Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/fdea7c-a1bc-48a9-acd3-a003c4b61a5f/1/s6qVFyKhmXGkTmLKktHJEoTRLiE.mft
File: s6qVFyKhmXGkTmLKktHJEoTRLiE.mft (raw, json)
Hash identifier: eTy4JnmikkP17QZWAudq27hAyaB/ToNXbOfElgLvOaM=
Subject key identifier: 8C:1C:02:93:88:2C:35:43:C7:DB:85:4D:42:61:E6:FF:1F:DF:3D:D9
Authority key identifier: B3:AA:95:17:22:A1:99:71:A4:4E:62:CA:92:D1:C9:12:84:D1:2E:21
Certificate issuer: /CN=b3aa951722a19971a44e62ca92d1c91284d12e21
Certificate serial: 0199FC8F765A21C0841498F278C40512BFB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s6qVFyKhmXGkTmLKktHJEoTRLiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/fdea7c-a1bc-48a9-acd3-a003c4b61a5f/1/s6qVFyKhmXGkTmLKktHJEoTRLiE.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 13:01:24 +0000
Manifest this update: Sun 19 Oct 2025 13:01:24 +0000
Manifest next update: Mon 20 Oct 2025 13:01:24 +0000
Files and hashes: 1: fcyT5TdBuZSpYCMKnr2rChuJmjI.roa (hash: Fmex2r2S8TmdcqcCkZmisW8YFG5UQhik8Ca5wAVTb7s=)
2: s6qVFyKhmXGkTmLKktHJEoTRLiE.crl (hash: yuv+4FGnten7M3hrzyaJgfV4ONPqQDg2mqmhCxN9aLI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/fdea7c-a1bc-48a9-acd3-a003c4b61a5f/1/s6qVFyKhmXGkTmLKktHJEoTRLiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/fdea7c-a1bc-48a9-acd3-a003c4b61a5f/1/s6qVFyKhmXGkTmLKktHJEoTRLiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/s6qVFyKhmXGkTmLKktHJEoTRLiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 13:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:76:5a:21:c0:84:14:98:f2:78:c4:05:12:bf:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3aa951722a19971a44e62ca92d1c91284d12e21
Validity
Not Before: Oct 19 13:01:24 2025 GMT
Not After : Oct 20 13:01:24 2025 GMT
Subject: CN=8c1c0293882c3543c7db854d4261e6ff1fdf3dd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:fd:75:f7:34:8d:d8:43:03:7b:5c:4c:b6:40:
52:45:2b:8b:f1:b0:74:98:6d:e9:6c:36:bb:1e:a4:
7a:81:e4:8f:b4:4f:ca:5a:82:f1:b0:f8:d5:03:2c:
63:36:b8:50:6b:15:64:2f:c4:6a:cf:1f:e9:7b:a9:
a6:a4:9c:b9:4b:62:4e:12:b1:c8:51:0c:9b:79:71:
e1:6f:38:83:4a:13:eb:aa:17:55:20:86:a5:68:3b:
45:b5:ae:52:a1:23:5e:4c:09:0f:81:64:c9:ea:fc:
46:1d:c9:72:0c:b9:76:73:6e:5f:ef:4f:e0:0c:53:
d0:bd:eb:e7:05:ff:1a:f8:4d:c2:cd:59:a6:3d:38:
c7:34:2b:a8:3f:69:66:3f:79:4c:9e:d5:b8:d8:5c:
55:7b:91:fe:2f:7b:00:87:e7:c7:03:f6:db:cd:9d:
44:29:31:72:dd:ad:97:8f:23:55:b0:fa:a2:35:b1:
49:69:4a:df:42:a5:c9:be:e4:58:e4:43:b4:6b:21:
25:b2:ea:d7:ce:02:00:06:21:19:e2:30:8f:c7:ae:
3c:48:87:04:25:22:22:76:1f:92:e4:30:7a:8c:76:
9e:8d:ab:2e:21:7d:d4:6b:6b:a9:48:76:c5:30:7c:
33:08:96:2c:a6:33:ba:cf:65:9f:7c:e9:26:91:31:
f3:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:1C:02:93:88:2C:35:43:C7:DB:85:4D:42:61:E6:FF:1F:DF:3D:D9
X509v3 Authority Key Identifier:
