Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ec25bd-219e-4d02-a532-0799a52a6387/1/ahfeGIf8-pJEuTHZbagmeMAUdmM.mft
File: ahfeGIf8-pJEuTHZbagmeMAUdmM.mft (raw, json)
Hash identifier: Ro7rOyXRfLVMmDuliiVEIcUadetzdz9ovao+xo9GHSY=
Subject key identifier: BB:E9:04:B1:29:82:FA:8F:0C:05:AA:BE:B5:8E:72:74:B0:86:25:08
Authority key identifier: 6A:17:DE:18:87:FC:FA:92:44:B9:31:D9:6D:A8:26:78:C0:14:76:63
Certificate issuer: /CN=6a17de1887fcfa9244b931d96da82678c0147663
Certificate serial: 0199FFC76CC50B0C22E2BB5E3736BBCB484A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ahfeGIf8-pJEuTHZbagmeMAUdmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ec25bd-219e-4d02-a532-0799a52a6387/1/ahfeGIf8-pJEuTHZbagmeMAUdmM.mft
Manifest number: 16E4
Signing time: Mon 20 Oct 2025 04:01:23 +0000
Manifest this update: Mon 20 Oct 2025 04:01:23 +0000
Manifest next update: Tue 21 Oct 2025 04:01:23 +0000
Files and hashes: 1: BX5R5amdcio3WuT_y5iUpVj2ums.roa (hash: pwGrkwLGbzotd2slolQ5A3oax/Mg/fo6nb/3FvvTnt0=)
2: KfO5I4Cw1MaFsOF7zxOfQ4tIIJA.roa (hash: 4CuGd2v/2n5Lf/n++Esai12zLsblsU9sM0Lw5FSyTzA=)
3: SaXO2k_RD79NU2l7XYSpiLJj45Y.roa (hash: dDxX4ZRGdILDnfmTeHjmX1mfXPW3FoR3IByWvO/xwLc=)
4: ahfeGIf8-pJEuTHZbagmeMAUdmM.crl (hash: xSdYgXABB6jebJpOY92cBHbra9G/40IJYrA2AzZ2tjw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/ec25bd-219e-4d02-a532-0799a52a6387/1/ahfeGIf8-pJEuTHZbagmeMAUdmM.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/ec25bd-219e-4d02-a532-0799a52a6387/1/ahfeGIf8-pJEuTHZbagmeMAUdmM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ahfeGIf8-pJEuTHZbagmeMAUdmM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:6c:c5:0b:0c:22:e2:bb:5e:37:36:bb:cb:48:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a17de1887fcfa9244b931d96da82678c0147663
Validity
Not Before: Oct 20 04:01:23 2025 GMT
Not After : Oct 21 04:01:23 2025 GMT
Subject: CN=bbe904b12982fa8f0c05aabeb58e7274b0862508
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:b8:d7:9c:e7:f5:b9:28:1d:da:be:46:5c:39:
ce:2e:1e:61:9d:56:12:49:64:f6:9e:ab:c7:74:87:
af:e1:b9:69:0d:df:2e:8d:2d:a7:9a:9d:94:34:a0:
a1:ef:15:e7:82:6c:5d:48:c9:6f:90:f3:a8:b1:3f:
cb:57:24:eb:fd:93:37:29:b7:5e:2e:18:70:2e:ac:
70:34:c8:93:76:08:81:c3:09:ff:ee:4f:41:29:e2:
cc:86:73:74:59:00:b0:1e:4f:49:d1:10:d8:8a:bb:
da:b7:f3:77:20:f1:12:19:6e:e7:22:ec:44:40:c9:
6e:3f:58:04:2e:72:56:8b:6d:d4:fc:d7:56:13:be:
0c:10:85:66:c0:c8:80:bc:a8:15:f2:94:88:da:81:
b4:7c:32:1b:aa:7a:e5:b9:42:20:bc:0a:7b:1f:61:
e3:34:9a:d9:53:da:56:e2:b0:cb:bf:36:f9:86:78:
39:aa:6c:9b:d3:e1:8f:09:2b:ec:6b:ee:98:cc:56:
bd:cb:9a:58:f9:78:30:d4:4a:4d:56:1f:0c:58:23:
dc:b5:82:ac:eb:a6:d7:3d:91:3a:6a:50:14:f8:14:
19:39:01:29:47:c2:f0:06:81:08:13:da:df:ae:c1:
9f:f0:11:07:98:0c:d0:f1:68:71:36:f7:d8:19:05:
83:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:E9:04:B1:29:82:FA:8F:0C:05:AA:BE:B5:8E:72:74:B0:86:25:08
X509v3 Authority Key Identifier:
keyid:6A:17:DE:18:87:FC:FA:92:44:B9:31:D9:6D:A8:26:78:C0:14:76:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ahfeGIf8-pJEuTHZbagmeMAUdmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ec25bd-219e-4d02-a532-0799a52a6387/1/ahfeGIf8-pJEuTHZbagmeMAUdmM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ec25bd-219e-4d02-a532-0799a52a6387/1/ahfeGIf8-pJEuTHZbagmeMAUdmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:f7:15:f4:f4:59:4c:ce:7d:80:5d:e5:a9:e6:8a:7f:15:53:
6c:f9:f3:ee:c0:12:f0:4f:52:3f:aa:37:45:8e:83:b0:88:4e:
a0:7b:88:bb:39:b7:e4:cc:7d:6c:d8:e3:81:fe:64:08:1a:2d:
3a:b1:6b:de:76:89:47:ca:64:89:9d:0d:69:9b:e5:70:9a:7a:
c4:74:0d:86:e4:66:99:e8:31:89:a0:6e:04:3f:bc:93:03:c3:
d1:ec:58:2f:ab:0b:57:31:78:9f:40:33:a4:7a:78:e2:ea:a2:
e7:e2:2a:58:f0:be:20:55:29:2d:10:e5:73:14:32:cc:95:60:
f5:fd:73:63:d6:16:ff:f3:5d:e3:9f:01:7b:46:38:80:5b:d9:
1f:dc:27:f5:49:ca:8a:07:ff:29:73:bb:a0:1e:f3:77:d0:9a:
fd:d6:13:0f:9e:23:c6:f4:8a:ab:ae:4f:05:cf:0b:e6:85:ea:
06:a0:5f:2d:41:31:bf:e5:10:b3:6e:0f:44:4a:f6:c0:52:96:
96:33:5e:19:86:bc:58:e7:02:f1:88:55:85:a0:0f:c1:91:6e:
73:36:c6:11:ce:1c:79:23:32:cf:61:6c:4f:f7:14:c5:8e:85:
3d:f9:6b:25:07:be:66:3c:f9:eb:a3:08:fc:50:26:0b:d2:d2:
a2:cb:6e:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:17:44 2025 by rpki-client