Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/103e6b-1033-452e-82a4-9774bc226cce/1/w6PDZsu4xcf3NZGdFQovrwwI-F8.mft
File: w6PDZsu4xcf3NZGdFQovrwwI-F8.mft (raw, json)
Hash identifier: tbAI1wSPxAL0SYvWr21Iumw0UmEY0n8duwdn4JJAGWE=
Subject key identifier: CB:94:AD:29:34:BC:9F:6F:C3:7D:0C:95:FB:C2:D9:31:EF:DE:4C:7C
Authority key identifier: C3:A3:C3:66:CB:B8:C5:C7:F7:35:91:9D:15:0A:2F:AF:0C:08:F8:5F
Certificate issuer: /CN=c3a3c366cbb8c5c7f735919d150a2faf0c08f85f
Certificate serial: 019A70A51726A6AD8AF7407AD8BFE4084787
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w6PDZsu4xcf3NZGdFQovrwwI-F8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/103e6b-1033-452e-82a4-9774bc226cce/1/w6PDZsu4xcf3NZGdFQovrwwI-F8.mft
Manifest number: 06A5
Signing time: Tue 11 Nov 2025 02:00:58 +0000
Manifest this update: Tue 11 Nov 2025 02:00:58 +0000
Manifest next update: Wed 12 Nov 2025 02:00:58 +0000
Files and hashes: 1: w6PDZsu4xcf3NZGdFQovrwwI-F8.crl (hash: TIPGgIf6pafQGA4j8z1ZRsD60rPMOY/tfs+PooBq7pI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/103e6b-1033-452e-82a4-9774bc226cce/1/w6PDZsu4xcf3NZGdFQovrwwI-F8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/103e6b-1033-452e-82a4-9774bc226cce/1/w6PDZsu4xcf3NZGdFQovrwwI-F8.mft
rsync://rpki.ripe.net/repository/DEFAULT/w6PDZsu4xcf3NZGdFQovrwwI-F8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:17:26:a6:ad:8a:f7:40:7a:d8:bf:e4:08:47:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3a3c366cbb8c5c7f735919d150a2faf0c08f85f
Validity
Not Before: Nov 11 02:00:58 2025 GMT
Not After : Nov 12 02:00:58 2025 GMT
Subject: CN=cb94ad2934bc9f6fc37d0c95fbc2d931efde4c7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:19:54:fd:8b:82:6a:5b:ca:3d:ee:9c:f4:7a:
45:fd:c0:6e:0c:ff:80:e3:9e:c8:a6:bd:83:10:6f:
c5:be:71:f7:55:e5:37:ab:c6:47:51:7f:1f:d0:52:
07:45:7e:2d:af:08:e4:27:d3:f9:6b:86:79:21:4f:
9f:95:a9:ef:6b:65:95:28:03:73:7c:14:b5:25:1e:
eb:cc:7e:98:15:3b:54:4c:5b:68:9e:8c:7c:f7:a4:
48:2a:5a:a9:9b:31:97:c2:fd:3d:13:96:83:c9:f9:
1e:7a:31:8b:69:59:69:2b:9d:f6:16:40:4e:2b:2b:
be:7c:5b:aa:11:57:3d:67:63:5e:5d:af:f5:29:30:
1e:f0:d6:b6:fa:2e:b7:fc:9b:08:68:e7:da:c7:9e:
75:e6:0b:11:37:36:0a:2f:1a:21:a6:7f:42:4e:c6:
df:ec:47:31:20:35:3d:f9:07:a8:ad:d3:84:a8:f7:
fd:b7:9d:56:57:74:2e:39:4c:48:7b:f2:c5:44:78:
13:fc:40:76:dd:9f:5a:ab:b4:ac:e1:22:60:e1:ab:
ba:5c:22:75:f5:1c:75:58:4b:a1:b5:40:03:6e:a1:
7d:c3:8c:98:53:8a:ca:6a:69:43:81:fa:1a:29:f8:
b1:29:05:d7:34:fd:3e:6d:e6:84:a9:ac:30:f2:95:
71:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:94:AD:29:34:BC:9F:6F:C3:7D:0C:95:FB:C2:D9:31:EF:DE:4C:7C
X509v3 Authority Key Identifier:
