Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/2da1ec-aa4b-4d94-98cb-a776e4a63e6f/1/r6URZapQNqzaEf7gAg40_MQ57eY.mft
File: r6URZapQNqzaEf7gAg40_MQ57eY.mft (raw, json)
Hash identifier: F2YVyg/aRPsWQr3XLYXAKXBCE1cin+q+YfUxSfThx9s=
Subject key identifier: AB:20:DC:3D:16:0F:9C:88:A3:6E:89:4F:A3:BA:D1:D1:FC:72:20:44
Authority key identifier: AF:A5:11:65:AA:50:36:AC:DA:11:FE:E0:02:0E:34:FC:C4:39:ED:E6
Certificate issuer: /CN=afa51165aa5036acda11fee0020e34fcc439ede6
Certificate serial: 019A1797C52A452A2A6891B8AAA3BED671C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r6URZapQNqzaEf7gAg40_MQ57eY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/2da1ec-aa4b-4d94-98cb-a776e4a63e6f/1/r6URZapQNqzaEf7gAg40_MQ57eY.mft
Manifest number: 16F6
Signing time: Fri 24 Oct 2025 19:00:13 +0000
Manifest this update: Fri 24 Oct 2025 19:00:13 +0000
Manifest next update: Sat 25 Oct 2025 19:00:13 +0000
Files and hashes: 1: JXD4YyeKM2DbSEsSMseYjT0o7Ww.roa (hash: YAf2/29DjA3Na+Hgt1fQsq3jSQYLqFSkMb1fHAx4RUM=)
2: r6URZapQNqzaEf7gAg40_MQ57eY.crl (hash: /ZumKbcAzOmmdRQee9FPfXJtFc+8ENZWrY52z/7Gans=)
3: rJjHJUl0uD_7dHjW4bG3nCxQ5iY.roa (hash: nazoboMf2p4XX7ExK1xqcEEDrXTJmHzU9uxX+kIOchk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/2da1ec-aa4b-4d94-98cb-a776e4a63e6f/1/r6URZapQNqzaEf7gAg40_MQ57eY.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/2da1ec-aa4b-4d94-98cb-a776e4a63e6f/1/r6URZapQNqzaEf7gAg40_MQ57eY.mft
rsync://rpki.ripe.net/repository/DEFAULT/r6URZapQNqzaEf7gAg40_MQ57eY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Oct 2025 17:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:17:97:c5:2a:45:2a:2a:68:91:b8:aa:a3:be:d6:71:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afa51165aa5036acda11fee0020e34fcc439ede6
Validity
Not Before: Oct 24 19:00:13 2025 GMT
Not After : Oct 25 19:00:13 2025 GMT
Subject: CN=ab20dc3d160f9c88a36e894fa3bad1d1fc722044
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b0:f4:95:23:21:fe:a5:c5:b9:b6:26:e3:b8:
6c:1b:57:ae:9e:ba:2e:77:2e:84:1c:a4:b7:54:5c:
00:d7:15:78:fb:67:54:b2:67:ef:96:13:c2:00:b0:
23:c5:ac:74:90:c2:6a:e8:20:85:d4:0f:9d:43:48:
23:70:b8:d8:8d:98:72:3c:9a:d5:67:71:bc:09:07:
b4:07:4c:45:2a:cb:91:53:f4:83:a7:c9:9b:02:53:
0a:b7:31:97:54:e9:fc:a5:0f:08:b2:c7:14:12:ba:
a1:17:9b:f5:d4:14:40:0e:af:71:d7:8d:b6:42:4d:
df:8e:c3:82:e9:85:00:4a:63:0c:a3:92:02:e0:2d:
36:46:32:ca:3d:0a:cd:83:09:df:46:00:96:e9:2a:
0e:f9:fb:90:17:bc:88:f0:4b:02:cb:3b:69:6c:bc:
6b:0b:1f:fc:27:1c:f1:88:97:c7:f5:a6:93:0b:09:
80:d3:8a:08:fb:57:22:4e:97:33:a8:14:9c:1d:ae:
4e:2e:a8:5e:c8:35:31:d8:31:9e:f0:d9:3e:62:c6:
56:b7:93:43:0c:31:fb:27:07:2d:14:b4:7f:16:92:
52:29:7e:c7:b7:17:71:80:4d:ea:6a:81:18:13:3f:
81:ac:cc:85:72:ba:11:6c:50:57:e7:a5:6f:00:cb:
cb:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:20:DC:3D:16:0F:9C:88:A3:6E:89:4F:A3:BA:D1:D1:FC:72:20:44
X509v3 Authority Key Identifier:
keyid:AF:A5:11:65:AA:50:36:AC:DA:11:FE:E0:02:0E:34:FC:C4:39:ED:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r6URZapQNqzaEf7gAg40_MQ57eY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/2da1ec-aa4b-4d94-98cb-a776e4a63e6f/1/r6URZapQNqzaEf7gAg40_MQ57eY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/2da1ec-aa4b-4d94-98cb-a776e4a63e6f/1/r6URZapQNqzaEf7gAg40_MQ57eY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:39:f7:2b:84:82:f6:cf:56:ea:7d:aa:04:f9:3a:2c:f5:36:
53:c6:1d:3b:6a:1c:8b:e3:78:bb:a4:be:91:9a:3d:83:d2:06:
ba:ed:6c:86:d2:1a:d9:98:5e:33:7f:d4:1e:c0:f2:d9:05:2c:
4d:fb:e4:11:9d:ea:95:02:14:57:1e:65:b8:4c:f5:26:4b:f8:
08:62:c0:0b:a4:ce:af:36:99:88:49:2f:fd:d6:99:f2:1b:c1:
73:d4:c7:62:09:1b:86:7e:70:0f:58:d6:fe:6f:c7:53:79:13:
20:83:de:bd:85:c9:de:b8:f9:de:25:38:cf:c9:b4:5a:6b:55:
d7:dd:9b:6f:20:de:04:8a:f4:8d:a1:bb:2f:68:1b:e5:7b:5b:
e3:c2:2c:4f:3c:b3:ef:b7:6a:8a:ea:69:2c:98:19:b3:f1:78:
22:bc:0e:d1:be:9e:91:e8:9f:dc:5d:d9:c6:5d:4e:93:b0:f0:
ca:bd:e9:0d:f9:c9:f3:49:c0:9f:c0:6a:0b:d1:2c:17:5e:63:
7b:dc:e2:03:27:54:79:b3:8b:b6:7e:1e:85:35:f0:5c:55:1b:
2e:8b:56:44:2c:dc:a6:73:b0:dc:0e:a1:8c:d7:01:9a:c2:0e:
e9:91:1e:57:db:82:b4:6c:bf:e4:07:8c:26:fe:5f:be:5f:19:
6b:fc:e5:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 03:03:27 2025 by rpki-client