Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/a3sSBFsa8JrPlmLuNbos1-HIW60.mft
File: a3sSBFsa8JrPlmLuNbos1-HIW60.mft (raw, json)
Hash identifier: LKebd3UarDwGqMNejrWi+E6TKJInAbzs5t7qzhmNn9U=
Subject key identifier: A1:7B:7B:CA:2B:3F:E3:11:8E:CE:02:86:95:52:C2:81:74:F4:E7:0D
Authority key identifier: 6B:7B:12:04:5B:1A:F0:9A:CF:96:62:EE:35:BA:2C:D7:E1:C8:5B:AD
Certificate issuer: /CN=6b7b12045b1af09acf9662ee35ba2cd7e1c85bad
Certificate serial: 019A4C981ABF07AD4D1C3E5BFFEF861D20DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a3sSBFsa8JrPlmLuNbos1-HIW60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/a3sSBFsa8JrPlmLuNbos1-HIW60.mft
Manifest number: 06B7
Signing time: Tue 04 Nov 2025 02:00:27 +0000
Manifest this update: Tue 04 Nov 2025 02:00:27 +0000
Manifest next update: Wed 05 Nov 2025 02:00:27 +0000
Files and hashes: 1: 6rvpyTq3GpToeI0SORQBn8auSqk.roa (hash: It3me0g3R8Ie8D4qrGq2UTC1Pz9Blt9bU50UXq7GwOE=)
2: a3sSBFsa8JrPlmLuNbos1-HIW60.crl (hash: HQBySnne03IhK+6cd4QY4rBubkh4LoXPRE+fQ7VdYJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/a3sSBFsa8JrPlmLuNbos1-HIW60.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/a3sSBFsa8JrPlmLuNbos1-HIW60.mft
rsync://rpki.ripe.net/repository/DEFAULT/a3sSBFsa8JrPlmLuNbos1-HIW60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 02:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:98:1a:bf:07:ad:4d:1c:3e:5b:ff:ef:86:1d:20:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b7b12045b1af09acf9662ee35ba2cd7e1c85bad
Validity
Not Before: Nov 4 02:00:27 2025 GMT
Not After : Nov 5 02:00:27 2025 GMT
Subject: CN=a17b7bca2b3fe3118ece02869552c28174f4e70d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:32:52:27:78:b3:26:32:24:f9:d9:76:fe:48:
00:f6:6f:d1:fb:9e:2c:90:4e:69:f9:5f:44:7d:04:
d8:38:44:ca:ca:f0:7d:43:a6:cf:5f:aa:5b:e7:5f:
83:9c:19:6d:75:01:58:01:b9:96:7c:35:55:3c:37:
b3:6f:0a:94:ce:8c:78:65:84:7f:01:be:d8:48:88:
01:1a:26:a0:35:00:e1:d5:ea:13:a8:09:50:0c:0d:
ae:33:2a:39:ab:71:0f:86:f2:9b:84:cf:20:fd:2f:
91:b4:6e:b6:79:e9:4b:ac:74:1b:39:d1:f4:ba:c9:
c8:2d:0a:91:32:f3:90:0c:08:6e:94:52:3e:28:39:
b5:6d:b8:fb:c7:60:a0:55:46:05:28:e9:ff:87:9e:
d2:57:33:e0:8e:b3:95:40:9a:c5:a5:18:47:ba:a6:
34:cd:3c:e6:75:98:88:f6:6d:69:6f:6e:9f:ee:bb:
60:9e:78:ba:82:3d:85:08:45:1e:bd:80:2f:69:9d:
d6:52:a3:8d:0b:d3:ba:64:2d:24:bf:f3:3e:91:b7:
f5:c6:51:5b:ce:56:08:ab:e0:fa:0b:51:51:4c:6d:
b8:9a:46:f3:25:c8:92:94:09:43:72:6c:1a:20:f1:
db:2e:ce:5e:d7:1d:dc:a2:3a:57:72:f5:f2:57:9e:
8e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:7B:7B:CA:2B:3F:E3:11:8E:CE:02:86:95:52:C2:81:74:F4:E7:0D
X509v3 Authority Key Identifier:
