Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/f78937-aed3-4b6f-aa2d-c832ed7d5fec/1/6Y4gI4HByI2C87cPO-Booao3K50.mft
File: 6Y4gI4HByI2C87cPO-Booao3K50.mft (raw, json)
Hash identifier: 9PIzZvVpqEK1RQXQqrjHHo9KM8D+S9KPiAhELLGtYM4=
Subject key identifier: E3:2F:E3:E5:D0:A9:B1:A9:88:1E:72:86:0A:0C:F9:8E:0F:92:5F:49
Authority key identifier: E9:8E:20:23:81:C1:C8:8D:82:F3:B7:0F:3B:E0:68:A1:AA:37:2B:9D
Certificate issuer: /CN=e98e202381c1c88d82f3b70f3be068a1aa372b9d
Certificate serial: 019A51BEB67CDAE9AD06512E11936DEFA726
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Y4gI4HByI2C87cPO-Booao3K50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/f78937-aed3-4b6f-aa2d-c832ed7d5fec/1/6Y4gI4HByI2C87cPO-Booao3K50.mft
Manifest number: 170D
Signing time: Wed 05 Nov 2025 02:00:44 +0000
Manifest this update: Wed 05 Nov 2025 02:00:44 +0000
Manifest next update: Thu 06 Nov 2025 02:00:44 +0000
Files and hashes: 1: 5EXO9UiepL6Zq1llBjLLIrL5oUg.roa (hash: f7qlXZI97BeR4x4m6/QuC0gLJcnSYhH/2MDokTxi6Pw=)
2: 6Y4gI4HByI2C87cPO-Booao3K50.crl (hash: +NeRasoi6fqx4n4hWAdcy0lqJGagQn5opXm4f/wNm00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/f78937-aed3-4b6f-aa2d-c832ed7d5fec/1/6Y4gI4HByI2C87cPO-Booao3K50.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/f78937-aed3-4b6f-aa2d-c832ed7d5fec/1/6Y4gI4HByI2C87cPO-Booao3K50.mft
rsync://rpki.ripe.net/repository/DEFAULT/6Y4gI4HByI2C87cPO-Booao3K50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 02:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:be:b6:7c:da:e9:ad:06:51:2e:11:93:6d:ef:a7:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e98e202381c1c88d82f3b70f3be068a1aa372b9d
Validity
Not Before: Nov 5 02:00:44 2025 GMT
Not After : Nov 6 02:00:44 2025 GMT
Subject: CN=e32fe3e5d0a9b1a9881e72860a0cf98e0f925f49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:3e:8d:38:c0:88:64:d9:94:06:55:81:dd:10:
78:9d:c0:d7:5d:b9:0b:f0:67:1c:40:71:87:de:36:
a8:65:43:b9:38:64:1c:cd:6f:14:20:85:de:e7:99:
7b:e4:fb:a9:14:b6:bd:da:fd:28:ef:4f:92:c7:db:
15:33:2d:27:03:75:95:eb:bf:ed:a4:28:c7:3f:f0:
8b:c3:9d:4d:17:84:64:cb:21:23:22:f6:c8:ae:43:
ea:5b:74:2d:bd:a5:f3:c6:18:9a:b0:01:c1:a7:a0:
e9:84:06:0f:c9:f9:bc:72:22:39:e9:c4:b2:fd:07:
b2:51:e7:af:50:d0:0f:64:82:9f:06:1c:14:95:31:
ae:dc:29:01:d5:eb:bd:61:52:8b:b9:c7:cd:9b:63:
0d:6b:5f:d3:b7:9a:b2:91:9f:46:21:cf:44:46:4a:
70:18:17:d7:cb:2e:48:fa:d3:7c:36:76:0e:7b:1a:
f8:35:a9:02:77:78:ae:fc:62:0f:73:1b:34:4a:f8:
c8:b1:ae:d4:46:59:8a:58:a8:c5:43:ad:99:90:c1:
60:9c:19:20:f2:95:e7:b4:ae:0c:3c:9c:6c:48:25:
83:53:80:a2:b4:fa:25:a0:73:f8:64:5a:be:8e:25:
4f:a9:8a:f2:dd:7e:2d:b3:74:e3:3d:c4:23:02:85:
d6:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:2F:E3:E5:D0:A9:B1:A9:88:1E:72:86:0A:0C:F9:8E:0F:92:5F:49
X509v3 Authority Key Identifier:
