Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/ce1643-c08d-40f6-9444-af714ad52f29/1/t6j-qPyoAMH8Se8thckuMjdSsO0.mft
File: t6j-qPyoAMH8Se8thckuMjdSsO0.mft (raw, json)
Hash identifier: gGl0/8+gnrVsKJqwrcKxt0oaaMXFwT0/JZ8SF6gXK1w=
Subject key identifier: 16:41:45:56:BC:60:CD:9F:F1:7A:13:29:65:41:71:5B:24:2A:C5:75
Authority key identifier: B7:A8:FE:A8:FC:A8:00:C1:FC:49:EF:2D:85:C9:2E:32:37:52:B0:ED
Certificate issuer: /CN=b7a8fea8fca800c1fc49ef2d85c92e323752b0ed
Certificate serial: 019A70DC7C46A4A44896A73BF538FAFF95FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t6j-qPyoAMH8Se8thckuMjdSsO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/ce1643-c08d-40f6-9444-af714ad52f29/1/t6j-qPyoAMH8Se8thckuMjdSsO0.mft
Manifest number: 16EC
Signing time: Tue 11 Nov 2025 03:01:29 +0000
Manifest this update: Tue 11 Nov 2025 03:01:29 +0000
Manifest next update: Wed 12 Nov 2025 03:01:29 +0000
Files and hashes: 1: 5TC6JtPaOArue3YcZw58kMkX_gQ.roa (hash: 8vxNN4NZRh1zE+O+pnXNTkgLjPcYvbg7k5S7vJax1zs=)
2: t6j-qPyoAMH8Se8thckuMjdSsO0.crl (hash: M85tbTiqfBn30H7aaQj1lYFU9tJ6P4AbFytgDQ+jxVg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/ce1643-c08d-40f6-9444-af714ad52f29/1/t6j-qPyoAMH8Se8thckuMjdSsO0.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/ce1643-c08d-40f6-9444-af714ad52f29/1/t6j-qPyoAMH8Se8thckuMjdSsO0.mft
rsync://rpki.ripe.net/repository/DEFAULT/t6j-qPyoAMH8Se8thckuMjdSsO0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:7c:46:a4:a4:48:96:a7:3b:f5:38:fa:ff:95:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7a8fea8fca800c1fc49ef2d85c92e323752b0ed
Validity
Not Before: Nov 11 03:01:29 2025 GMT
Not After : Nov 12 03:01:29 2025 GMT
Subject: CN=16414556bc60cd9ff17a13296541715b242ac575
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a2:9f:1d:2d:8e:d6:d7:d5:fe:7b:34:20:b4:
c7:52:64:29:7d:f1:d0:52:79:29:2a:07:e1:41:c1:
18:f6:c8:e9:73:cd:b0:31:7e:ed:8e:93:e5:f5:92:
68:06:6b:b5:60:33:cd:41:e7:7e:22:e6:66:64:6d:
0d:21:6d:6f:6e:f9:39:d3:e7:ad:c0:53:83:69:b4:
e3:02:97:89:98:d4:dd:1a:d6:b5:e2:f6:4e:f8:c1:
85:3a:cd:3f:7d:a4:13:0f:ad:2b:41:99:76:48:ab:
ef:cf:21:17:d5:33:d2:2b:e0:67:f0:d6:61:9d:cb:
52:00:f3:a5:d2:52:f0:f6:f7:6e:fd:a9:e4:21:c5:
38:93:ef:3d:fe:9c:f8:5c:ea:cd:28:67:26:dd:c3:
16:7e:92:bf:84:14:f1:a6:93:49:12:7f:8f:9c:2c:
62:60:c8:2b:4c:0f:c7:0c:ab:31:1d:ab:05:fd:55:
80:d0:4d:16:56:f1:f2:59:8c:f7:02:56:7c:8d:81:
a8:bf:0f:10:bc:96:0c:7e:d3:fe:8f:76:8e:58:ad:
7e:33:17:1c:7e:cf:18:8a:01:50:b9:5c:55:7c:21:
d9:fa:13:99:9a:a0:fc:92:b8:56:93:95:b5:1f:e2:
fe:ef:40:74:71:d6:7a:91:25:fc:49:9e:ba:e8:21:
7f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:41:45:56:BC:60:CD:9F:F1:7A:13:29:65:41:71:5B:24:2A:C5:75
X509v3 Authority Key Identifier:
