
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/958a2c-cef0-4bcc-99c2-321c9d66c847/1/g6BiUlKSop6X_moFW5vWCEp3GXc.mft
File: g6BiUlKSop6X_moFW5vWCEp3GXc.mft (raw, json)
Hash identifier: LTCKpMM7SaCnsyt80c0axDMMpDkjeG7XDW7cmtGtvGY=
Subject key identifier: 5B:D9:6C:F1:39:96:2C:45:55:42:98:95:3A:AC:69:ED:47:24:9F:D7
Authority key identifier: 83:A0:62:52:52:92:A2:9E:97:FE:6A:05:5B:9B:D6:08:4A:77:19:77
Certificate issuer: /CN=83a062525292a29e97fe6a055b9bd6084a771977
Certificate serial: 0199FAA0DF38200FC3305F1E555694735978
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g6BiUlKSop6X_moFW5vWCEp3GXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/958a2c-cef0-4bcc-99c2-321c9d66c847/1/g6BiUlKSop6X_moFW5vWCEp3GXc.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 04:01:10 +0000
Manifest this update: Sun 19 Oct 2025 04:01:10 +0000
Manifest next update: Mon 20 Oct 2025 04:01:10 +0000
Files and hashes: 1: fb6wEgaDbLPx8q9w1xJmiSz6jYA.roa (hash: cTH5l3quR1dZhmY8/pVYGOhtfcq0HdpSh+BT0OKf954=)
2: g6BiUlKSop6X_moFW5vWCEp3GXc.crl (hash: mUjBxWENvsGYO53pXu19bhXM78Xw3OXENWyMKwJ7rx4=)
3: owvK-K4xt1xLcc7TBT_SQsn0CJs.roa (hash: i/ROe7RqOf5kAUxhkRxcQuX6NvNJ0cLz8fR53Bhsxmc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/958a2c-cef0-4bcc-99c2-321c9d66c847/1/g6BiUlKSop6X_moFW5vWCEp3GXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/958a2c-cef0-4bcc-99c2-321c9d66c847/1/g6BiUlKSop6X_moFW5vWCEp3GXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/g6BiUlKSop6X_moFW5vWCEp3GXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 04:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:a0:df:38:20:0f:c3:30:5f:1e:55:56:94:73:59:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83a062525292a29e97fe6a055b9bd6084a771977
Validity
Not Before: Oct 19 04:01:10 2025 GMT
Not After : Oct 20 04:01:10 2025 GMT
Subject: CN=5bd96cf139962c45554298953aac69ed47249fd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:db:ac:b9:4a:4c:11:8c:9d:58:3c:55:b3:9f:
8d:f0:a4:f9:15:9b:d6:93:66:fb:5c:82:13:10:a0:
45:4c:c3:1b:97:38:5f:7d:f9:b9:92:41:29:af:45:
10:db:7f:bc:d8:10:bc:ec:43:f8:c7:5d:98:01:89:
db:70:3b:d8:04:67:4c:c8:d3:e2:fc:e6:d1:7c:bb:
f9:e8:7c:4c:90:ec:43:5f:bc:8d:7c:88:de:8c:11:
3a:95:59:d4:d9:dc:70:2c:97:fc:63:de:c9:79:bf:
17:82:93:fc:c1:95:9a:1b:c2:6f:14:69:d7:b8:7b:
d4:84:71:41:6d:c0:34:36:dd:b3:37:6f:0d:c8:50:
d5:14:66:28:32:09:0e:92:71:3b:fc:1d:20:06:d3:
8e:33:65:f0:30:5c:69:40:c4:ef:c4:ad:bf:1f:ae:
a2:22:23:4a:76:31:f9:92:6e:c5:63:de:24:e8:4e:
39:07:31:96:a1:7a:e2:5e:15:9d:8b:aa:6e:cf:25:
21:dc:9c:3f:b4:6e:96:a8:77:93:d7:4f:c9:44:79:
79:74:48:85:fd:12:da:fc:94:a3:c4:91:a3:85:c3:
0c:3a:23:91:a8:58:de:6e:e8:2c:4c:f4:1d:6f:23:
a8:ba:f9:f3:31:89:6d:49:42:6c:9e:43:6f:da:47:
58:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:D9:6C:F1:39:96:2C:45:55:42:98:95:3A:AC:69:ED:47:24:9F:D7
X509v3 Authority Key Identifier:
