Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/e4ffc5-fb8d-4c40-8b73-bfeb7cea209d/1/S6_0itEUWxAMeD-3r7bzAovY804.mft
File: S6_0itEUWxAMeD-3r7bzAovY804.mft (raw, json)
Hash identifier: u1Tv7F+/dGMJYeq6ZoX18X8MXDYpodELSemX7SmARc8=
Subject key identifier: CA:5B:79:FB:24:7C:57:93:6F:DA:B0:A1:B7:A4:E9:6F:5B:8F:86:A9
Authority key identifier: 4B:AF:F4:8A:D1:14:5B:10:0C:78:3F:B7:AF:B6:F3:02:8B:D8:F3:4E
Certificate issuer: /CN=4baff48ad1145b100c783fb7afb6f3028bd8f34e
Certificate serial: 0199FCFD1C384C18049D6CC961F53E3E5219
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S6_0itEUWxAMeD-3r7bzAovY804.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/e4ffc5-fb8d-4c40-8b73-bfeb7cea209d/1/S6_0itEUWxAMeD-3r7bzAovY804.mft
Manifest number: 0E1B
Signing time: Sun 19 Oct 2025 15:01:10 +0000
Manifest this update: Sun 19 Oct 2025 15:01:10 +0000
Manifest next update: Mon 20 Oct 2025 15:01:10 +0000
Files and hashes: 1: 07VM5GQDyy0wcSk66eg9Nc4GYr0.roa (hash: tZR04Bh0g3Sbqjc1Ej/IqbvRwZJEdNyq0qHOrpzegq8=)
2: S6_0itEUWxAMeD-3r7bzAovY804.crl (hash: GgJqlS+XvV8GMijaaHYJJEEfKuaPNZ4tlFyave9npQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/e4ffc5-fb8d-4c40-8b73-bfeb7cea209d/1/S6_0itEUWxAMeD-3r7bzAovY804.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/e4ffc5-fb8d-4c40-8b73-bfeb7cea209d/1/S6_0itEUWxAMeD-3r7bzAovY804.mft
rsync://rpki.ripe.net/repository/DEFAULT/S6_0itEUWxAMeD-3r7bzAovY804.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:1c:38:4c:18:04:9d:6c:c9:61:f5:3e:3e:52:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4baff48ad1145b100c783fb7afb6f3028bd8f34e
Validity
Not Before: Oct 19 15:01:10 2025 GMT
Not After : Oct 20 15:01:10 2025 GMT
Subject: CN=ca5b79fb247c57936fdab0a1b7a4e96f5b8f86a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5b:b8:73:be:4d:a2:0f:24:14:12:8a:57:61:
fa:04:81:05:27:f0:6e:4a:aa:a6:9d:bc:f5:20:34:
5b:e2:c5:ba:19:bc:fd:56:bd:55:74:ab:23:f9:de:
31:11:2a:6e:9c:5a:30:18:09:0f:3f:a8:1d:4c:32:
6f:fd:82:ad:25:70:f4:38:f1:22:13:a5:5a:48:6b:
f0:b1:89:ce:88:63:75:3b:c1:e0:99:a4:eb:0b:ec:
a0:b9:56:78:93:fd:33:45:c6:08:26:62:8d:35:d6:
ec:07:80:8c:e1:7a:6f:b5:e7:0f:90:1e:37:15:08:
29:d9:d7:ba:40:6e:ec:97:5c:ae:26:38:ee:84:4c:
65:e4:4c:6e:52:9e:7d:1f:10:08:48:bc:59:88:97:
21:e5:f9:ad:76:6c:73:5e:bb:e6:f5:ce:73:e3:14:
fa:2b:55:70:56:f1:47:5f:53:89:a7:66:25:fb:f6:
5f:01:07:c9:11:74:99:f2:0b:11:ce:2c:3c:28:b8:
7a:b3:bf:a4:87:b3:dc:88:e9:6b:32:ca:02:7f:e9:
ec:80:02:fa:07:0b:e2:d0:4b:b4:a9:c8:bb:d6:90:
7b:64:88:05:9a:87:5c:7c:f6:c3:67:55:bb:7f:cb:
8c:ce:41:3c:a7:28:c4:2c:97:6a:ff:03:94:32:0c:
d5:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:5B:79:FB:24:7C:57:93:6F:DA:B0:A1:B7:A4:E9:6F:5B:8F:86:A9
X509v3 Authority Key Identifier:
keyid:4B:AF:F4:8A:D1:14:5B:10:0C:78:3F:B7:AF:B6:F3:02:8B:D8:F3:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S6_0itEUWxAMeD-3r7bzAovY804.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e4ffc5-fb8d-4c40-8b73-bfeb7cea209d/1/S6_0itEUWxAMeD-3r7bzAovY804.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e4ffc5-fb8d-4c40-8b73-bfeb7cea209d/1/S6_0itEUWxAMeD-3r7bzAovY804.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:f0:69:4c:ac:8b:b4:76:20:b0:52:a3:74:35:cf:9c:23:93:
0e:d4:df:4d:57:bd:72:4b:7c:8e:51:f6:d5:c7:81:66:42:79:
02:3d:21:6e:42:b4:d6:ae:4b:30:23:9e:83:14:69:df:ee:38:
cd:d5:f2:5b:5d:27:37:9d:2a:da:31:bc:32:ad:f6:f2:6a:7c:
27:72:ec:af:45:64:30:d6:9c:b1:dc:07:84:69:7a:bd:00:2d:
a4:7e:f5:02:e2:06:92:92:8c:ae:07:65:4d:4e:6e:b8:a0:a5:
f6:07:43:f7:c6:23:6a:f6:49:53:d2:0f:4d:62:e0:51:1f:af:
4b:df:cd:25:bb:2f:e7:0f:8d:8d:a8:7c:b9:df:d4:83:21:1e:
57:93:34:a9:61:39:f4:c6:28:c9:1c:87:8d:f3:f6:3d:94:6d:
ba:1d:59:e8:f5:d5:dd:d4:74:44:ad:df:f1:27:96:a4:43:78:
c7:d1:1f:05:93:da:48:19:f9:b1:e2:c7:3e:2d:ce:bd:ce:cb:
8e:fb:bd:67:b0:28:70:a1:4d:f6:f3:bb:6c:4a:d0:02:8a:39:
23:47:b7:9c:82:ab:38:65:61:11:d5:9b:fe:81:36:85:ab:70:
0f:68:72:4e:7b:a7:08:03:10:92:ba:ec:91:93:eb:7c:96:1b:
26:57:f1:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8/Rw4TBgEnWzJYfU+PlIZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiYWZmNDhhZDExNDViMTAwYzc4M2ZiN2FmYjZmMzAyOGJk
OGYzNGUwHhcNMjUxMDE5MTUwMTEwWhcNMjUxMDIwMTUwMTEwWjAzMTEwLwYDVQQD
EyhjYTViNzlmYjI0N2M1NzkzNmZkYWIwYTFiN2E0ZTk2ZjViOGY4NmE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAulu4c75Nog8kFBKKV2H6BIEFJ/Bu
Sqqmnbz1IDRb4sW6Gbz9Vr1VdKsj+d4xESpunFowGAkPP6gdTDJv/YKtJXD0OPEi
E6VaSGvwsYnOiGN1O8HgmaTrC+yguVZ4k/0zRcYIJmKNNdbsB4CM4XpvtecPkB43
FQgp2de6QG7sl1yuJjjuhExl5ExuUp59HxAISLxZiJch5fmtdmxzXrvm9c5z4xT6
K1VwVvFHX1OJp2Yl+/ZfAQfJEXSZ8gsRziw8KLh6s7+kh7PciOlrMsoCf+nsgAL6
Bwvi0Eu0qci71pB7ZIgFmodcfPbDZ1W7f8uMzkE8pyjELJdq/wOUMgzViQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMpbefskfFeTb9qwobek6W9bj4apMB8GA1UdIwQY
MBaAFEuv9IrRFFsQDHg/t6+28wKL2PNOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzZfMGl0RVVXeEFNZUQtM3I3YnpBb3ZZODA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9lNGZmYzUtZmI4ZC00YzQwLThiNzMt
YmZlYjdjZWEyMDlkLzEvUzZfMGl0RVVXeEFNZUQtM3I3YnpBb3ZZODA0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS9lNGZmYzUtZmI4ZC00YzQwLThiNzMtYmZlYjdjZWEyMDlk
LzEvUzZfMGl0RVVXeEFNZUQtM3I3YnpBb3ZZODA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdvBpTKyL
tHYgsFKjdDXPnCOTDtTfTVe9ckt8jlH21ceBZkJ5Aj0hbkK01q5LMCOegxRp3+44
zdXyW10nN50q2jG8Mq328mp8J3Lsr0VkMNacsdwHhGl6vQAtpH71AuIGkpKMrgdl
TU5uuKCl9gdD98YjavZJU9IPTWLgUR+vS9/NJbsv5w+Njah8ud/UgyEeV5M0qWE5
9MYoyRyHjfP2PZRtuh1Z6PXV3dR0RK3f8SeWpEN4x9EfBZPaSBn5seLHPi3Ovc7L
jvu9Z7AocKFN9vO7bErQAoo5I0e3nIKrOGVhEdWb/oE2hatwD2hyTnunCAMQkrrs
kZPrfJYbJlfxBQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:54:50 2025 by rpki-client