Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.mft
File: bQaeGeEsEEAE6LS3X4p3ibfhE5Y.mft (raw, json)
Hash identifier: x263Sg/Uk5U1JRNPztryEUCfe1ZXDp2b/W7hARY5JH4=
Subject key identifier: CD:E1:6C:B7:DE:1D:98:BF:1C:74:FE:BD:80:6B:FB:68:99:D5:20:CD
Authority key identifier: 6D:06:9E:19:E1:2C:10:40:04:E8:B4:B7:5F:8A:77:89:B7:E1:13:96
Certificate issuer: /CN=6d069e19e12c104004e8b4b75f8a7789b7e11396
Certificate serial: 01982B5B5C25C090ADA1DB69380ABD5D4BE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.mft
Manifest number: 1604
Signing time: Mon 21 Jul 2025 05:01:04 +0000
Manifest this update: Mon 21 Jul 2025 05:01:04 +0000
Manifest next update: Tue 22 Jul 2025 05:01:04 +0000
Files and hashes: 1: 0J1BscA7ehqbG9hZ9JbrawPNkVs.roa (hash: /iRggTw1aJBwhVUj4BhUfXwzpsGpq6zWBqZNLYzvF+Y=)
2: 1-azSbIQFoiVO3W2ZCWv9_QAR8i8.roa (hash: FijndDQD15Q5KHsLR44grscBnJeuQXrV0d05uzJTvBY=)
3: AVQz8sHW23ixrQTRE03QG3YvTuU.roa (hash: SrjP+GRC/1VbpeKx6pNwtWpLK3oTGv/QT5J47D5iwOs=)
4: QjaJHSSDpfkaW3VbsOBmx9Mwnzo.roa (hash: lX+/PQmgzRGcO03gKK10JR9EWKqWcF8NtT9etzyJ8ik=)
5: RXltaGeVSLLvEtVhuI8kryyqAEY.roa (hash: Sq4O0eAJlnMKv+pxipVDsrh+Q6PzS4fGsNzZeo0CJmQ=)
6: ZRpAC-jGxlGBX0TpAicAbhbJP7s.roa (hash: AYh7o4pPNeSE82/KXuBs2qGeurfhiF1NFTbsPaoM8YM=)
7: bO4Y5DyMm5PVD_pzuU-0jz4Eg9I.roa (hash: 5jBL9u4QzLNJlmw7QwIFNZbn9Ii2njf8Ib+9j7ROPhw=)
8: bQaeGeEsEEAE6LS3X4p3ibfhE5Y.crl (hash: fSHwvpWBq6Tm5Mx/UMkhAYhhJIqvfkHxt3ikvC7pMjg=)
9: vvWlGNuFGuXkBItTH9Zxu-JLKW8.roa (hash: 1uFZJRbOaGcxjskFgOQZk9WcrerBZqMlxk6lZA11nCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Jul 2025 05:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:2b:5b:5c:25:c0:90:ad:a1:db:69:38:0a:bd:5d:4b:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d069e19e12c104004e8b4b75f8a7789b7e11396
Validity
Not Before: Jul 21 05:01:04 2025 GMT
Not After : Jul 22 05:01:04 2025 GMT
Subject: CN=cde16cb7de1d98bf1c74febd806bfb6899d520cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a5:0e:f3:d4:78:58:15:24:2d:da:bf:34:bf:
3c:6e:48:64:57:1c:44:f0:1e:5d:15:eb:c7:2d:d4:
20:92:6f:2e:06:ab:63:c9:0f:31:4d:4b:7d:ab:47:
95:fe:df:c9:ff:69:69:55:a1:02:12:d3:82:08:e5:
7e:e1:58:0e:34:e7:39:cd:28:07:4b:3f:c8:56:5a:
a3:cc:65:6a:f2:91:fb:37:71:fa:79:81:5b:78:df:
9b:78:83:15:91:4d:da:50:1c:df:c8:35:f9:a2:e4:
67:20:2a:6a:ff:a2:7d:96:5a:95:44:9c:40:5b:2e:
60:73:f7:bb:43:92:e9:ad:83:9d:51:4c:1f:61:da:
b6:e1:b6:a9:4b:08:d0:af:59:4c:18:9e:36:15:fc:
83:f5:e8:ca:e7:34:c8:82:e1:17:a2:10:33:f4:67:
26:be:c5:23:c4:37:56:21:21:e2:d3:da:f3:5d:5b:
df:0c:8a:e2:7e:bd:3f:87:66:ac:a3:44:32:c4:5d:
97:73:fc:ac:d8:8f:66:4b:d0:fb:dc:9b:3d:1d:c5:
c4:b5:0a:ed:b7:7a:5c:13:3f:99:8a:1f:98:1d:21:
1e:1f:e2:91:51:e6:04:d7:d4:23:c4:bd:8e:a6:4d:
c1:9b:3b:a2:84:79:15:7a:35:5a:9c:bc:3c:cd:be:
37:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:E1:6C:B7:DE:1D:98:BF:1C:74:FE:BD:80:6B:FB:68:99:D5:20:CD
X509v3 Authority Key Identifier:
keyid:6D:06:9E:19:E1:2C:10:40:04:E8:B4:B7:5F:8A:77:89:B7:E1:13:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:1c:c7:7c:a4:00:16:1c:a9:a9:ad:d4:ac:7a:58:2f:8f:70:
00:b6:de:a7:04:60:cc:37:db:e7:1e:80:d5:4b:bb:0d:f9:ee:
14:fb:c4:66:2c:66:c8:eb:d8:fd:cd:c0:e4:76:6e:1f:a0:72:
bb:c6:5d:ff:2a:5d:4e:92:69:79:3b:ae:17:dc:89:15:85:39:
34:6a:e8:c4:ca:8b:b0:0e:c2:3d:62:da:c2:1e:32:15:8f:94:
60:01:fb:fb:1f:09:d2:98:fe:1c:fd:4b:23:8d:a5:4a:3f:cf:
5f:c1:4d:2c:f2:69:d3:8f:d9:e7:98:ea:4a:19:64:cb:82:99:
d1:e9:79:f1:63:67:5d:16:99:c7:8f:d2:40:ee:a0:68:70:6c:
34:f4:4a:fa:b3:3d:2c:a0:2c:45:8f:11:3a:8f:f4:ed:71:af:
d4:8d:6e:af:a7:e2:a2:c2:64:04:b4:3e:5b:0e:e1:56:89:fe:
e9:43:44:e5:7e:83:00:01:2c:ec:0d:1d:fe:b6:59:0c:53:c2:
73:e2:28:15:9d:cd:04:8d:25:5b:5c:02:69:46:be:84:a1:88:
64:d0:98:c0:1b:df:66:01:4e:54:4e:e6:39:d6:12:1d:77:23:
73:36:8e:30:f1:ac:99:e6:00:dc:df:40:1a:d3:1b:8f:4c:eb:
e8:ff:1f:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 12:34:19 2025 by rpki-client