keyid:83:A0:62:52:52:92:A2:9E:97:FE:6A:05:5B:9B:D6:08:4A:77:19:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g6BiUlKSop6X_moFW5vWCEp3GXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/958a2c-cef0-4bcc-99c2-321c9d66c847/1/g6BiUlKSop6X_moFW5vWCEp3GXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/958a2c-cef0-4bcc-99c2-321c9d66c847/1/g6BiUlKSop6X_moFW5vWCEp3GXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
df:0e:d0:0a:67:25:7d:69:5e:3d:d0:ec:fc:1d:73:ad:34:a1:
7a:92:a1:b3:06:dc:ca:36:2e:c6:b1:93:26:10:31:26:b1:0b:
59:ad:53:aa:58:55:1b:05:7d:19:52:f2:93:2c:36:a5:e1:c9:
13:db:51:36:29:c6:2f:4b:0b:0a:45:d9:66:99:c4:c0:e2:20:
63:ce:90:c8:7b:dd:22:7a:e0:12:71:67:b4:22:25:f9:1e:b4:
8a:c6:0c:5a:97:21:01:e3:1e:ac:c3:0f:c1:ac:2c:4b:67:d7:
81:59:f1:94:fb:ee:14:74:1c:5b:18:bf:92:42:4a:76:43:67:
b1:c0:fe:37:25:a6:10:0e:82:f0:fd:08:58:53:38:51:94:6e:
cb:b1:ae:16:87:bf:6c:63:f4:9d:8d:6b:ba:3f:27:b8:21:03:
f0:d9:41:1d:5e:ed:48:39:75:8a:f0:00:a3:a3:f3:39:d4:98:
0d:f7:17:8f:43:82:9a:fe:c1:d2:7d:19:00:7a:f2:f7:e3:b4:
d1:66:bf:fb:6e:e6:1a:13:06:9f:fe:1b:11:66:30:dd:cf:91:
6b:1e:32:78:0d:89:7e:df:0e:2f:83:fc:b8:7d:82:0d:db:9e:
3e:3c:ce:59:fa:92:58:16:56:63:ca:90:4b:e0:90:5d:57:b9:
a4:a8:ba:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn6oN84IA/DMF8eVVaUc1l4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzYTA2MjUyNTI5MmEyOWU5N2ZlNmEwNTViOWJkNjA4NGE3
NzE5NzcwHhcNMjUxMDE5MDQwMTEwWhcNMjUxMDIwMDQwMTEwWjAzMTEwLwYDVQQD
Eyg1YmQ5NmNmMTM5OTYyYzQ1NTU0Mjk4OTUzYWFjNjllZDQ3MjQ5ZmQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxdusuUpMEYydWDxVs5+N8KT5FZvW
k2b7XIITEKBFTMMblzhfffm5kkEpr0UQ23+82BC87EP4x12YAYnbcDvYBGdMyNPi
/ObRfLv56HxMkOxDX7yNfIjejBE6lVnU2dxwLJf8Y97Jeb8XgpP8wZWaG8JvFGnX
uHvUhHFBbcA0Nt2zN28NyFDVFGYoMgkOknE7/B0gBtOOM2XwMFxpQMTvxK2/H66i
IiNKdjH5km7FY94k6E45BzGWoXriXhWdi6puzyUh3Jw/tG6WqHeT10/JRHl5dEiF
/RLa/JSjxJGjhcMMOiORqFjebugsTPQdbyOouvnzMYltSUJsnkNv2kdYsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFvZbPE5lixFVUKYlTqsae1HJJ/XMB8GA1UdIwQY
MBaAFIOgYlJSkqKel/5qBVub1ghKdxl3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzZCaVVsS1NvcDZYX21vRlc1dldDRXAzR1hjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS85NThhMmMtY2VmMC00YmNjLTk5YzIt
MzIxYzlkNjZjODQ3LzEvZzZCaVVsS1NvcDZYX21vRlc1dldDRXAzR1hjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS85NThhMmMtY2VmMC00YmNjLTk5YzItMzIxYzlkNjZjODQ3
LzEvZzZCaVVsS1NvcDZYX21vRlc1dldDRXAzR1hjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3w7QCmcl
fWlePdDs/B1zrTShepKhswbcyjYuxrGTJhAxJrELWa1TqlhVGwV9GVLykyw2peHJ
E9tRNinGL0sLCkXZZpnEwOIgY86QyHvdInrgEnFntCIl+R60isYMWpchAeMerMMP
wawsS2fXgVnxlPvuFHQcWxi/kkJKdkNnscD+NyWmEA6C8P0IWFM4UZRuy7GuFoe/
bGP0nY1ruj8nuCED8NlBHV7tSDl1ivAAo6PzOdSYDfcXj0OCmv7B0n0ZAHry9+O0
0Wa/+27mGhMGn/4bEWYw3c+Rax4yeA2Jft8OL4P8uH2CDduePjzOWfqSWBZWY8qQ
S+CQXVe5pKi6bA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:05:26 2025 by rpki-client