Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/a7ptDw-bGff0POtD5zWaPYTpnZk.mft
File: a7ptDw-bGff0POtD5zWaPYTpnZk.mft (raw, json)
Hash identifier: IMRz42kEUP8x0q/PZEpbhwOjKK/JMR8kmOsHR6Bvf+s=
Subject key identifier: 6C:E3:89:BB:D3:3D:65:C6:AA:A4:EC:A5:CB:76:20:1C:C9:03:0D:91
Authority key identifier: 6B:BA:6D:0F:0F:9B:19:F7:F4:3C:EB:43:E7:35:9A:3D:84:E9:9D:99
Certificate issuer: /CN=6bba6d0f0f9b19f7f43ceb43e7359a3d84e99d99
Certificate serial: 0199FB7CD94ED76E0B7202EBAA9981511A20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a7ptDw-bGff0POtD5zWaPYTpnZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/a7ptDw-bGff0POtD5zWaPYTpnZk.mft
Manifest number: 16EA
Signing time: Sun 19 Oct 2025 08:01:27 +0000
Manifest this update: Sun 19 Oct 2025 08:01:27 +0000
Manifest next update: Mon 20 Oct 2025 08:01:27 +0000
Files and hashes: 1: TUphJ-jTdc6RyopsPbQVUooNovI.roa (hash: 5SMLcPW5pd+tHnvqH88hThCDDFketkICiSOllb1LCN8=)
2: a7ptDw-bGff0POtD5zWaPYTpnZk.crl (hash: nUULhJNrZuf0+17ppRaTkDuXjsr1E/PZpCtBjOuZwQE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/a7ptDw-bGff0POtD5zWaPYTpnZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/a7ptDw-bGff0POtD5zWaPYTpnZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/a7ptDw-bGff0POtD5zWaPYTpnZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:d9:4e:d7:6e:0b:72:02:eb:aa:99:81:51:1a:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bba6d0f0f9b19f7f43ceb43e7359a3d84e99d99
Validity
Not Before: Oct 19 08:01:27 2025 GMT
Not After : Oct 20 08:01:27 2025 GMT
Subject: CN=6ce389bbd33d65c6aaa4eca5cb76201cc9030d91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0c:b3:9c:6c:a2:fc:c4:1f:a5:07:44:fa:dd:
a7:fc:7a:01:8c:af:f6:66:96:ed:89:13:c7:f8:47:
c4:3f:af:88:d1:e6:60:c2:61:de:d1:e7:3e:b9:cc:
b5:fe:9c:cf:bf:aa:fb:08:24:23:2a:5a:ea:a9:4f:
51:46:1c:57:2a:2d:05:2a:22:38:92:19:2c:f5:57:
8a:8b:75:9e:dd:c0:e4:ad:1c:0a:45:0f:e1:98:9b:
09:80:ab:01:c7:97:b4:98:de:56:d6:61:b5:ca:c4:
d2:74:ae:78:fe:c6:d7:f5:14:49:d4:e8:d8:0b:d4:
0d:7d:16:87:92:d8:bd:d7:dd:b4:d4:22:e9:be:d0:
3c:9d:4c:43:05:65:ba:47:e1:ac:e0:63:8b:d4:ee:
d8:9e:7b:35:3f:f1:88:55:38:5b:6a:6b:43:6a:43:
7b:2d:3f:05:8f:a7:93:a7:6d:08:f8:89:a5:d9:fb:
e3:27:b3:59:d6:40:4d:a1:da:2b:f2:57:a5:d9:d4:
4f:92:90:5d:2b:a9:a8:ac:00:21:f5:21:93:e3:ab:
64:90:36:14:72:f5:ad:cb:82:53:01:1d:3b:37:72:
6d:f9:2f:61:ac:10:89:3f:3a:04:ce:94:b8:37:f3:
f5:1b:d7:b4:3c:a5:b1:d3:bf:33:cd:4e:3f:00:a3:
4e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:E3:89:BB:D3:3D:65:C6:AA:A4:EC:A5:CB:76:20:1C:C9:03:0D:91
X509v3 Authority Key Identifier:
keyid:6B:BA:6D:0F:0F:9B:19:F7:F4:3C:EB:43:E7:35:9A:3D:84:E9:9D:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7ptDw-bGff0POtD5zWaPYTpnZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/a7ptDw-bGff0POtD5zWaPYTpnZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/a7ptDw-bGff0POtD5zWaPYTpnZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:c4:6b:b9:89:41:ff:73:83:44:bf:7a:80:38:8f:3c:03:da:
0a:d2:4f:ce:41:c5:bb:f1:22:dd:59:95:82:92:34:5f:3c:62:
af:0c:6a:72:3e:99:3b:98:96:06:45:fc:35:d5:12:88:34:60:
0b:ef:10:b4:03:95:c7:89:89:9b:99:b3:68:02:af:f3:16:5d:
11:a7:2d:3f:46:2e:32:b9:3b:cb:42:a1:5f:b8:c8:2f:33:bf:
44:4a:c3:45:7a:88:ab:96:37:40:5d:16:94:28:ed:af:b0:8b:
25:3d:6e:7e:68:5c:be:fb:7a:53:34:cf:bf:f7:25:76:9a:21:
2e:2a:3c:60:98:f5:ae:df:63:78:37:cf:97:87:37:00:cf:29:
19:15:b0:7a:7c:9b:49:f4:28:86:63:5f:a3:db:3b:d1:bf:86:
a5:1e:1f:34:a9:e5:61:5f:53:dd:91:bb:a6:1f:7d:4b:24:e1:
a7:a8:e3:cf:8d:45:b9:62:b6:24:2b:6c:a7:d7:9b:77:2f:0c:
df:fe:d9:ea:65:01:f0:b5:4c:39:74:f7:98:65:e0:77:96:55:
b5:6c:c4:b5:68:e1:a5:d7:bb:cf:6e:e0:f4:b9:89:b6:72:da:
77:36:f7:11:75:b6:fa:9c:35:6f:ad:2d:a7:bd:b9:f8:09:4b:
59:99:54:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:14:32 2025 by rpki-client