Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.mft
File: bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.mft (raw, json)
Hash identifier: oB3SC1hhZEJIioJGae/GUhyiiXQz3L6qajmB5q78hxY=
Subject key identifier: 74:56:1E:EC:E9:F1:DC:33:C3:E8:EF:17:32:B4:3A:F7:57:40:37:A1
Authority key identifier: 6C:03:A2:CA:F2:98:01:9F:BD:66:86:21:51:6C:8C:6E:1D:10:E8:3C
Certificate issuer: /CN=6c03a2caf298019fbd668621516c8c6e1d10e83c
Certificate serial: 0199FDA1BD3E6FFD2AE70B845588C033BDC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.mft
Manifest number: 1718
Signing time: Sun 19 Oct 2025 18:00:59 +0000
Manifest this update: Sun 19 Oct 2025 18:00:59 +0000
Manifest next update: Mon 20 Oct 2025 18:00:59 +0000
Files and hashes: 1: 3XRXUFFaWVh_usZeR7hZVb4Jvcw.roa (hash: yAwRlDNm7OdLzFSk+lSyDArDl3R3ItMyb247bPQjawI=)
2: 4GFLNoudKsxo0lKJ1-DlrH13jnQ.roa (hash: HUsEZcDE4OcjX3j8qjU3YIB7IUQvhWtNObC5QxLBOjI=)
3: HABzsmEXoTX-9F80tlefBrIojpE.roa (hash: 52kUggTy9NYk2U3Bjz9hs7uyoLjfvw/NlnF/Z95I8C4=)
4: QePjCCFm1FINIQleulFli9B8Eok.roa (hash: /guHrTHyVfudxkCaMQP2S3B+Z/m09hjKdZNM8RCBhu8=)
5: RvvULY1y4xBfF8ZuGzWFY0OKEEg.roa (hash: NY71LOvBCM5qGOh91dHK/WKKwDoM07O+dhz3A0gNPUc=)
6: bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.crl (hash: j9Ceyr4w94uxvMAJIsBaoiR6U/RZxnTb/t9oHFXzcH8=)
7: gjLZ8xPb1tsKV2vJR4IOeOvDkLQ.roa (hash: xoIQZnhZzbbmusOiJUznTII6cc6W+LUSKGBLQbZkQx8=)
8: t8J6z3tO2f2jI-WXfX5Z7ghB42Y.roa (hash: CJg1Zg1dR2GxxLuD5y1ebgKx9+kGLch5/dW0dbkm29Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.mft
rsync://rpki.ripe.net/repository/DEFAULT/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:a1:bd:3e:6f:fd:2a:e7:0b:84:55:88:c0:33:bd:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c03a2caf298019fbd668621516c8c6e1d10e83c
Validity
Not Before: Oct 19 18:00:59 2025 GMT
Not After : Oct 20 18:00:59 2025 GMT
Subject: CN=74561eece9f1dc33c3e8ef1732b43af7574037a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:de:0d:09:49:c7:f3:51:8a:cf:68:26:87:c1:
c1:67:b4:a4:bc:ef:6d:98:9c:d8:3d:c8:b1:4f:6f:
0a:eb:f1:86:e3:79:1b:f2:0b:6f:4f:5e:39:d9:4f:
e8:85:34:6c:6e:af:c9:84:13:38:78:b7:4b:11:ef:
f2:69:00:6c:86:87:f1:b9:d5:89:59:a0:cd:bb:5c:
28:0c:55:60:7e:7c:13:1e:04:33:81:97:f5:9e:68:
56:c2:12:c7:f6:0c:d4:2d:31:a2:d4:68:16:32:f2:
1f:aa:3a:b6:74:ba:21:ed:fb:4d:67:63:2f:36:3a:
8c:b2:5f:83:e0:31:e1:ab:e2:28:ca:19:dd:db:b7:
eb:56:b8:da:18:6b:73:3c:c2:13:39:4d:b5:11:d4:
e8:ff:88:90:23:fb:f3:0b:89:49:ef:67:1e:31:3b:
a0:9b:ee:05:21:84:cd:3f:97:ed:3b:3e:d6:84:6d:
44:53:57:e0:6a:96:3b:27:4c:a9:a8:6b:d3:4a:22:
bc:3c:3e:61:f0:50:57:c5:64:b3:f5:0b:4b:80:33:
3d:cc:6e:0f:1d:81:5c:5e:20:ef:07:71:ad:55:14:
58:c6:6b:c0:90:af:60:72:a6:6d:1e:3b:3a:e4:db:
ee:83:8c:88:8e:0a:41:88:cb:bd:2b:7f:f3:ba:4e:
b5:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:56:1E:EC:E9:F1:DC:33:C3:E8:EF:17:32:B4:3A:F7:57:40:37:A1
X509v3 Authority Key Identifier:
keyid:6C:03:A2:CA:F2:98:01:9F:BD:66:86:21:51:6C:8C:6E:1D:10:E8:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:65:4e:4e:ed:be:19:cc:69:14:8c:45:54:fe:ae:45:78:1c:
7b:29:e7:d2:16:4a:13:01:3d:65:3f:8b:1e:9d:6b:f2:00:0b:
fb:b0:e9:fe:88:b6:ea:1c:dd:33:07:68:f8:31:80:dc:78:57:
31:94:2e:81:3d:25:1f:4b:93:78:12:a2:27:ef:93:8c:40:2d:
e9:bc:ea:bb:42:46:b6:0d:72:54:73:b7:82:b2:ff:9d:26:a5:
f3:51:46:93:1d:e3:89:8e:98:d8:f6:de:b4:79:7c:c7:b3:05:
fa:e5:92:b1:54:a4:6a:75:cd:51:ae:10:2e:01:d8:9b:45:e4:
ba:c5:a1:58:b9:ee:72:be:b0:b0:31:39:a6:66:8f:ba:98:5c:
46:94:48:8d:34:7c:2b:03:54:69:73:2a:e2:65:6e:74:01:d3:
7d:c7:77:63:21:d1:18:44:47:bf:59:86:ae:ea:66:07:ca:a5:
9c:11:6b:b5:67:44:18:6e:e1:70:c9:e6:82:6d:ee:54:61:26:
4f:a1:26:88:51:70:c6:6d:02:45:9a:65:fb:eb:93:54:9b:e0:
6b:ff:83:10:9c:35:42:13:a5:a9:e8:bf:0a:83:ab:89:79:ac:
36:ea:ed:2a:ee:3f:a5:87:e2:6d:57:0e:fc:0c:a5:71:f8:f5:
09:95:3d:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:00:16 2025 by rpki-client