Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/3a72ba-1dca-40d9-a8ad-4ce6231f2ad9/1/bq5LsFE5gMh_m6xZKVLAlXd6wS4.mft
File: bq5LsFE5gMh_m6xZKVLAlXd6wS4.mft (raw, json)
Hash identifier: nNyheq7msJddyHlFcY8q2Qf0hOdX7hst1ZwDRMDfCjk=
Subject key identifier: 3A:9D:DA:49:F1:F6:8E:59:9A:DB:F8:51:0E:B2:DE:5D:23:08:D0:5B
Authority key identifier: 6E:AE:4B:B0:51:39:80:C8:7F:9B:AC:59:29:52:C0:95:77:7A:C1:2E
Certificate issuer: /CN=6eae4bb0513980c87f9bac592952c095777ac12e
Certificate serial: 019A209C8BCC03A0CFC571E586A41EBFB816
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bq5LsFE5gMh_m6xZKVLAlXd6wS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/3a72ba-1dca-40d9-a8ad-4ce6231f2ad9/1/bq5LsFE5gMh_m6xZKVLAlXd6wS4.mft
Manifest number: 0350
Signing time: Sun 26 Oct 2025 13:02:01 +0000
Manifest this update: Sun 26 Oct 2025 13:02:01 +0000
Manifest next update: Mon 27 Oct 2025 13:02:01 +0000
Files and hashes: 1: C_vZrzZdhy-uejOZ6_GWZTSm_n0.roa (hash: 79ZNhw6Fw3tlIyCfv3zLmQ4ilyJAmRJY2DfEyitGouQ=)
2: bq5LsFE5gMh_m6xZKVLAlXd6wS4.crl (hash: NAX+5RCBsRbjhnAOxfEw86SftQZJQ58/EF19iWkP9G0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/3a72ba-1dca-40d9-a8ad-4ce6231f2ad9/1/bq5LsFE5gMh_m6xZKVLAlXd6wS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/3a72ba-1dca-40d9-a8ad-4ce6231f2ad9/1/bq5LsFE5gMh_m6xZKVLAlXd6wS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/bq5LsFE5gMh_m6xZKVLAlXd6wS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:20:9c:8b:cc:03:a0:cf:c5:71:e5:86:a4:1e:bf:b8:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eae4bb0513980c87f9bac592952c095777ac12e
Validity
Not Before: Oct 26 13:02:01 2025 GMT
Not After : Oct 27 13:02:01 2025 GMT
Subject: CN=3a9dda49f1f68e599adbf8510eb2de5d2308d05b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:bf:8b:f3:76:61:8a:45:f8:47:bf:1c:56:90:
23:45:71:55:a2:52:81:70:c4:33:d4:6c:11:44:a0:
ea:1a:8a:56:aa:8d:b8:04:5c:1c:ec:2d:6a:be:54:
3d:d5:09:66:4b:d4:cf:47:7a:0c:8c:0c:2f:07:60:
20:fd:55:bf:ec:11:71:82:f8:39:f9:fd:32:de:8f:
59:68:aa:6f:b4:6d:f5:a2:62:8a:77:19:90:06:e5:
ac:dc:23:03:c8:30:8e:4d:90:7f:1f:8b:b6:f0:a2:
c6:f9:f2:de:cb:f3:0f:8c:4d:83:c4:38:e7:5d:9c:
f3:7e:fb:4d:91:06:1a:f3:f6:ad:84:e9:c5:e1:7c:
a2:3c:b3:4b:8f:a8:d6:ae:10:6d:f1:60:d8:e9:f4:
b4:b2:e0:eb:7e:ac:43:7a:cb:c3:c6:b7:61:19:0a:
42:fd:b8:25:1b:67:8c:06:60:e7:b0:c5:aa:dc:6a:
85:92:b3:18:ed:f0:31:9f:0b:2b:af:6f:8f:c6:c8:
0a:4a:0d:38:22:a5:5d:12:90:bf:c2:bc:30:c3:d3:
2d:84:27:0b:79:dd:dc:19:db:c4:3c:01:60:53:74:
a0:78:69:61:fc:76:b7:54:ea:28:6e:68:c4:b4:06:
d8:1d:8b:ac:51:03:37:1c:f2:25:09:e5:a5:e8:cd:
ed:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:9D:DA:49:F1:F6:8E:59:9A:DB:F8:51:0E:B2:DE:5D:23:08:D0:5B
X509v3 Authority Key Identifier:
keyid:6E:AE:4B:B0:51:39:80:C8:7F:9B:AC:59:29:52:C0:95:77:7A:C1:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bq5LsFE5gMh_m6xZKVLAlXd6wS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3a72ba-1dca-40d9-a8ad-4ce6231f2ad9/1/bq5LsFE5gMh_m6xZKVLAlXd6wS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3a72ba-1dca-40d9-a8ad-4ce6231f2ad9/1/bq5LsFE5gMh_m6xZKVLAlXd6wS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:0b:5d:c6:ca:f6:86:20:44:54:ef:ed:2d:b2:c3:fe:a8:05:
30:67:8c:5b:03:5f:9e:1e:63:45:d5:d3:11:aa:70:af:84:cf:
78:d7:96:91:68:23:15:df:ee:7b:23:29:c8:aa:2d:08:28:26:
70:c8:7c:ef:1f:92:73:71:3e:d3:b6:c5:89:e6:25:4f:9e:dd:
94:72:5a:9e:cb:3c:f2:96:c6:63:ad:5b:78:48:0c:50:f9:7c:
83:b9:cb:21:41:7e:b7:89:34:6c:65:ff:a4:27:5d:6e:17:aa:
5e:64:1d:4f:99:40:03:bc:a3:1d:4e:56:9d:e3:b9:44:83:6f:
ac:4e:55:ff:30:19:69:03:75:ab:b1:b5:ad:0f:c2:b5:99:03:
23:e1:be:ee:3a:f2:ac:ad:14:98:fc:58:f1:3f:c5:61:2e:67:
16:b5:f4:5e:91:60:3e:4a:e2:8d:f6:c4:bc:c2:be:cf:93:12:
d4:68:95:67:3b:2d:08:a8:78:e8:53:5d:06:e6:30:b9:41:7d:
89:df:03:7b:c6:7d:14:e1:02:29:81:2f:2e:62:1f:73:8f:a6:
60:91:ac:a3:3b:84:a8:7e:a5:d3:c6:1e:8b:8d:f1:eb:d0:e3:
18:e6:8f:1b:6b:a3:33:92:5d:69:37:aa:aa:25:8d:d8:42:bb:
44:1e:b1:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 20:37:39 2025 by rpki-client