keyid:E9:8E:20:23:81:C1:C8:8D:82:F3:B7:0F:3B:E0:68:A1:AA:37:2B:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Y4gI4HByI2C87cPO-Booao3K50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f78937-aed3-4b6f-aa2d-c832ed7d5fec/1/6Y4gI4HByI2C87cPO-Booao3K50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f78937-aed3-4b6f-aa2d-c832ed7d5fec/1/6Y4gI4HByI2C87cPO-Booao3K50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:80:ab:b1:81:d3:05:63:ce:a6:2c:38:2e:b2:bd:20:21:3e:
5b:91:a2:ef:b7:71:10:05:c4:29:34:04:0c:c9:43:5b:d4:ed:
d3:9e:92:d1:52:eb:19:97:52:14:84:66:58:b5:44:40:a5:f0:
18:79:ea:c1:84:39:82:17:b3:4f:be:06:11:e9:77:91:8c:8f:
dd:4c:62:f3:c9:63:21:fc:df:3d:c0:dd:2e:2e:78:4a:36:8f:
3b:8a:20:ce:a1:f9:86:ca:fb:da:a4:d1:50:d5:de:56:7b:68:
e4:bc:21:bf:9d:be:00:f6:42:81:e1:9e:32:13:1f:f5:a3:fd:
1c:d9:46:d3:4e:f6:af:a7:c9:83:5f:df:e6:da:4a:fa:9a:12:
29:9d:8c:e1:48:52:78:bf:dc:8f:ef:e9:e3:12:15:f7:09:75:
06:cb:74:68:27:c2:06:e6:26:f0:0b:34:b4:98:82:60:80:9d:
07:08:c6:02:a5:8a:91:1b:76:47:6a:c3:fd:43:44:fa:57:27:
0e:00:c0:7c:b9:f7:70:3f:72:20:16:0f:6f:9a:01:e8:ab:44:
75:06:54:00:a1:0f:ac:fb:e8:9b:ec:60:7a:55:85:66:aa:f5:
17:9e:6d:85:a4:3f:2a:02:35:5f:e7:3c:0a:07:4c:b5:d8:9d:
b1:d9:26:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpRvrZ82umtBlEuEZNt76cmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5OGUyMDIzODFjMWM4OGQ4MmYzYjcwZjNiZTA2OGExYWEz
NzJiOWQwHhcNMjUxMTA1MDIwMDQ0WhcNMjUxMTA2MDIwMDQ0WjAzMTEwLwYDVQQD
EyhlMzJmZTNlNWQwYTliMWE5ODgxZTcyODYwYTBjZjk4ZTBmOTI1ZjQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApj6NOMCIZNmUBlWB3RB4ncDXXbkL
8GccQHGH3jaoZUO5OGQczW8UIIXe55l75PupFLa92v0o70+Sx9sVMy0nA3WV67/t
pCjHP/CLw51NF4RkyyEjIvbIrkPqW3QtvaXzxhiasAHBp6DphAYPyfm8ciI56cSy
/QeyUeevUNAPZIKfBhwUlTGu3CkB1eu9YVKLucfNm2MNa1/Tt5qykZ9GIc9ERkpw
GBfXyy5I+tN8NnYOexr4NakCd3iu/GIPcxs0SvjIsa7URlmKWKjFQ62ZkMFgnBkg
8pXntK4MPJxsSCWDU4CitPoloHP4ZFq+jiVPqYry3X4ts3TjPcQjAoXWRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOMv4+XQqbGpiB5yhgoM+Y4Pkl9JMB8GA1UdIwQY
MBaAFOmOICOBwciNgvO3DzvgaKGqNyudMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlk0Z0k0SEJ5STJDODdjUE8tQm9vYW8zSzUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9mNzg5MzctYWVkMy00YjZmLWFhMmQt
YzgzMmVkN2Q1ZmVjLzEvNlk0Z0k0SEJ5STJDODdjUE8tQm9vYW8zSzUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy9mNzg5MzctYWVkMy00YjZmLWFhMmQtYzgzMmVkN2Q1ZmVj
LzEvNlk0Z0k0SEJ5STJDODdjUE8tQm9vYW8zSzUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAICrsYHT
BWPOpiw4LrK9ICE+W5Gi77dxEAXEKTQEDMlDW9Tt056S0VLrGZdSFIRmWLVEQKXw
GHnqwYQ5ghezT74GEel3kYyP3Uxi88ljIfzfPcDdLi54SjaPO4ogzqH5hsr72qTR
UNXeVnto5Lwhv52+APZCgeGeMhMf9aP9HNlG0072r6fJg1/f5tpK+poSKZ2M4UhS
eL/cj+/p4xIV9wl1Bst0aCfCBuYm8As0tJiCYICdBwjGAqWKkRt2R2rD/UNE+lcn
DgDAfLn3cD9yIBYPb5oB6KtEdQZUAKEPrPvom+xgelWFZqr1F55thaQ/KgI1X+c8
CgdMtdidsdkm/Q==
-----END CERTIFICATE-----
Generated at Wed Nov 5 08:59:00 2025 by rpki-client