Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/93620e-7528-4aac-9212-c7857a033962/1/w6iCsQ8bqepLofp3BttkdH5ipBM.mft
File: w6iCsQ8bqepLofp3BttkdH5ipBM.mft (raw, json)
Hash identifier: KU8BnF9ePtDMZpRH+KkWmB1hSb3BO5FoN1ScmpGgttI=
Subject key identifier: 49:3F:B0:FD:0E:27:62:A8:91:BA:00:C2:DB:C3:62:E9:AA:72:10:B5
Authority key identifier: C3:A8:82:B1:0F:1B:A9:EA:4B:A1:FA:77:06:DB:64:74:7E:62:A4:13
Certificate issuer: /CN=c3a882b10f1ba9ea4ba1fa7706db64747e62a413
Certificate serial: 019A0591A2786F96680F85317A6C9C2AD685
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w6iCsQ8bqepLofp3BttkdH5ipBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/93620e-7528-4aac-9212-c7857a033962/1/w6iCsQ8bqepLofp3BttkdH5ipBM.mft
Manifest number: 16E6
Signing time: Tue 21 Oct 2025 07:00:21 +0000
Manifest this update: Tue 21 Oct 2025 07:00:21 +0000
Manifest next update: Wed 22 Oct 2025 07:00:21 +0000
Files and hashes: 1: a_tI6HP1FzzUH0r0poa89IN3meo.roa (hash: W0Z3kY29z8HP1pU9kcp4FsO8DLdrIX+XsxzLiYSWp8o=)
2: n66sSu3oH6YqRjQYMkqXYnUVvGI.roa (hash: oBf8U9TtdYD0BgLgRABjFu+My106UWYSpVHQ13ZhmvY=)
3: w6iCsQ8bqepLofp3BttkdH5ipBM.crl (hash: nlRTVuR2WYF+qevIRzyq9vUaeNp76Ng9InMRGuuMd/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/93620e-7528-4aac-9212-c7857a033962/1/w6iCsQ8bqepLofp3BttkdH5ipBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/93620e-7528-4aac-9212-c7857a033962/1/w6iCsQ8bqepLofp3BttkdH5ipBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/w6iCsQ8bqepLofp3BttkdH5ipBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 07:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:05:91:a2:78:6f:96:68:0f:85:31:7a:6c:9c:2a:d6:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3a882b10f1ba9ea4ba1fa7706db64747e62a413
Validity
Not Before: Oct 21 07:00:21 2025 GMT
Not After : Oct 22 07:00:21 2025 GMT
Subject: CN=493fb0fd0e2762a891ba00c2dbc362e9aa7210b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a0:b7:6b:2a:16:89:4a:01:f4:b0:94:4f:49:
3b:4d:d1:73:25:9e:64:19:51:e0:87:5a:18:1e:22:
3f:95:cf:c0:bf:20:80:1d:1c:0d:64:18:bd:5a:78:
d5:2b:86:03:ba:ad:96:8e:4a:2b:a5:ea:ff:84:b4:
76:46:e9:29:b0:36:d6:7f:51:1b:dc:af:93:cf:b8:
e6:12:86:7f:3a:b9:e6:34:a8:88:3a:65:45:da:4d:
a5:c4:b8:db:77:b9:be:2e:49:73:e5:dc:41:b5:83:
c9:38:67:fb:e2:e3:e6:fe:1e:6a:d5:4a:97:f3:31:
4b:c5:9c:08:d5:79:fa:e3:2c:81:83:18:48:8e:50:
b4:2b:40:6c:a8:b1:ed:cc:11:e5:ed:f6:a4:18:c3:
3c:18:32:72:96:27:fe:55:cc:a0:31:57:2c:d3:85:
99:d9:6b:3e:6b:6f:24:b8:6f:1a:2d:76:4e:68:b5:
56:61:29:be:f7:71:34:c6:4b:39:75:63:47:ec:13:
00:b8:8b:ee:79:db:7d:e0:cc:36:f9:2a:73:48:01:
de:44:8d:1c:3a:38:31:92:be:a0:c3:61:4a:b5:02:
96:f1:3d:ba:94:38:9f:a8:1f:6f:63:f6:8a:5c:ee:
70:67:b1:98:3c:b6:98:c1:fd:e4:a8:6f:9b:9f:15:
7c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:3F:B0:FD:0E:27:62:A8:91:BA:00:C2:DB:C3:62:E9:AA:72:10:B5
X509v3 Authority Key Identifier:
