Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/83f939-05f1-4afa-aa10-8606a724d891/1/s6t6iYCGh8w9rXug998LrOAZ92M.mft
File: s6t6iYCGh8w9rXug998LrOAZ92M.mft (raw, json)
Hash identifier: QY9cxgUiaOCd4KWt8zJ/cvyI49p6b4c1rjPaLponO9k=
Subject key identifier: E1:AF:0F:50:DF:4D:E0:80:04:46:61:BC:C9:81:3A:DD:F4:FB:5C:55
Authority key identifier: B3:AB:7A:89:80:86:87:CC:3D:AD:7B:A0:F7:DF:0B:AC:E0:19:F7:63
Certificate issuer: /CN=b3ab7a89808687cc3dad7ba0f7df0bace019f763
Certificate serial: 019A71B8D2363D76360DD20DEE5103874D7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s6t6iYCGh8w9rXug998LrOAZ92M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/83f939-05f1-4afa-aa10-8606a724d891/1/s6t6iYCGh8w9rXug998LrOAZ92M.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 07:02:09 +0000
Manifest this update: Tue 11 Nov 2025 07:02:09 +0000
Manifest next update: Wed 12 Nov 2025 07:02:09 +0000
Files and hashes: 1: UXfpgLEO-YbBFk6oonjH1Xm5FgM.roa (hash: AX0QM/Os3hFjFnv3WUz1vjkj1d0jSqhI2xTsC/dfmWk=)
2: s6t6iYCGh8w9rXug998LrOAZ92M.crl (hash: +pFaeWFHA1ugabOwkpnGxrS+8/85jaX2eqY9d48HFbY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/83f939-05f1-4afa-aa10-8606a724d891/1/s6t6iYCGh8w9rXug998LrOAZ92M.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/83f939-05f1-4afa-aa10-8606a724d891/1/s6t6iYCGh8w9rXug998LrOAZ92M.mft
rsync://rpki.ripe.net/repository/DEFAULT/s6t6iYCGh8w9rXug998LrOAZ92M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:d2:36:3d:76:36:0d:d2:0d:ee:51:03:87:4d:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3ab7a89808687cc3dad7ba0f7df0bace019f763
Validity
Not Before: Nov 11 07:02:09 2025 GMT
Not After : Nov 12 07:02:09 2025 GMT
Subject: CN=e1af0f50df4de080044661bcc9813addf4fb5c55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:29:55:a9:32:28:05:d6:aa:74:ec:b4:38:39:
87:ee:38:b1:02:64:f9:31:49:61:92:8b:5d:ea:34:
40:50:e8:36:76:7b:d3:69:3c:09:c2:ec:3e:30:7a:
72:0d:aa:bc:9e:00:0e:2c:46:74:dd:8d:10:e9:a9:
97:cb:7f:73:6e:28:62:cb:e3:bf:63:01:11:ab:2a:
bc:cf:e2:ed:2b:10:a2:df:0c:b1:21:f9:ef:41:80:
49:59:d2:19:23:29:f5:e7:eb:c8:c5:bf:70:e2:d2:
8f:b1:1a:28:af:fc:29:16:df:59:2a:8f:08:c5:c3:
4e:a2:72:9f:af:bf:9c:c3:f7:1b:3f:32:c4:02:0b:
42:40:82:91:e9:60:0a:e4:37:17:90:85:59:65:55:
48:63:d5:6e:ce:79:1d:51:ff:5b:2c:ba:e8:ad:40:
58:10:43:ec:36:3e:ed:b3:f1:e7:7b:e3:f4:5f:2b:
fc:9d:56:ea:58:a3:b0:bb:39:fb:65:ee:aa:e3:27:
89:90:0b:25:b0:06:bd:c8:64:45:c2:39:1d:42:7c:
1d:bf:5e:85:62:4e:24:f5:9f:f7:b1:37:7a:9b:12:
ff:da:32:3f:6a:ad:5e:ad:37:f6:8c:d8:29:cb:29:
e8:17:83:1d:5a:c1:1c:7d:67:3f:ce:70:ff:4b:30:
10:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:AF:0F:50:DF:4D:E0:80:04:46:61:BC:C9:81:3A:DD:F4:FB:5C:55
X509v3 Authority Key Identifier:
keyid:B3:AB:7A:89:80:86:87:CC:3D:AD:7B:A0:F7:DF:0B:AC:E0:19:F7:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s6t6iYCGh8w9rXug998LrOAZ92M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/83f939-05f1-4afa-aa10-8606a724d891/1/s6t6iYCGh8w9rXug998LrOAZ92M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/83f939-05f1-4afa-aa10-8606a724d891/1/s6t6iYCGh8w9rXug998LrOAZ92M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:8a:55:c5:66:43:5d:4d:9d:af:ff:97:19:3a:39:47:0d:8b:
b6:39:32:c2:09:e6:cd:51:af:bb:73:14:d3:f0:49:b0:6f:e9:
e0:e7:72:ae:00:1e:0a:b2:6e:a7:c0:3b:ad:e4:91:57:49:f1:
2d:d2:47:3c:24:1e:dd:aa:73:e0:82:aa:e6:e7:92:1f:fd:bb:
db:8e:ea:ba:9a:d6:0b:65:9c:81:66:14:d8:bb:88:0e:7a:36:
90:7f:d5:22:c4:d0:de:ee:4f:bd:7e:47:06:eb:9a:9e:d8:08:
d1:3a:f5:cc:54:73:95:5a:01:19:8a:23:cd:af:ca:91:a9:0c:
1a:84:d3:cc:f7:c9:3d:0a:00:8c:27:d9:07:ad:00:4d:f9:7f:
b3:5d:84:db:4d:e1:d0:4d:6c:06:cc:16:d5:35:c0:ba:ad:72:
b9:50:8a:45:ac:34:14:f9:bc:a6:fb:27:94:7d:28:1f:ea:0e:
62:8f:58:3f:b6:66:50:bd:76:fc:60:1a:4a:c5:1b:de:e3:72:
5a:a7:aa:20:86:86:73:4b:bb:f9:5d:e4:74:83:af:5e:35:e3:
d2:6d:12:5e:ff:77:38:02:19:6e:5e:74:e2:f3:85:86:b0:a8:
62:72:d3:56:23:28:d6:92:51:46:9f:31:d8:e8:bf:25:f3:d7:
08:30:d0:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:48:47 2025 by rpki-client