Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/S6mv0hy4--a4UIAM1LSfJWLJK6A.mft
File: S6mv0hy4--a4UIAM1LSfJWLJK6A.mft (raw, json)
Hash identifier: ++4nOSSMGw+AclmM8Frfi+6XL2rXljMtPePvtd2GVvA=
Subject key identifier: A1:E5:25:C1:CD:16:98:7D:25:D7:71:15:86:3F:F2:D9:98:65:CF:B2
Authority key identifier: 4B:A9:AF:D2:1C:B8:FB:E6:B8:50:80:0C:D4:B4:9F:25:62:C9:2B:A0
Certificate issuer: /CN=4ba9afd21cb8fbe6b850800cd4b49f2562c92ba0
Certificate serial: 019962EB8264531C386CE72042C4D80265AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S6mv0hy4--a4UIAM1LSfJWLJK6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/S6mv0hy4--a4UIAM1LSfJWLJK6A.mft
Manifest number: 0A76
Signing time: Fri 19 Sep 2025 17:00:25 +0000
Manifest this update: Fri 19 Sep 2025 17:00:25 +0000
Manifest next update: Sat 20 Sep 2025 17:00:25 +0000
Files and hashes: 1: 7qAkcUK8ZlpOQk4HP0uuF0lhspY.roa (hash: ZilTYghFnWRS/ebtjdIbZ9Dk7wTzY0JMcLcLjLJ+fE8=)
2: S6mv0hy4--a4UIAM1LSfJWLJK6A.crl (hash: 93jgAauBqCKn1becN4/vwnHploqP9FDJujxhjajAXZg=)
3: ddztps0hN4VMdXyjS1k_lHAPDQI.roa (hash: FuonT4M3ClmAeThBArgxMo2zntTmX1+p4F4rL/ngyiQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/S6mv0hy4--a4UIAM1LSfJWLJK6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/S6mv0hy4--a4UIAM1LSfJWLJK6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/S6mv0hy4--a4UIAM1LSfJWLJK6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Sep 2025 14:36:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:62:eb:82:64:53:1c:38:6c:e7:20:42:c4:d8:02:65:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ba9afd21cb8fbe6b850800cd4b49f2562c92ba0
Validity
Not Before: Sep 19 17:00:25 2025 GMT
Not After : Sep 20 17:00:25 2025 GMT
Subject: CN=a1e525c1cd16987d25d77115863ff2d99865cfb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:73:4e:49:81:a0:33:9e:eb:16:fc:c8:60:6d:
c0:ef:1a:d1:5e:45:1b:a2:ea:42:13:88:57:57:e5:
76:d3:3e:56:35:52:5a:fc:39:72:47:d0:a0:3e:1d:
33:e7:d9:4f:70:df:2b:b3:35:05:10:5b:66:72:40:
78:6b:cb:6e:13:fe:0e:a0:b5:8f:68:16:42:9e:a3:
0f:82:4b:68:e3:dd:53:6f:9b:64:e8:ad:6e:cb:24:
bc:8e:13:87:23:69:cb:ab:53:bf:a7:ef:fe:ac:08:
32:a9:f2:36:80:ab:3f:1e:ac:82:d8:ed:d2:3b:a1:
23:3b:9d:5e:5a:ab:89:22:cd:08:43:21:60:da:7a:
fe:66:e5:55:64:9d:42:25:d2:4a:23:18:fd:99:49:
7b:91:34:4f:58:ce:8d:5e:03:3a:b3:fa:96:f7:28:
d6:9c:cc:0f:21:4e:34:ca:f6:bc:2a:71:7b:be:e5:
28:ea:fa:99:ce:d4:a3:fe:61:93:0c:09:5a:a8:49:
b6:14:87:f2:b5:66:91:34:fe:2e:94:a7:00:ab:51:
fd:d5:ab:8b:05:de:8e:14:07:d3:b3:db:39:12:33:
25:21:3a:c7:97:32:13:6c:65:be:ca:4a:7e:92:0f:
a1:cf:1b:3b:3e:5a:a6:e5:66:6b:49:3b:a4:fd:81:
ae:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:E5:25:C1:CD:16:98:7D:25:D7:71:15:86:3F:F2:D9:98:65:CF:B2
X509v3 Authority Key Identifier:
