Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/547a7f-4baf-4b7e-afb8-466013435079/1/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.mft
File: a7lc_C0Yf0BTDvCDu9EMiMSVbB0.mft (raw, json)
Hash identifier: JrDOBK+GclNtQSepMqFgi2F4p1AZBAqO21N1kS0xgig=
Subject key identifier: 19:AE:80:8F:6F:2B:0F:14:42:C6:D3:2C:60:CC:DF:41:29:6F:02:CE
Authority key identifier: 6B:B9:5C:FC:2D:18:7F:40:53:0E:F0:83:BB:D1:0C:88:C4:95:6C:1D
Certificate issuer: /CN=6bb95cfc2d187f40530ef083bbd10c88c4956c1d
Certificate serial: 0199C4FBF8E23ADEE1801E56EF117E176664
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/547a7f-4baf-4b7e-afb8-466013435079/1/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.mft
Manifest number: 16C8
Signing time: Wed 08 Oct 2025 18:01:11 +0000
Manifest this update: Wed 08 Oct 2025 18:01:11 +0000
Manifest next update: Thu 09 Oct 2025 18:01:11 +0000
Files and hashes: 1: XlEutT53Peaefw9BWBX8iOxdk0o.roa (hash: 3n8+7Yj6dfwFUOHjwioNJb1p8k9ewBTtziMwK34FcCQ=)
2: _GNQSp_bGjydsnVDpRHY8XNNqhs.roa (hash: pDYhj1QM7SQ6UTwVMyRGZcrJ6AnEuDllBqLjotU+jDg=)
3: a7lc_C0Yf0BTDvCDu9EMiMSVbB0.crl (hash: ZutkwenFd6YQNzigZZckj/8qukjO7+QSsC7vBL2PR20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/547a7f-4baf-4b7e-afb8-466013435079/1/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/547a7f-4baf-4b7e-afb8-466013435079/1/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 16:33:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c4:fb:f8:e2:3a:de:e1:80:1e:56:ef:11:7e:17:66:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bb95cfc2d187f40530ef083bbd10c88c4956c1d
Validity
Not Before: Oct 8 18:01:11 2025 GMT
Not After : Oct 9 18:01:11 2025 GMT
Subject: CN=19ae808f6f2b0f1442c6d32c60ccdf41296f02ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:63:14:0c:67:77:58:16:0b:18:04:4a:76:d3:
7b:de:4f:ce:15:5c:cf:13:21:50:c6:19:05:cc:24:
74:95:84:08:2c:86:5d:4d:16:19:5b:86:22:14:b4:
a6:c5:21:94:e4:22:7f:0f:95:59:5f:72:93:42:40:
bb:fd:aa:2c:9b:4e:55:4e:30:e9:06:f0:a2:7a:f0:
18:2f:85:19:26:70:92:6b:de:83:a8:70:40:cd:98:
d1:3f:c6:50:53:09:cd:dd:e7:b6:32:d8:7d:c4:86:
0d:55:fe:b4:01:30:16:94:3e:a4:5d:78:18:34:68:
5c:65:cd:9b:a5:ef:cd:bd:65:c3:6b:a9:78:46:61:
d0:02:b9:b3:38:34:0c:1f:2c:7d:7e:c1:1f:ab:53:
8b:4a:55:50:25:ec:ce:df:ac:38:6c:96:80:75:54:
68:65:c5:81:76:c2:e3:10:46:07:64:5e:d2:e2:27:
55:2f:7e:4c:2c:36:f2:38:42:3d:b1:75:82:e9:b7:
d3:bd:bd:26:98:49:e4:9b:50:c2:bc:88:9b:01:19:
15:95:62:0a:58:73:17:b9:6c:f6:0f:fe:d4:4b:ce:
d9:8c:ad:2e:08:9e:cd:a8:4f:3a:f6:8d:e0:0a:99:
ef:49:6d:01:d9:88:60:d7:8c:49:dd:4d:88:21:66:
cb:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:AE:80:8F:6F:2B:0F:14:42:C6:D3:2C:60:CC:DF:41:29:6F:02:CE
X509v3 Authority Key Identifier:
keyid:6B:B9:5C:FC:2D:18:7F:40:53:0E:F0:83:BB:D1:0C:88:C4:95:6C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/547a7f-4baf-4b7e-afb8-466013435079/1/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/547a7f-4baf-4b7e-afb8-466013435079/1/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:d9:c3:48:ab:58:46:66:cc:3a:e3:b3:b6:9e:63:c9:5b:4f:
27:dd:68:76:b2:12:f4:9e:5f:e4:ac:24:ad:21:13:46:d0:28:
29:76:71:2a:c1:1c:13:34:d6:84:47:4a:85:16:dd:c7:d0:23:
1b:53:fc:1f:4d:31:91:d4:3a:a6:db:96:ea:3d:96:4b:ba:0d:
0c:9f:30:75:b1:c1:df:cb:6f:d1:c7:df:a9:63:e3:09:ea:03:
aa:c0:16:c7:e7:a8:15:42:27:e8:d1:9d:d0:89:ce:ec:0d:5f:
a7:93:4a:8c:72:42:de:cb:c7:6e:d0:f4:51:d7:dc:0b:f1:b1:
c0:c5:ae:57:e1:c4:b4:0c:3c:22:61:9f:c3:69:71:e4:3b:32:
ec:6b:be:75:3f:1a:89:79:09:e6:e4:c8:4a:52:81:e3:ff:69:
db:b1:e7:c1:7f:b7:74:86:0e:30:e1:b2:9a:6b:d1:72:32:ba:
cb:94:b9:a5:fd:c3:c7:57:d4:10:b2:c7:07:73:ea:61:3f:dc:
6c:8a:c1:91:f6:45:58:b7:67:f4:3a:7d:b9:af:b4:57:71:c5:
03:8a:e1:79:2c:25:3f:09:96:e2:7a:f2:cc:7b:80:b5:aa:dd:
9d:42:74:f9:b7:bf:b8:c1:df:da:b2:b0:27:a5:f4:b8:93:5b:
7a:6e:f8:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 01:19:47 2025 by rpki-client