Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.mft
File: bQaeGeEsEEAE6LS3X4p3ibfhE5Y.mft (raw, json)
Hash identifier: 7ZikAbmVx7Z2e3dvHTFRSHolkNU1ZkmiXPFtCA4dBg0=
Subject key identifier: 85:00:8D:8D:EF:FE:D5:5A:39:E7:3C:CD:B6:B4:4D:9D:4C:60:61:27
Authority key identifier: 6D:06:9E:19:E1:2C:10:40:04:E8:B4:B7:5F:8A:77:89:B7:E1:13:96
Certificate issuer: /CN=6d069e19e12c104004e8b4b75f8a7789b7e11396
Certificate serial: 0199FEB5229B7ABC5C645FA417FBC95CC9E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.mft
Manifest number: 16F6
Signing time: Sun 19 Oct 2025 23:01:47 +0000
Manifest this update: Sun 19 Oct 2025 23:01:47 +0000
Manifest next update: Mon 20 Oct 2025 23:01:47 +0000
Files and hashes: 1: 0J1BscA7ehqbG9hZ9JbrawPNkVs.roa (hash: /iRggTw1aJBwhVUj4BhUfXwzpsGpq6zWBqZNLYzvF+Y=)
2: 1-azSbIQFoiVO3W2ZCWv9_QAR8i8.roa (hash: FijndDQD15Q5KHsLR44grscBnJeuQXrV0d05uzJTvBY=)
3: AVQz8sHW23ixrQTRE03QG3YvTuU.roa (hash: SrjP+GRC/1VbpeKx6pNwtWpLK3oTGv/QT5J47D5iwOs=)
4: QjaJHSSDpfkaW3VbsOBmx9Mwnzo.roa (hash: lX+/PQmgzRGcO03gKK10JR9EWKqWcF8NtT9etzyJ8ik=)
5: RXltaGeVSLLvEtVhuI8kryyqAEY.roa (hash: Sq4O0eAJlnMKv+pxipVDsrh+Q6PzS4fGsNzZeo0CJmQ=)
6: ZRpAC-jGxlGBX0TpAicAbhbJP7s.roa (hash: AYh7o4pPNeSE82/KXuBs2qGeurfhiF1NFTbsPaoM8YM=)
7: bO4Y5DyMm5PVD_pzuU-0jz4Eg9I.roa (hash: 5jBL9u4QzLNJlmw7QwIFNZbn9Ii2njf8Ib+9j7ROPhw=)
8: bQaeGeEsEEAE6LS3X4p3ibfhE5Y.crl (hash: Qjz0T6oP/JhX3MsCIuMHApVoPnhRcsol58KR/I8UVRw=)
9: vvWlGNuFGuXkBItTH9Zxu-JLKW8.roa (hash: 1uFZJRbOaGcxjskFgOQZk9WcrerBZqMlxk6lZA11nCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b5:22:9b:7a:bc:5c:64:5f:a4:17:fb:c9:5c:c9:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d069e19e12c104004e8b4b75f8a7789b7e11396
Validity
Not Before: Oct 19 23:01:47 2025 GMT
Not After : Oct 20 23:01:47 2025 GMT
Subject: CN=85008d8deffed55a39e73ccdb6b44d9d4c606127
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:69:bf:72:39:f3:30:80:12:7f:be:80:13:3b:
79:80:44:f3:98:0c:ab:44:8e:25:6d:24:99:13:e0:
9a:7d:d1:5c:6d:5d:31:3c:45:7e:d6:c5:95:d2:8f:
1d:4c:bf:69:d7:2f:2b:e9:ae:e4:fb:0b:90:41:4d:
c7:44:5e:b3:72:5d:dd:1b:c1:98:5e:fd:17:8b:b1:
ef:d5:3b:5c:ef:6e:29:f5:ff:78:06:00:17:dd:f4:
c4:55:7f:df:6f:e6:b5:89:79:ca:2b:ec:67:64:37:
f3:22:d2:62:72:2e:99:45:b4:f9:db:b3:78:7d:13:
61:21:e0:52:9a:c0:5d:e4:9e:22:d1:e8:c3:ad:08:
74:43:c7:fc:09:51:1d:1e:86:5c:46:e5:01:5d:e1:
fb:36:aa:33:e7:d8:9c:22:f2:21:64:ce:62:27:14:
36:c4:f9:cb:8e:b2:57:cf:c0:08:51:3a:ae:a8:9d:
b6:09:06:74:2f:d3:23:d9:c7:a2:c3:ed:fb:9a:9e:
6f:d6:43:5a:e6:e5:50:d5:eb:fa:ef:5e:7a:26:29:
eb:be:21:0f:df:47:62:27:f3:bf:fa:0a:90:6a:9b:
32:fe:3c:62:cb:a5:73:6a:4c:cb:b3:11:5c:eb:97:
61:4b:01:6d:17:23:2f:fb:7d:76:73:86:f9:95:a1:
47:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:00:8D:8D:EF:FE:D5:5A:39:E7:3C:CD:B6:B4:4D:9D:4C:60:61:27
X509v3 Authority Key Identifier:
keyid:6D:06:9E:19:E1:2C:10:40:04:E8:B4:B7:5F:8A:77:89:B7:E1:13:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:7e:a2:b6:24:bf:09:10:80:82:8b:68:1b:c4:29:71:63:1e:
5c:bf:3d:a8:a2:e1:71:f9:95:9d:24:aa:07:34:11:54:33:d7:
d2:0c:a4:06:e2:65:50:52:ba:4a:a0:37:b2:c8:3f:10:88:31:
75:30:5b:0c:93:88:a8:5f:a2:81:7f:3e:76:1a:74:a3:8f:ff:
3b:8b:2b:0a:de:ca:35:01:02:83:bd:21:a6:de:22:fc:68:cd:
a4:11:c0:f6:69:46:1b:de:26:e3:1e:2f:3b:89:5f:96:2d:15:
be:5a:2f:13:98:f5:03:16:ec:fe:f5:1f:38:65:7d:1b:60:aa:
ac:2f:13:2a:89:0a:c1:17:a2:b7:ed:84:5d:6b:42:fa:b3:ef:
66:83:d8:33:93:5e:35:56:c8:41:63:ac:a6:0a:7a:ed:3b:b1:
51:aa:75:62:fa:b5:fc:74:2c:10:72:23:8f:a0:d2:3d:dd:f7:
38:87:11:61:0c:c8:67:0c:4a:7c:07:4d:b3:78:02:09:b8:c9:
b9:f9:cf:7a:c4:2a:a9:fe:a9:18:ca:59:b7:38:ef:bf:cb:d7:
51:e9:cb:3c:42:a4:5e:67:9f:a2:f7:8b:45:ac:ae:a5:a4:98:
d1:c6:c1:27:4f:46:7e:4d:88:8d:88:4c:fa:18:cb:c1:87:7f:
38:9d:95:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:18:32 2025 by rpki-client