Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/83f939-05f1-4afa-aa10-8606a724d891/1/s6t6iYCGh8w9rXug998LrOAZ92M.mft
File: s6t6iYCGh8w9rXug998LrOAZ92M.mft (raw, json)
Hash identifier: c56X8+yysgdOepPevFp07svMebdgARzdWNUrfGhAdKY=
Subject key identifier: E6:6C:C9:0F:73:02:4B:7A:3C:1D:3B:C7:AA:7D:44:28:D2:33:5B:6B
Authority key identifier: B3:AB:7A:89:80:86:87:CC:3D:AD:7B:A0:F7:DF:0B:AC:E0:19:F7:63
Certificate issuer: /CN=b3ab7a89808687cc3dad7ba0f7df0bace019f763
Certificate serial: 019A50E384A269F024FA19ECA959D64A4193
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s6t6iYCGh8w9rXug998LrOAZ92M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/83f939-05f1-4afa-aa10-8606a724d891/1/s6t6iYCGh8w9rXug998LrOAZ92M.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 22:01:19 +0000
Manifest this update: Tue 04 Nov 2025 22:01:19 +0000
Manifest next update: Wed 05 Nov 2025 22:01:19 +0000
Files and hashes: 1: UXfpgLEO-YbBFk6oonjH1Xm5FgM.roa (hash: AX0QM/Os3hFjFnv3WUz1vjkj1d0jSqhI2xTsC/dfmWk=)
2: s6t6iYCGh8w9rXug998LrOAZ92M.crl (hash: jz8wHWMNK18WwUXb+k7S1ONZXHP4nYveV0I9CGSpe2U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/83f939-05f1-4afa-aa10-8606a724d891/1/s6t6iYCGh8w9rXug998LrOAZ92M.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/83f939-05f1-4afa-aa10-8606a724d891/1/s6t6iYCGh8w9rXug998LrOAZ92M.mft
rsync://rpki.ripe.net/repository/DEFAULT/s6t6iYCGh8w9rXug998LrOAZ92M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:84:a2:69:f0:24:fa:19:ec:a9:59:d6:4a:41:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3ab7a89808687cc3dad7ba0f7df0bace019f763
Validity
Not Before: Nov 4 22:01:19 2025 GMT
Not After : Nov 5 22:01:19 2025 GMT
Subject: CN=e66cc90f73024b7a3c1d3bc7aa7d4428d2335b6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:51:11:e9:d4:a4:48:21:82:49:b4:42:11:8b:
5f:eb:f6:d8:b2:6d:a5:5f:b4:64:0c:5b:77:6f:d3:
6a:0e:25:fe:16:0c:d5:f4:db:f2:d2:45:d3:47:2f:
27:ae:f2:87:ce:4b:73:69:7f:e0:2c:5d:3d:43:92:
18:3b:f0:95:2d:53:4f:cd:27:c8:7a:5f:fd:ab:0b:
df:1d:63:63:88:01:3f:1c:64:a5:49:ea:64:63:2b:
77:71:0d:d6:c9:6d:82:04:02:e3:1f:3d:5a:f1:8f:
5c:6b:39:67:13:20:47:13:0a:cb:9f:20:96:55:ab:
55:21:1b:31:d6:36:d9:98:e5:39:2b:d9:e9:37:f4:
61:b5:2b:fa:e9:5c:19:4e:3a:53:3a:39:de:95:65:
a7:01:20:29:22:3a:03:23:27:18:83:55:01:18:3c:
1b:a8:dd:51:fa:dc:be:e1:af:75:44:55:59:0b:f5:
05:68:3d:1d:e1:28:85:16:59:46:e4:0e:80:a2:bf:
06:c7:92:d3:86:0a:57:f3:e0:bc:33:38:68:e9:b5:
f0:54:40:5f:73:7f:cd:43:64:80:0f:e6:98:9b:46:
d9:df:3c:7c:76:a6:c9:4a:cc:40:7a:3c:54:6f:dc:
c4:11:77:6b:f9:86:a4:11:d3:83:05:f7:50:4d:5b:
b6:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:6C:C9:0F:73:02:4B:7A:3C:1D:3B:C7:AA:7D:44:28:D2:33:5B:6B
X509v3 Authority Key Identifier:
keyid:B3:AB:7A:89:80:86:87:CC:3D:AD:7B:A0:F7:DF:0B:AC:E0:19:F7:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s6t6iYCGh8w9rXug998LrOAZ92M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/83f939-05f1-4afa-aa10-8606a724d891/1/s6t6iYCGh8w9rXug998LrOAZ92M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/83f939-05f1-4afa-aa10-8606a724d891/1/s6t6iYCGh8w9rXug998LrOAZ92M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:86:74:49:9a:22:00:73:f6:1f:97:d2:02:b9:60:37:f7:e3:
68:87:19:84:f3:d3:f0:27:97:ce:fc:77:29:03:66:50:d7:37:
f4:d2:29:32:59:6a:58:72:1e:05:e5:06:40:09:1e:d3:45:86:
af:b1:05:39:46:f6:b5:af:b8:66:64:b0:d3:6b:55:ad:dd:8e:
bc:89:bf:d4:7c:3c:72:60:a0:71:d8:8e:d2:c5:08:ce:75:45:
0c:30:17:54:8f:76:bc:c4:12:93:c6:96:9e:19:a4:99:54:7e:
d9:da:18:d1:0c:4e:d1:02:20:9e:b6:ce:e8:9d:c9:5b:c2:e5:
d6:f8:2f:2f:8b:59:70:b3:3c:1f:7b:77:11:54:e9:57:f7:8e:
78:b2:8d:dd:24:52:be:1a:32:83:38:ec:9d:54:c7:42:e1:0d:
e4:33:e9:e8:1c:47:85:9f:60:26:cc:d1:7d:ba:a1:09:71:9f:
4f:03:65:55:81:2b:1a:12:da:6b:6a:ab:f3:a9:9d:2f:f9:6f:
4f:a5:49:85:46:51:67:8d:ea:b9:66:f7:e4:e7:79:75:63:56:
29:f6:81:3a:7e:df:a0:07:00:9d:b6:c1:b7:cc:9b:c4:2d:bc:
e6:b3:1e:a9:57:38:b7:3c:ed:80:79:52:e2:60:73:90:3f:40:
5b:97:60:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQ44SiafAk+hnsqVnWSkGTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzYWI3YTg5ODA4Njg3Y2MzZGFkN2JhMGY3ZGYwYmFjZTAx
OWY3NjMwHhcNMjUxMTA0MjIwMTE5WhcNMjUxMTA1MjIwMTE5WjAzMTEwLwYDVQQD
EyhlNjZjYzkwZjczMDI0YjdhM2MxZDNiYzdhYTdkNDQyOGQyMzM1YjZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzFER6dSkSCGCSbRCEYtf6/bYsm2l
X7RkDFt3b9NqDiX+FgzV9Nvy0kXTRy8nrvKHzktzaX/gLF09Q5IYO/CVLVNPzSfI
el/9qwvfHWNjiAE/HGSlSepkYyt3cQ3WyW2CBALjHz1a8Y9cazlnEyBHEwrLnyCW
VatVIRsx1jbZmOU5K9npN/RhtSv66VwZTjpTOjnelWWnASApIjoDIycYg1UBGDwb
qN1R+ty+4a91RFVZC/UFaD0d4SiFFllG5A6Aor8Gx5LThgpX8+C8Mzho6bXwVEBf
c3/NQ2SAD+aYm0bZ3zx8dqbJSsxAejxUb9zEEXdr+YakEdODBfdQTVu26wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOZsyQ9zAkt6PB07x6p9RCjSM1trMB8GA1UdIwQY
MBaAFLOreomAhofMPa17oPffC6zgGfdjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczZ0NmlZQ0doOHc5clh1Zzk5OExyT0FaOTJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS84M2Y5MzktMDVmMS00YWZhLWFhMTAt
ODYwNmE3MjRkODkxLzEvczZ0NmlZQ0doOHc5clh1Zzk5OExyT0FaOTJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS84M2Y5MzktMDVmMS00YWZhLWFhMTAtODYwNmE3MjRkODkx
LzEvczZ0NmlZQ0doOHc5clh1Zzk5OExyT0FaOTJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm4Z0SZoi
AHP2H5fSArlgN/fjaIcZhPPT8CeXzvx3KQNmUNc39NIpMllqWHIeBeUGQAke00WG
r7EFOUb2ta+4ZmSw02tVrd2OvIm/1Hw8cmCgcdiO0sUIznVFDDAXVI92vMQSk8aW
nhmkmVR+2doY0QxO0QIgnrbO6J3JW8Ll1vgvL4tZcLM8H3t3EVTpV/eOeLKN3SRS
vhoygzjsnVTHQuEN5DPp6BxHhZ9gJszRfbqhCXGfTwNlVYErGhLaa2qr86mdL/lv
T6VJhUZRZ43quWb35Od5dWNWKfaBOn7foAcAnbbBt8ybxC285rMeqVc4tzztgHlS
4mBzkD9AW5dgDg==
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:36:24 2025 by rpki-client