Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/S6mv0hy4--a4UIAM1LSfJWLJK6A.mft
File: S6mv0hy4--a4UIAM1LSfJWLJK6A.mft (raw, json)
Hash identifier: Mx71iFY2Nc92X7LEpTXewZRcBL815gMBS10l0DCTBXQ=
Subject key identifier: 6C:5C:F8:F3:A9:13:00:1E:DD:A1:6B:80:14:0C:64:25:9A:7C:88:F0
Authority key identifier: 4B:A9:AF:D2:1C:B8:FB:E6:B8:50:80:0C:D4:B4:9F:25:62:C9:2B:A0
Certificate issuer: /CN=4ba9afd21cb8fbe6b850800cd4b49f2562c92ba0
Certificate serial: 019A63C50320DBC657FD663BCF06D7411D60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S6mv0hy4--a4UIAM1LSfJWLJK6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/S6mv0hy4--a4UIAM1LSfJWLJK6A.mft
Manifest number: 0AFB
Signing time: Sat 08 Nov 2025 14:00:46 +0000
Manifest this update: Sat 08 Nov 2025 14:00:46 +0000
Manifest next update: Sun 09 Nov 2025 14:00:46 +0000
Files and hashes: 1: 7qAkcUK8ZlpOQk4HP0uuF0lhspY.roa (hash: ZilTYghFnWRS/ebtjdIbZ9Dk7wTzY0JMcLcLjLJ+fE8=)
2: S6mv0hy4--a4UIAM1LSfJWLJK6A.crl (hash: kFEekgywhKUnNbtfbjqkODDcekJSpx+7qEXgvpApkH4=)
3: ddztps0hN4VMdXyjS1k_lHAPDQI.roa (hash: FuonT4M3ClmAeThBArgxMo2zntTmX1+p4F4rL/ngyiQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/S6mv0hy4--a4UIAM1LSfJWLJK6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/S6mv0hy4--a4UIAM1LSfJWLJK6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/S6mv0hy4--a4UIAM1LSfJWLJK6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Nov 2025 14:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:63:c5:03:20:db:c6:57:fd:66:3b:cf:06:d7:41:1d:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ba9afd21cb8fbe6b850800cd4b49f2562c92ba0
Validity
Not Before: Nov 8 14:00:46 2025 GMT
Not After : Nov 9 14:00:46 2025 GMT
Subject: CN=6c5cf8f3a913001edda16b80140c64259a7c88f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a6:c2:b3:08:be:9a:eb:15:62:ae:c7:71:c0:
1e:64:a7:2c:9d:a1:2c:ef:b9:16:dc:b3:7d:ad:d3:
04:94:29:ea:73:82:64:0c:a2:2d:33:25:60:47:d7:
a8:2f:e4:34:7e:ca:08:91:24:75:d3:7c:a1:20:9a:
c8:c8:15:06:29:1d:2a:44:46:50:6b:1b:a4:2c:58:
07:b8:77:b9:c6:c0:79:d4:e2:37:3b:ae:78:61:5e:
18:b7:72:c7:ae:52:f3:f6:7e:5f:67:05:d1:53:f2:
89:44:5f:18:bc:68:42:ea:e1:b4:74:58:03:02:cb:
54:90:2e:ad:e5:cd:08:83:19:d6:d9:bf:b3:82:ac:
d2:90:83:84:ff:91:23:62:18:47:77:b5:88:fa:ac:
7a:fd:31:0f:db:13:cb:ae:81:4c:43:b1:6d:e2:8a:
d6:d6:58:15:5b:57:69:67:8c:53:fa:ac:96:0d:f5:
fb:20:7f:fe:8e:50:83:21:16:e4:44:90:13:df:9d:
ee:27:00:24:89:78:88:f8:34:b8:46:5e:9d:63:92:
5c:67:0b:5c:43:78:dd:70:db:06:93:55:09:7d:2a:
88:72:07:be:2b:8f:ce:8d:65:94:4d:27:b7:fc:c6:
ef:70:91:d9:97:3e:b0:04:ef:b6:e8:b1:0f:1b:0b:
1c:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:5C:F8:F3:A9:13:00:1E:DD:A1:6B:80:14:0C:64:25:9A:7C:88:F0
X509v3 Authority Key Identifier:
keyid:4B:A9:AF:D2:1C:B8:FB:E6:B8:50:80:0C:D4:B4:9F:25:62:C9:2B:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S6mv0hy4--a4UIAM1LSfJWLJK6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/S6mv0hy4--a4UIAM1LSfJWLJK6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/S6mv0hy4--a4UIAM1LSfJWLJK6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:1c:d5:65:b0:c0:4b:fe:b0:96:a8:21:0b:24:b7:be:5b:f0:
1f:a9:c2:62:ea:de:8c:62:dd:a6:5a:27:56:f1:f1:43:81:e8:
52:b0:aa:74:1d:d6:1e:2c:10:38:01:0e:40:3d:1b:82:f6:18:
42:13:e8:7f:d0:bf:13:94:e7:a6:dd:2f:43:ba:71:be:5c:7b:
17:d8:39:8d:0b:51:f3:b4:46:c6:6a:4d:95:a1:21:1a:87:92:
a7:39:b4:02:5c:a3:e8:58:01:67:ca:89:da:71:da:1a:e7:6d:
2d:74:60:00:19:bd:16:98:43:9b:ae:cd:39:23:d5:f7:0b:36:
2e:a7:e0:f7:90:c7:d6:44:71:58:c4:80:47:fb:85:6c:63:7d:
e4:20:82:93:06:ca:7a:d7:51:1d:8d:37:9a:a4:71:8d:9c:2b:
58:d7:87:d0:50:40:a3:50:ed:02:be:15:45:bd:37:57:13:c9:
72:5b:df:ee:4f:10:34:2c:56:fa:c0:4b:7b:83:50:13:85:c0:
52:32:7f:f1:ca:11:86:1e:66:71:f0:94:88:59:56:ea:4b:a9:
0d:b9:03:de:c2:9e:a7:f7:02:e5:ef:ba:d2:4d:83:30:63:95:
09:ee:15:98:7f:38:73:b7:7e:69:ba:44:31:aa:a5:39:aa:8d:
90:4c:2e:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 9 00:28:32 2025 by rpki-client