Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/83f939-05f1-4afa-aa10-8606a724d891/1/s6t6iYCGh8w9rXug998LrOAZ92M.mft
File: s6t6iYCGh8w9rXug998LrOAZ92M.mft (raw, json)
Hash identifier: MAAtBjVa7p+th3y8E+Jj3PTJZyuwKsqZRcar1/kx0NM=
Subject key identifier: AE:F2:1D:08:A1:1F:5B:8F:64:D7:E8:C6:DE:F9:F0:83:7F:3B:0C:89
Authority key identifier: B3:AB:7A:89:80:86:87:CC:3D:AD:7B:A0:F7:DF:0B:AC:E0:19:F7:63
Certificate issuer: /CN=b3ab7a89808687cc3dad7ba0f7df0bace019f763
Certificate serial: 0199FBEB869CAE8FBA425915E3E6B36257C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s6t6iYCGh8w9rXug998LrOAZ92M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/83f939-05f1-4afa-aa10-8606a724d891/1/s6t6iYCGh8w9rXug998LrOAZ92M.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 10:02:20 +0000
Manifest this update: Sun 19 Oct 2025 10:02:20 +0000
Manifest next update: Mon 20 Oct 2025 10:02:20 +0000
Files and hashes: 1: UXfpgLEO-YbBFk6oonjH1Xm5FgM.roa (hash: AX0QM/Os3hFjFnv3WUz1vjkj1d0jSqhI2xTsC/dfmWk=)
2: s6t6iYCGh8w9rXug998LrOAZ92M.crl (hash: fPbUDqmX93lv7emH/fcLu+GCLbRU+qt6Gge4+36QgI4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/83f939-05f1-4afa-aa10-8606a724d891/1/s6t6iYCGh8w9rXug998LrOAZ92M.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/83f939-05f1-4afa-aa10-8606a724d891/1/s6t6iYCGh8w9rXug998LrOAZ92M.mft
rsync://rpki.ripe.net/repository/DEFAULT/s6t6iYCGh8w9rXug998LrOAZ92M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:86:9c:ae:8f:ba:42:59:15:e3:e6:b3:62:57:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3ab7a89808687cc3dad7ba0f7df0bace019f763
Validity
Not Before: Oct 19 10:02:20 2025 GMT
Not After : Oct 20 10:02:20 2025 GMT
Subject: CN=aef21d08a11f5b8f64d7e8c6def9f0837f3b0c89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:75:bd:80:8d:64:29:5d:65:25:be:52:95:5d:
c3:1e:e8:85:68:d9:60:63:83:2c:3d:96:a9:2a:79:
5d:85:0f:c5:62:ee:c6:dc:a9:d6:af:3d:2d:85:7d:
20:92:7a:de:06:4a:04:0e:86:aa:b9:a4:ea:1e:71:
9b:67:c6:de:42:db:a6:2e:ce:9d:83:c9:06:0e:b7:
48:2b:d8:5b:d7:34:ef:d5:7d:9c:ff:55:66:3e:06:
c3:cb:07:f4:5d:ae:f9:ff:7a:1e:6e:99:c2:33:47:
54:2d:96:81:4f:b7:c5:7c:6b:68:d5:d9:c2:0f:78:
42:31:a5:c8:4b:01:ca:e6:3d:39:82:9f:5d:ac:fe:
a5:bd:f2:cb:13:34:cd:ad:7c:cb:9e:de:e3:fc:82:
ab:78:73:04:07:75:42:94:7a:45:ac:a2:f5:01:bf:
ce:e9:14:77:a6:ba:74:00:25:aa:f3:c5:65:f0:8c:
8a:e8:15:1f:41:52:6f:86:c1:bb:5e:99:f6:7e:b3:
8f:36:cf:83:eb:a7:3b:d3:ed:02:d8:ad:aa:6f:32:
43:d3:1c:15:53:f2:93:17:5c:3a:ce:43:e1:25:fe:
cd:93:7a:01:aa:65:eb:ab:cd:da:24:58:e4:1d:a1:
46:b6:dd:99:87:24:89:45:cb:19:99:bd:e1:fe:03:
18:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:F2:1D:08:A1:1F:5B:8F:64:D7:E8:C6:DE:F9:F0:83:7F:3B:0C:89
X509v3 Authority Key Identifier:
keyid:B3:AB:7A:89:80:86:87:CC:3D:AD:7B:A0:F7:DF:0B:AC:E0:19:F7:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s6t6iYCGh8w9rXug998LrOAZ92M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/83f939-05f1-4afa-aa10-8606a724d891/1/s6t6iYCGh8w9rXug998LrOAZ92M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/83f939-05f1-4afa-aa10-8606a724d891/1/s6t6iYCGh8w9rXug998LrOAZ92M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:0d:8d:c0:fa:00:16:18:c0:84:3b:02:21:49:8b:44:3e:33:
09:ac:0f:8f:d0:67:7d:33:8e:18:0b:6a:ca:0f:fd:e0:3f:36:
7d:76:4e:7e:d9:66:aa:b5:33:ad:77:8d:3d:45:c3:cd:45:99:
91:78:0a:75:a4:06:fa:6a:be:ee:2a:c7:22:39:49:1f:f5:c6:
b3:12:8b:bf:8b:d6:30:57:35:eb:f8:07:e0:7f:c1:96:20:f5:
3a:c5:aa:c9:b2:39:f6:1d:cc:01:cc:cd:29:11:51:06:37:ab:
c0:db:f5:5f:5c:27:34:36:07:37:20:ae:9b:ae:55:3c:21:9e:
2d:c6:86:e0:d5:ef:b9:f7:5a:1b:4e:8f:f4:f1:86:b5:83:bc:
ad:2f:9c:7f:68:3c:30:8c:ae:9e:db:21:cc:76:6d:e0:28:2d:
2e:61:88:17:0f:a4:46:2c:f4:2e:3f:4c:c7:c1:c2:53:70:ab:
b9:99:df:4a:77:c2:a1:95:0d:6c:96:ae:4c:10:6b:22:ce:6a:
d6:4a:e2:c7:2b:e3:40:3e:d4:52:c8:26:59:c0:e9:1a:fe:ea:
ea:90:09:c5:8f:f5:46:05:75:93:85:52:f5:b5:40:54:94:3e:
54:42:a8:d5:17:29:63:56:99:bd:c8:d7:6d:3b:b1:3b:ea:3e:
9b:c9:bb:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:11:08 2025 by rpki-client