Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/64a392-372e-48a6-a0e2-f5ad167d8494/1/bAqWFKxOEOei4qW8EvhiMGTInvk.mft
File: bAqWFKxOEOei4qW8EvhiMGTInvk.mft (raw, json)
Hash identifier: v5BjHoESsFcPd5BunBOZGY56k67qQQ4vaxytoWUbR9k=
Subject key identifier: 81:73:AB:3C:10:42:77:69:10:94:2D:3A:E4:98:18:1C:01:C1:BE:A5
Authority key identifier: 6C:0A:96:14:AC:4E:10:E7:A2:E2:A5:BC:12:F8:62:30:64:C8:9E:F9
Certificate issuer: /CN=6c0a9614ac4e10e7a2e2a5bc12f8623064c89ef9
Certificate serial: 019A7112CBDAB21331BD50BE7C0ED5EDCB7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bAqWFKxOEOei4qW8EvhiMGTInvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/64a392-372e-48a6-a0e2-f5ad167d8494/1/bAqWFKxOEOei4qW8EvhiMGTInvk.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 04:00:48 +0000
Manifest this update: Tue 11 Nov 2025 04:00:48 +0000
Manifest next update: Wed 12 Nov 2025 04:00:48 +0000
Files and hashes: 1: F67gDfZc4Jx2LCZVEE2FihPJzHw.roa (hash: yPyUtL/skPgjKLNjvoKJs7SdqhdnCeGN7LFhVgvBzCk=)
2: bAqWFKxOEOei4qW8EvhiMGTInvk.crl (hash: h0cWmRw/JXL3z+CBl2bKTu7YVpqa+zb0WLONHgk0qV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/64a392-372e-48a6-a0e2-f5ad167d8494/1/bAqWFKxOEOei4qW8EvhiMGTInvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/64a392-372e-48a6-a0e2-f5ad167d8494/1/bAqWFKxOEOei4qW8EvhiMGTInvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/bAqWFKxOEOei4qW8EvhiMGTInvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:cb:da:b2:13:31:bd:50:be:7c:0e:d5:ed:cb:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c0a9614ac4e10e7a2e2a5bc12f8623064c89ef9
Validity
Not Before: Nov 11 04:00:48 2025 GMT
Not After : Nov 12 04:00:48 2025 GMT
Subject: CN=8173ab3c1042776910942d3ae498181c01c1bea5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:39:79:35:9c:a8:85:ec:57:ce:52:f0:f5:15:
97:27:48:78:96:d1:f2:89:82:18:ab:52:66:a8:d6:
13:91:03:ae:27:8c:55:d4:f7:85:53:99:eb:f1:b9:
c6:71:e7:27:78:3f:62:75:6e:8e:67:2c:0d:c4:02:
97:7b:37:72:61:b2:02:2f:91:57:79:15:11:f7:d7:
dd:28:da:5b:f0:16:39:e0:d8:c9:97:97:f3:6c:9d:
72:6b:ca:85:4b:9c:65:3e:0f:38:78:cd:ae:cd:b8:
b0:71:51:e4:6f:d0:1f:02:35:01:d9:de:ab:c5:4c:
77:dc:f7:8b:cd:ed:23:95:9f:2e:3f:8f:99:16:65:
c6:81:2b:fe:a9:74:a4:0a:f5:a5:45:b2:9e:55:40:
fc:74:7e:f8:31:c5:7e:92:bd:a9:46:dd:8a:e2:28:
bf:7b:67:84:91:44:f1:34:33:ab:72:62:8a:9c:1c:
06:6c:1d:99:2d:26:b0:82:14:d2:c6:23:52:a5:5f:
35:f3:41:e3:a1:0a:21:b4:de:09:de:ed:9c:6c:e3:
d5:29:b2:bf:de:a0:84:47:04:52:44:7e:b0:c7:c2:
e2:ec:69:b6:6a:f6:2c:4f:fd:37:9e:11:44:07:5a:
28:24:94:ca:78:36:10:8b:e5:82:32:79:26:b2:55:
7d:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:73:AB:3C:10:42:77:69:10:94:2D:3A:E4:98:18:1C:01:C1:BE:A5
X509v3 Authority Key Identifier:
keyid:6C:0A:96:14:AC:4E:10:E7:A2:E2:A5:BC:12:F8:62:30:64:C8:9E:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bAqWFKxOEOei4qW8EvhiMGTInvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/64a392-372e-48a6-a0e2-f5ad167d8494/1/bAqWFKxOEOei4qW8EvhiMGTInvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/64a392-372e-48a6-a0e2-f5ad167d8494/1/bAqWFKxOEOei4qW8EvhiMGTInvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:28:9d:f5:11:a2:98:a8:87:c2:fd:0c:e1:4d:95:d2:57:86:
3a:f7:f6:fe:f6:83:d0:9e:47:e0:15:01:05:62:3f:3c:66:78:
ac:f5:1e:3c:d8:87:e8:5d:12:55:51:83:9f:37:2a:ad:ff:51:
fb:89:a7:a0:59:3e:80:dc:58:37:ca:a0:56:db:19:01:17:cb:
d4:c5:62:a9:94:00:d3:5d:eb:49:0e:7d:16:61:95:99:19:51:
80:da:3a:5e:9f:f7:f3:6d:28:65:26:22:ed:5a:fb:4b:25:5c:
84:09:cb:0c:19:82:5f:f7:c1:f6:23:97:df:6c:7b:61:36:69:
e1:0c:e2:77:f8:41:e2:26:a7:f7:7e:ac:46:99:1b:61:f6:99:
12:81:a4:88:9c:51:79:40:86:43:ac:5f:eb:0a:a5:bb:f4:8c:
6e:8a:1f:e1:bf:d9:c5:68:3d:c6:cc:a5:09:a6:ca:26:66:1e:
cc:b7:fa:6f:fe:b6:54:c1:7b:3d:b0:52:46:c1:9f:14:ed:42:
51:4b:a4:05:8b:03:f1:d8:a3:2e:4c:6a:9b:fb:67:91:b6:e8:
6f:49:7e:81:8f:47:d7:e6:90:c8:07:db:a2:16:19:54:19:b2:
6a:dd:76:c0:05:cd:e8:62:64:a1:7e:8b:19:05:1b:9d:9d:1a:
8e:97:34:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:47:43 2025 by rpki-client