Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/64a392-372e-48a6-a0e2-f5ad167d8494/1/bAqWFKxOEOei4qW8EvhiMGTInvk.mft
File: bAqWFKxOEOei4qW8EvhiMGTInvk.mft (raw, json)
Hash identifier: +XJCWsqW2zOZGCI+FcZ4dY6S3WVMhZSvNj2FGNkkFFA=
Subject key identifier: 4F:D1:CD:E0:BB:24:22:D4:5A:00:0D:CA:B5:42:E3:4E:40:E9:C5:11
Authority key identifier: 6C:0A:96:14:AC:4E:10:E7:A2:E2:A5:BC:12:F8:62:30:64:C8:9E:F9
Certificate issuer: /CN=6c0a9614ac4e10e7a2e2a5bc12f8623064c89ef9
Certificate serial: 0199FB458972AA2867A2B667CA8BA4135C2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bAqWFKxOEOei4qW8EvhiMGTInvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/64a392-372e-48a6-a0e2-f5ad167d8494/1/bAqWFKxOEOei4qW8EvhiMGTInvk.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 07:01:02 +0000
Manifest this update: Sun 19 Oct 2025 07:01:02 +0000
Manifest next update: Mon 20 Oct 2025 07:01:02 +0000
Files and hashes: 1: F67gDfZc4Jx2LCZVEE2FihPJzHw.roa (hash: yPyUtL/skPgjKLNjvoKJs7SdqhdnCeGN7LFhVgvBzCk=)
2: bAqWFKxOEOei4qW8EvhiMGTInvk.crl (hash: umfVUa9CDlA6VR5EHYPsXMsfI2qejmHCsePDB5DTlW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/64a392-372e-48a6-a0e2-f5ad167d8494/1/bAqWFKxOEOei4qW8EvhiMGTInvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/64a392-372e-48a6-a0e2-f5ad167d8494/1/bAqWFKxOEOei4qW8EvhiMGTInvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/bAqWFKxOEOei4qW8EvhiMGTInvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:89:72:aa:28:67:a2:b6:67:ca:8b:a4:13:5c:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c0a9614ac4e10e7a2e2a5bc12f8623064c89ef9
Validity
Not Before: Oct 19 07:01:02 2025 GMT
Not After : Oct 20 07:01:02 2025 GMT
Subject: CN=4fd1cde0bb2422d45a000dcab542e34e40e9c511
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:71:41:99:8b:e5:63:0d:8d:f9:19:35:46:ac:
07:a9:db:67:df:10:50:6e:45:d9:0b:0a:d2:a8:ef:
7c:bd:b8:30:e8:93:bd:58:98:03:55:ac:3e:f1:51:
65:b8:d4:4d:21:5f:58:69:6a:52:9f:62:1b:a5:30:
2e:7f:cd:14:e8:a6:09:c7:4f:49:ae:88:26:2c:db:
0c:c6:82:6b:90:f6:18:e6:35:b5:c4:09:ee:fd:1f:
71:9c:9d:90:f5:eb:e7:e5:d6:d9:06:8a:72:ca:d4:
d5:4c:64:c1:ab:c6:26:55:2a:25:b9:8f:22:fb:27:
71:38:fd:85:59:6e:e1:fb:a3:f8:c0:7a:9c:af:a1:
d5:a0:76:87:0d:f4:2e:85:1a:a7:df:e3:35:ac:a0:
d9:0b:86:51:9e:f4:80:81:39:ca:49:44:0a:76:e0:
d4:b5:93:f3:38:dc:ac:46:c5:05:6c:99:1c:4c:2f:
65:94:ac:bd:4d:cb:9e:0c:6e:25:93:b2:24:7a:9d:
ba:1d:bc:b5:ee:14:1f:0c:e6:03:a2:94:1f:ae:42:
70:15:bc:34:51:28:18:51:b1:21:14:8a:a6:15:28:
c1:ea:fa:59:77:2d:46:dd:0b:10:24:59:2b:0b:cb:
7e:13:d7:c1:7e:0d:36:41:11:4d:00:eb:18:d2:17:
a8:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:D1:CD:E0:BB:24:22:D4:5A:00:0D:CA:B5:42:E3:4E:40:E9:C5:11
X509v3 Authority Key Identifier:
keyid:6C:0A:96:14:AC:4E:10:E7:A2:E2:A5:BC:12:F8:62:30:64:C8:9E:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bAqWFKxOEOei4qW8EvhiMGTInvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/64a392-372e-48a6-a0e2-f5ad167d8494/1/bAqWFKxOEOei4qW8EvhiMGTInvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/64a392-372e-48a6-a0e2-f5ad167d8494/1/bAqWFKxOEOei4qW8EvhiMGTInvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:54:29:84:a0:6b:e1:0c:54:cf:83:27:9e:b4:7c:b2:ec:6b:
1f:cc:06:f7:61:67:63:72:aa:25:26:5c:ba:ec:19:0a:d1:f8:
ed:f4:a3:0a:df:d2:bd:d1:31:af:36:57:b7:57:53:6b:34:85:
01:30:fa:b3:4f:ff:58:d3:60:5d:3c:78:3a:83:94:b1:56:ee:
9d:eb:8b:09:91:ed:bb:97:ae:53:23:4e:7b:6e:0f:3d:36:60:
52:92:6a:f1:c5:ee:a7:2e:46:cd:f3:42:f1:da:04:ea:e5:55:
a9:58:a7:0d:de:5e:e2:98:f0:98:b3:73:4c:52:38:6a:26:ec:
3c:e4:2e:07:df:da:ce:4b:25:87:c7:e1:e6:ff:50:21:a5:39:
7b:c2:ad:89:b3:92:7e:1c:c2:ed:e7:23:41:9b:37:d0:a9:b7:
86:7d:17:c8:6c:53:95:a9:66:44:c8:a7:a3:9d:25:89:94:79:
03:33:c3:6d:cc:e6:f3:82:e2:08:4c:c8:c9:0b:fa:73:9f:36:
70:3b:61:65:c3:da:d3:48:32:36:da:d1:3b:e1:a1:79:67:4c:
b9:f3:bf:df:61:fe:77:9b:f8:05:78:39:3b:85:b1:c0:26:2b:
a6:63:23:df:65:52:b4:df:44:4f:51:bb:f8:42:0b:f0:8e:0d:
b9:0d:92:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:33 2025 by rpki-client