keyid:C3:A3:C3:66:CB:B8:C5:C7:F7:35:91:9D:15:0A:2F:AF:0C:08:F8:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w6PDZsu4xcf3NZGdFQovrwwI-F8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/103e6b-1033-452e-82a4-9774bc226cce/1/w6PDZsu4xcf3NZGdFQovrwwI-F8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/103e6b-1033-452e-82a4-9774bc226cce/1/w6PDZsu4xcf3NZGdFQovrwwI-F8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:96:8c:06:43:8c:65:ab:79:39:0e:20:21:fc:03:fe:e4:bd:
8d:7a:79:97:19:44:c9:f3:1f:77:ea:c4:46:c5:bf:35:c3:09:
dc:fb:ec:64:ab:49:82:19:68:3f:60:73:89:07:7c:63:28:e4:
c0:a5:06:35:30:9c:9e:96:30:a4:1e:4d:d0:1b:94:a7:ce:5a:
2b:72:04:97:0f:28:dd:91:8d:df:14:e0:09:e0:a8:2e:48:fa:
8b:fd:2d:26:e4:0d:29:5c:9a:38:63:d2:01:f6:b8:6a:4b:1a:
3a:e8:bb:21:22:20:7d:bc:66:8c:9b:6a:3a:ea:9f:73:3e:9c:
d1:0d:e3:8e:53:48:21:2b:36:c0:00:53:19:e8:33:60:09:2b:
30:71:ed:ad:9e:e1:19:07:ad:ca:bf:f6:74:d7:0e:5f:eb:39:
b8:bb:01:b0:79:97:9e:3a:5d:39:15:5a:cd:93:98:b0:07:08:
76:79:85:0c:55:c0:04:9f:42:72:e5:d9:b3:58:e3:6b:57:48:
6e:9d:5c:d3:e4:90:6e:9b:18:f5:d8:25:6d:c1:df:d4:5a:8b:
9e:93:dc:5d:34:dd:e2:39:c9:2c:e7:6d:ff:25:0c:a8:dc:cf:
46:63:45:32:25:14:cc:f0:ff:2c:cc:61:c1:24:18:29:19:f7:
76:0b:19:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpwpRcmpq2K90B62L/kCEeHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzYTNjMzY2Y2JiOGM1YzdmNzM1OTE5ZDE1MGEyZmFmMGMw
OGY4NWYwHhcNMjUxMTExMDIwMDU4WhcNMjUxMTEyMDIwMDU4WjAzMTEwLwYDVQQD
EyhjYjk0YWQyOTM0YmM5ZjZmYzM3ZDBjOTVmYmMyZDkzMWVmZGU0YzdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjRlU/YuCalvKPe6c9HpF/cBuDP+A
457Ipr2DEG/FvnH3VeU3q8ZHUX8f0FIHRX4trwjkJ9P5a4Z5IU+flanva2WVKANz
fBS1JR7rzH6YFTtUTFtonox896RIKlqpmzGXwv09E5aDyfkeejGLaVlpK532FkBO
Kyu+fFuqEVc9Z2NeXa/1KTAe8Na2+i63/JsIaOfax5515gsRNzYKLxohpn9CTsbf
7EcxIDU9+QeordOEqPf9t51WV3QuOUxIe/LFRHgT/EB23Z9aq7Ss4SJg4au6XCJ1
9Rx1WEuhtUADbqF9w4yYU4rKamlDgfoaKfixKQXXNP0+beaEqaww8pVxjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMuUrSk0vJ9vw30MlfvC2THv3kx8MB8GA1UdIwQY
MBaAFMOjw2bLuMXH9zWRnRUKL68MCPhfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzZQRFpzdTR4Y2YzTlpHZEZRb3Zyd3dJLUY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC8xMDNlNmItMTAzMy00NTJlLTgyYTQt
OTc3NGJjMjI2Y2NlLzEvdzZQRFpzdTR4Y2YzTlpHZEZRb3Zyd3dJLUY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC8xMDNlNmItMTAzMy00NTJlLTgyYTQtOTc3NGJjMjI2Y2Nl
LzEvdzZQRFpzdTR4Y2YzTlpHZEZRb3Zyd3dJLUY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMJaMBkOM
Zat5OQ4gIfwD/uS9jXp5lxlEyfMfd+rERsW/NcMJ3PvsZKtJghloP2BziQd8Yyjk
wKUGNTCcnpYwpB5N0BuUp85aK3IElw8o3ZGN3xTgCeCoLkj6i/0tJuQNKVyaOGPS
Afa4aksaOui7ISIgfbxmjJtqOuqfcz6c0Q3jjlNIISs2wABTGegzYAkrMHHtrZ7h
GQetyr/2dNcOX+s5uLsBsHmXnjpdORVazZOYsAcIdnmFDFXABJ9CcuXZs1jja1dI
bp1c0+SQbpsY9dglbcHf1FqLnpPcXTTd4jnJLOdt/yUMqNzPRmNFMiUUzPD/LMxh
wSQYKRn3dgsZJw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:46:32 2025 by rpki-client