Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/b8zf_aakxIkUtejN59pdgguclxg.mft
File: b8zf_aakxIkUtejN59pdgguclxg.mft (raw, json)
Hash identifier: khEy/2coRz+A+aaXFurhfhKN1hFuVWxu9tnQrOGIfF0=
Subject key identifier: E9:53:93:5E:74:FD:70:0D:B4:96:E3:A2:12:EF:CE:20:0B:BE:C0:34
Authority key identifier: 6F:CC:DF:FD:A6:A4:C4:89:14:B5:E8:CD:E7:DA:5D:82:0B:9C:97:18
Certificate issuer: /CN=6fccdffda6a4c48914b5e8cde7da5d820b9c9718
Certificate serial: 0199FC219E740EEDE6BB5B9770FA2346BBB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8zf_aakxIkUtejN59pdgguclxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/b8zf_aakxIkUtejN59pdgguclxg.mft
Manifest number: 16F5
Signing time: Sun 19 Oct 2025 11:01:25 +0000
Manifest this update: Sun 19 Oct 2025 11:01:25 +0000
Manifest next update: Mon 20 Oct 2025 11:01:25 +0000
Files and hashes: 1: 1YG59nbjYSEp8Dz6f0mC_6gefpg.roa (hash: 5tVXqxotHLEXF9KoqmQT6ylsFbR/apsye3JTV81hRBQ=)
2: DWHdsFsQlnFJcyPewoXT0lDFpvE.roa (hash: V6x8BrWgOBTucNWB1MpK3cn6rjM3I3+oPKM+8Z7R5vA=)
3: GQpZM-fB0ZkxzCRMqCw0f9N7tyU.roa (hash: KTppITpJ7wsyB8SXrbAMqiKKxUwVykbBRMICRs5VO4A=)
4: K221sfSU8a2Lsy0QMVbBz-yAHyg.roa (hash: kybj+mQFwM3CNEIgEWcR7xMFvyhG9N8dFqe0X/0hhYM=)
5: b8zf_aakxIkUtejN59pdgguclxg.crl (hash: ON+IoyRVx9p20HvyvoKIsl1U5DV2SbNxP3tq5goeLVk=)
6: hZBu7FQZVkKtWXL58gH8ufcnrgg.roa (hash: R2fcFnCqnbmbHv/RiPE81tSq/ElozG/l/Ezav5iqgYw=)
7: j93BEME5b_K-Zki214QPN4kzqeg.roa (hash: hcvpDseLA+C6KaXIoA6Bv3d4XdBkZlvTz5OO4bMB8oo=)
8: rqGlBLIWA_KsyY5dvVKcudAzYvY.roa (hash: 5OHCdN2GkrUd/qPuHKRYVHvCHLeex3MBnLChYf7HEzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/b8zf_aakxIkUtejN59pdgguclxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/b8zf_aakxIkUtejN59pdgguclxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/b8zf_aakxIkUtejN59pdgguclxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:9e:74:0e:ed:e6:bb:5b:97:70:fa:23:46:bb:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fccdffda6a4c48914b5e8cde7da5d820b9c9718
Validity
Not Before: Oct 19 11:01:25 2025 GMT
Not After : Oct 20 11:01:25 2025 GMT
Subject: CN=e953935e74fd700db496e3a212efce200bbec034
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ce:07:f8:dd:8e:6f:0e:0a:49:78:f1:e3:e1:
fa:7d:45:23:8a:ef:85:78:66:83:0c:8f:b8:d5:83:
b6:a2:10:dd:b3:3b:26:4f:d3:99:1c:74:b4:a8:aa:
cf:41:f3:8e:f1:b8:c4:cc:62:26:af:79:61:7a:84:
42:90:92:9b:9a:57:6d:a2:88:04:ef:3c:32:6d:c3:
42:6e:16:aa:69:ec:48:29:e1:b5:98:d2:66:14:74:
51:02:73:ba:94:13:bb:15:a7:df:e4:96:dc:c8:13:
32:4c:79:10:52:53:7f:df:42:75:ed:4c:57:5d:b2:
21:5a:b1:eb:44:ad:3b:fc:0c:17:12:6f:06:34:cb:
ad:f8:7c:17:47:04:6c:4f:11:6e:6b:61:4f:d6:8e:
69:f9:06:e8:72:ce:f7:6e:40:87:c8:7e:73:02:58:
59:93:f4:38:e5:f0:05:35:fb:d9:14:c1:18:a0:95:
a0:58:e6:61:5a:25:04:b7:8b:b4:70:31:e6:76:7f:
b2:fe:99:63:25:1a:3a:3f:c9:00:76:fa:0e:dd:3f:
a8:64:f7:77:a8:e8:89:4d:d4:ea:c4:db:df:8e:b6:
94:95:a4:f7:9e:4f:e1:ad:28:df:cd:68:fe:6f:59:
9f:af:0c:71:a9:29:23:0f:5e:cc:2d:10:20:49:3a:
65:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:53:93:5E:74:FD:70:0D:B4:96:E3:A2:12:EF:CE:20:0B:BE:C0:34
X509v3 Authority Key Identifier:
keyid:6F:CC:DF:FD:A6:A4:C4:89:14:B5:E8:CD:E7:DA:5D:82:0B:9C:97:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8zf_aakxIkUtejN59pdgguclxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/b8zf_aakxIkUtejN59pdgguclxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/b8zf_aakxIkUtejN59pdgguclxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:21:0d:fa:3c:07:d9:26:2c:3a:bc:69:ed:d5:ad:b0:be:57:
19:ed:c1:5b:91:47:0b:87:b7:c1:5a:60:76:c7:00:d8:31:13:
4f:ed:0c:ef:02:b2:9a:c7:c3:10:16:0c:71:86:ea:f7:d0:fe:
da:54:67:e9:94:98:1f:c4:1f:9f:bb:d4:26:0e:68:2b:f3:c2:
4c:29:c0:78:5d:ea:7f:34:5e:8a:f6:dd:6b:18:72:e6:d1:ec:
f7:25:0f:07:27:19:93:ad:bc:95:58:75:bd:52:e9:60:01:1d:
af:78:b5:b3:06:5e:87:d6:5e:ae:ee:c7:b5:de:04:c7:53:03:
5c:be:b3:88:d9:a4:c9:71:8d:91:f2:5f:1c:63:b7:d5:f8:9c:
d0:f5:83:d6:ee:c5:d2:2d:b7:6e:55:ab:bc:42:03:b5:43:a5:
f7:8d:75:be:53:9d:5e:dd:e0:58:e2:05:de:4a:94:78:0b:e0:
56:86:76:12:5e:b0:b3:11:de:e0:7f:3e:d8:1c:3d:fa:99:bc:
b2:a5:a2:b1:0a:8f:cf:41:49:61:93:f0:bb:d1:ec:17:2c:6a:
66:bb:7d:d4:50:76:82:88:54:67:fb:16:7c:81:49:17:35:a3:
f9:4b:7b:2f:f9:c9:d9:53:b0:22:3d:11:97:37:b8:ce:ec:3c:
f9:89:e9:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:01:34 2025 by rpki-client