Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/31fded-6fde-45ce-b358-a26889ee22c2/1/S6eyT4fqUURtUZr9T-YEGRmOwBI.mft
File: S6eyT4fqUURtUZr9T-YEGRmOwBI.mft (raw, json)
Hash identifier: rz1H84nCT+o2bxemag3qYx/GTcGoWg09WbV8W94A05I=
Subject key identifier: DD:32:86:5A:93:D6:61:1D:07:60:DB:55:D0:AB:FF:4E:CB:26:61:78
Authority key identifier: 4B:A7:B2:4F:87:EA:51:44:6D:51:9A:FD:4F:E6:04:19:19:8E:C0:12
Certificate issuer: /CN=4ba7b24f87ea51446d519afd4fe60419198ec012
Certificate serial: 019A70DC15182C3C04A59BE383A52792C067
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S6eyT4fqUURtUZr9T-YEGRmOwBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/31fded-6fde-45ce-b358-a26889ee22c2/1/S6eyT4fqUURtUZr9T-YEGRmOwBI.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 03:01:02 +0000
Manifest this update: Tue 11 Nov 2025 03:01:02 +0000
Manifest next update: Wed 12 Nov 2025 03:01:02 +0000
Files and hashes: 1: S6eyT4fqUURtUZr9T-YEGRmOwBI.crl (hash: Xsb9rB2U4Nw6mKu8ueEbrPWuTbqhuPQz+usbis5Wv4Y=)
2: k-8joWHq0IXSAeF06EYlGj2AITA.roa (hash: OrXpbU3ZTRNxide1ly7PEoXo5UOkEqSaVuBCmUkwkxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/31fded-6fde-45ce-b358-a26889ee22c2/1/S6eyT4fqUURtUZr9T-YEGRmOwBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/31fded-6fde-45ce-b358-a26889ee22c2/1/S6eyT4fqUURtUZr9T-YEGRmOwBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/S6eyT4fqUURtUZr9T-YEGRmOwBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:15:18:2c:3c:04:a5:9b:e3:83:a5:27:92:c0:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ba7b24f87ea51446d519afd4fe60419198ec012
Validity
Not Before: Nov 11 03:01:02 2025 GMT
Not After : Nov 12 03:01:02 2025 GMT
Subject: CN=dd32865a93d6611d0760db55d0abff4ecb266178
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e6:52:fa:33:c6:20:60:26:0f:93:26:94:4b:
fd:ad:39:1d:c1:b4:ad:0b:6f:d2:20:ad:63:b6:7b:
c0:81:66:d0:4d:51:1f:25:3d:51:74:88:01:9b:05:
b8:ce:20:11:19:ff:b2:7d:7d:59:91:57:b9:ff:e7:
87:b3:a7:06:f5:d0:7e:95:25:05:6b:90:6e:93:88:
37:89:6e:d0:dc:93:51:0d:74:c0:1e:18:ab:a2:87:
ee:0a:2a:54:08:81:29:87:c0:a4:2f:7a:87:b0:47:
05:67:ad:90:88:bd:9c:45:dd:70:c6:55:33:f1:f5:
ee:4f:30:4f:d6:7b:f2:c6:fd:b4:85:43:a4:02:47:
de:d9:c1:68:e3:e1:07:c7:e3:b8:bd:78:3a:21:06:
44:b9:65:08:fd:5f:ac:61:2e:a6:fe:a3:38:80:80:
ad:bc:7b:03:79:1b:dc:bc:18:a5:3d:6d:b9:4f:3d:
04:a4:d6:5f:b0:c3:f3:e0:b0:cf:3f:ed:cb:ad:71:
c4:4d:88:8c:39:11:bd:0d:6b:72:e5:2d:91:9d:df:
73:84:46:5c:24:17:43:66:c6:69:13:8a:d0:46:97:
8b:88:e0:20:79:20:d8:7e:37:34:0c:97:01:f7:3c:
db:12:3f:db:a8:18:6f:c3:67:3d:98:c0:66:76:f1:
81:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:32:86:5A:93:D6:61:1D:07:60:DB:55:D0:AB:FF:4E:CB:26:61:78
X509v3 Authority Key Identifier:
