Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/149c01-840d-45f6-823f-e2f0e1c26105/1/s6dYkEx1hW41haRDOuXsV_7xo8c.mft
File: s6dYkEx1hW41haRDOuXsV_7xo8c.mft (raw, json)
Hash identifier: 5DkowsuDIWM/qaZ0e+oYrhTh61aie1D+dJFBJbGrYOs=
Subject key identifier: 80:7A:45:3A:55:32:1E:4C:C6:A0:B7:97:97:D0:70:01:5B:4A:19:27
Authority key identifier: B3:A7:58:90:4C:75:85:6E:35:85:A4:43:3A:E5:EC:57:FE:F1:A3:C7
Certificate issuer: /CN=b3a758904c75856e3585a4433ae5ec57fef1a3c7
Certificate serial: 0199FC2164713F1D3F384C668E7B4D2F9053
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s6dYkEx1hW41haRDOuXsV_7xo8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/149c01-840d-45f6-823f-e2f0e1c26105/1/s6dYkEx1hW41haRDOuXsV_7xo8c.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 11:01:10 +0000
Manifest this update: Sun 19 Oct 2025 11:01:10 +0000
Manifest next update: Mon 20 Oct 2025 11:01:10 +0000
Files and hashes: 1: mD7Z7YeNOfK8jp-WeYlQt4uS5Qk.roa (hash: foJEvw+8/1mri1uVePD4Fo8lgGoj9wOcsREdvsruLoI=)
2: s6dYkEx1hW41haRDOuXsV_7xo8c.crl (hash: Qqd1o54yHcCFFIGKb2Wt4Hr+P4clTMukIuZXjWQ/c+w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/149c01-840d-45f6-823f-e2f0e1c26105/1/s6dYkEx1hW41haRDOuXsV_7xo8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/149c01-840d-45f6-823f-e2f0e1c26105/1/s6dYkEx1hW41haRDOuXsV_7xo8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/s6dYkEx1hW41haRDOuXsV_7xo8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:64:71:3f:1d:3f:38:4c:66:8e:7b:4d:2f:90:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3a758904c75856e3585a4433ae5ec57fef1a3c7
Validity
Not Before: Oct 19 11:01:10 2025 GMT
Not After : Oct 20 11:01:10 2025 GMT
Subject: CN=807a453a55321e4cc6a0b79797d070015b4a1927
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a9:7c:2b:8f:44:c9:bb:c4:c3:20:bc:f4:fa:
e6:3e:7a:8a:11:ca:61:d4:60:40:04:8f:63:dd:82:
a8:dc:ec:5f:3e:6f:c2:fc:78:a9:7d:c5:c5:0d:d7:
60:d1:ae:36:94:d0:6a:fd:8c:bf:b8:37:7c:ba:5b:
c7:43:ac:54:49:a7:5c:48:00:a9:6f:90:ca:ac:f4:
54:03:d4:f6:e4:06:74:83:53:7e:b3:e6:36:80:30:
46:a2:8e:4a:41:95:d5:a0:25:e0:82:d9:ce:ac:e6:
89:40:ac:a0:d2:87:27:23:cc:72:ab:9e:d3:d5:2d:
ae:0d:8b:5c:50:e5:5a:df:5c:be:7e:da:00:0c:42:
6f:f8:55:65:25:1c:59:f4:17:c4:5d:8f:cd:90:3f:
a1:1d:61:64:d9:ac:af:59:d4:67:33:bc:ef:5d:e9:
1e:88:4b:85:d8:3f:b3:13:e6:15:f3:08:18:8a:9f:
04:2f:a4:55:00:84:f5:79:47:e3:a3:ba:1f:ca:a0:
3e:54:48:70:6b:8f:57:b3:ce:b4:d3:33:e3:f2:e7:
04:59:ea:68:3b:dc:9b:ad:43:0b:cd:e1:fd:08:fc:
7a:f2:54:3c:27:18:48:ee:73:1b:93:5a:49:9e:3c:
59:e3:49:3a:13:bd:6d:d7:ac:40:7b:61:f2:15:e1:
49:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:7A:45:3A:55:32:1E:4C:C6:A0:B7:97:97:D0:70:01:5B:4A:19:27
X509v3 Authority Key Identifier:
keyid:B3:A7:58:90:4C:75:85:6E:35:85:A4:43:3A:E5:EC:57:FE:F1:A3:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s6dYkEx1hW41haRDOuXsV_7xo8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/149c01-840d-45f6-823f-e2f0e1c26105/1/s6dYkEx1hW41haRDOuXsV_7xo8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/149c01-840d-45f6-823f-e2f0e1c26105/1/s6dYkEx1hW41haRDOuXsV_7xo8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:ec:65:02:44:8e:0e:8c:d8:ae:09:94:d9:3d:0f:3f:9d:7c:
79:ba:5e:8e:f3:bb:bc:6e:37:3d:e5:61:77:1e:7a:54:9c:fd:
7d:f8:3e:c2:3f:33:df:52:ee:b2:76:b4:21:80:f4:bf:46:c9:
29:6f:7b:3c:d0:08:6b:b5:9b:ff:4f:63:fd:be:4d:d9:16:b8:
01:26:36:73:ba:12:a1:db:c0:7f:ac:4b:9f:d6:1e:de:ce:cc:
fb:d9:2f:b6:7e:7c:6b:6f:45:d2:56:f3:1e:fc:0e:ab:91:ca:
17:9c:a9:e5:17:47:ac:e2:79:17:d4:51:fa:95:49:b4:91:49:
c8:2f:19:24:48:87:8f:39:e5:a8:95:1d:c5:f3:d7:bc:e5:88:
52:05:5f:b7:a2:b1:81:9f:76:e7:38:8c:4d:45:93:1d:84:28:
a4:07:c3:e6:d1:5a:34:34:3b:91:74:a3:b1:d0:4a:87:2c:51:
79:5d:be:9f:6c:2d:22:78:8c:6f:6b:80:87:29:d0:5f:d1:db:
de:37:fd:cc:fc:b7:73:2a:9f:d3:e7:b0:78:19:29:d9:53:0f:
85:d7:63:b3:d1:77:dc:9c:43:23:be:06:52:98:ab:18:29:32:
fe:8c:82:d5:e4:cc:34:a3:e4:c5:f1:b2:94:b9:11:3e:41:4d:
d6:fb:a2:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:31:35 2025 by rpki-client