42b6-8c64-6603eb54bb3a/1/6QYQQQz4AUrB2-n2q8yBxmGHr74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:77:1a:94:aa:2e:cd:ae:cc:b0:84:7a:04:a4:1c:04:6e:05:
9f:f0:99:d6:66:18:88:11:0b:88:16:98:6b:68:ad:bd:24:9f:
22:38:ea:55:8f:4a:4d:b9:c3:19:6b:64:cd:d3:46:58:92:01:
ad:e3:b2:3c:c2:10:d0:dc:49:08:ba:f8:24:90:f4:31:2f:05:
b2:85:b9:61:aa:70:a4:8c:8f:b2:a9:91:4f:68:7e:19:28:47:
71:e9:a7:db:99:5a:f7:b9:5a:9d:02:f6:6c:bd:19:9f:0f:51:
59:43:ba:bc:2c:34:67:fe:1a:7b:36:60:16:03:96:e0:65:e3:
51:b6:df:e4:97:0a:39:cd:04:05:34:18:9a:37:92:32:6c:94:
e4:aa:32:2d:38:3a:79:8d:6e:03:e3:be:f0:72:ac:69:ff:e0:
5d:42:db:58:57:6d:2a:1f:a2:02:d5:9d:01:47:64:42:99:06:
c0:b0:5f:3b:2c:2d:5c:17:bc:ad:7d:20:da:75:2a:d9:ee:1f:
07:7c:7b:7f:bd:22:34:e8:06:85:33:5b:b7:59:c1:2e:1e:9e:
9c:12:2f:5e:73:cd:f6:7f:5e:ec:1d:ea:c3:d7:e4:a5:b5:8b:
f2:68:83:b8:31:a5:70:50:b3:02:c5:63:dc:e9:56:c3:e6:96:
84:96:9b:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxt99yHBafRAOjDgpeVIV6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5MDYxMDQxMGNmODAxNGFjMWRiZTlmNmFiY2M4MWM2NjE4
N2FmYmUwHhcNMjUxMTExMDcwMTA2WhcNMjUxMTEyMDcwMTA2WjAzMTEwLwYDVQQD
EyhmZTc0OGI3OTcwMTQwZjgwYWZkM2Y4YWIzMmYwOWM5YWZiODhkOWY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwLSEs9G1lLp+3BzvxOJ5g1jv1aQ2
IPhRlIxRqzUa3USR8TH0tGQ5QpHaVv6uavRTIb0xtnC91fVVt0kX4gihKvkjM90i
I7HhUVHc8XMZNjXWhaXKsw5Ynda1uOg6w8LmFOY9iIt/L3bY6l3oX7Kb03R+H2vl
MQyMxjLTP7Ij2hCSc9fjEFXoYU12FnNwyRDCH5WXLjkRIC93IEARM0PGX1Y4xf7G
iV5Fr4XOlLaSgfH6Op4VbEmwdJcqced/DpcPLxl1piIrpwKEji/XZRjkFqDEwW1y
SgnLYcd6dX46W/clb3b/Ula8RYtoT4f6h9zJqvDlLQUm2Vi+ekkH/ihyGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP50i3lwFA+Ar9P4qzLwnJr7iNn4MB8GA1UdIwQY
MBaAFOkGEEEM+AFKwdvp9qvMgcZhh6++MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlFZUVFRejRBVXJCMi1uMnE4eUJ4bUdIcjc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8zNzkzMGEtMjg4Zi00MmI2LThjNjQt
NjYwM2ViNTRiYjNhLzEvNlFZUVFRejRBVXJCMi1uMnE4eUJ4bUdIcjc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS8zNzkzMGEtMjg4Zi00MmI2LThjNjQtNjYwM2ViNTRiYjNh
LzEvNlFZUVFRejRBVXJCMi1uMnE4eUJ4bUdIcjc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYHcalKou
za7MsIR6BKQcBG4Fn/CZ1mYYiBELiBaYa2itvSSfIjjqVY9KTbnDGWtkzdNGWJIB
reOyPMIQ0NxJCLr4JJD0MS8FsoW5YapwpIyPsqmRT2h+GShHcemn25la97lanQL2
bL0Znw9RWUO6vCw0Z/4aezZgFgOW4GXjUbbf5JcKOc0EBTQYmjeSMmyU5KoyLTg6
eY1uA+O+8HKsaf/gXULbWFdtKh+iAtWdAUdkQpkGwLBfOywtXBe8rX0g2nUq2e4f
B3x7f70iNOgGhTNbt1nBLh6enBIvXnPN9n9e7B3qw9fkpbWL8miDuDGlcFCzAsVj
3OlWw+aWhJabEw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:40:19 2025 by rpki-client