Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/e4ffc5-fb8d-4c40-8b73-bfeb7cea209d/1/S6_0itEUWxAMeD-3r7bzAovY804.mft
File: S6_0itEUWxAMeD-3r7bzAovY804.mft (raw, json)
Hash identifier: DUT5PVgQ+hLtooznRZfLUYKdzhmeOGFW5S5uL+HUVAw=
Subject key identifier: B8:57:8B:2F:E0:59:F5:D9:40:C8:A8:35:A9:BC:07:EA:DF:62:FC:83
Authority key identifier: 4B:AF:F4:8A:D1:14:5B:10:0C:78:3F:B7:AF:B6:F3:02:8B:D8:F3:4E
Certificate issuer: /CN=4baff48ad1145b100c783fb7afb6f3028bd8f34e
Certificate serial: 019A21AD91886FECFC8888488FC131BC67C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S6_0itEUWxAMeD-3r7bzAovY804.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/e4ffc5-fb8d-4c40-8b73-bfeb7cea209d/1/S6_0itEUWxAMeD-3r7bzAovY804.mft
Manifest number: 0E2E
Signing time: Sun 26 Oct 2025 18:00:14 +0000
Manifest this update: Sun 26 Oct 2025 18:00:14 +0000
Manifest next update: Mon 27 Oct 2025 18:00:14 +0000
Files and hashes: 1: 07VM5GQDyy0wcSk66eg9Nc4GYr0.roa (hash: tZR04Bh0g3Sbqjc1Ej/IqbvRwZJEdNyq0qHOrpzegq8=)
2: S6_0itEUWxAMeD-3r7bzAovY804.crl (hash: 3KSh3dkbcWApN5y29V0LaoKQXjZyOEV6Zu91B4XISok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/e4ffc5-fb8d-4c40-8b73-bfeb7cea209d/1/S6_0itEUWxAMeD-3r7bzAovY804.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/e4ffc5-fb8d-4c40-8b73-bfeb7cea209d/1/S6_0itEUWxAMeD-3r7bzAovY804.mft
rsync://rpki.ripe.net/repository/DEFAULT/S6_0itEUWxAMeD-3r7bzAovY804.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 18:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:ad:91:88:6f:ec:fc:88:88:48:8f:c1:31:bc:67:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4baff48ad1145b100c783fb7afb6f3028bd8f34e
Validity
Not Before: Oct 26 18:00:14 2025 GMT
Not After : Oct 27 18:00:14 2025 GMT
Subject: CN=b8578b2fe059f5d940c8a835a9bc07eadf62fc83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e3:df:ea:6e:48:54:f7:f0:08:82:34:d5:dc:
72:86:bd:7a:90:dc:b5:c4:26:fa:11:89:c6:94:ac:
f2:9d:cd:42:20:a7:24:b8:5b:67:ab:3f:f1:45:0e:
fb:ea:37:cc:f2:a7:68:a1:7a:2b:d8:63:68:b9:b2:
8c:5d:7f:60:b5:6a:01:87:2b:8d:e6:27:98:ad:68:
ed:90:36:f7:65:81:87:f2:8a:60:ae:a9:ca:d9:53:
90:a5:34:b2:d5:f3:b2:e0:90:83:66:64:10:7a:bb:
37:40:df:a5:6b:fe:82:b9:87:2c:24:b2:dd:81:5a:
f1:62:ed:29:b8:60:bb:d3:3f:76:b8:e9:00:0a:2c:
76:85:8f:16:f5:ef:de:d7:99:38:8f:b5:3c:82:8a:
0f:47:41:34:e9:1c:7c:55:a3:75:a2:b4:3c:0d:b8:
a0:d6:5c:e1:5e:52:6d:72:7d:33:f5:91:9f:43:65:
ad:8d:3f:48:5d:ed:b8:65:f7:05:0b:51:bc:ae:5e:
c0:d5:74:ce:98:ce:46:62:7e:8b:f2:de:0e:14:2a:
79:53:c6:ff:6e:da:27:a9:f1:e4:a0:91:39:8e:26:
f0:9b:70:bc:ca:78:92:f6:0a:ba:ca:21:dc:08:7a:
e5:30:9b:a6:98:ce:3a:06:6f:35:84:70:5b:32:c7:
7f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:57:8B:2F:E0:59:F5:D9:40:C8:A8:35:A9:BC:07:EA:DF:62:FC:83
X509v3 Authority Key Identifier:
keyid:4B:AF:F4:8A:D1:14:5B:10:0C:78:3F:B7:AF:B6:F3:02:8B:D8:F3:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S6_0itEUWxAMeD-3r7bzAovY804.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e4ffc5-fb8d-4c40-8b73-bfeb7cea209d/1/S6_0itEUWxAMeD-3r7bzAovY804.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e4ffc5-fb8d-4c40-8b73-bfeb7cea209d/1/S6_0itEUWxAMeD-3r7bzAovY804.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:20:71:9d:21:c8:02:02:12:bc:79:bb:4a:ff:2e:08:65:10:
dc:27:fe:80:7a:c8:dc:e2:5c:a8:f7:62:3c:86:b3:76:ed:a5:
9c:03:ef:8d:42:67:6d:be:b7:35:21:a7:a1:0d:6e:46:69:69:
be:2d:cf:5d:bd:0d:1f:41:51:ed:bf:56:54:ba:1f:42:31:82:
c7:ce:c2:79:2a:2f:81:18:24:d5:76:ed:40:6f:bb:78:1d:1d:
44:02:88:5e:1d:20:15:52:1d:98:4f:4d:2f:01:de:c4:44:09:
d5:f7:dd:cf:27:61:76:a8:83:3a:d7:78:41:e1:cc:f1:67:cb:
8c:00:8a:77:9f:86:e0:e3:33:8a:58:67:84:99:92:61:70:27:
c3:d9:62:92:8c:55:e7:ae:9b:62:6d:f8:0e:1d:07:0a:d5:0b:
26:a4:16:ba:18:ba:94:dd:b1:36:93:20:83:0f:39:f3:5f:88:
fb:48:7e:ff:14:3c:b5:7f:51:5f:93:49:2b:d1:de:42:86:0c:
1e:05:3c:ec:b0:0e:14:14:86:92:e4:1b:d3:05:7a:af:10:66:
d1:6d:02:64:7b:b6:41:04:6f:9a:73:92:7c:e7:0a:60:2e:c2:
09:9c:80:5c:9e:8f:0f:1b:57:13:6c:f4:cf:a4:63:e6:a8:c0:
d6:0a:78:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 01:41:45 2025 by rpki-client