Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/5e80b4-cb16-4a35-b429-229ae9f728d6/1/6Oz45OybRCqVN0wqPH54Swdhh8w.mft
File: 6Oz45OybRCqVN0wqPH54Swdhh8w.mft (raw, json)
Hash identifier: LqJ1BpDZ6aXgVJ6RqD/pfEPeyGrxfeD0B0WCmUTGTl8=
Subject key identifier: E1:78:8E:8D:47:2B:38:AA:EB:EC:30:E9:4C:A6:65:B5:F4:A9:53:D9
Authority key identifier: E8:EC:F8:E4:EC:9B:44:2A:95:37:4C:2A:3C:7E:78:4B:07:61:87:CC
Certificate issuer: /CN=e8ecf8e4ec9b442a95374c2a3c7e784b076187cc
Certificate serial: 019A3233943426D32A7465FBA42D678AA99A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Oz45OybRCqVN0wqPH54Swdhh8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/5e80b4-cb16-4a35-b429-229ae9f728d6/1/6Oz45OybRCqVN0wqPH54Swdhh8w.mft
Manifest number: 168F
Signing time: Wed 29 Oct 2025 23:00:32 +0000
Manifest this update: Wed 29 Oct 2025 23:00:32 +0000
Manifest next update: Thu 30 Oct 2025 23:00:32 +0000
Files and hashes: 1: 1favdYYY_m115fJbPCqnNQTQC-4.roa (hash: JqdrpIAPsvsNkIpUiM7hC8jOVuzgCWUVOGVp30lphlM=)
2: 6Oz45OybRCqVN0wqPH54Swdhh8w.crl (hash: +7JrZUU4ZGX9Vh8IVORsFHPevLUIBAT14HNJ9qAfzfI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/5e80b4-cb16-4a35-b429-229ae9f728d6/1/6Oz45OybRCqVN0wqPH54Swdhh8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/5e80b4-cb16-4a35-b429-229ae9f728d6/1/6Oz45OybRCqVN0wqPH54Swdhh8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/6Oz45OybRCqVN0wqPH54Swdhh8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Oct 2025 23:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:32:33:94:34:26:d3:2a:74:65:fb:a4:2d:67:8a:a9:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8ecf8e4ec9b442a95374c2a3c7e784b076187cc
Validity
Not Before: Oct 29 23:00:32 2025 GMT
Not After : Oct 30 23:00:32 2025 GMT
Subject: CN=e1788e8d472b38aaebec30e94ca665b5f4a953d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:91:93:79:5c:8d:a0:56:4a:c5:e3:cd:04:c3:
7f:d5:a3:30:43:3a:31:58:a6:94:3f:a5:41:bc:51:
84:10:ac:10:db:99:28:1c:ee:b0:72:29:5b:7d:f4:
29:f0:79:d3:9a:0e:1b:19:78:cf:c8:75:96:54:0d:
78:6c:8c:c7:0c:40:e5:9c:49:8e:ad:50:78:ae:f0:
c0:1e:0f:28:1b:6b:96:96:3d:7a:2a:d0:b8:a3:8e:
08:67:10:b4:27:94:0d:64:56:c4:52:90:34:4c:18:
2e:77:b7:85:a3:34:73:a2:06:03:e6:de:82:62:a1:
80:00:7f:8f:18:b2:7f:e6:51:73:ab:30:83:35:79:
d2:f5:43:62:cf:8e:93:21:e0:33:3a:b9:83:87:3a:
3f:5d:f5:4c:c6:53:9f:da:bd:c1:15:4a:0f:0c:00:
ad:33:e0:3e:3d:5d:c8:c7:1c:b4:00:48:c0:54:c5:
c0:09:49:2e:41:f3:e6:51:8a:6c:5d:1e:42:58:dd:
77:84:10:ec:ef:f5:80:73:e4:f6:f8:22:48:76:9f:
33:2d:13:3c:78:64:e7:24:30:74:a0:73:ef:0e:7d:
40:f7:70:7f:7d:26:52:a7:18:54:71:2b:2c:fb:d7:
bd:1a:43:f2:72:73:9e:4b:3b:56:f9:ce:7b:9f:6f:
94:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:78:8E:8D:47:2B:38:AA:EB:EC:30:E9:4C:A6:65:B5:F4:A9:53:D9
X509v3 Authority Key Identifier:
