Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/c43505-b306-4941-b7c6-583823847952/1/X_bqgCMHvFO_88u2Pp-BeaxMHjk.mft
File: X_bqgCMHvFO_88u2Pp-BeaxMHjk.mft (raw, json)
Hash identifier: 9FsANeY5OakZcuGWhoK8k066tKeCgNPkL/7c+Xj6XqY=
Subject key identifier: 16:AA:3C:1A:0F:A8:53:90:69:E0:E2:80:A5:0D:79:56:DD:25:25:FB
Authority key identifier: 5F:F6:EA:80:23:07:BC:53:BF:F3:CB:B6:3E:9F:81:79:AC:4C:1E:39
Certificate issuer: /CN=5ff6ea802307bc53bff3cbb63e9f8179ac4c1e39
Certificate serial: 019A1DD13FD11B923B1D0027C48F79729B9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X_bqgCMHvFO_88u2Pp-BeaxMHjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/c43505-b306-4941-b7c6-583823847952/1/X_bqgCMHvFO_88u2Pp-BeaxMHjk.mft
Manifest number: 0529
Signing time: Sun 26 Oct 2025 00:00:43 +0000
Manifest this update: Sun 26 Oct 2025 00:00:43 +0000
Manifest next update: Mon 27 Oct 2025 00:00:43 +0000
Files and hashes: 1: Tadh_qpMdGoIN33tMjbACuKsZOE.roa (hash: 9pXxqdk2JpjcdUH8kyShVqd2tJEpgHvO7OyF9bO5c78=)
2: X_bqgCMHvFO_88u2Pp-BeaxMHjk.crl (hash: 4HGLHcUUJOSsMycVOE9CfsRK9lWz37qgy+vfuYFz6ZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/c43505-b306-4941-b7c6-583823847952/1/X_bqgCMHvFO_88u2Pp-BeaxMHjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/c43505-b306-4941-b7c6-583823847952/1/X_bqgCMHvFO_88u2Pp-BeaxMHjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/X_bqgCMHvFO_88u2Pp-BeaxMHjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 00:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1d:d1:3f:d1:1b:92:3b:1d:00:27:c4:8f:79:72:9b:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ff6ea802307bc53bff3cbb63e9f8179ac4c1e39
Validity
Not Before: Oct 26 00:00:43 2025 GMT
Not After : Oct 27 00:00:43 2025 GMT
Subject: CN=16aa3c1a0fa8539069e0e280a50d7956dd2525fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:6f:4b:cc:a6:a1:39:4b:96:f1:82:8d:0b:b1:
35:3f:03:d0:0f:c3:3e:ac:49:89:ae:79:1c:3f:51:
19:0e:56:0e:bf:2e:94:9b:48:09:f3:75:af:f6:cf:
c7:1a:a0:ef:d0:f4:4f:30:7b:8b:fd:43:1f:7b:ce:
b9:57:2a:64:a3:20:8f:8f:ca:86:6c:2e:54:26:0d:
8b:6e:59:cc:48:b9:90:ba:70:7a:bc:db:45:f0:82:
b8:bb:f0:5a:10:7f:05:bf:59:c1:2e:f6:b5:2b:72:
51:c5:40:08:07:4d:35:4c:81:be:ea:78:e2:90:70:
0f:50:bf:29:72:9b:44:6d:a1:d2:4f:ac:7b:25:20:
8c:70:0d:52:7f:02:da:61:58:33:1a:cf:d3:d4:2f:
8f:14:2c:c1:8e:e7:95:5a:c8:2b:2b:50:63:ce:63:
c6:4c:5e:ad:94:63:5b:46:d1:45:79:82:90:db:cb:
3c:3f:a7:a8:26:59:e2:58:29:d1:51:a2:7b:67:67:
eb:6d:83:17:c1:e4:02:e6:b6:e0:01:62:97:16:49:
46:ef:dc:9b:5f:8b:dd:88:62:75:dc:80:2e:3a:1e:
ae:ee:71:be:bc:63:22:48:b6:fb:f1:ab:eb:0a:0a:
9d:3a:24:a4:ee:5d:14:5f:58:bb:81:2c:63:6c:60:
b0:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:AA:3C:1A:0F:A8:53:90:69:E0:E2:80:A5:0D:79:56:DD:25:25:FB
X509v3 Authority Key Identifier:
keyid:5F:F6:EA:80:23:07:BC:53:BF:F3:CB:B6:3E:9F:81:79:AC:4C:1E:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X_bqgCMHvFO_88u2Pp-BeaxMHjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/c43505-b306-4941-b7c6-583823847952/1/X_bqgCMHvFO_88u2Pp-BeaxMHjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/c43505-b306-4941-b7c6-583823847952/1/X_bqgCMHvFO_88u2Pp-BeaxMHjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:e5:1c:11:65:38:9e:24:90:95:57:43:22:b8:96:b8:e1:d4:
80:6d:6b:21:8c:79:3b:e9:01:a3:11:82:1e:31:ea:98:eb:dc:
61:61:f6:ef:64:c1:a2:f3:5a:36:44:02:8a:fb:24:2f:8c:85:
3e:80:55:0e:91:db:91:3a:7b:f6:d1:40:e5:0f:19:05:47:2a:
91:d3:d7:db:8f:11:f0:42:76:58:3c:ae:ee:94:50:19:07:cf:
8d:35:a7:7a:5f:5a:54:af:0a:46:72:de:be:2e:c2:84:7e:d3:
cc:ef:87:04:3e:db:76:b9:28:5d:98:ba:e0:8b:86:85:61:d8:
b3:96:26:66:68:c3:21:d8:15:f9:37:1a:90:98:02:11:18:1f:
5a:1d:7b:21:7a:5a:0f:e4:c2:d5:9b:b9:8f:58:89:0e:11:3b:
b7:38:b1:34:60:27:51:cf:6b:02:8f:4d:af:77:7c:c0:d7:80:
a9:6e:10:d2:41:6c:f3:c1:7c:d7:4f:3a:0a:3c:5d:b2:45:f2:
c6:34:6b:c0:74:55:57:13:28:95:0d:94:54:ec:01:c1:60:24:
f4:0b:5b:82:a3:d3:09:56:51:c7:a5:fc:07:4e:7f:13:c5:cf:
65:de:e9:b7:cd:92:7f:83:d7:2b:fc:5b:73:f0:d3:b2:38:72:
1c:aa:61:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 08:28:09 2025 by rpki-client