Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/3f2772-3da3-4921-9c52-b0b06eb344fb/1/S6XEBCZt6xbZx4qpLoAtg_uibHE.mft
File: S6XEBCZt6xbZx4qpLoAtg_uibHE.mft (raw, json)
Hash identifier: L2kTUuOssiMZHHCgF1q46IPyyiFnPa8zO39dMTrGdYI=
Subject key identifier: F9:41:F8:E1:56:F0:AE:58:65:D7:40:2B:89:64:04:4F:91:85:C6:17
Authority key identifier: 4B:A5:C4:04:26:6D:EB:16:D9:C7:8A:A9:2E:80:2D:83:FB:A2:6C:71
Certificate issuer: /CN=4ba5c404266deb16d9c78aa92e802d83fba26c71
Certificate serial: 019A7293554A4EA63FA1E18359A0A93D287F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S6XEBCZt6xbZx4qpLoAtg_uibHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/3f2772-3da3-4921-9c52-b0b06eb344fb/1/S6XEBCZt6xbZx4qpLoAtg_uibHE.mft
Manifest number: 0623
Signing time: Tue 11 Nov 2025 11:00:49 +0000
Manifest this update: Tue 11 Nov 2025 11:00:49 +0000
Manifest next update: Wed 12 Nov 2025 11:00:49 +0000
Files and hashes: 1: S6XEBCZt6xbZx4qpLoAtg_uibHE.crl (hash: MnNvDxXyGY5VgKjVQgc+tiL0lqcKc08g+S/cggKXDUg=)
2: eQ54edgYKIUcfPhFEws-eNJ8BAA.roa (hash: OAjHXz/8YyId26wIY7CC8yapukZc0Z6aGp6x02zSR/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/3f2772-3da3-4921-9c52-b0b06eb344fb/1/S6XEBCZt6xbZx4qpLoAtg_uibHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/3f2772-3da3-4921-9c52-b0b06eb344fb/1/S6XEBCZt6xbZx4qpLoAtg_uibHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/S6XEBCZt6xbZx4qpLoAtg_uibHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:55:4a:4e:a6:3f:a1:e1:83:59:a0:a9:3d:28:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ba5c404266deb16d9c78aa92e802d83fba26c71
Validity
Not Before: Nov 11 11:00:49 2025 GMT
Not After : Nov 12 11:00:49 2025 GMT
Subject: CN=f941f8e156f0ae5865d7402b8964044f9185c617
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:63:25:ed:ae:02:d6:55:a8:f2:bf:47:3f:7c:
58:ea:b1:e9:98:62:b0:ae:01:4c:b8:d4:d1:cd:41:
d9:45:6a:6f:e5:74:ae:c3:36:fc:cc:5e:91:52:83:
54:20:d3:9d:1c:a8:49:26:67:95:2d:56:60:f2:f6:
46:7f:a5:9d:32:9e:4e:e8:a9:64:22:bd:92:b0:c9:
b5:e8:42:43:e7:73:47:86:eb:fb:9a:db:15:30:61:
ee:bd:4d:82:a1:89:94:22:13:fe:82:6a:eb:ee:2d:
d6:5e:76:5a:af:60:d2:c9:a0:89:54:86:1e:84:b9:
8e:a5:24:69:69:2f:c8:4b:0a:e8:b5:1c:d6:31:85:
0f:bc:91:1c:74:7f:37:d5:e5:0a:df:c4:4c:f5:f5:
24:9c:2c:99:83:1a:e4:84:e7:a2:24:b3:77:e7:9e:
90:8a:4f:f0:12:df:99:c7:66:a1:e6:40:38:f7:a5:
65:b9:81:83:96:5c:61:0c:b2:fd:77:2e:4f:52:e8:
01:7d:93:41:8a:2d:2a:f7:bd:58:07:83:4a:a5:20:
8c:9d:1b:8a:f6:ef:64:8d:a4:25:20:1b:8c:2c:27:
0b:f3:b4:06:9d:e1:f2:07:73:e7:0d:03:0c:b8:8b:
d7:b3:6b:75:25:91:f2:53:f0:d1:a6:8d:af:32:f9:
aa:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:41:F8:E1:56:F0:AE:58:65:D7:40:2B:89:64:04:4F:91:85:C6:17
X509v3 Authority Key Identifier:
