Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/958a2c-cef0-4bcc-99c2-321c9d66c847/1/g6BiUlKSop6X_moFW5vWCEp3GXc.mft
File: g6BiUlKSop6X_moFW5vWCEp3GXc.mft (raw, json)
Hash identifier: hkI6chMpS3KKoUEu0pJEMkuftuYI9OdDcNqovGLzb6g=
Subject key identifier: 38:5E:AC:77:16:C7:5A:16:74:0C:BB:BA:90:A6:B8:57:CC:65:3F:B8
Authority key identifier: 83:A0:62:52:52:92:A2:9E:97:FE:6A:05:5B:9B:D6:08:4A:77:19:77
Certificate issuer: /CN=83a062525292a29e97fe6a055b9bd6084a771977
Certificate serial: 019A4F99210B1F8508960DEF289449378063
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g6BiUlKSop6X_moFW5vWCEp3GXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/958a2c-cef0-4bcc-99c2-321c9d66c847/1/g6BiUlKSop6X_moFW5vWCEp3GXc.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 16:00:26 +0000
Manifest this update: Tue 04 Nov 2025 16:00:26 +0000
Manifest next update: Wed 05 Nov 2025 16:00:26 +0000
Files and hashes: 1: fb6wEgaDbLPx8q9w1xJmiSz6jYA.roa (hash: cTH5l3quR1dZhmY8/pVYGOhtfcq0HdpSh+BT0OKf954=)
2: g6BiUlKSop6X_moFW5vWCEp3GXc.crl (hash: Ovby/kIdNYf+52pVOc4NcDoyaRuR9O27Ma74Sf1pvi8=)
3: owvK-K4xt1xLcc7TBT_SQsn0CJs.roa (hash: i/ROe7RqOf5kAUxhkRxcQuX6NvNJ0cLz8fR53Bhsxmc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/958a2c-cef0-4bcc-99c2-321c9d66c847/1/g6BiUlKSop6X_moFW5vWCEp3GXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/958a2c-cef0-4bcc-99c2-321c9d66c847/1/g6BiUlKSop6X_moFW5vWCEp3GXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/g6BiUlKSop6X_moFW5vWCEp3GXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:21:0b:1f:85:08:96:0d:ef:28:94:49:37:80:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83a062525292a29e97fe6a055b9bd6084a771977
Validity
Not Before: Nov 4 16:00:26 2025 GMT
Not After : Nov 5 16:00:26 2025 GMT
Subject: CN=385eac7716c75a16740cbbba90a6b857cc653fb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:90:3e:20:ec:27:d7:fe:8b:9b:73:07:24:af:
65:c9:1a:aa:3e:0c:87:2a:f0:d3:93:98:fe:5b:91:
6e:49:6f:0d:eb:4e:2b:7f:3c:68:99:09:9f:fd:93:
ec:b4:6a:71:b4:45:83:0a:9b:9f:38:46:17:65:bf:
3a:cb:a4:ba:8a:8d:6d:4b:21:27:d3:50:65:73:e5:
b6:78:74:a7:c0:eb:7f:88:a8:e5:ed:d0:e7:0f:2b:
45:4f:b8:fb:93:a2:88:14:94:a5:a7:4b:97:eb:1a:
84:b9:3d:9b:a2:6a:95:1a:79:b2:ef:b8:41:57:6b:
eb:86:e5:2a:33:17:c5:8f:86:80:88:10:28:75:32:
38:81:e4:b8:4c:b0:2a:59:64:d6:73:25:76:6c:4a:
5e:be:4b:ab:26:c7:4d:df:94:7c:16:4e:74:80:40:
31:de:29:64:f5:d9:6b:98:1b:ee:52:ba:5b:e5:4f:
9e:14:0a:c4:12:6f:45:86:49:f4:71:6f:24:53:5f:
d4:33:97:75:95:c2:a3:bd:14:35:e2:c5:ba:2d:c6:
b5:53:ea:3d:ca:50:be:9b:56:32:c6:ff:5e:d7:d4:
e9:83:a9:21:b4:77:27:95:de:7f:64:8f:8b:26:b7:
27:6c:10:47:e7:40:b0:d5:eb:2f:6b:5b:3d:15:b0:
3a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:5E:AC:77:16:C7:5A:16:74:0C:BB:BA:90:A6:B8:57:CC:65:3F:B8
X509v3 Authority Key Identifier:
