Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/b17ec3-4d2e-4b49-a3a7-407e9f38907e/1/a5I-FqLEzb3ZUkCJCL-COARlulE.mft
File: a5I-FqLEzb3ZUkCJCL-COARlulE.mft (raw, json)
Hash identifier: +PgEtZWYwNANr4kPDODRgoL+jn3q0NYyeKFKjxRBoOU=
Subject key identifier: E8:63:A2:D4:A3:91:BD:5D:39:FD:64:6D:FD:F0:24:84:13:86:9B:AF
Authority key identifier: 6B:92:3E:16:A2:C4:CD:BD:D9:52:40:89:08:BF:82:38:04:65:BA:51
Certificate issuer: /CN=6b923e16a2c4cdbdd952408908bf82380465ba51
Certificate serial: 0199FBEB7C27D42C0939E8C917B2578B5536
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a5I-FqLEzb3ZUkCJCL-COARlulE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/b17ec3-4d2e-4b49-a3a7-407e9f38907e/1/a5I-FqLEzb3ZUkCJCL-COARlulE.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 10:02:17 +0000
Manifest this update: Sun 19 Oct 2025 10:02:17 +0000
Manifest next update: Mon 20 Oct 2025 10:02:17 +0000
Files and hashes: 1: MdpNEvAqweEeBxvHQjNduxcNC5o.roa (hash: 3CFotLoSJook5su+0dIfaMzyVX/dwZvzE8G3t1ZME68=)
2: a5I-FqLEzb3ZUkCJCL-COARlulE.crl (hash: PVsa0kZ+eo/o/ItCZt3fw6fLmRfu4TKS8ZsG8prLlN8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/b17ec3-4d2e-4b49-a3a7-407e9f38907e/1/a5I-FqLEzb3ZUkCJCL-COARlulE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/b17ec3-4d2e-4b49-a3a7-407e9f38907e/1/a5I-FqLEzb3ZUkCJCL-COARlulE.mft
rsync://rpki.ripe.net/repository/DEFAULT/a5I-FqLEzb3ZUkCJCL-COARlulE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:7c:27:d4:2c:09:39:e8:c9:17:b2:57:8b:55:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b923e16a2c4cdbdd952408908bf82380465ba51
Validity
Not Before: Oct 19 10:02:17 2025 GMT
Not After : Oct 20 10:02:17 2025 GMT
Subject: CN=e863a2d4a391bd5d39fd646dfdf0248413869baf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:21:03:ef:b9:e8:d5:72:62:24:7f:0d:42:6f:
84:2e:d9:0c:4c:2a:5e:fc:82:22:ff:df:da:90:9c:
88:b8:ce:a3:7f:71:3a:e0:ae:39:98:4b:3f:5b:e2:
15:b6:1b:2e:55:b0:64:ba:0d:89:96:99:f0:2f:a7:
06:62:e9:05:a3:92:58:d3:0b:4d:38:67:a6:15:d9:
72:ee:65:77:af:29:d7:2f:bf:31:5b:62:68:d8:bb:
dd:65:db:9a:b6:a8:73:1e:46:95:2e:80:99:9f:eb:
41:e4:5f:f0:2e:2e:7c:7f:ed:75:4d:90:e9:76:1b:
12:b1:aa:68:3b:b4:fd:2a:c4:29:3b:27:9a:79:40:
68:93:f3:4e:42:4b:94:e1:5e:a3:6e:3d:9b:ca:6d:
b8:d0:9b:fb:6f:b8:cd:89:cb:eb:68:f1:cd:79:9c:
be:b0:e8:0c:c7:cf:f9:44:7a:28:3e:90:d1:a5:87:
5c:98:5a:9c:26:8a:d6:fb:be:f4:4b:ab:56:65:fc:
69:b3:88:88:5d:ea:15:94:63:c3:c6:2c:28:49:3a:
3d:c2:39:f5:46:ba:5e:9c:69:a1:f3:c1:b7:73:7d:
4e:ba:cf:62:25:d0:ef:67:88:08:4e:eb:2f:96:e0:
28:27:18:6b:cf:a6:9a:6e:6b:c2:f0:a8:67:ac:e5:
68:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:63:A2:D4:A3:91:BD:5D:39:FD:64:6D:FD:F0:24:84:13:86:9B:AF
X509v3 Authority Key Identifier:
keyid:6B:92:3E:16:A2:C4:CD:BD:D9:52:40:89:08:BF:82:38:04:65:BA:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5I-FqLEzb3ZUkCJCL-COARlulE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/b17ec3-4d2e-4b49-a3a7-407e9f38907e/1/a5I-FqLEzb3ZUkCJCL-COARlulE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/b17ec3-4d2e-4b49-a3a7-407e9f38907e/1/a5I-FqLEzb3ZUkCJCL-COARlulE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:85:bd:a8:f3:7d:e0:cd:c4:2d:4f:26:b3:a0:b2:c8:d0:f8:
0b:5d:d2:d0:9c:65:87:fd:f6:75:a0:5d:4f:ab:08:13:ba:86:
95:8c:27:4f:5a:59:d0:e7:e2:e8:16:5f:d5:76:e8:20:15:25:
0b:ea:93:40:f5:47:fd:52:76:75:6b:c1:06:fe:d5:44:01:fd:
b6:fc:e3:6f:2d:c7:93:68:34:5a:0b:ad:9d:b6:ed:a5:0b:08:
1a:74:d4:96:bf:a0:59:db:40:d9:42:ab:3f:e3:7b:b9:1c:eb:
ad:4d:0f:e9:32:9e:b1:bc:2f:35:cf:2b:db:3b:39:ff:a8:d6:
91:34:7d:30:b5:8d:24:e8:5d:2f:52:04:89:32:b9:d9:ae:32:
b8:67:41:da:a0:1a:c9:e1:7e:7a:3b:53:3b:38:75:e2:b2:9c:
87:c0:fd:ed:f0:f1:2b:68:d9:75:63:53:37:ea:c1:12:b5:d1:
5f:06:98:56:8c:67:eb:0f:dc:43:65:f0:e7:d4:57:bc:3e:38:
1b:9c:d4:3c:f3:0e:7e:7e:64:ee:0c:a0:0e:a4:20:43:a7:75:
07:55:39:31:f7:67:ae:2f:f5:de:68:3e:40:bb:25:c9:30:de:
97:90:90:fb:d1:2f:87:6f:8d:9e:11:d9:2a:6f:79:e7:35:eb:
2f:55:5f:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:07:53 2025 by rpki-client