Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/a5969f-c016-4533-9cba-696703736621/1/6-T90XLfhZdWyoUd3eE2cPSBfuA.mft
File: 6-T90XLfhZdWyoUd3eE2cPSBfuA.mft (raw, json)
Hash identifier: A3c6Gu8mz3jZSaEj1RYy8V1YaxMNcHtcFL0AVarR0yc=
Subject key identifier: D4:5A:8D:8E:7D:4D:A4:FB:6C:41:E4:19:93:A8:48:52:0E:DA:37:F4
Authority key identifier: EB:E4:FD:D1:72:DF:85:97:56:CA:85:1D:DD:E1:36:70:F4:81:7E:E0
Certificate issuer: /CN=ebe4fdd172df859756ca851ddde13670f4817ee0
Certificate serial: 019A50747F1626005E6FA74326B53704CCF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6-T90XLfhZdWyoUd3eE2cPSBfuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/a5969f-c016-4533-9cba-696703736621/1/6-T90XLfhZdWyoUd3eE2cPSBfuA.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 20:00:03 +0000
Manifest this update: Tue 04 Nov 2025 20:00:03 +0000
Manifest next update: Wed 05 Nov 2025 20:00:03 +0000
Files and hashes: 1: 6-T90XLfhZdWyoUd3eE2cPSBfuA.crl (hash: xbYq227ozs0Ps+QkiKkhoQZIjGiZh3sfDkzQhFwJCTA=)
2: Z9aXtfZOLHLUJRH7QqPi1mqGj3U.roa (hash: pwgtrLZ9ZWVWEXXmTENsA08mvoGu1JfrrcaBMhazJW4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/a5969f-c016-4533-9cba-696703736621/1/6-T90XLfhZdWyoUd3eE2cPSBfuA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/a5969f-c016-4533-9cba-696703736621/1/6-T90XLfhZdWyoUd3eE2cPSBfuA.mft
rsync://rpki.ripe.net/repository/DEFAULT/6-T90XLfhZdWyoUd3eE2cPSBfuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:74:7f:16:26:00:5e:6f:a7:43:26:b5:37:04:cc:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebe4fdd172df859756ca851ddde13670f4817ee0
Validity
Not Before: Nov 4 20:00:03 2025 GMT
Not After : Nov 5 20:00:03 2025 GMT
Subject: CN=d45a8d8e7d4da4fb6c41e41993a848520eda37f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:8e:11:ad:3a:62:25:33:e5:dd:ba:5b:a4:38:
1f:11:80:8a:fc:2c:ec:16:cd:68:9a:a4:e6:aa:8d:
d2:5c:7f:3c:a2:3b:30:e6:08:4f:b7:77:ee:b7:1c:
4c:ca:50:89:50:25:18:2e:6b:43:46:49:8d:c0:ce:
86:71:33:59:6b:c8:af:a8:14:08:3a:3a:1f:d8:cd:
38:be:78:70:6c:9c:9a:5b:08:38:3c:cf:db:99:25:
b1:68:1a:6a:d4:ce:52:7c:e3:d4:1e:9f:c4:73:3e:
b3:08:ce:b8:b8:98:e4:9a:68:66:5e:26:bf:04:dc:
12:55:88:6f:cc:68:4a:1d:6f:20:31:a4:9a:c1:02:
d9:83:99:01:89:c1:00:02:c5:f4:24:1c:82:5a:ce:
d7:99:31:da:98:16:c8:17:db:35:b2:05:d4:b6:ee:
ee:ab:39:33:26:bb:0f:97:9d:73:06:3f:1c:b6:96:
6d:03:f2:c5:b5:29:f4:b8:55:6f:be:fc:88:14:09:
80:0e:62:18:bf:7d:07:0d:b2:f7:93:35:de:65:f9:
04:d8:5f:40:1f:a8:e5:0d:a1:ad:c6:5b:1c:7d:c1:
f2:a6:c7:e4:b0:db:26:a8:aa:b3:83:ff:65:d4:48:
b0:fc:26:13:5d:7b:90:5e:ea:5e:6a:ec:9e:bc:e6:
ae:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:5A:8D:8E:7D:4D:A4:FB:6C:41:E4:19:93:A8:48:52:0E:DA:37:F4
X509v3 Authority Key Identifier:
keyid:EB:E4:FD:D1:72:DF:85:97:56:CA:85:1D:DD:E1:36:70:F4:81:7E:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-T90XLfhZdWyoUd3eE2cPSBfuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/a5969f-c016-4533-9cba-696703736621/1/6-T90XLfhZdWyoUd3eE2cPSBfuA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/a5969f-c016-4533-9cba-696703736621/1/6-T90XLfhZdWyoUd3eE2cPSBfuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:a3:d6:41:11:20:45:85:98:4f:20:4a:88:21:2b:9f:a4:25:
67:3b:0a:96:68:1d:31:ab:cd:1f:1b:ef:9e:f5:fc:02:aa:8e:
36:ed:72:7b:33:a3:cd:3d:7c:d4:67:7e:9d:da:91:aa:95:f4:
ac:88:d2:92:be:cc:ed:ab:3f:5e:4f:e4:7b:07:80:32:bc:e4:
b3:ed:7e:78:03:08:29:62:95:62:50:de:a0:f2:0d:f7:ea:28:
7d:7d:af:a7:c7:e4:e0:d2:26:05:f7:7a:18:50:b1:cc:ea:b6:
2c:31:a1:b0:fe:53:ad:b6:a5:da:cf:0e:cf:d2:7e:f9:28:49:
e8:54:ed:fc:a6:c5:a6:95:d3:0c:f0:e4:cf:c5:b8:70:a3:6b:
20:3d:c6:01:7f:33:57:96:6a:07:49:24:18:b1:6a:51:6c:9b:
83:12:0b:10:8a:da:d6:3d:1e:e5:f7:14:d5:5a:57:e7:dd:a8:
c1:f8:f5:5b:c9:b4:13:dd:9f:c1:9b:3c:0f:d1:d5:32:7e:b7:
6a:fb:69:7f:34:46:28:81:18:05:18:7e:81:0d:30:6d:92:78:
fe:18:a3:37:3c:cb:9c:5b:21:01:45:12:cb:ad:13:60:49:3b:
12:b5:15:f3:62:75:9d:ae:bb:4b:cd:f6:cb:de:d7:cd:3e:1e:
53:18:2d:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQdH8WJgBeb6dDJrU3BMz1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViZTRmZGQxNzJkZjg1OTc1NmNhODUxZGRkZTEzNjcwZjQ4
MTdlZTAwHhcNMjUxMTA0MjAwMDAzWhcNMjUxMTA1MjAwMDAzWjAzMTEwLwYDVQQD
EyhkNDVhOGQ4ZTdkNGRhNGZiNmM0MWU0MTk5M2E4NDg1MjBlZGEzN2Y0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvo4RrTpiJTPl3bpbpDgfEYCK/Czs
Fs1omqTmqo3SXH88ojsw5ghPt3futxxMylCJUCUYLmtDRkmNwM6GcTNZa8ivqBQI
Ojof2M04vnhwbJyaWwg4PM/bmSWxaBpq1M5SfOPUHp/Ecz6zCM64uJjkmmhmXia/
BNwSVYhvzGhKHW8gMaSawQLZg5kBicEAAsX0JByCWs7XmTHamBbIF9s1sgXUtu7u
qzkzJrsPl51zBj8ctpZtA/LFtSn0uFVvvvyIFAmADmIYv30HDbL3kzXeZfkE2F9A
H6jlDaGtxlscfcHypsfksNsmqKqzg/9l1Eiw/CYTXXuQXupeauyevOautwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNRajY59TaT7bEHkGZOoSFIO2jf0MB8GA1UdIwQY
MBaAFOvk/dFy34WXVsqFHd3hNnD0gX7gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNi1UOTBYTGZoWmRXeW9VZDNlRTJjUFNCZnVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC9hNTk2OWYtYzAxNi00NTMzLTljYmEt
Njk2NzAzNzM2NjIxLzEvNi1UOTBYTGZoWmRXeW9VZDNlRTJjUFNCZnVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC9hNTk2OWYtYzAxNi00NTMzLTljYmEtNjk2NzAzNzM2NjIx
LzEvNi1UOTBYTGZoWmRXeW9VZDNlRTJjUFNCZnVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG6PWQREg
RYWYTyBKiCErn6QlZzsKlmgdMavNHxvvnvX8AqqONu1yezOjzT181Gd+ndqRqpX0
rIjSkr7M7as/Xk/keweAMrzks+1+eAMIKWKVYlDeoPIN9+oofX2vp8fk4NImBfd6
GFCxzOq2LDGhsP5Trbal2s8Oz9J++ShJ6FTt/KbFppXTDPDkz8W4cKNrID3GAX8z
V5ZqB0kkGLFqUWybgxILEIra1j0e5fcU1VpX592owfj1W8m0E92fwZs8D9HVMn63
avtpfzRGKIEYBRh+gQ0wbZJ4/hijNzzLnFshAUUSy60TYEk7ErUV82J1na67S832
y97XzT4eUxgtBw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 21:08:17 2025 by rpki-client