Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/844fd9-fef1-44d9-a6c9-14fab0244948/1/a4T0opa84U1t7tJRFqpwtgvM5KQ.mft
File: a4T0opa84U1t7tJRFqpwtgvM5KQ.mft (raw, json)
Hash identifier: OSROY0tkcXQwfXJOOHiO+7VsE5Gm1BmMQTdmeddHt6M=
Subject key identifier: F1:4A:9B:2A:B8:C1:A0:72:92:DB:8E:F2:2B:B5:90:0D:B0:1C:3A:D8
Authority key identifier: 6B:84:F4:A2:96:BC:E1:4D:6D:EE:D2:51:16:AA:70:B6:0B:CC:E4:A4
Certificate issuer: /CN=6b84f4a296bce14d6deed25116aa70b60bcce4a4
Certificate serial: 0199FC2143D59D5AC5F8EE2DC33B551CBD43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a4T0opa84U1t7tJRFqpwtgvM5KQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/844fd9-fef1-44d9-a6c9-14fab0244948/1/a4T0opa84U1t7tJRFqpwtgvM5KQ.mft
Manifest number: 16E6
Signing time: Sun 19 Oct 2025 11:01:02 +0000
Manifest this update: Sun 19 Oct 2025 11:01:02 +0000
Manifest next update: Mon 20 Oct 2025 11:01:02 +0000
Files and hashes: 1: UoVm8brFC8TtFU0fGuOACP5IJ-8.roa (hash: Z3atFvW5mWSUMqAxQnvjqpFLFTXrIsbjT+DhpXeSnFQ=)
2: a4T0opa84U1t7tJRFqpwtgvM5KQ.crl (hash: 6m9m3AxugP/kG67QKr4mt/T01Oap932N39/Gf5eWfOc=)
3: ed0N60OI4_qO1SXPxnCTduptr6Y.roa (hash: cqf2H2hrYDyV/+kGYl658nAwtCZE+AIJOgr0nZrirug=)
4: iRFLKez3p29rhRwfF7FxUSY2xRQ.roa (hash: 8w+pzA8F3pAUuP2pqUwVGTV18rYsoVREmjASX0Uhtjg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/844fd9-fef1-44d9-a6c9-14fab0244948/1/a4T0opa84U1t7tJRFqpwtgvM5KQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/844fd9-fef1-44d9-a6c9-14fab0244948/1/a4T0opa84U1t7tJRFqpwtgvM5KQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/a4T0opa84U1t7tJRFqpwtgvM5KQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:43:d5:9d:5a:c5:f8:ee:2d:c3:3b:55:1c:bd:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b84f4a296bce14d6deed25116aa70b60bcce4a4
Validity
Not Before: Oct 19 11:01:02 2025 GMT
Not After : Oct 20 11:01:02 2025 GMT
Subject: CN=f14a9b2ab8c1a07292db8ef22bb5900db01c3ad8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:97:7f:b5:af:c2:ea:63:7b:26:95:a8:15:8a:
8c:41:be:8d:9a:58:9e:00:d3:35:f4:ce:75:03:ab:
12:7d:7d:6e:d4:21:db:d0:2f:2e:24:c1:77:e1:55:
39:bf:fe:3d:f0:5f:19:2b:f6:94:4b:85:0c:d0:53:
85:35:80:21:c0:ad:a6:07:d0:aa:29:aa:6b:70:82:
3c:be:a4:db:14:0b:dc:25:9d:f2:ff:01:0b:12:e0:
fa:08:1e:05:f4:33:e9:72:5c:ae:81:b5:f5:2c:1e:
e5:61:89:75:75:b5:78:1e:41:8f:59:df:7f:5f:e2:
37:a3:31:09:8b:23:10:3b:21:ef:5a:d3:fb:44:db:
02:03:7b:63:ba:b3:cf:8f:15:0c:eb:b7:79:0b:9f:
e3:3c:65:39:bd:2b:aa:1d:93:02:11:25:df:93:a8:
27:41:57:d0:93:58:bb:bb:d9:a0:93:6f:bb:df:d8:
b2:57:8f:cb:e6:1a:cb:13:ad:d8:88:d3:33:cb:c6:
2d:0b:f0:b2:75:bf:df:4e:c5:8e:2c:d5:a0:90:bf:
33:75:bd:7e:ae:0a:5b:e1:f8:3a:31:93:63:65:99:
e2:00:ed:64:8a:38:37:b2:db:de:9e:6f:ee:d6:31:
6f:27:b1:78:71:f0:67:7e:9a:16:12:6b:6b:66:c8:
d4:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:4A:9B:2A:B8:C1:A0:72:92:DB:8E:F2:2B:B5:90:0D:B0:1C:3A:D8
X509v3 Authority Key Identifier:
keyid:6B:84:F4:A2:96:BC:E1:4D:6D:EE:D2:51:16:AA:70:B6:0B:CC:E4:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4T0opa84U1t7tJRFqpwtgvM5KQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/844fd9-fef1-44d9-a6c9-14fab0244948/1/a4T0opa84U1t7tJRFqpwtgvM5KQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/844fd9-fef1-44d9-a6c9-14fab0244948/1/a4T0opa84U1t7tJRFqpwtgvM5KQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:54:86:14:9e:2f:58:eb:36:ff:f0:66:0d:0d:66:9c:02:37:
b3:57:1b:52:16:a4:8b:f0:b6:18:75:43:9c:df:02:11:76:d1:
3c:94:50:af:78:b3:28:0e:73:9f:bf:b7:6c:36:46:ab:05:61:
28:88:27:4d:48:9c:d3:55:7a:e9:dd:a8:03:38:6a:8f:e8:a5:
e5:ee:6b:ca:32:76:8a:bc:41:86:46:7b:71:1f:8b:26:24:f1:
5f:9a:da:1f:02:cf:77:3c:d3:3a:35:23:d7:35:1f:07:3e:75:
1b:7e:65:41:6f:e9:85:e2:43:b9:45:47:43:1c:b2:03:a1:cc:
9b:5e:ba:d7:5a:9f:02:81:e2:3e:20:ef:1f:e4:16:87:5f:99:
9e:f0:c0:6e:23:69:ef:b9:39:0b:23:ec:ac:d6:2b:14:c2:7b:
94:a6:24:34:f9:03:e9:62:dc:17:31:2f:2f:3e:81:63:39:11:
44:ec:76:7f:55:c1:5b:53:31:90:b9:43:76:a4:bc:5d:00:66:
11:7b:65:d7:cc:ee:bf:42:8f:be:55:74:c2:12:c6:81:c4:f5:
a8:2b:90:8c:49:8b:f0:76:45:a7:44:64:6b:3b:f0:6f:45:bc:
d9:0b:14:1b:1f:f8:0d:1e:8d:fe:8a:6e:40:ed:e4:52:68:71:
58:d5:c3:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:24:34 2025 by rpki-client