Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/9a72e0-fb9c-4e72-af34-dc48cecd1545/1/s6RxSmlcY88unErephcYJ9hm4pg.mft
File: s6RxSmlcY88unErephcYJ9hm4pg.mft (raw, json)
Hash identifier: YU85thBmdUndJVOLWiwSe7et3MZBjcEiV7SBN0ifVls=
Subject key identifier: 78:DC:10:80:C2:72:0F:FB:96:57:5C:49:C7:74:BC:8B:21:51:6F:F6
Authority key identifier: B3:A4:71:4A:69:5C:63:CF:2E:9C:4A:DE:A6:17:18:27:D8:66:E2:98
Certificate issuer: /CN=b3a4714a695c63cf2e9c4adea6171827d866e298
Certificate serial: 019A3345FD26B4724B1A56C7E803C8971640
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s6RxSmlcY88unErephcYJ9hm4pg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/9a72e0-fb9c-4e72-af34-dc48cecd1545/1/s6RxSmlcY88unErephcYJ9hm4pg.mft
Manifest number: 146A
Signing time: Thu 30 Oct 2025 04:00:15 +0000
Manifest this update: Thu 30 Oct 2025 04:00:15 +0000
Manifest next update: Fri 31 Oct 2025 04:00:15 +0000
Files and hashes: 1: UIgf9ajrQrDmAPpLPV90kRuj32I.roa (hash: AlX36a6BnwjhKrdVjNHSqwcRq3yixFLnOubI+UNJ9cQ=)
2: cBeaN8r92MWoqfdvhQH_ewA_rkk.roa (hash: yNYMjmHLoWXkkp0dQFYuWRyyRjSNzH1ulJxUwxp290s=)
3: s6RxSmlcY88unErephcYJ9hm4pg.crl (hash: vgiidQ+Wxmf4LwcTOWSW56y1nL9Kpz9Xx0lqpO4Ne5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/9a72e0-fb9c-4e72-af34-dc48cecd1545/1/s6RxSmlcY88unErephcYJ9hm4pg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/9a72e0-fb9c-4e72-af34-dc48cecd1545/1/s6RxSmlcY88unErephcYJ9hm4pg.mft
rsync://rpki.ripe.net/repository/DEFAULT/s6RxSmlcY88unErephcYJ9hm4pg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 31 Oct 2025 01:21:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:33:45:fd:26:b4:72:4b:1a:56:c7:e8:03:c8:97:16:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3a4714a695c63cf2e9c4adea6171827d866e298
Validity
Not Before: Oct 30 04:00:15 2025 GMT
Not After : Oct 31 04:00:15 2025 GMT
Subject: CN=78dc1080c2720ffb96575c49c774bc8b21516ff6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:6d:2b:15:36:e4:88:e7:e9:fd:9f:0b:37:8d:
2a:6c:6e:d6:01:87:ae:c6:2d:f6:e2:21:8e:c3:01:
4f:9c:5d:be:27:c2:f1:49:af:84:68:9f:9e:b4:6d:
19:62:14:11:6d:f0:a1:26:81:f0:bf:9a:86:dd:7c:
3b:4c:9f:b9:9c:44:a6:f4:9c:2f:0c:fb:8e:1f:9b:
93:1c:69:e6:6b:c6:87:4a:3e:cd:22:3f:47:11:d0:
ef:0c:9b:8a:26:61:34:eb:06:fa:fc:ab:53:47:e6:
86:cb:77:31:36:3d:93:95:b8:e3:92:05:78:bc:7f:
67:07:bb:29:5c:57:9d:da:a7:f7:42:11:e2:b6:0c:
99:17:8c:bb:5d:b9:95:17:76:ae:b8:41:13:5b:2c:
56:6c:3f:c4:b9:9d:b1:bc:2f:36:08:43:53:74:49:
9d:21:bf:fa:ed:ed:90:96:ac:b5:a2:b8:f3:c6:37:
c6:70:c8:95:b5:5d:e2:90:1e:1f:aa:b4:2b:6a:e1:
7b:e3:35:63:ef:33:96:70:b2:ff:22:97:71:2c:21:
92:8b:b7:46:67:cc:74:23:fb:5a:b6:58:2c:f3:fb:
8c:bf:46:61:e7:5d:49:d0:5a:bc:b1:bf:8b:56:f4:
38:6b:07:96:e2:93:b9:46:cb:ba:b8:62:ce:22:a0:
3a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:DC:10:80:C2:72:0F:FB:96:57:5C:49:C7:74:BC:8B:21:51:6F:F6
X509v3 Authority Key Identifier:
keyid:B3:A4:71:4A:69:5C:63:CF:2E:9C:4A:DE:A6:17:18:27:D8:66:E2:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s6RxSmlcY88unErephcYJ9hm4pg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9a72e0-fb9c-4e72-af34-dc48cecd1545/1/s6RxSmlcY88unErephcYJ9hm4pg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9a72e0-fb9c-4e72-af34-dc48cecd1545/1/s6RxSmlcY88unErephcYJ9hm4pg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:7b:a2:c6:54:b5:6f:dd:7a:5b:19:ba:b8:9f:b1:61:44:b0:
a1:87:a9:7a:49:3f:10:db:b9:6a:e4:7c:6d:89:bd:4a:c0:3a:
e9:ee:c0:50:d7:bb:33:4a:a3:8e:d7:88:4d:cb:28:29:81:53:
a6:72:62:0e:93:83:60:1e:4a:29:bc:ca:1f:49:a5:bc:f8:42:
c7:8d:3d:f8:b1:db:ff:9c:4d:bf:7b:e8:5b:b1:be:9e:99:48:
65:14:49:64:1d:68:ab:fe:02:2c:af:63:00:67:ed:dc:2c:15:
74:7b:f4:4c:c6:d1:d7:ca:98:d6:ca:7c:01:60:de:52:fb:02:
8d:19:06:f3:55:18:0f:2a:da:49:7a:b2:b5:66:08:5f:49:09:
d3:ee:3c:cf:42:04:ba:3b:3a:83:11:f5:da:63:92:f6:ab:a2:
d2:8e:38:9d:56:7c:90:d2:c1:8f:46:a5:88:9b:c1:a9:ae:c5:
cb:1f:d9:c5:bb:06:b3:83:01:ee:b2:dd:57:13:01:57:d0:c8:
48:c3:9d:89:7c:e9:6e:ac:d3:da:b3:02:fe:b9:74:20:44:d4:
60:3e:b9:99:04:ad:11:c4:b1:a7:8e:94:55:1e:a0:c3:f2:46:
80:e6:77:3b:0b:1c:35:79:d7:5e:05:c1:b6:ab:a0:29:6a:c9:
8c:4a:93:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 30 06:27:32 2025 by rpki-client