keyid:4B:A5:C4:04:26:6D:EB:16:D9:C7:8A:A9:2E:80:2D:83:FB:A2:6C:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S6XEBCZt6xbZx4qpLoAtg_uibHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/3f2772-3da3-4921-9c52-b0b06eb344fb/1/S6XEBCZt6xbZx4qpLoAtg_uibHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/3f2772-3da3-4921-9c52-b0b06eb344fb/1/S6XEBCZt6xbZx4qpLoAtg_uibHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:d5:95:f0:84:3f:ee:51:8d:36:2a:17:eb:ee:1f:93:b7:80:
65:bb:5e:27:65:70:4c:6c:f5:03:4b:3f:78:42:c4:9d:22:23:
9b:6c:f9:31:be:bb:fc:c7:37:df:bc:6c:6c:b3:e7:3a:5a:ce:
68:62:51:0f:14:30:9d:6d:9d:48:56:68:3d:03:c8:2f:29:38:
fd:67:d2:ec:8d:ad:6a:10:55:45:92:b2:1b:f7:8b:15:e3:c9:
a0:ed:2f:ac:c9:4d:0a:6c:f6:ef:03:61:b0:73:91:b1:36:a3:
e5:6e:43:f3:f7:e1:30:09:97:55:63:4d:2c:64:0e:0a:39:c8:
88:3f:e5:2e:01:d4:39:f7:9d:b1:4a:9f:e2:0b:38:08:30:78:
83:21:bf:65:67:b3:1f:6d:73:84:a3:48:b8:9e:f0:7d:22:b2:
fa:8c:2a:98:4c:21:ff:c6:66:21:49:75:0e:cf:43:74:ee:25:
ea:0f:10:d9:91:f5:6f:a2:e3:b8:18:ba:4a:d0:78:d1:19:0c:
38:c8:13:d6:96:13:2c:04:3d:8c:aa:6f:1e:f5:aa:b6:b5:ee:
3b:11:6b:60:3a:74:a0:61:a1:9c:ec:60:04:16:6e:da:4c:1d:
02:01:66:e6:48:2a:3f:6f:2e:8a:55:9d:b5:35:68:f8:d6:85:
68:2b:31:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyk1VKTqY/oeGDWaCpPSh/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiYTVjNDA0MjY2ZGViMTZkOWM3OGFhOTJlODAyZDgzZmJh
MjZjNzEwHhcNMjUxMTExMTEwMDQ5WhcNMjUxMTEyMTEwMDQ5WjAzMTEwLwYDVQQD
EyhmOTQxZjhlMTU2ZjBhZTU4NjVkNzQwMmI4OTY0MDQ0ZjkxODVjNjE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2Ml7a4C1lWo8r9HP3xY6rHpmGKw
rgFMuNTRzUHZRWpv5XSuwzb8zF6RUoNUINOdHKhJJmeVLVZg8vZGf6WdMp5O6Klk
Ir2SsMm16EJD53NHhuv7mtsVMGHuvU2CoYmUIhP+gmrr7i3WXnZar2DSyaCJVIYe
hLmOpSRpaS/ISwrotRzWMYUPvJEcdH831eUK38RM9fUknCyZgxrkhOeiJLN3556Q
ik/wEt+Zx2ah5kA496VluYGDllxhDLL9dy5PUugBfZNBii0q971YB4NKpSCMnRuK
9u9kjaQlIBuMLCcL87QGneHyB3PnDQMMuIvXs2t1JZHyU/DRpo2vMvmqHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPlB+OFW8K5YZddAK4lkBE+RhcYXMB8GA1UdIwQY
MBaAFEulxAQmbesW2ceKqS6ALYP7omxxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzZYRUJDWnQ2eGJaeDRxcExvQXRnX3VpYkhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy8zZjI3NzItM2RhMy00OTIxLTljNTIt
YjBiMDZlYjM0NGZiLzEvUzZYRUJDWnQ2eGJaeDRxcExvQXRnX3VpYkhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy8zZjI3NzItM2RhMy00OTIxLTljNTItYjBiMDZlYjM0NGZi
LzEvUzZYRUJDWnQ2eGJaeDRxcExvQXRnX3VpYkhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATtWV8IQ/
7lGNNioX6+4fk7eAZbteJ2VwTGz1A0s/eELEnSIjm2z5Mb67/Mc337xsbLPnOlrO
aGJRDxQwnW2dSFZoPQPILyk4/WfS7I2tahBVRZKyG/eLFePJoO0vrMlNCmz27wNh
sHORsTaj5W5D8/fhMAmXVWNNLGQOCjnIiD/lLgHUOfedsUqf4gs4CDB4gyG/ZWez
H21zhKNIuJ7wfSKy+owqmEwh/8ZmIUl1Ds9DdO4l6g8Q2ZH1b6LjuBi6StB40RkM
OMgT1pYTLAQ9jKpvHvWqtrXuOxFrYDp0oGGhnOxgBBZu2kwdAgFm5kgqP28uilWd
tTVo+NaFaCsxEg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:53:27 2025 by rpki-client