Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.mft
File: bQaeGeEsEEAE6LS3X4p3ibfhE5Y.mft (raw, json)
Hash identifier: oV20dqwSj+xEVSwj5XsYn+m4bdX6oGb59WI6mfEJ0UA=
Subject key identifier: 10:CC:4A:DC:AA:E1:40:83:BA:1F:DA:A9:0E:19:4D:87:53:78:BD:96
Authority key identifier: 6D:06:9E:19:E1:2C:10:40:04:E8:B4:B7:5F:8A:77:89:B7:E1:13:96
Certificate issuer: /CN=6d069e19e12c104004e8b4b75f8a7789b7e11396
Certificate serial: 0198D54E93E6FAF2FD989B4710F7AD7E08F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.mft
Manifest number: 165C
Signing time: Sat 23 Aug 2025 05:02:33 +0000
Manifest this update: Sat 23 Aug 2025 05:02:33 +0000
Manifest next update: Sun 24 Aug 2025 05:02:33 +0000
Files and hashes: 1: 0J1BscA7ehqbG9hZ9JbrawPNkVs.roa (hash: /iRggTw1aJBwhVUj4BhUfXwzpsGpq6zWBqZNLYzvF+Y=)
2: 1-azSbIQFoiVO3W2ZCWv9_QAR8i8.roa (hash: FijndDQD15Q5KHsLR44grscBnJeuQXrV0d05uzJTvBY=)
3: AVQz8sHW23ixrQTRE03QG3YvTuU.roa (hash: SrjP+GRC/1VbpeKx6pNwtWpLK3oTGv/QT5J47D5iwOs=)
4: QjaJHSSDpfkaW3VbsOBmx9Mwnzo.roa (hash: lX+/PQmgzRGcO03gKK10JR9EWKqWcF8NtT9etzyJ8ik=)
5: RXltaGeVSLLvEtVhuI8kryyqAEY.roa (hash: Sq4O0eAJlnMKv+pxipVDsrh+Q6PzS4fGsNzZeo0CJmQ=)
6: ZRpAC-jGxlGBX0TpAicAbhbJP7s.roa (hash: AYh7o4pPNeSE82/KXuBs2qGeurfhiF1NFTbsPaoM8YM=)
7: bO4Y5DyMm5PVD_pzuU-0jz4Eg9I.roa (hash: 5jBL9u4QzLNJlmw7QwIFNZbn9Ii2njf8Ib+9j7ROPhw=)
8: bQaeGeEsEEAE6LS3X4p3ibfhE5Y.crl (hash: p5jVN+oSN1q4XYKrhtK0+AGkIjlg+q1Bd9emHx4g4jk=)
9: vvWlGNuFGuXkBItTH9Zxu-JLKW8.roa (hash: 1uFZJRbOaGcxjskFgOQZk9WcrerBZqMlxk6lZA11nCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:93:e6:fa:f2:fd:98:9b:47:10:f7:ad:7e:08:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d069e19e12c104004e8b4b75f8a7789b7e11396
Validity
Not Before: Aug 23 05:02:33 2025 GMT
Not After : Aug 24 05:02:33 2025 GMT
Subject: CN=10cc4adcaae14083ba1fdaa90e194d875378bd96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:a2:bf:4e:d4:95:ec:9e:8d:19:c6:b2:19:82:
54:4b:23:db:8f:a2:1f:3c:dc:97:5c:53:ab:0c:da:
ad:43:25:e2:d1:89:57:59:99:10:73:ea:be:29:0d:
b8:27:65:a6:e2:7c:83:35:31:12:61:9d:21:c1:47:
04:38:9d:06:cf:fe:29:80:e5:64:23:12:c1:b4:cf:
d7:9c:e3:dd:d9:72:98:1f:df:27:80:6a:4f:66:fc:
f0:8d:82:c2:30:6e:81:48:94:95:1d:cd:3e:73:10:
a7:15:4c:1d:20:a6:e7:b7:f5:8b:8c:05:84:67:08:
38:1e:12:2e:dc:0f:52:a0:5d:e3:55:28:4f:6a:71:
0c:7e:8a:3c:c7:b3:1a:22:60:66:8a:7e:b2:8f:f3:
e9:69:2d:c5:cc:6f:37:02:ae:ea:1e:f0:af:68:e5:
53:25:0f:d8:1c:f2:41:3c:91:8d:d6:bb:21:e5:c0:
0c:9a:66:9e:a5:4e:14:92:cd:70:14:4e:49:b3:8e:
9c:43:d7:5e:3c:91:97:1e:a9:de:70:65:67:a9:50:
6b:88:62:ce:b2:c1:5f:99:34:73:dc:32:c0:8f:5d:
30:69:4c:63:df:21:98:e6:93:88:3c:33:f4:5f:ec:
52:dc:c8:84:aa:5c:80:5d:95:13:6b:5d:56:ff:15:
ff:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:CC:4A:DC:AA:E1:40:83:BA:1F:DA:A9:0E:19:4D:87:53:78:BD:96
X509v3 Authority Key Identifier:
keyid:6D:06:9E:19:E1:2C:10:40:04:E8:B4:B7:5F:8A:77:89:B7:E1:13:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:0c:1d:d7:56:22:2a:4b:22:dc:36:29:3d:f4:1b:db:e3:54:
bf:6e:b5:f1:59:cb:98:de:76:13:63:0a:9b:04:c3:bd:ea:5a:
e6:ab:c2:59:35:24:0b:a2:31:02:cf:61:4c:96:8e:74:bd:5c:
28:23:6a:e5:7f:84:87:0c:04:29:75:76:0f:4f:7c:e2:5a:1f:
2b:49:77:9c:2d:a5:2c:a7:5b:5a:66:ab:6a:bc:8a:ca:9f:da:
f1:9c:c8:1b:1d:81:91:b5:6d:17:e5:13:f1:4c:c7:59:c2:53:
a3:d2:c1:1a:eb:44:fa:97:af:4e:a6:08:b7:79:7f:5f:e3:4b:
19:28:54:f1:4a:7a:8c:e1:1a:22:ea:45:97:46:42:a2:95:5e:
8d:1d:fd:a3:e0:ab:92:82:89:7c:e6:88:8f:ed:f2:27:c0:d8:
1a:47:dc:32:85:09:79:09:ed:b9:20:e3:2e:f4:b8:9e:1e:48:
6b:d2:0f:48:86:3e:43:1c:d7:85:c0:aa:b2:2b:da:19:fd:bd:
7f:0c:10:67:f0:0a:23:3c:2a:b6:8a:c8:a3:e4:4b:dd:97:3e:
e6:52:ce:83:ac:c4:1c:60:0d:a0:64:18:91:73:d5:75:37:26:
61:89:9d:55:43:1c:4a:f2:1f:e3:c4:79:2e:e4:fe:18:f5:10:
39:92:04:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:35:38 2025 by rpki-client