keyid:6B:7B:12:04:5B:1A:F0:9A:CF:96:62:EE:35:BA:2C:D7:E1:C8:5B:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3sSBFsa8JrPlmLuNbos1-HIW60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/a3sSBFsa8JrPlmLuNbos1-HIW60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/a3sSBFsa8JrPlmLuNbos1-HIW60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:bc:73:cc:c0:78:f7:c9:a1:85:10:9b:79:2c:ad:83:ac:49:
2a:45:5b:0c:39:7c:37:ed:82:a7:ef:a5:cb:7b:fd:2b:0d:f2:
47:31:25:16:4b:a9:22:a5:68:fc:36:62:22:5a:9a:65:53:78:
9c:5a:fa:e5:2f:33:f3:f7:2f:2c:12:2f:16:0d:71:ad:1f:bd:
c4:b5:89:4d:f9:68:65:ab:fc:08:ac:75:d9:dc:f5:fe:91:3b:
b7:56:5c:4b:3e:fe:d4:45:49:ed:ea:b3:6c:42:38:ee:c2:92:
d5:f5:7e:0b:6a:c4:c7:50:a1:5f:b3:2b:05:8c:84:61:31:e4:
93:c5:0b:63:53:fc:2e:f8:0a:6a:c2:80:16:b1:02:f1:a1:f3:
b4:da:35:df:6f:bd:f3:56:72:e7:8b:dc:24:dd:fa:a2:62:09:
a7:b0:92:be:e0:41:c4:e3:4a:c1:61:8f:70:9c:3e:2a:f4:5e:
fc:5c:db:08:21:f1:41:13:91:b2:be:07:30:63:1b:33:b8:41:
c0:8b:43:3a:9c:e5:b8:f6:0b:12:8d:58:e9:fb:1e:18:1f:cd:
36:0c:3a:39:a9:f1:fa:50:45:e9:07:b8:f2:ef:e0:fc:7c:fb:
db:a8:e3:37:a6:d9:f9:96:8c:f0:2f:29:f5:82:5f:f8:65:b0:
5e:69:47:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpMmBq/B61NHD5b/++GHSDfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiN2IxMjA0NWIxYWYwOWFjZjk2NjJlZTM1YmEyY2Q3ZTFj
ODViYWQwHhcNMjUxMTA0MDIwMDI3WhcNMjUxMTA1MDIwMDI3WjAzMTEwLwYDVQQD
EyhhMTdiN2JjYTJiM2ZlMzExOGVjZTAyODY5NTUyYzI4MTc0ZjRlNzBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDJSJ3izJjIk+dl2/kgA9m/R+54s
kE5p+V9EfQTYOETKyvB9Q6bPX6pb51+DnBltdQFYAbmWfDVVPDezbwqUzox4ZYR/
Ab7YSIgBGiagNQDh1eoTqAlQDA2uMyo5q3EPhvKbhM8g/S+RtG62eelLrHQbOdH0
usnILQqRMvOQDAhulFI+KDm1bbj7x2CgVUYFKOn/h57SVzPgjrOVQJrFpRhHuqY0
zTzmdZiI9m1pb26f7rtgnni6gj2FCEUevYAvaZ3WUqONC9O6ZC0kv/M+kbf1xlFb
zlYIq+D6C1FRTG24mkbzJciSlAlDcmwaIPHbLs5e1x3cojpXcvXyV56OowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKF7e8orP+MRjs4ChpVSwoF09OcNMB8GA1UdIwQY
MBaAFGt7EgRbGvCaz5Zi7jW6LNfhyFutMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTNzU0JGc2E4SnJQbG1MdU5ib3MxLUhJVzYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi84NjhhOWMtZmUyNS00YjU5LWEzMjkt
MTg0MDFkYTQzNTYzLzEvYTNzU0JGc2E4SnJQbG1MdU5ib3MxLUhJVzYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi84NjhhOWMtZmUyNS00YjU5LWEzMjktMTg0MDFkYTQzNTYz
LzEvYTNzU0JGc2E4SnJQbG1MdU5ib3MxLUhJVzYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABLxzzMB4
98mhhRCbeSytg6xJKkVbDDl8N+2Cp++ly3v9Kw3yRzElFkupIqVo/DZiIlqaZVN4
nFr65S8z8/cvLBIvFg1xrR+9xLWJTfloZav8CKx12dz1/pE7t1ZcSz7+1EVJ7eqz
bEI47sKS1fV+C2rEx1ChX7MrBYyEYTHkk8ULY1P8LvgKasKAFrEC8aHztNo132+9
81Zy54vcJN36omIJp7CSvuBBxONKwWGPcJw+KvRe/FzbCCHxQRORsr4HMGMbM7hB
wItDOpzluPYLEo1Y6fseGB/NNgw6Oanx+lBF6Qe48u/g/Hz726jjN6bZ+ZaM8C8p
9YJf+GWwXmlHkQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 10:49:45 2025 by rpki-client