Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/060e1e-328a-4818-bfd1-4fa3481a47e1/1/bq8W3MVQz4Hs8PgZUheaBIEwh3o.mft
File: bq8W3MVQz4Hs8PgZUheaBIEwh3o.mft (raw, json)
Hash identifier: 22ISRAzgKj6I5kd4Y0JtY1tAyddnfxJqzX8YsUfeREA=
Subject key identifier: ED:C2:C0:CD:8D:0F:A1:6C:8E:52:C9:9E:C1:7A:82:7A:42:F5:B6:4C
Authority key identifier: 6E:AF:16:DC:C5:50:CF:81:EC:F0:F8:19:52:17:9A:04:81:30:87:7A
Certificate issuer: /CN=6eaf16dcc550cf81ecf0f81952179a048130877a
Certificate serial: 019A2AB13FDCF71C461D547685BB3496E5E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bq8W3MVQz4Hs8PgZUheaBIEwh3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/060e1e-328a-4818-bfd1-4fa3481a47e1/1/bq8W3MVQz4Hs8PgZUheaBIEwh3o.mft
Manifest number: 0ABF
Signing time: Tue 28 Oct 2025 12:00:50 +0000
Manifest this update: Tue 28 Oct 2025 12:00:50 +0000
Manifest next update: Wed 29 Oct 2025 12:00:50 +0000
Files and hashes: 1: bq8W3MVQz4Hs8PgZUheaBIEwh3o.crl (hash: Z3nRn6eaNeH/GRGpMKCYzotW8cGm4cv4jJhZoDhhF9I=)
2: zFZRDLYL0fz0Tr9KOTbvt5Gi2T8.roa (hash: RoOpJgCK2e2T8+E3U8CF6Ztsr6QUn+lDcl3mIBxfJ0Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/060e1e-328a-4818-bfd1-4fa3481a47e1/1/bq8W3MVQz4Hs8PgZUheaBIEwh3o.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/060e1e-328a-4818-bfd1-4fa3481a47e1/1/bq8W3MVQz4Hs8PgZUheaBIEwh3o.mft
rsync://rpki.ripe.net/repository/DEFAULT/bq8W3MVQz4Hs8PgZUheaBIEwh3o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2a:b1:3f:dc:f7:1c:46:1d:54:76:85:bb:34:96:e5:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eaf16dcc550cf81ecf0f81952179a048130877a
Validity
Not Before: Oct 28 12:00:50 2025 GMT
Not After : Oct 29 12:00:50 2025 GMT
Subject: CN=edc2c0cd8d0fa16c8e52c99ec17a827a42f5b64c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:5a:bf:aa:e7:56:cf:84:c3:91:74:b1:7f:7b:
81:ac:79:49:c2:2e:2a:b4:db:07:ea:f3:cc:ec:43:
0e:1b:bf:5a:6e:c0:25:76:f9:c0:2e:b1:b3:d9:9c:
06:51:1c:eb:3d:5a:4e:52:13:6b:b5:53:fb:0a:78:
bf:51:fd:7f:a6:d0:a9:2b:55:e8:5c:ab:6f:d1:87:
0b:e7:b3:a4:99:4d:5c:a5:08:84:dc:16:f4:3e:da:
8e:a0:f3:f6:3a:ee:b0:ff:ea:43:ef:82:cd:6e:8d:
31:8d:ea:47:a9:df:09:ff:79:cc:d4:c6:e0:e7:58:
43:8c:5d:45:39:e9:09:b4:92:85:fa:ac:f5:3f:24:
00:6b:72:7f:c8:a3:96:b2:5e:ae:ca:0d:87:92:b2:
51:7e:a7:47:cb:4f:ed:00:6a:66:1d:99:2c:87:cc:
de:44:a8:60:3f:86:35:9f:fd:16:95:6e:8b:18:02:
ab:bd:86:1b:39:6e:d2:9e:4f:5d:d4:8e:2e:8a:aa:
ea:ac:dd:68:b9:39:da:d9:3e:c6:91:04:7a:c1:ed:
18:b8:45:e0:7d:6e:d6:3c:d2:33:62:6e:42:42:6c:
05:0e:4d:06:d8:6a:37:94:84:67:77:83:68:7b:0b:
f8:5e:ab:53:47:79:84:d1:b7:7a:0a:ce:d7:9d:48:
b7:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:C2:C0:CD:8D:0F:A1:6C:8E:52:C9:9E:C1:7A:82:7A:42:F5:B6:4C
X509v3 Authority Key Identifier:
keyid:6E:AF:16:DC:C5:50:CF:81:EC:F0:F8:19:52:17:9A:04:81:30:87:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bq8W3MVQz4Hs8PgZUheaBIEwh3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/060e1e-328a-4818-bfd1-4fa3481a47e1/1/bq8W3MVQz4Hs8PgZUheaBIEwh3o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/060e1e-328a-4818-bfd1-4fa3481a47e1/1/bq8W3MVQz4Hs8PgZUheaBIEwh3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:fa:75:2b:5b:b0:42:3e:18:dd:2f:26:4b:bb:f4:39:10:2e:
9a:96:cd:b8:b7:49:a6:6f:f9:f1:3a:2a:8c:25:21:41:4f:0e:
46:0c:52:5b:30:1a:fb:91:1e:c9:69:bc:07:2f:e8:4d:c4:96:
76:3e:08:1d:97:a3:93:d1:20:5f:c7:07:d4:32:cf:22:3c:b0:
67:ea:35:2c:82:0b:22:8b:a7:d9:83:85:c0:d1:4b:b7:75:3d:
65:5a:5d:a5:44:22:d9:3b:89:b7:6d:96:78:8f:14:53:cd:58:
2e:7e:ab:4f:b2:2d:ac:52:81:a1:e9:81:ea:79:a8:a5:c9:ac:
bd:5a:64:2c:61:8a:20:cb:2f:03:94:c3:03:06:a9:33:83:2b:
16:12:84:db:57:45:28:51:da:ad:a9:e6:2c:9a:c1:f3:c6:f4:
73:23:b8:c7:26:e0:b0:e5:2e:c5:ca:b7:fc:ea:9c:70:9c:9e:
cb:fb:79:e0:74:10:31:27:86:25:d7:e2:65:91:b3:4d:5f:61:
ab:83:96:aa:a6:d0:f9:d8:e3:9e:08:46:1f:13:8a:8e:7e:dc:
8f:30:a8:2f:d6:e2:ce:e3:26:ad:8a:42:dc:58:c7:05:71:36:
12:e4:07:e2:b9:18:0f:f2:90:ac:a1:bc:f9:dc:eb:70:99:01:
8e:9c:6d:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 13:08:05 2025 by rpki-client