Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/6457d9-b4db-4b2d-919c-2e1ee9471eec/1/a5p0BaYIXJq6zwg9yQpJX80mjPg.mft
File: a5p0BaYIXJq6zwg9yQpJX80mjPg.mft (raw, json)
Hash identifier: a2vWCEEMS7tG6EaArozB4pofR0eG/kflrzuCjQkCJmE=
Subject key identifier: EF:61:5B:25:C6:7A:2F:CC:E2:0C:16:27:B6:A1:6C:BD:57:1A:7C:A9
Authority key identifier: 6B:9A:74:05:A6:08:5C:9A:BA:CF:08:3D:C9:0A:49:5F:CD:26:8C:F8
Certificate issuer: /CN=6b9a7405a6085c9abacf083dc90a495fcd268cf8
Certificate serial: 0199CFB6205A7F7932E16875050BC4813B48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a5p0BaYIXJq6zwg9yQpJX80mjPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/6457d9-b4db-4b2d-919c-2e1ee9471eec/1/a5p0BaYIXJq6zwg9yQpJX80mjPg.mft
Manifest number: 16C8
Signing time: Fri 10 Oct 2025 20:00:43 +0000
Manifest this update: Fri 10 Oct 2025 20:00:43 +0000
Manifest next update: Sat 11 Oct 2025 20:00:43 +0000
Files and hashes: 1: 3VrPGjUQ3Y-l-f7OeEozbIvcsLg.roa (hash: bLeP0OV6qVbEnqwfvFZWrAEprQe0NgLJqVsqQYDqQEk=)
2: a5p0BaYIXJq6zwg9yQpJX80mjPg.crl (hash: kaTWJ5UVJQkfk9RJCbc7keFibL+FvSIykTAfsMLzMl0=)
3: hNx5M08bBB4LNOoJFKhlbkgWWJM.roa (hash: cqMnw1dZerM4/zZuXP5i5wijuCSzDOC7D7skn29vFmk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/6457d9-b4db-4b2d-919c-2e1ee9471eec/1/a5p0BaYIXJq6zwg9yQpJX80mjPg.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/6457d9-b4db-4b2d-919c-2e1ee9471eec/1/a5p0BaYIXJq6zwg9yQpJX80mjPg.mft
rsync://rpki.ripe.net/repository/DEFAULT/a5p0BaYIXJq6zwg9yQpJX80mjPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 Oct 2025 20:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:cf:b6:20:5a:7f:79:32:e1:68:75:05:0b:c4:81:3b:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b9a7405a6085c9abacf083dc90a495fcd268cf8
Validity
Not Before: Oct 10 20:00:43 2025 GMT
Not After : Oct 11 20:00:43 2025 GMT
Subject: CN=ef615b25c67a2fcce20c1627b6a16cbd571a7ca9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:1f:ca:77:26:ba:72:f4:7a:9e:e7:22:f5:42:
fa:ce:f8:a5:5e:e9:ce:61:fd:a0:2c:a7:5b:93:78:
9d:53:a9:3e:a9:3b:cb:79:e6:c4:58:bc:16:0d:9c:
cb:75:00:c5:46:f2:cc:0b:6a:fe:75:09:75:95:8f:
8f:82:3d:4a:df:35:97:2e:f7:66:a8:80:c1:7d:df:
24:ef:3d:93:59:a1:64:3b:52:58:53:17:2a:b4:64:
4c:4e:15:86:2a:49:bf:ba:5c:e5:66:db:73:00:c5:
23:e8:c2:41:7d:f5:69:ec:81:9c:4f:64:b7:73:54:
2b:bd:d1:a5:ad:b0:21:9c:32:c8:e1:56:9d:f9:52:
9c:31:8c:33:9a:05:e5:ef:cc:dd:29:1b:2b:91:92:
d5:19:b2:7f:c3:69:13:25:27:e4:72:af:ca:59:af:
b0:15:71:9a:c4:c7:d9:8d:a8:77:bc:a1:e0:01:c2:
a4:ef:db:8d:01:21:43:49:c7:ae:e2:42:ad:26:cc:
ca:9b:08:0e:16:f1:7c:ac:33:c7:5c:33:d1:a4:02:
da:51:59:6e:60:4a:21:e1:40:a2:86:50:36:22:13:
f5:b8:47:31:0a:f1:ac:ae:15:5d:12:bd:26:e4:18:
10:83:79:69:ab:13:ef:c1:14:ab:54:f7:51:6e:1d:
5d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:61:5B:25:C6:7A:2F:CC:E2:0C:16:27:B6:A1:6C:BD:57:1A:7C:A9
X509v3 Authority Key Identifier:
keyid:6B:9A:74:05:A6:08:5C:9A:BA:CF:08:3D:C9:0A:49:5F:CD:26:8C:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5p0BaYIXJq6zwg9yQpJX80mjPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/6457d9-b4db-4b2d-919c-2e1ee9471eec/1/a5p0BaYIXJq6zwg9yQpJX80mjPg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/6457d9-b4db-4b2d-919c-2e1ee9471eec/1/a5p0BaYIXJq6zwg9yQpJX80mjPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:02:9d:72:96:5d:cf:b0:51:9f:9c:f0:fd:8e:d5:28:94:30:
5c:58:e0:fd:65:96:3d:5f:6c:24:b2:23:39:a5:1d:c1:5f:c0:
31:d1:8d:d1:d4:04:6d:b0:f2:92:15:e8:de:b0:85:15:1a:2f:
d2:98:ac:cf:49:4d:6f:16:02:eb:22:3c:5e:06:02:a2:82:a6:
a6:4b:9c:69:22:fd:c7:18:7f:a2:02:0a:80:05:d7:43:7f:df:
96:80:bb:24:dc:93:24:a2:84:0c:ea:82:0b:b6:5a:11:8f:a2:
a4:95:d4:60:4b:84:8f:fc:2f:59:3a:5a:6f:52:02:2d:eb:45:
59:75:a5:98:fd:75:cc:ec:ad:0d:8d:35:a4:c4:75:6a:6f:05:
3d:22:d0:07:98:a3:e7:16:40:c8:25:72:97:36:35:29:1c:8b:
5d:fe:37:ea:84:d5:83:e2:3e:fa:a4:18:2c:66:bd:6f:14:7a:
2c:8f:ef:b3:8e:4a:50:0c:8e:c3:85:b3:06:1b:a9:f6:1a:1e:
f4:4e:9a:c5:0f:72:dd:23:5f:d3:43:38:3d:8c:38:ba:5c:b8:
52:ac:15:df:27:14:76:83:70:36:a4:70:c3:b8:b2:45:3b:ac:
92:86:23:c2:e8:6f:e7:8c:ba:5f:3d:ee:3a:ff:ca:e9:68:ec:
2b:0b:e4:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 05:49:51 2025 by rpki-client