keyid:B3:AA:95:17:22:A1:99:71:A4:4E:62:CA:92:D1:C9:12:84:D1:2E:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s6qVFyKhmXGkTmLKktHJEoTRLiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/fdea7c-a1bc-48a9-acd3-a003c4b61a5f/1/s6qVFyKhmXGkTmLKktHJEoTRLiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/fdea7c-a1bc-48a9-acd3-a003c4b61a5f/1/s6qVFyKhmXGkTmLKktHJEoTRLiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:b1:cf:88:62:fb:94:9f:5d:f1:e6:3e:88:4a:e6:2b:f7:ff:
c0:6b:b6:1a:22:36:4d:42:84:06:48:a6:3e:89:95:8c:fc:c2:
09:1f:12:73:b1:fb:11:e7:f7:53:0c:10:2e:41:07:5f:12:84:
76:c2:d6:46:f7:40:91:1a:44:b4:46:7f:bb:b3:af:05:a6:6a:
f4:33:53:c7:4a:cb:11:56:ea:15:cd:e0:af:d8:15:56:de:ee:
e5:fb:72:f8:93:ea:d5:73:e3:b3:70:62:ca:8c:c4:18:23:e3:
b1:a2:93:25:f0:65:97:93:02:f1:00:83:b5:b9:5d:73:61:1e:
34:4e:da:50:10:ec:2d:d4:3a:c1:e7:a9:34:6a:6e:ea:f0:93:
f0:3a:a2:bd:b2:52:ff:f7:39:a1:dd:27:60:ce:c3:aa:42:8c:
43:75:3d:c3:28:0f:6e:04:62:d1:ad:92:f8:2f:9a:4e:64:9a:
c9:ed:f9:9a:e4:a2:fd:32:b1:6f:b7:84:35:58:80:6d:81:d1:
9e:4a:ab:2f:ca:fe:f3:fb:8a:13:09:d7:01:cd:51:8d:2b:36:
b2:1e:4a:62:a3:2f:b1:7b:fe:ea:23:47:99:d0:c2:2d:7a:4e:
3e:b6:5f:db:22:40:25:2c:22:e4:61:61:4e:3c:35:d1:3f:07:
13:73:b1:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8j3ZaIcCEFJjyeMQFEr+2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzYWE5NTE3MjJhMTk5NzFhNDRlNjJjYTkyZDFjOTEyODRk
MTJlMjEwHhcNMjUxMDE5MTMwMTI0WhcNMjUxMDIwMTMwMTI0WjAzMTEwLwYDVQQD
Eyg4YzFjMDI5Mzg4MmMzNTQzYzdkYjg1NGQ0MjYxZTZmZjFmZGYzZGQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyf119zSN2EMDe1xMtkBSRSuL8bB0
mG3pbDa7HqR6geSPtE/KWoLxsPjVAyxjNrhQaxVkL8Rqzx/pe6mmpJy5S2JOErHI
UQybeXHhbziDShPrqhdVIIalaDtFta5SoSNeTAkPgWTJ6vxGHclyDLl2c25f70/g
DFPQvevnBf8a+E3CzVmmPTjHNCuoP2lmP3lMntW42FxVe5H+L3sAh+fHA/bbzZ1E
KTFy3a2XjyNVsPqiNbFJaUrfQqXJvuRY5EO0ayElsurXzgIABiEZ4jCPx648SIcE
JSIidh+S5DB6jHaejasuIX3Ua2upSHbFMHwzCJYspjO6z2WffOkmkTHzewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIwcApOILDVDx9uFTUJh5v8f3z3ZMB8GA1UdIwQY
MBaAFLOqlRcioZlxpE5iypLRyRKE0S4hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczZxVkZ5S2htWEdrVG1MS2t0SEpFb1RSTGlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny9mZGVhN2MtYTFiYy00OGE5LWFjZDMt
YTAwM2M0YjYxYTVmLzEvczZxVkZ5S2htWEdrVG1MS2t0SEpFb1RSTGlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny9mZGVhN2MtYTFiYy00OGE5LWFjZDMtYTAwM2M0YjYxYTVm
LzEvczZxVkZ5S2htWEdrVG1MS2t0SEpFb1RSTGlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASrHPiGL7
lJ9d8eY+iErmK/f/wGu2GiI2TUKEBkimPomVjPzCCR8Sc7H7Eef3UwwQLkEHXxKE
dsLWRvdAkRpEtEZ/u7OvBaZq9DNTx0rLEVbqFc3gr9gVVt7u5fty+JPq1XPjs3Bi
yozEGCPjsaKTJfBll5MC8QCDtbldc2EeNE7aUBDsLdQ6weepNGpu6vCT8DqivbJS
//c5od0nYM7DqkKMQ3U9wygPbgRi0a2S+C+aTmSaye35muSi/TKxb7eENViAbYHR
nkqrL8r+8/uKEwnXAc1RjSs2sh5KYqMvsXv+6iNHmdDCLXpOPrZf2yJAJSwi5GFh
Tjw10T8HE3Ox+w==
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:10:54 2025 by rpki-client