keyid:E8:EC:F8:E4:EC:9B:44:2A:95:37:4C:2A:3C:7E:78:4B:07:61:87:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Oz45OybRCqVN0wqPH54Swdhh8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5e80b4-cb16-4a35-b429-229ae9f728d6/1/6Oz45OybRCqVN0wqPH54Swdhh8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5e80b4-cb16-4a35-b429-229ae9f728d6/1/6Oz45OybRCqVN0wqPH54Swdhh8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:28:c3:17:56:bf:de:80:98:1e:00:76:e1:d1:84:d8:6e:63:
1b:3d:ad:63:b3:c9:59:44:18:b9:31:1a:02:73:9e:27:bd:1f:
3c:2e:e2:6f:c8:77:6b:d7:43:24:29:13:d5:49:0c:45:ca:98:
f3:b3:9d:cc:c5:0b:26:d7:26:16:1d:9b:60:13:12:7f:e5:19:
90:52:cd:d2:54:35:ae:e3:e0:b2:0d:31:9b:6d:12:cc:7a:24:
4a:cb:ab:f8:dd:ac:dc:bc:46:cb:f6:25:24:a6:19:76:d0:7c:
b1:52:07:16:f7:38:2f:ab:bc:6d:81:43:98:b4:ae:07:fb:50:
08:c6:92:7c:5f:f1:aa:74:66:1a:f5:b1:fe:f5:43:15:76:4d:
d9:70:35:59:ca:9a:83:1b:14:23:01:71:af:39:4f:61:8e:8e:
6e:25:60:ef:96:f8:95:ec:16:a2:b2:8e:25:d3:b8:75:f1:0f:
9e:22:07:f4:e4:94:18:c3:fb:66:29:fe:b7:ef:a5:0d:55:e2:
85:0d:ca:0c:f5:ac:fc:bd:1b:fd:0b:98:da:93:e0:1b:cb:70:
d5:85:0d:14:8e:ed:3d:d9:1f:9c:35:ca:1d:ea:05:ca:c9:af:
ce:69:b3:54:da:e6:c8:1c:42:13:76:7e:1f:37:75:ef:14:94:
82:db:4d:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoyM5Q0JtMqdGX7pC1niqmaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4ZWNmOGU0ZWM5YjQ0MmE5NTM3NGMyYTNjN2U3ODRiMDc2
MTg3Y2MwHhcNMjUxMDI5MjMwMDMyWhcNMjUxMDMwMjMwMDMyWjAzMTEwLwYDVQQD
EyhlMTc4OGU4ZDQ3MmIzOGFhZWJlYzMwZTk0Y2E2NjViNWY0YTk1M2Q5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9pGTeVyNoFZKxePNBMN/1aMwQzox
WKaUP6VBvFGEEKwQ25koHO6wcilbffQp8HnTmg4bGXjPyHWWVA14bIzHDEDlnEmO
rVB4rvDAHg8oG2uWlj16KtC4o44IZxC0J5QNZFbEUpA0TBgud7eFozRzogYD5t6C
YqGAAH+PGLJ/5lFzqzCDNXnS9UNiz46TIeAzOrmDhzo/XfVMxlOf2r3BFUoPDACt
M+A+PV3Ixxy0AEjAVMXACUkuQfPmUYpsXR5CWN13hBDs7/WAc+T2+CJIdp8zLRM8
eGTnJDB0oHPvDn1A93B/fSZSpxhUcSss+9e9GkPycnOeSztW+c57n2+UIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOF4jo1HKziq6+ww6UymZbX0qVPZMB8GA1UdIwQY
MBaAFOjs+OTsm0QqlTdMKjx+eEsHYYfMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNk96NDVPeWJSQ3FWTjB3cVBINTRTd2RoaDh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS81ZTgwYjQtY2IxNi00YTM1LWI0Mjkt
MjI5YWU5ZjcyOGQ2LzEvNk96NDVPeWJSQ3FWTjB3cVBINTRTd2RoaDh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS81ZTgwYjQtY2IxNi00YTM1LWI0MjktMjI5YWU5ZjcyOGQ2
LzEvNk96NDVPeWJSQ3FWTjB3cVBINTRTd2RoaDh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACijDF1a/
3oCYHgB24dGE2G5jGz2tY7PJWUQYuTEaAnOeJ70fPC7ib8h3a9dDJCkT1UkMRcqY
87OdzMULJtcmFh2bYBMSf+UZkFLN0lQ1ruPgsg0xm20SzHokSsur+N2s3LxGy/Yl
JKYZdtB8sVIHFvc4L6u8bYFDmLSuB/tQCMaSfF/xqnRmGvWx/vVDFXZN2XA1Wcqa
gxsUIwFxrzlPYY6ObiVg75b4lewWorKOJdO4dfEPniIH9OSUGMP7Zin+t++lDVXi
hQ3KDPWs/L0b/QuY2pPgG8tw1YUNFI7tPdkfnDXKHeoFysmvzmmzVNrmyBxCE3Z+
Hzd17xSUgttNHw==
-----END CERTIFICATE-----
Generated at Thu Oct 30 08:13:36 2025 by rpki-client