keyid:4B:A9:AF:D2:1C:B8:FB:E6:B8:50:80:0C:D4:B4:9F:25:62:C9:2B:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S6mv0hy4--a4UIAM1LSfJWLJK6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/S6mv0hy4--a4UIAM1LSfJWLJK6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/S6mv0hy4--a4UIAM1LSfJWLJK6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:f4:ed:ab:77:9b:50:eb:c4:18:62:92:c2:fa:7a:71:6a:36:
f5:cb:0c:53:24:7d:a2:ff:7a:bf:cf:45:5a:68:fa:a3:f8:3d:
95:b1:21:8e:a7:d9:64:10:b8:d5:73:78:67:c4:62:a2:c4:bf:
45:7f:90:63:2a:f7:32:cb:1b:64:f9:98:7e:b9:4d:5c:9f:09:
42:50:ed:82:ff:b7:ef:b3:ba:8d:9a:86:cc:5a:55:c5:b7:0d:
73:b5:e0:5a:64:95:da:4b:74:80:dd:cc:29:06:74:53:91:33:
d7:d5:87:17:22:75:4c:1f:5d:c1:48:1c:74:65:ea:d4:c7:a4:
cb:8b:c1:d9:d1:9b:97:84:6a:d9:64:d5:f2:35:b4:72:95:5b:
e7:0e:e4:64:4d:39:12:0e:df:6d:b5:f8:21:49:c3:a1:1d:74:
44:d3:90:0b:17:a2:d1:d6:47:94:92:a7:20:47:1e:0b:0b:74:
4a:33:cc:40:22:60:5f:a8:3f:4a:dc:f9:8c:aa:f3:91:21:d6:
6b:bd:06:cb:8c:f1:62:6b:55:3a:f4:e3:1e:f1:5d:14:18:ed:
85:3c:61:16:68:31:d3:a4:d3:74:6b:a9:38:c3:d8:06:ec:fe:
97:93:a3:87:5c:67:7e:bc:c3:70:45:50:68:62:32:1d:c2:56:
29:fe:09:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZli64JkUxw4bOcgQsTYAmWvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiYTlhZmQyMWNiOGZiZTZiODUwODAwY2Q0YjQ5ZjI1NjJj
OTJiYTAwHhcNMjUwOTE5MTcwMDI1WhcNMjUwOTIwMTcwMDI1WjAzMTEwLwYDVQQD
EyhhMWU1MjVjMWNkMTY5ODdkMjVkNzcxMTU4NjNmZjJkOTk4NjVjZmIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3NOSYGgM57rFvzIYG3A7xrRXkUb
oupCE4hXV+V20z5WNVJa/DlyR9CgPh0z59lPcN8rszUFEFtmckB4a8tuE/4OoLWP
aBZCnqMPgkto491Tb5tk6K1uyyS8jhOHI2nLq1O/p+/+rAgyqfI2gKs/HqyC2O3S
O6EjO51eWquJIs0IQyFg2nr+ZuVVZJ1CJdJKIxj9mUl7kTRPWM6NXgM6s/qW9yjW
nMwPIU40yva8KnF7vuUo6vqZztSj/mGTDAlaqEm2FIfytWaRNP4ulKcAq1H91auL
Bd6OFAfTs9s5EjMlITrHlzITbGW+ykp+kg+hzxs7Plqm5WZrSTuk/YGu1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKHlJcHNFph9JddxFYY/8tmYZc+yMB8GA1UdIwQY
MBaAFEupr9IcuPvmuFCADNS0nyViySugMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzZtdjBoeTQtLWE0VUlBTTFMU2ZKV0xKSzZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9kNWJkMzktYmVhNi00NDdiLTgzYmIt
ZjY5NjIyNDI1NjUxLzEvUzZtdjBoeTQtLWE0VUlBTTFMU2ZKV0xKSzZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC9kNWJkMzktYmVhNi00NDdiLTgzYmItZjY5NjIyNDI1NjUx
LzEvUzZtdjBoeTQtLWE0VUlBTTFMU2ZKV0xKSzZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArfTtq3eb
UOvEGGKSwvp6cWo29csMUyR9ov96v89FWmj6o/g9lbEhjqfZZBC41XN4Z8RiosS/
RX+QYyr3MssbZPmYfrlNXJ8JQlDtgv+377O6jZqGzFpVxbcNc7XgWmSV2kt0gN3M
KQZ0U5Ez19WHFyJ1TB9dwUgcdGXq1Meky4vB2dGbl4Rq2WTV8jW0cpVb5w7kZE05
Eg7fbbX4IUnDoR10RNOQCxei0dZHlJKnIEceCwt0SjPMQCJgX6g/Stz5jKrzkSHW
a70Gy4zxYmtVOvTjHvFdFBjthTxhFmgx06TTdGupOMPYBuz+l5Ojh1xnfrzDcEVQ
aGIyHcJWKf4Jgg==
-----END CERTIFICATE-----
Generated at Fri Sep 19 19:38:50 2025 by rpki-client