Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/2da1ec-aa4b-4d94-98cb-a776e4a63e6f/1/r6URZapQNqzaEf7gAg40_MQ57eY.mft
File: r6URZapQNqzaEf7gAg40_MQ57eY.mft (raw, json)
Hash identifier: XBD2+MagF9aVBK2M7anAOS75eAV8/GpwXEo8nq6riEA=
Subject key identifier: C4:59:DD:0B:01:E9:B5:7B:53:1C:D3:C5:6D:40:02:F3:9C:A9:D0:FE
Authority key identifier: AF:A5:11:65:AA:50:36:AC:DA:11:FE:E0:02:0E:34:FC:C4:39:ED:E6
Certificate issuer: /CN=afa51165aa5036acda11fee0020e34fcc439ede6
Certificate serial: 0199FC8F24C9BAEF42AF910C55AFE401298E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r6URZapQNqzaEf7gAg40_MQ57eY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/2da1ec-aa4b-4d94-98cb-a776e4a63e6f/1/r6URZapQNqzaEf7gAg40_MQ57eY.mft
Manifest number: 16E8
Signing time: Sun 19 Oct 2025 13:01:03 +0000
Manifest this update: Sun 19 Oct 2025 13:01:03 +0000
Manifest next update: Mon 20 Oct 2025 13:01:03 +0000
Files and hashes: 1: JXD4YyeKM2DbSEsSMseYjT0o7Ww.roa (hash: YAf2/29DjA3Na+Hgt1fQsq3jSQYLqFSkMb1fHAx4RUM=)
2: r6URZapQNqzaEf7gAg40_MQ57eY.crl (hash: Dkcbl4NcuVAcRUXuW1g14B9pjintFXBYdYX77mPVYvE=)
3: rJjHJUl0uD_7dHjW4bG3nCxQ5iY.roa (hash: nazoboMf2p4XX7ExK1xqcEEDrXTJmHzU9uxX+kIOchk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/2da1ec-aa4b-4d94-98cb-a776e4a63e6f/1/r6URZapQNqzaEf7gAg40_MQ57eY.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/2da1ec-aa4b-4d94-98cb-a776e4a63e6f/1/r6URZapQNqzaEf7gAg40_MQ57eY.mft
rsync://rpki.ripe.net/repository/DEFAULT/r6URZapQNqzaEf7gAg40_MQ57eY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 13:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:24:c9:ba:ef:42:af:91:0c:55:af:e4:01:29:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afa51165aa5036acda11fee0020e34fcc439ede6
Validity
Not Before: Oct 19 13:01:03 2025 GMT
Not After : Oct 20 13:01:03 2025 GMT
Subject: CN=c459dd0b01e9b57b531cd3c56d4002f39ca9d0fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:7a:40:a6:21:36:23:d0:50:00:ff:d0:58:8f:
ed:bc:20:18:c1:51:f4:94:09:90:9a:67:99:b5:ad:
bb:2e:a2:0d:b8:48:88:c2:55:c2:06:b3:01:20:3a:
98:e3:45:f1:9b:91:2d:db:f5:1d:4b:a1:5e:7e:a6:
06:ef:ab:b2:e4:e9:b7:96:9c:17:ad:1e:49:7b:a1:
38:5c:2d:aa:93:2f:ba:51:33:30:bc:fd:bc:ae:4a:
4a:c1:71:ce:df:7e:e4:53:8f:93:77:b3:ff:7d:0e:
0d:4d:76:22:80:b1:0e:ce:83:15:2d:50:d2:62:a7:
b0:bf:c4:cb:3a:ab:dd:e9:af:27:0a:6e:53:71:46:
55:13:b7:de:6b:ff:71:9b:6f:f3:ea:2f:6c:b0:36:
e8:51:82:6e:ca:bc:c7:95:d0:28:d5:e4:d6:7d:c5:
3d:3d:6d:94:a0:38:22:77:e3:a5:4b:fb:f0:07:3f:
75:76:67:c1:4d:e6:83:40:8c:89:d1:d7:0b:7a:a1:
db:fe:a7:53:ee:65:ff:71:bb:3a:53:11:29:75:7f:
4e:d7:3f:6c:38:80:28:db:99:fa:0a:64:30:f7:c1:
dc:b9:89:47:1c:62:a5:db:b7:da:08:66:cc:28:98:
f7:33:f6:5a:ec:0f:e3:f2:2d:3d:19:d6:83:4b:43:
bb:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:59:DD:0B:01:E9:B5:7B:53:1C:D3:C5:6D:40:02:F3:9C:A9:D0:FE
X509v3 Authority Key Identifier:
keyid:AF:A5:11:65:AA:50:36:AC:DA:11:FE:E0:02:0E:34:FC:C4:39:ED:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r6URZapQNqzaEf7gAg40_MQ57eY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/2da1ec-aa4b-4d94-98cb-a776e4a63e6f/1/r6URZapQNqzaEf7gAg40_MQ57eY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/2da1ec-aa4b-4d94-98cb-a776e4a63e6f/1/r6URZapQNqzaEf7gAg40_MQ57eY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:05:03:de:0b:54:af:d5:30:5a:9f:c0:8e:91:ce:3e:c5:70:
04:2c:7b:6e:27:35:48:e3:54:74:72:d6:d3:42:a2:7f:4c:96:
e3:72:c7:ab:e3:bc:db:1e:3b:52:82:fd:99:df:9e:d9:a6:91:
73:38:8a:17:24:b5:6f:15:26:ff:5c:9d:b4:af:3d:dc:0c:eb:
31:e6:af:d1:9a:16:60:3e:7a:8f:2f:8b:c7:ad:32:9a:9f:70:
7a:fb:f5:9d:a9:22:59:ca:d5:92:58:e6:50:d9:c7:9b:c4:9b:
d9:60:08:4d:24:98:f4:68:2b:31:09:65:b2:d0:65:69:eb:f8:
c7:a9:76:b5:c8:7e:f7:b4:35:08:cd:ca:48:8e:d6:d9:e1:ea:
2c:1a:e5:3c:ea:87:d0:a7:5d:bd:9f:d5:45:a1:d2:dc:d3:17:
28:88:ac:7e:d8:d9:38:ef:53:bb:60:2f:f4:5e:54:38:ae:4b:
95:0f:04:7e:ad:b3:1a:d9:9c:f9:90:31:62:dc:e8:36:ca:41:
30:b2:35:e6:44:6e:a6:20:e8:48:26:76:ae:fb:3e:5a:f5:5c:
50:cc:2d:3f:3b:b6:11:21:dd:8d:04:6c:e5:09:77:f9:46:4d:
95:52:47:ae:10:55:14:80:b8:3b:48:6b:4e:25:1e:07:4d:3c:
12:c1:9f:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:36:15 2025 by rpki-client