keyid:4B:A7:B2:4F:87:EA:51:44:6D:51:9A:FD:4F:E6:04:19:19:8E:C0:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S6eyT4fqUURtUZr9T-YEGRmOwBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/31fded-6fde-45ce-b358-a26889ee22c2/1/S6eyT4fqUURtUZr9T-YEGRmOwBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/31fded-6fde-45ce-b358-a26889ee22c2/1/S6eyT4fqUURtUZr9T-YEGRmOwBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:4b:aa:2a:bd:56:b0:6b:f4:22:63:de:4b:e4:fc:83:1c:7b:
3b:c7:4e:32:71:0c:8a:6d:41:3a:c9:76:ff:e1:d3:6c:b3:2c:
db:32:b2:b9:14:33:3e:bd:99:a5:73:81:25:5e:b5:98:fe:ff:
cb:eb:cd:a7:0e:9a:ae:d7:e8:e7:4a:8e:92:19:61:0a:57:b7:
8b:c5:83:8f:b1:ad:6b:45:c2:cf:cf:c9:f7:ec:c9:c4:6f:70:
0e:d6:32:3a:19:db:50:3a:c9:51:5f:cd:2b:d4:21:bf:69:af:
84:96:2b:9c:bd:d3:1c:98:54:e6:5d:d2:ca:84:7f:d3:4b:12:
e9:9c:95:ae:74:86:92:97:07:d8:9f:0e:9a:9e:7f:bb:bb:a5:
59:f2:99:5f:0b:85:23:1f:1c:fb:81:bb:9f:b3:44:a9:e3:48:
08:af:9e:e9:c1:0c:c5:8a:14:7d:5c:ce:3d:7b:5e:30:b6:c9:
47:37:79:73:93:88:88:cb:e1:41:9a:00:76:d4:ea:c4:ae:1d:
bc:32:3e:76:f1:0b:93:87:f6:65:21:13:99:45:26:0a:5a:b6:
3a:51:08:d5:7c:3b:ab:70:f1:62:1a:62:bf:49:e5:82:55:8b:
71:5a:0e:3b:eb:ca:58:d5:a9:21:aa:62:32:28:79:3d:5b:5e:
51:16:c1:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpw3BUYLDwEpZvjg6UnksBnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiYTdiMjRmODdlYTUxNDQ2ZDUxOWFmZDRmZTYwNDE5MTk4
ZWMwMTIwHhcNMjUxMTExMDMwMTAyWhcNMjUxMTEyMDMwMTAyWjAzMTEwLwYDVQQD
EyhkZDMyODY1YTkzZDY2MTFkMDc2MGRiNTVkMGFiZmY0ZWNiMjY2MTc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoeZS+jPGIGAmD5MmlEv9rTkdwbSt
C2/SIK1jtnvAgWbQTVEfJT1RdIgBmwW4ziARGf+yfX1ZkVe5/+eHs6cG9dB+lSUF
a5Buk4g3iW7Q3JNRDXTAHhiroofuCipUCIEph8CkL3qHsEcFZ62QiL2cRd1wxlUz
8fXuTzBP1nvyxv20hUOkAkfe2cFo4+EHx+O4vXg6IQZEuWUI/V+sYS6m/qM4gICt
vHsDeRvcvBilPW25Tz0EpNZfsMPz4LDPP+3LrXHETYiMORG9DWty5S2Rnd9zhEZc
JBdDZsZpE4rQRpeLiOAgeSDYfjc0DJcB9zzbEj/bqBhvw2c9mMBmdvGBHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN0yhlqT1mEdB2DbVdCr/07LJmF4MB8GA1UdIwQY
MBaAFEunsk+H6lFEbVGa/U/mBBkZjsASMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzZleVQ0ZnFVVVJ0VVpyOVQtWUVHUm1Pd0JJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi8zMWZkZWQtNmZkZS00NWNlLWIzNTgt
YTI2ODg5ZWUyMmMyLzEvUzZleVQ0ZnFVVVJ0VVpyOVQtWUVHUm1Pd0JJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi8zMWZkZWQtNmZkZS00NWNlLWIzNTgtYTI2ODg5ZWUyMmMy
LzEvUzZleVQ0ZnFVVVJ0VVpyOVQtWUVHUm1Pd0JJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuEuqKr1W
sGv0ImPeS+T8gxx7O8dOMnEMim1BOsl2/+HTbLMs2zKyuRQzPr2ZpXOBJV61mP7/
y+vNpw6artfo50qOkhlhCle3i8WDj7Gta0XCz8/J9+zJxG9wDtYyOhnbUDrJUV/N
K9Qhv2mvhJYrnL3THJhU5l3SyoR/00sS6ZyVrnSGkpcH2J8Omp5/u7ulWfKZXwuF
Ix8c+4G7n7NEqeNICK+e6cEMxYoUfVzOPXteMLbJRzd5c5OIiMvhQZoAdtTqxK4d
vDI+dvELk4f2ZSETmUUmClq2OlEI1Xw7q3DxYhpiv0nlglWLcVoOO+vKWNWpIapi
Mih5PVteURbBrA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 13:15:19 2025 by rpki-client