Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/3f2772-3da3-4921-9c52-b0b06eb344fb/1/S6XEBCZt6xbZx4qpLoAtg_uibHE.mft
File: S6XEBCZt6xbZx4qpLoAtg_uibHE.mft (raw, json)
Hash identifier: gtu6e9sJ28JPzTcFw+w3Jwt5izMTGHEfLdM8ebY3Q+Y=
Subject key identifier: 8A:EF:31:C6:AE:06:CE:E0:75:29:93:01:B5:38:74:5E:43:37:E0:5B
Authority key identifier: 4B:A5:C4:04:26:6D:EB:16:D9:C7:8A:A9:2E:80:2D:83:FB:A2:6C:71
Certificate issuer: /CN=4ba5c404266deb16d9c78aa92e802d83fba26c71
Certificate serial: 019A4DE18900D73C3549A0F32A2FCAAC9003
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S6XEBCZt6xbZx4qpLoAtg_uibHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/3f2772-3da3-4921-9c52-b0b06eb344fb/1/S6XEBCZt6xbZx4qpLoAtg_uibHE.mft
Manifest number: 0610
Signing time: Tue 04 Nov 2025 08:00:17 +0000
Manifest this update: Tue 04 Nov 2025 08:00:17 +0000
Manifest next update: Wed 05 Nov 2025 08:00:17 +0000
Files and hashes: 1: S6XEBCZt6xbZx4qpLoAtg_uibHE.crl (hash: mg8VUD8dLY7oWOFWG8+BaoLx2sVZ+CmbuD3xXDQDRFI=)
2: eQ54edgYKIUcfPhFEws-eNJ8BAA.roa (hash: OAjHXz/8YyId26wIY7CC8yapukZc0Z6aGp6x02zSR/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/3f2772-3da3-4921-9c52-b0b06eb344fb/1/S6XEBCZt6xbZx4qpLoAtg_uibHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/3f2772-3da3-4921-9c52-b0b06eb344fb/1/S6XEBCZt6xbZx4qpLoAtg_uibHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/S6XEBCZt6xbZx4qpLoAtg_uibHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:89:00:d7:3c:35:49:a0:f3:2a:2f:ca:ac:90:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ba5c404266deb16d9c78aa92e802d83fba26c71
Validity
Not Before: Nov 4 08:00:17 2025 GMT
Not After : Nov 5 08:00:17 2025 GMT
Subject: CN=8aef31c6ae06cee075299301b538745e4337e05b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:e8:cb:9b:70:d5:50:b1:79:51:4c:eb:c1:2b:
66:0e:29:36:61:3b:79:f5:29:e9:36:ce:75:c2:96:
e0:8c:5f:e2:46:7e:b9:5b:09:5e:4d:d9:35:68:c2:
c1:6a:42:16:fb:26:7b:f8:e6:db:66:bc:21:f5:66:
d5:f5:02:fd:ec:e1:68:3f:7c:44:47:f2:d4:d2:0c:
ba:c1:83:3f:66:7a:ee:da:cc:43:c7:f2:fd:54:eb:
88:c4:d4:32:6c:63:ce:0a:52:c6:c8:34:6f:ae:89:
c4:ac:72:b6:84:ce:af:4a:fe:3e:7e:e0:1a:d4:b7:
da:84:08:ba:09:7f:13:19:f6:e1:4f:7a:c5:be:92:
53:b5:3e:b8:b7:38:58:26:f9:bc:f0:ea:eb:75:94:
29:b2:73:3f:cd:bc:9b:fd:1f:98:ef:ba:03:35:cf:
f6:58:bc:ed:5a:74:77:22:01:06:5a:61:46:c1:5a:
47:0a:28:39:a8:fd:ac:1f:86:2c:6c:0c:42:2d:23:
4f:3a:3a:86:ac:b1:4a:09:63:71:30:92:cc:40:17:
47:b8:66:fa:09:4b:e5:01:6b:3a:31:19:3f:58:17:
ab:5d:0f:70:6f:7c:d4:72:ea:53:76:52:2c:0b:61:
4d:57:87:30:da:24:44:5f:d6:1d:48:a7:27:a8:29:
13:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:EF:31:C6:AE:06:CE:E0:75:29:93:01:B5:38:74:5E:43:37:E0:5B
X509v3 Authority Key Identifier:
keyid:4B:A5:C4:04:26:6D:EB:16:D9:C7:8A:A9:2E:80:2D:83:FB:A2:6C:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S6XEBCZt6xbZx4qpLoAtg_uibHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/3f2772-3da3-4921-9c52-b0b06eb344fb/1/S6XEBCZt6xbZx4qpLoAtg_uibHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/3f2772-3da3-4921-9c52-b0b06eb344fb/1/S6XEBCZt6xbZx4qpLoAtg_uibHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:07:1b:ca:54:55:6e:7f:8c:8d:49:04:9f:39:ba:cc:c0:86:
84:15:98:d1:f3:5e:27:5d:ad:0f:25:a0:38:0d:f4:04:a8:0b:
cf:dc:20:6d:6c:83:2e:16:8f:c1:47:8a:e1:1e:f7:49:00:ae:
bd:6d:3c:b9:7d:b3:19:54:ce:b2:61:38:fb:b2:b4:27:6a:06:
ba:2e:a1:b7:62:51:7a:f9:30:52:36:9d:c3:c4:fc:53:2d:3c:
55:12:4e:cc:c1:b5:84:04:2a:ec:68:7a:c4:cd:59:bc:53:9b:
f7:b7:66:53:de:8f:b1:8c:87:26:2a:c9:6a:53:5d:5b:f1:0a:
5d:d6:dc:68:4f:88:33:0d:c6:b4:09:6c:be:fb:d8:4e:a9:6e:
92:84:46:ba:86:bd:50:82:ff:9a:85:ee:79:21:28:70:2e:2f:
e9:58:63:e8:da:cf:2b:4f:09:54:13:11:11:8e:1b:25:40:c3:
1d:1a:84:fc:6a:96:04:fb:71:d4:22:77:3a:a1:f3:84:cd:e3:
1a:fd:d3:ab:8d:84:58:49:71:d0:4a:71:97:28:3c:1f:7c:79:
e9:3a:62:14:09:f1:6e:52:0a:a0:a4:01:46:e3:05:fc:c6:f0:
ae:92:09:fc:28:24:8c:d6:18:b2:42:5e:5a:33:8d:44:3d:7c:
6f:45:81:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:49:15 2025 by rpki-client