keyid:83:A0:62:52:52:92:A2:9E:97:FE:6A:05:5B:9B:D6:08:4A:77:19:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g6BiUlKSop6X_moFW5vWCEp3GXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/958a2c-cef0-4bcc-99c2-321c9d66c847/1/g6BiUlKSop6X_moFW5vWCEp3GXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/958a2c-cef0-4bcc-99c2-321c9d66c847/1/g6BiUlKSop6X_moFW5vWCEp3GXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:a7:01:24:0f:cc:f2:ef:00:91:d3:0b:3e:fb:73:6a:35:3d:
ed:d0:57:33:3d:e2:29:d4:a2:79:26:a5:ee:ac:c7:90:b8:35:
dd:47:c8:34:7e:a3:e1:bf:f3:0c:5c:39:5b:af:31:6b:60:df:
fc:2b:23:2a:e0:8b:6f:ae:44:1b:6c:d8:69:d3:5d:7e:66:a1:
cb:5e:df:0d:5d:c3:98:b8:76:a0:82:2e:6e:00:b1:35:32:4e:
0e:10:65:6c:2b:c8:1d:8f:0b:d0:e5:27:04:5e:a5:4c:b6:60:
d7:93:30:ad:96:da:11:32:76:19:b4:76:52:9d:95:41:f0:15:
b0:fb:63:75:58:6a:8b:0b:0b:d5:6e:64:73:27:bd:48:96:79:
f5:e4:1b:96:04:00:46:8d:a0:21:1f:50:58:38:d7:4e:78:8a:
78:1d:be:ad:b7:2e:b2:2c:ba:b2:cc:b7:11:64:c7:4a:d7:38:
44:ce:2e:06:b9:6a:2c:46:12:77:b7:9c:9d:a0:2b:15:19:0f:
fc:51:5e:65:c4:5f:01:97:9f:fd:2e:9a:7e:36:32:20:10:64:
51:bd:2e:be:db:b9:cf:5a:49:13:14:78:cd:8e:71:ee:15:42:
a1:de:84:fd:29:95:5f:9e:7f:a6:34:cf:4f:c7:6f:c0:6f:82:
14:67:3f:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPmSELH4UIlg3vKJRJN4BjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzYTA2MjUyNTI5MmEyOWU5N2ZlNmEwNTViOWJkNjA4NGE3
NzE5NzcwHhcNMjUxMTA0MTYwMDI2WhcNMjUxMTA1MTYwMDI2WjAzMTEwLwYDVQQD
EygzODVlYWM3NzE2Yzc1YTE2NzQwY2JiYmE5MGE2Yjg1N2NjNjUzZmI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+5A+IOwn1/6Lm3MHJK9lyRqqPgyH
KvDTk5j+W5FuSW8N604rfzxomQmf/ZPstGpxtEWDCpufOEYXZb86y6S6io1tSyEn
01Blc+W2eHSnwOt/iKjl7dDnDytFT7j7k6KIFJSlp0uX6xqEuT2bomqVGnmy77hB
V2vrhuUqMxfFj4aAiBAodTI4geS4TLAqWWTWcyV2bEpevkurJsdN35R8Fk50gEAx
3ilk9dlrmBvuUrpb5U+eFArEEm9Fhkn0cW8kU1/UM5d1lcKjvRQ14sW6Lca1U+o9
ylC+m1Yyxv9e19Tpg6khtHcnld5/ZI+LJrcnbBBH50Cw1esva1s9FbA6owIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDherHcWx1oWdAy7upCmuFfMZT+4MB8GA1UdIwQY
MBaAFIOgYlJSkqKel/5qBVub1ghKdxl3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzZCaVVsS1NvcDZYX21vRlc1dldDRXAzR1hjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS85NThhMmMtY2VmMC00YmNjLTk5YzIt
MzIxYzlkNjZjODQ3LzEvZzZCaVVsS1NvcDZYX21vRlc1dldDRXAzR1hjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS85NThhMmMtY2VmMC00YmNjLTk5YzItMzIxYzlkNjZjODQ3
LzEvZzZCaVVsS1NvcDZYX21vRlc1dldDRXAzR1hjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAy6cBJA/M
8u8AkdMLPvtzajU97dBXMz3iKdSieSal7qzHkLg13UfINH6j4b/zDFw5W68xa2Df
/CsjKuCLb65EG2zYadNdfmahy17fDV3DmLh2oIIubgCxNTJODhBlbCvIHY8L0OUn
BF6lTLZg15MwrZbaETJ2GbR2Up2VQfAVsPtjdVhqiwsL1W5kcye9SJZ59eQblgQA
Ro2gIR9QWDjXTniKeB2+rbcusiy6ssy3EWTHStc4RM4uBrlqLEYSd7ecnaArFRkP
/FFeZcRfAZef/S6afjYyIBBkUb0uvtu5z1pJExR4zY5x7hVCod6E/SmVX55/pjTP
T8dvwG+CFGc/bw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 17:37:18 2025 by rpki-client