keyid:C3:A8:82:B1:0F:1B:A9:EA:4B:A1:FA:77:06:DB:64:74:7E:62:A4:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w6iCsQ8bqepLofp3BttkdH5ipBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/93620e-7528-4aac-9212-c7857a033962/1/w6iCsQ8bqepLofp3BttkdH5ipBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/93620e-7528-4aac-9212-c7857a033962/1/w6iCsQ8bqepLofp3BttkdH5ipBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:f7:4d:e0:d1:34:29:f1:75:26:c4:b9:4c:fb:65:ad:2e:f1:
30:5e:78:22:5b:9f:5b:23:f9:35:83:40:ed:5b:cb:e5:34:65:
84:8e:7b:c2:89:2c:c5:9a:e8:c3:43:2f:72:76:0d:9f:ea:aa:
b8:51:62:74:a1:d8:79:bb:b6:66:62:51:ca:73:73:c3:7a:4a:
59:e1:17:9b:18:79:4e:b9:92:5b:57:bd:d5:ba:41:d0:30:70:
fe:ef:d2:62:2c:2a:a3:fa:e7:b9:a9:49:e7:0e:be:1b:93:2c:
78:1a:58:db:9b:4f:61:f0:90:f3:e4:d1:e4:ed:9d:4c:1a:3b:
98:17:d1:8e:71:17:1a:30:d7:fa:c1:63:22:4b:e7:de:db:41:
f9:19:c7:90:23:55:60:3e:c4:26:b3:93:f5:ff:7b:28:13:f1:
f1:f3:cc:13:60:21:91:8e:5d:22:e6:36:f8:63:15:39:64:1f:
91:86:1f:47:95:56:f7:d8:4d:ee:f1:c3:2c:29:aa:10:0a:97:
83:9b:e3:68:13:48:02:51:96:6e:d6:24:8e:92:d0:2c:28:6b:
7d:f5:e7:61:f9:f6:15:40:06:82:4d:02:c9:69:86:fc:0a:4a:
47:51:c7:26:8c:60:2a:1b:0f:69:a3:91:2c:ce:54:05:6c:74:
dc:45:45:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoFkaJ4b5ZoD4UxemycKtaFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzYTg4MmIxMGYxYmE5ZWE0YmExZmE3NzA2ZGI2NDc0N2U2
MmE0MTMwHhcNMjUxMDIxMDcwMDIxWhcNMjUxMDIyMDcwMDIxWjAzMTEwLwYDVQQD
Eyg0OTNmYjBmZDBlMjc2MmE4OTFiYTAwYzJkYmMzNjJlOWFhNzIxMGI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuaC3ayoWiUoB9LCUT0k7TdFzJZ5k
GVHgh1oYHiI/lc/AvyCAHRwNZBi9WnjVK4YDuq2Wjkorper/hLR2RukpsDbWf1Eb
3K+Tz7jmEoZ/OrnmNKiIOmVF2k2lxLjbd7m+Lklz5dxBtYPJOGf74uPm/h5q1UqX
8zFLxZwI1Xn64yyBgxhIjlC0K0BsqLHtzBHl7fakGMM8GDJylif+VcygMVcs04WZ
2Ws+a28kuG8aLXZOaLVWYSm+93E0xks5dWNH7BMAuIvuedt94Mw2+SpzSAHeRI0c
Ojgxkr6gw2FKtQKW8T26lDifqB9vY/aKXO5wZ7GYPLaYwf3kqG+bnxV8AQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEk/sP0OJ2KokboAwtvDYumqchC1MB8GA1UdIwQY
MBaAFMOogrEPG6nqS6H6dwbbZHR+YqQTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzZpQ3NROGJxZXBMb2ZwM0J0dGtkSDVpcEJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS85MzYyMGUtNzUyOC00YWFjLTkyMTIt
Yzc4NTdhMDMzOTYyLzEvdzZpQ3NROGJxZXBMb2ZwM0J0dGtkSDVpcEJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS85MzYyMGUtNzUyOC00YWFjLTkyMTItYzc4NTdhMDMzOTYy
LzEvdzZpQ3NROGJxZXBMb2ZwM0J0dGtkSDVpcEJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi/dN4NE0
KfF1JsS5TPtlrS7xMF54IlufWyP5NYNA7VvL5TRlhI57woksxZrow0MvcnYNn+qq
uFFidKHYebu2ZmJRynNzw3pKWeEXmxh5TrmSW1e91bpB0DBw/u/SYiwqo/rnualJ
5w6+G5MseBpY25tPYfCQ8+TR5O2dTBo7mBfRjnEXGjDX+sFjIkvn3ttB+RnHkCNV
YD7EJrOT9f97KBPx8fPME2AhkY5dIuY2+GMVOWQfkYYfR5VW99hN7vHDLCmqEAqX
g5vjaBNIAlGWbtYkjpLQLChrffXnYfn2FUAGgk0CyWmG/ApKR1HHJoxgKhsPaaOR
LM5UBWx03EVFZA==
-----END CERTIFICATE-----
Generated at Tue Oct 21 14:16:18 2025 by rpki-client