Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/e4ffc5-fb8d-4c40-8b73-bfeb7cea209d/1/S6_0itEUWxAMeD-3r7bzAovY804.mft
File: S6_0itEUWxAMeD-3r7bzAovY804.mft (raw, json)
Hash identifier: op8Wu84Rr2xcGLPoZuUy3FnGBb4WZWAscU7RCr0nJQ8=
Subject key identifier: 69:B3:01:E5:55:8C:21:7C:4F:0A:A7:80:FD:2C:22:38:50:68:D3:DD
Authority key identifier: 4B:AF:F4:8A:D1:14:5B:10:0C:78:3F:B7:AF:B6:F3:02:8B:D8:F3:4E
Certificate issuer: /CN=4baff48ad1145b100c783fb7afb6f3028bd8f34e
Certificate serial: 019A4E18855F3A526E64E9DCD4230E45BAC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S6_0itEUWxAMeD-3r7bzAovY804.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/e4ffc5-fb8d-4c40-8b73-bfeb7cea209d/1/S6_0itEUWxAMeD-3r7bzAovY804.mft
Manifest number: 0E45
Signing time: Tue 04 Nov 2025 09:00:21 +0000
Manifest this update: Tue 04 Nov 2025 09:00:21 +0000
Manifest next update: Wed 05 Nov 2025 09:00:21 +0000
Files and hashes: 1: 07VM5GQDyy0wcSk66eg9Nc4GYr0.roa (hash: tZR04Bh0g3Sbqjc1Ej/IqbvRwZJEdNyq0qHOrpzegq8=)
2: S6_0itEUWxAMeD-3r7bzAovY804.crl (hash: Ec1DA5Xj8SLd1fxfp2WaJrf6MsM0p4x4SPmt5GkGiJ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/e4ffc5-fb8d-4c40-8b73-bfeb7cea209d/1/S6_0itEUWxAMeD-3r7bzAovY804.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/e4ffc5-fb8d-4c40-8b73-bfeb7cea209d/1/S6_0itEUWxAMeD-3r7bzAovY804.mft
rsync://rpki.ripe.net/repository/DEFAULT/S6_0itEUWxAMeD-3r7bzAovY804.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:85:5f:3a:52:6e:64:e9:dc:d4:23:0e:45:ba:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4baff48ad1145b100c783fb7afb6f3028bd8f34e
Validity
Not Before: Nov 4 09:00:21 2025 GMT
Not After : Nov 5 09:00:21 2025 GMT
Subject: CN=69b301e5558c217c4f0aa780fd2c22385068d3dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:90:4e:51:b7:fc:31:8b:1c:13:95:63:7e:5f:
be:50:31:eb:82:c6:53:61:7e:ea:77:27:06:aa:16:
80:79:44:9c:65:de:aa:93:32:c6:c0:57:79:c8:1f:
da:9e:82:34:bc:71:67:5f:ca:75:ed:d3:1a:be:40:
48:49:2c:b3:95:57:d7:d2:77:25:23:03:96:ba:41:
1b:c1:81:a4:0c:46:9b:45:42:77:39:5c:3c:1f:28:
24:84:5f:49:60:e5:48:9a:92:14:eb:42:ae:67:5b:
7c:42:e3:9f:2e:b7:7e:99:bf:09:e3:6c:0b:08:40:
6b:f0:c4:46:3a:fc:d9:03:32:07:1a:0d:7e:db:49:
41:d0:1b:ef:4d:84:a4:63:63:8a:26:86:29:77:e6:
c7:a6:97:e5:9a:d4:73:3b:04:47:75:c9:2a:bd:4f:
50:cc:d4:47:5d:62:e0:93:c8:90:30:6c:11:4f:2a:
dc:63:7d:80:49:ec:7d:ac:76:b4:93:55:15:30:be:
75:b6:25:66:6c:1a:42:8d:78:64:76:00:97:8f:0f:
86:30:97:85:de:13:b1:d4:60:95:b4:ab:22:67:a3:
93:1b:57:63:91:32:f2:3b:c8:ee:7d:b7:f0:21:b7:
7b:90:f0:eb:fb:0d:9a:02:53:0f:84:f8:83:8a:86:
06:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:B3:01:E5:55:8C:21:7C:4F:0A:A7:80:FD:2C:22:38:50:68:D3:DD
X509v3 Authority Key Identifier:
keyid:4B:AF:F4:8A:D1:14:5B:10:0C:78:3F:B7:AF:B6:F3:02:8B:D8:F3:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S6_0itEUWxAMeD-3r7bzAovY804.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e4ffc5-fb8d-4c40-8b73-bfeb7cea209d/1/S6_0itEUWxAMeD-3r7bzAovY804.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e4ffc5-fb8d-4c40-8b73-bfeb7cea209d/1/S6_0itEUWxAMeD-3r7bzAovY804.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:a9:76:ee:d6:61:2e:a3:05:28:6d:e4:7e:65:72:77:10:07:
9e:90:49:d0:22:93:22:e6:1a:43:44:00:25:ef:72:aa:5a:6c:
b0:87:6d:4c:eb:65:06:7d:ff:b5:69:d7:4f:5f:88:d3:db:cc:
6a:d3:e8:8a:7d:14:c3:64:63:ef:03:b6:b4:65:a3:1c:29:af:
f7:0e:df:98:27:af:d6:28:a4:72:3b:ed:62:d8:0b:37:67:78:
55:8f:8b:01:c1:90:e6:bd:c2:31:2f:36:47:9b:cf:c6:77:43:
18:5f:9e:51:7d:22:ab:42:83:a1:13:02:3f:63:9f:f1:24:c0:
e4:7f:b2:58:5a:de:30:9e:da:e8:9f:7c:49:5f:87:56:5d:ad:
e2:84:1d:c1:96:76:22:76:48:7c:de:25:58:7a:92:1e:b4:56:
37:0f:6c:dd:9d:25:39:49:b0:dd:41:27:24:41:d2:19:d7:c8:
1c:e9:eb:4e:21:ae:ab:b6:72:ab:53:de:46:36:69:ce:ae:02:
f0:29:f9:ba:1d:8e:d5:bd:73:bd:2c:5b:5a:df:b8:5e:82:7c:
81:d6:72:44:2b:f6:6d:fd:a5:a6:35:37:12:e0:f4:89:df:dd:
2d:a4:7c:61:0e:f6:0e:ce:10:5b:dd:f9:d5:68:b3:32:43:3e:
3b:1f:be:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOGIVfOlJuZOnc1CMORbrDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiYWZmNDhhZDExNDViMTAwYzc4M2ZiN2FmYjZmMzAyOGJk
OGYzNGUwHhcNMjUxMTA0MDkwMDIxWhcNMjUxMTA1MDkwMDIxWjAzMTEwLwYDVQQD
Eyg2OWIzMDFlNTU1OGMyMTdjNGYwYWE3ODBmZDJjMjIzODUwNjhkM2RkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZBOUbf8MYscE5Vjfl++UDHrgsZT
YX7qdycGqhaAeUScZd6qkzLGwFd5yB/anoI0vHFnX8p17dMavkBISSyzlVfX0ncl
IwOWukEbwYGkDEabRUJ3OVw8HygkhF9JYOVImpIU60KuZ1t8QuOfLrd+mb8J42wL
CEBr8MRGOvzZAzIHGg1+20lB0BvvTYSkY2OKJoYpd+bHppflmtRzOwRHdckqvU9Q
zNRHXWLgk8iQMGwRTyrcY32ASex9rHa0k1UVML51tiVmbBpCjXhkdgCXjw+GMJeF
3hOx1GCVtKsiZ6OTG1djkTLyO8jufbfwIbd7kPDr+w2aAlMPhPiDioYGdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGmzAeVVjCF8TwqngP0sIjhQaNPdMB8GA1UdIwQY
MBaAFEuv9IrRFFsQDHg/t6+28wKL2PNOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzZfMGl0RVVXeEFNZUQtM3I3YnpBb3ZZODA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9lNGZmYzUtZmI4ZC00YzQwLThiNzMt
YmZlYjdjZWEyMDlkLzEvUzZfMGl0RVVXeEFNZUQtM3I3YnpBb3ZZODA0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS9lNGZmYzUtZmI4ZC00YzQwLThiNzMtYmZlYjdjZWEyMDlk
LzEvUzZfMGl0RVVXeEFNZUQtM3I3YnpBb3ZZODA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqql27tZh
LqMFKG3kfmVydxAHnpBJ0CKTIuYaQ0QAJe9yqlpssIdtTOtlBn3/tWnXT1+I09vM
atPoin0Uw2Rj7wO2tGWjHCmv9w7fmCev1iikcjvtYtgLN2d4VY+LAcGQ5r3CMS82
R5vPxndDGF+eUX0iq0KDoRMCP2Of8STA5H+yWFreMJ7a6J98SV+HVl2t4oQdwZZ2
InZIfN4lWHqSHrRWNw9s3Z0lOUmw3UEnJEHSGdfIHOnrTiGuq7Zyq1PeRjZpzq4C
8Cn5uh2O1b1zvSxbWt+4XoJ8gdZyRCv2bf2lpjU3EuD0id/dLaR8YQ72Ds4QW935
1WizMkM+Ox++Mg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 17:31:09 2025 by rpki-client