Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/b8zf_aakxIkUtejN59pdgguclxg.mft
File: b8zf_aakxIkUtejN59pdgguclxg.mft (raw, json)
Hash identifier: 4MwJrs63NcqJ73GEZlF27BRrtk5vz7VOWxvAVNIEbzk=
Subject key identifier: 10:9B:AE:3C:DD:14:D5:B3:05:31:A9:6D:7B:AE:3A:12:B2:89:6A:47
Authority key identifier: 6F:CC:DF:FD:A6:A4:C4:89:14:B5:E8:CD:E7:DA:5D:82:0B:9C:97:18
Certificate issuer: /CN=6fccdffda6a4c48914b5e8cde7da5d820b9c9718
Certificate serial: 019A665895FEC600FD9DFFD7058A7D6D171F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8zf_aakxIkUtejN59pdgguclxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/b8zf_aakxIkUtejN59pdgguclxg.mft
Manifest number: 172C
Signing time: Sun 09 Nov 2025 02:01:12 +0000
Manifest this update: Sun 09 Nov 2025 02:01:12 +0000
Manifest next update: Mon 10 Nov 2025 02:01:12 +0000
Files and hashes: 1: 1YG59nbjYSEp8Dz6f0mC_6gefpg.roa (hash: 5tVXqxotHLEXF9KoqmQT6ylsFbR/apsye3JTV81hRBQ=)
2: DWHdsFsQlnFJcyPewoXT0lDFpvE.roa (hash: V6x8BrWgOBTucNWB1MpK3cn6rjM3I3+oPKM+8Z7R5vA=)
3: GQpZM-fB0ZkxzCRMqCw0f9N7tyU.roa (hash: KTppITpJ7wsyB8SXrbAMqiKKxUwVykbBRMICRs5VO4A=)
4: K221sfSU8a2Lsy0QMVbBz-yAHyg.roa (hash: kybj+mQFwM3CNEIgEWcR7xMFvyhG9N8dFqe0X/0hhYM=)
5: b8zf_aakxIkUtejN59pdgguclxg.crl (hash: wH2pweW+oxFIKXVTs1HqXM8M0mZB5zs2Ja/4WNZJ6qY=)
6: hZBu7FQZVkKtWXL58gH8ufcnrgg.roa (hash: R2fcFnCqnbmbHv/RiPE81tSq/ElozG/l/Ezav5iqgYw=)
7: j93BEME5b_K-Zki214QPN4kzqeg.roa (hash: hcvpDseLA+C6KaXIoA6Bv3d4XdBkZlvTz5OO4bMB8oo=)
8: rqGlBLIWA_KsyY5dvVKcudAzYvY.roa (hash: 5OHCdN2GkrUd/qPuHKRYVHvCHLeex3MBnLChYf7HEzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/b8zf_aakxIkUtejN59pdgguclxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/b8zf_aakxIkUtejN59pdgguclxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/b8zf_aakxIkUtejN59pdgguclxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Nov 2025 18:36:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:66:58:95:fe:c6:00:fd:9d:ff:d7:05:8a:7d:6d:17:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fccdffda6a4c48914b5e8cde7da5d820b9c9718
Validity
Not Before: Nov 9 02:01:12 2025 GMT
Not After : Nov 10 02:01:12 2025 GMT
Subject: CN=109bae3cdd14d5b30531a96d7bae3a12b2896a47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:0d:01:c9:85:ea:c9:9e:38:fb:3b:40:dc:1d:
34:f0:11:5c:3c:b1:24:f7:31:fb:04:c5:cf:d2:43:
52:17:b8:1b:57:23:28:28:1c:0a:92:42:88:3e:7d:
97:ff:c8:a6:06:8f:a4:5e:46:37:27:d5:fe:5f:4e:
3c:93:ae:ba:2a:cb:20:e9:06:35:da:47:40:34:2e:
4e:88:f9:e4:c9:9d:6b:d2:3c:b9:16:97:89:2c:69:
5c:2b:e2:f6:e6:e4:4b:72:71:8d:92:e3:e1:e2:69:
b5:d6:d4:78:78:ba:29:ae:f3:74:bc:bf:be:17:b8:
62:f6:00:85:e7:f0:ec:95:80:55:d9:a7:7b:1e:b2:
9a:92:f7:7f:42:c0:b8:09:e8:e7:53:d4:5d:a5:0e:
bd:71:3c:80:31:df:0a:e5:cb:16:b0:83:2a:7e:c7:
36:8a:93:44:fb:77:5c:81:23:97:ff:b5:23:4a:6e:
23:a3:09:ec:c0:a1:24:fc:47:d1:52:d9:6d:fd:74:
b7:00:5e:4f:3f:e5:38:d6:77:59:4f:91:97:95:04:
8b:40:3e:a4:06:13:71:01:51:fc:52:f8:c9:06:cf:
25:c3:b8:c8:a3:97:76:d2:bc:7c:ad:37:b5:ae:54:
95:99:71:51:d1:d6:99:0b:a6:c9:00:d9:c8:eb:b2:
4d:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:9B:AE:3C:DD:14:D5:B3:05:31:A9:6D:7B:AE:3A:12:B2:89:6A:47
X509v3 Authority Key Identifier:
keyid:6F:CC:DF:FD:A6:A4:C4:89:14:B5:E8:CD:E7:DA:5D:82:0B:9C:97:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8zf_aakxIkUtejN59pdgguclxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/b8zf_aakxIkUtejN59pdgguclxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/b8zf_aakxIkUtejN59pdgguclxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:99:93:9b:b2:33:77:11:e5:96:26:5d:41:56:e2:1b:97:b1:
7f:60:a9:a5:41:49:f1:4c:af:7d:23:b5:06:bc:f9:b6:1a:dc:
0f:bb:8e:71:c2:76:6e:d5:d7:67:7a:6a:f8:c2:42:26:8e:bc:
57:c3:c0:f5:b3:71:1e:ef:c9:e9:79:b4:87:93:45:1d:66:2f:
cc:09:47:c5:ab:5e:5f:92:71:cc:e0:95:bc:0a:51:0c:67:a0:
c7:77:ca:44:fb:aa:57:d7:86:23:cf:b1:53:1c:f1:4b:40:47:
82:03:07:ef:cc:d5:75:5c:11:f8:65:99:fb:38:0d:64:39:97:
6a:f5:99:6d:f0:70:0c:9c:3d:cc:d3:7d:05:f1:a0:e0:e0:1b:
47:4a:8d:f6:3d:85:c5:c5:9b:ce:ff:99:6d:91:16:bd:d3:8e:
06:74:bc:27:89:e9:89:7e:b4:09:49:bd:10:c1:4f:4d:06:e5:
29:a6:6c:4f:aa:de:61:c9:d4:fd:85:88:de:07:12:03:0f:0b:
e0:78:8e:d5:79:af:ba:c8:d6:7b:b6:ea:3c:89:ac:42:62:e8:
0a:c4:8e:e9:0a:65:6f:b6:df:86:34:66:53:8d:84:6e:50:c1:
ca:09:58:b6:c5:13:a7:57:ca:22:f9:3b:a2:c2:70:3b:f6:f0:
ff:60:33:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 9 03:59:18 2025 by rpki-client