Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/066478-b066-4736-ad9f-53f41dfe407f/1/G6UWeIg5f_nKqET1VP-DfP2_lyI.mft
File: G6UWeIg5f_nKqET1VP-DfP2_lyI.mft (raw, json)
Hash identifier: khdDKJ70i+xcf7lhywL2QlTe4HWS/jtws40JiILqNks=
Subject key identifier: 3B:64:E9:BB:A1:1C:A6:03:F5:96:7A:38:40:29:AE:26:6B:FD:47:9C
Authority key identifier: 1B:A5:16:78:88:39:7F:F9:CA:A8:44:F5:54:FF:83:7C:FD:BF:97:22
Certificate issuer: /CN=1ba5167888397ff9caa844f554ff837cfdbf9722
Certificate serial: 019A5375D60041A0EEACEE48545B627E59EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G6UWeIg5f_nKqET1VP-DfP2_lyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/066478-b066-4736-ad9f-53f41dfe407f/1/G6UWeIg5f_nKqET1VP-DfP2_lyI.mft
Manifest number: 1666
Signing time: Wed 05 Nov 2025 10:00:22 +0000
Manifest this update: Wed 05 Nov 2025 10:00:22 +0000
Manifest next update: Thu 06 Nov 2025 10:00:22 +0000
Files and hashes: 1: 6AZTajZMqZoSwaR7hhqu_H7CdE0.roa (hash: xxeWZ0X7ua9pg1fHVRPX6E4scyCZRjZl/DRkbbQExWc=)
2: Be_FrvCQzJEE8AcZD48fTBBydhc.roa (hash: vmCJB59VLswrUqU073qVTINZ2vimvwz+QJwA8ddtgvQ=)
3: G6UWeIg5f_nKqET1VP-DfP2_lyI.crl (hash: yvOew72qHsg8FBJNp+xm7+Htg5PcQn4llzaK3dKLcQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/066478-b066-4736-ad9f-53f41dfe407f/1/G6UWeIg5f_nKqET1VP-DfP2_lyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/066478-b066-4736-ad9f-53f41dfe407f/1/G6UWeIg5f_nKqET1VP-DfP2_lyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/G6UWeIg5f_nKqET1VP-DfP2_lyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:75:d6:00:41:a0:ee:ac:ee:48:54:5b:62:7e:59:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ba5167888397ff9caa844f554ff837cfdbf9722
Validity
Not Before: Nov 5 10:00:22 2025 GMT
Not After : Nov 6 10:00:22 2025 GMT
Subject: CN=3b64e9bba11ca603f5967a384029ae266bfd479c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:36:4b:8a:16:38:2c:c8:4d:23:e1:ea:ca:4c:
8e:2c:4b:5d:85:41:ec:89:ae:e0:d3:38:b9:81:48:
f5:7b:83:03:fa:15:9c:05:0f:71:aa:96:4a:11:63:
e3:b8:19:6f:1d:5b:e0:da:47:c2:0c:78:8d:ed:cd:
6d:d9:03:f0:60:47:05:b7:56:ff:ca:fa:9e:8d:cc:
b9:8f:c3:5e:1a:e0:bf:69:1b:94:7b:6d:81:1e:bd:
0b:dc:6c:19:f5:54:53:46:8e:58:fc:b9:9b:8a:5c:
ac:28:3e:fb:42:bf:01:d0:e9:23:c4:22:4d:8e:40:
65:c0:a8:00:36:ee:bd:84:1b:34:02:22:c7:d8:e4:
87:44:e1:09:e1:33:60:1c:e3:ff:f8:98:83:a5:b2:
f1:c2:4d:91:ea:0b:6e:59:72:c2:c6:d8:a4:ad:56:
6c:41:db:fa:fa:43:89:5b:ff:ee:c5:91:ff:02:82:
1e:be:ce:db:47:f0:3f:94:fe:e6:df:3f:8a:78:0b:
fb:d3:ed:31:ec:f2:93:c8:71:bc:54:21:2f:b2:17:
04:80:5e:3e:1c:c2:3c:c7:18:b2:35:27:d4:f0:57:
f2:94:04:9c:40:7f:52:61:45:85:f9:32:b4:67:b8:
c9:ac:6e:8c:4f:88:74:7c:23:bb:f7:e0:12:0c:b2:
a3:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:64:E9:BB:A1:1C:A6:03:F5:96:7A:38:40:29:AE:26:6B:FD:47:9C
X509v3 Authority Key Identifier:
keyid:1B:A5:16:78:88:39:7F:F9:CA:A8:44:F5:54:FF:83:7C:FD:BF:97:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G6UWeIg5f_nKqET1VP-DfP2_lyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/066478-b066-4736-ad9f-53f41dfe407f/1/G6UWeIg5f_nKqET1VP-DfP2_lyI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/066478-b066-4736-ad9f-53f41dfe407f/1/G6UWeIg5f_nKqET1VP-DfP2_lyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:3c:d9:3c:97:79:7c:17:fc:f6:91:69:37:02:a3:53:83:f4:
bb:08:15:e4:c5:1a:c2:40:e6:ea:e3:80:85:fb:19:a3:5b:da:
62:ff:16:b4:2d:b9:24:cb:17:76:cc:b0:98:16:3e:3d:56:17:
fa:90:58:0d:83:31:f0:c2:82:83:ae:19:32:46:44:32:7d:ff:
08:77:66:44:e1:a9:ac:7b:d8:34:d7:ba:a0:40:92:1f:27:f6:
34:38:6f:92:d3:1d:1a:a6:a1:3e:e1:d3:28:ab:b2:5a:18:ac:
cc:25:83:1a:3a:0c:2a:5e:3a:1e:d7:eb:db:9e:a2:ad:e2:6a:
b0:96:78:28:5f:ac:e1:5f:8d:53:12:2b:0f:75:a6:52:13:ec:
9c:04:4e:3e:16:4e:08:ed:c4:38:4a:47:09:13:ac:95:22:19:
d9:f3:74:56:23:a7:68:83:16:3a:bf:8e:aa:a6:b5:08:02:75:
5f:d6:5e:31:b9:7f:07:97:23:6d:44:29:8f:10:7d:3a:6e:29:
2d:e3:16:4d:7b:67:09:8d:5b:ac:fd:0a:c4:08:92:fe:bf:87:
bb:61:0c:27:3c:63:bb:b7:4c:eb:68:fb:1b:a6:e2:63:36:c9:
b7:c0:ba:6e:27:c6:75:74:61:33:ce:9a:b2:16:b0:3c:7e:b9:
74:e3:76:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:18:14 2025 by rpki-client