keyid:B7:A8:FE:A8:FC:A8:00:C1:FC:49:EF:2D:85:C9:2E:32:37:52:B0:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6j-qPyoAMH8Se8thckuMjdSsO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ce1643-c08d-40f6-9444-af714ad52f29/1/t6j-qPyoAMH8Se8thckuMjdSsO0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ce1643-c08d-40f6-9444-af714ad52f29/1/t6j-qPyoAMH8Se8thckuMjdSsO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:29:0f:65:47:60:73:f6:c2:e8:62:25:60:fa:ca:19:cb:84:
dd:4f:d8:75:d7:37:7e:c7:c8:5a:7e:08:55:05:1e:51:ce:b0:
81:c6:81:d6:a6:63:e3:df:e9:cd:f2:e4:91:e6:78:b2:ea:74:
bb:0c:e7:9d:71:b1:d8:62:04:09:4c:be:12:fc:37:77:2b:d9:
68:69:0e:7c:da:83:7b:51:77:e2:4d:38:d1:54:0e:4d:2a:e9:
02:8f:67:2e:59:8c:eb:51:d5:70:83:ea:ed:1e:5e:af:49:91:
ca:fc:a8:08:70:ae:6c:fa:3f:ec:87:d8:a0:fa:c5:42:bb:38:
51:20:3f:f7:07:f8:e1:ad:a2:18:7f:63:c6:ac:df:c9:f6:b6:
37:ca:c3:04:51:bd:c2:f9:62:52:b3:17:98:6c:3f:c1:69:69:
fe:c4:6b:75:e4:33:b3:18:3a:4e:2a:ed:b4:09:f5:2f:7a:5f:
1e:da:ac:ba:ad:44:df:6a:3e:5d:55:8c:28:3d:9e:b1:a1:39:
0e:23:87:75:e0:df:67:07:cf:a3:1d:ed:0c:f1:bc:ab:1e:32:
cd:72:d8:21:3e:22:c7:59:b9:3d:fc:57:a3:17:c5:e9:19:56:
80:9f:b5:37:ed:cf:d1:31:a3:23:22:2b:fd:e6:24:a6:07:0c:
31:66:1d:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpw3HxGpKRIlqc79Tj6/5X9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3YThmZWE4ZmNhODAwYzFmYzQ5ZWYyZDg1YzkyZTMyMzc1
MmIwZWQwHhcNMjUxMTExMDMwMTI5WhcNMjUxMTEyMDMwMTI5WjAzMTEwLwYDVQQD
EygxNjQxNDU1NmJjNjBjZDlmZjE3YTEzMjk2NTQxNzE1YjI0MmFjNTc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6KfHS2O1tfV/ns0ILTHUmQpffHQ
UnkpKgfhQcEY9sjpc82wMX7tjpPl9ZJoBmu1YDPNQed+IuZmZG0NIW1vbvk50+et
wFODabTjApeJmNTdGta14vZO+MGFOs0/faQTD60rQZl2SKvvzyEX1TPSK+Bn8NZh
nctSAPOl0lLw9vdu/ankIcU4k+89/pz4XOrNKGcm3cMWfpK/hBTxppNJEn+PnCxi
YMgrTA/HDKsxHasF/VWA0E0WVvHyWYz3AlZ8jYGovw8QvJYMftP+j3aOWK1+Mxcc
fs8YigFQuVxVfCHZ+hOZmqD8krhWk5W1H+L+70B0cdZ6kSX8SZ666CF/yQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBZBRVa8YM2f8XoTKWVBcVskKsV1MB8GA1UdIwQY
MBaAFLeo/qj8qADB/EnvLYXJLjI3UrDtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDZqLXFQeW9BTUg4U2U4dGhja3VNamRTc08wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9jZTE2NDMtYzA4ZC00MGY2LTk0NDQt
YWY3MTRhZDUyZjI5LzEvdDZqLXFQeW9BTUg4U2U4dGhja3VNamRTc08wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9jZTE2NDMtYzA4ZC00MGY2LTk0NDQtYWY3MTRhZDUyZjI5
LzEvdDZqLXFQeW9BTUg4U2U4dGhja3VNamRTc08wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOikPZUdg
c/bC6GIlYPrKGcuE3U/Yddc3fsfIWn4IVQUeUc6wgcaB1qZj49/pzfLkkeZ4sup0
uwznnXGx2GIECUy+Evw3dyvZaGkOfNqDe1F34k040VQOTSrpAo9nLlmM61HVcIPq
7R5er0mRyvyoCHCubPo/7IfYoPrFQrs4USA/9wf44a2iGH9jxqzfyfa2N8rDBFG9
wvliUrMXmGw/wWlp/sRrdeQzsxg6TirttAn1L3pfHtqsuq1E32o+XVWMKD2esaE5
DiOHdeDfZwfPox3tDPG8qx4yzXLYIT4ix1m5PfxXoxfF6RlWgJ+1N+3P0TGjIyIr
/eYkpgcMMWYdQQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:27:15 2025 by rpki-client