Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/5e80b4-cb16-4a35-b429-229ae9f728d6/1/6Oz45OybRCqVN0wqPH54Swdhh8w.mft
File: 6Oz45OybRCqVN0wqPH54Swdhh8w.mft (raw, json)
Hash identifier: 0cdTKrR4LFjhkhB1+HPpedvmUmX59IsEyJF2pjchJtw=
Subject key identifier: BC:A5:EF:E4:AD:26:2E:B8:66:42:60:DD:7D:FA:67:30:84:51:63:FA
Authority key identifier: E8:EC:F8:E4:EC:9B:44:2A:95:37:4C:2A:3C:7E:78:4B:07:61:87:CC
Certificate issuer: /CN=e8ecf8e4ec9b442a95374c2a3c7e784b076187cc
Certificate serial: 019A4F2B8EFABC599CDAFF5ECD49945EB582
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Oz45OybRCqVN0wqPH54Swdhh8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/5e80b4-cb16-4a35-b429-229ae9f728d6/1/6Oz45OybRCqVN0wqPH54Swdhh8w.mft
Manifest number: 169E
Signing time: Tue 04 Nov 2025 14:00:45 +0000
Manifest this update: Tue 04 Nov 2025 14:00:45 +0000
Manifest next update: Wed 05 Nov 2025 14:00:45 +0000
Files and hashes: 1: 1favdYYY_m115fJbPCqnNQTQC-4.roa (hash: JqdrpIAPsvsNkIpUiM7hC8jOVuzgCWUVOGVp30lphlM=)
2: 6Oz45OybRCqVN0wqPH54Swdhh8w.crl (hash: 52jb0zj8YdUPfk8Ri6G5ptkEBtI3sS6HY+5psS7vHME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/5e80b4-cb16-4a35-b429-229ae9f728d6/1/6Oz45OybRCqVN0wqPH54Swdhh8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/5e80b4-cb16-4a35-b429-229ae9f728d6/1/6Oz45OybRCqVN0wqPH54Swdhh8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/6Oz45OybRCqVN0wqPH54Swdhh8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:8e:fa:bc:59:9c:da:ff:5e:cd:49:94:5e:b5:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8ecf8e4ec9b442a95374c2a3c7e784b076187cc
Validity
Not Before: Nov 4 14:00:45 2025 GMT
Not After : Nov 5 14:00:45 2025 GMT
Subject: CN=bca5efe4ad262eb8664260dd7dfa6730845163fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:9d:75:12:16:be:c1:d5:26:79:50:19:ac:4b:
d9:60:41:4d:32:43:2b:87:db:99:df:6f:c2:cb:b8:
b7:22:e3:da:50:a9:f8:9d:ab:47:0e:fa:1c:ce:70:
9f:47:7e:f2:72:4a:09:33:f0:d5:83:ee:50:48:c6:
fe:32:f7:f7:d9:89:ef:18:3b:93:c7:ab:95:77:dd:
b2:85:12:a7:7e:55:16:17:10:74:fc:ea:16:ad:93:
fd:01:3b:a8:35:44:37:f4:b6:b8:2a:e2:b6:dc:8b:
c1:72:f5:63:60:f1:8b:8b:3a:7e:d5:90:3a:b4:bb:
e9:f0:91:4e:04:e7:87:24:49:70:ee:a7:c6:40:61:
d1:72:6d:50:ec:18:27:00:82:bb:93:e5:0d:28:5a:
f6:3e:33:0f:3a:c6:15:c7:9c:50:b1:63:1f:c4:bf:
06:70:ed:bc:a5:bc:b1:65:22:79:3d:89:2a:8b:8c:
88:18:98:18:25:df:df:d6:3c:a2:8f:61:c9:5f:d7:
40:5f:2c:b8:eb:81:8e:22:80:50:77:06:36:a5:92:
d4:60:12:81:a8:57:c3:d8:6f:ae:f7:2e:55:50:fe:
c9:17:88:10:2a:2e:21:e9:63:00:1b:42:9b:7a:9e:
13:9b:d4:c1:48:af:93:20:f0:93:11:84:ec:29:47:
5c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:A5:EF:E4:AD:26:2E:B8:66:42:60:DD:7D:FA:67:30:84:51:63:FA
X509v3 Authority Key Identifier:
keyid:E8:EC:F8:E4:EC:9B:44:2A:95:37:4C:2A:3C:7E:78:4B:07:61:87:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Oz45OybRCqVN0wqPH54Swdhh8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5e80b4-cb16-4a35-b429-229ae9f728d6/1/6Oz45OybRCqVN0wqPH54Swdhh8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5e80b4-cb16-4a35-b429-229ae9f728d6/1/6Oz45OybRCqVN0wqPH54Swdhh8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:cd:f4:f5:aa:d5:96:59:eb:ac:74:f8:61:8c:2f:7f:95:6f:
88:2b:82:f7:68:42:a0:f0:c3:1c:6c:7a:28:df:e1:9f:5d:88:
9b:d5:44:d2:0a:05:e6:2c:29:4d:e6:92:74:7c:ed:aa:76:52:
45:7e:14:5f:cf:a2:b9:c8:5a:31:3a:22:e9:0b:7a:28:8d:53:
7c:42:7e:96:81:09:0f:87:fc:0c:ce:21:4f:89:23:1e:59:8c:
1f:42:54:d7:07:10:88:a8:12:b0:7c:94:a7:ef:e3:ab:20:48:
63:14:44:be:b3:05:32:1f:42:60:7a:1f:e1:9c:a1:c1:81:e8:
97:1c:cf:88:55:f3:ee:a1:41:63:a1:fd:fd:56:2d:82:88:32:
97:6d:9c:e3:09:fe:f7:20:19:b4:7a:e2:79:9f:37:9e:83:88:
38:64:8f:3b:96:46:2a:6a:13:32:d7:80:14:fd:80:29:2e:e7:
79:50:80:8c:72:39:6e:bf:bc:dc:89:18:1c:0e:58:79:9f:41:
d6:cc:d9:9a:98:1d:61:6f:3c:73:03:db:33:8f:70:34:d4:29:
9b:6b:db:34:e3:58:27:de:9c:fc:17:e8:06:14:6e:49:5c:66:
0e:c2:7f:1e:3d:61:68:4f:4e:11:20:93:8a:79:8c:17:cb:fa:
66:dd:9c:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPK476vFmc2v9ezUmUXrWCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4ZWNmOGU0ZWM5YjQ0MmE5NTM3NGMyYTNjN2U3ODRiMDc2
MTg3Y2MwHhcNMjUxMTA0MTQwMDQ1WhcNMjUxMTA1MTQwMDQ1WjAzMTEwLwYDVQQD
EyhiY2E1ZWZlNGFkMjYyZWI4NjY0MjYwZGQ3ZGZhNjczMDg0NTE2M2ZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJ11Eha+wdUmeVAZrEvZYEFNMkMr
h9uZ32/Cy7i3IuPaUKn4natHDvocznCfR37yckoJM/DVg+5QSMb+Mvf32YnvGDuT
x6uVd92yhRKnflUWFxB0/OoWrZP9ATuoNUQ39La4KuK23IvBcvVjYPGLizp+1ZA6
tLvp8JFOBOeHJElw7qfGQGHRcm1Q7BgnAIK7k+UNKFr2PjMPOsYVx5xQsWMfxL8G
cO28pbyxZSJ5PYkqi4yIGJgYJd/f1jyij2HJX9dAXyy464GOIoBQdwY2pZLUYBKB
qFfD2G+u9y5VUP7JF4gQKi4h6WMAG0Kbep4Tm9TBSK+TIPCTEYTsKUdckQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLyl7+StJi64ZkJg3X36ZzCEUWP6MB8GA1UdIwQY
MBaAFOjs+OTsm0QqlTdMKjx+eEsHYYfMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNk96NDVPeWJSQ3FWTjB3cVBINTRTd2RoaDh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS81ZTgwYjQtY2IxNi00YTM1LWI0Mjkt
MjI5YWU5ZjcyOGQ2LzEvNk96NDVPeWJSQ3FWTjB3cVBINTRTd2RoaDh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS81ZTgwYjQtY2IxNi00YTM1LWI0MjktMjI5YWU5ZjcyOGQ2
LzEvNk96NDVPeWJSQ3FWTjB3cVBINTRTd2RoaDh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGc309arV
llnrrHT4YYwvf5VviCuC92hCoPDDHGx6KN/hn12Im9VE0goF5iwpTeaSdHztqnZS
RX4UX8+iuchaMToi6Qt6KI1TfEJ+loEJD4f8DM4hT4kjHlmMH0JU1wcQiKgSsHyU
p+/jqyBIYxREvrMFMh9CYHof4ZyhwYHolxzPiFXz7qFBY6H9/VYtgogyl22c4wn+
9yAZtHrieZ83noOIOGSPO5ZGKmoTMteAFP2AKS7neVCAjHI5br+83IkYHA5YeZ9B
1szZmpgdYW88cwPbM49wNNQpm2vbNONYJ96c/BfoBhRuSVxmDsJ/Hj1haE9OESCT
inmMF8v6Zt2cmA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:02:20 2025 by rpki-client