Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/293698-949d-4665-ba07-8cb4e253f175/1/b61qcd7-VgoOXCH_u0A4-0EJEpU.mft
File: b61qcd7-VgoOXCH_u0A4-0EJEpU.mft (raw, json)
Hash identifier: qkJPTTX+/w5nOickKaYIfC7C3FdB/Ur8G64odaz3ITY=
Subject key identifier: CE:A1:DF:F7:A3:57:CD:3B:B4:69:28:91:F8:97:94:0E:A8:64:2E:0B
Authority key identifier: 6F:AD:6A:71:DE:FE:56:0A:0E:5C:21:FF:BB:40:38:FB:41:09:12:95
Certificate issuer: /CN=6fad6a71defe560a0e5c21ffbb4038fb41091295
Certificate serial: 019963FE9CE4D374C3A425F8407B33AA91EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b61qcd7-VgoOXCH_u0A4-0EJEpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/293698-949d-4665-ba07-8cb4e253f175/1/b61qcd7-VgoOXCH_u0A4-0EJEpU.mft
Manifest number: 1693
Signing time: Fri 19 Sep 2025 22:00:54 +0000
Manifest this update: Fri 19 Sep 2025 22:00:54 +0000
Manifest next update: Sat 20 Sep 2025 22:00:54 +0000
Files and hashes: 1: b61qcd7-VgoOXCH_u0A4-0EJEpU.crl (hash: JY2to/9Y8ER0oyz2prZesSCUAO4uk/SLFLDGWmcByp4=)
2: o-uxsmeV-GDLlYueP7RtZNtRLkY.roa (hash: xd5QoXbqzMFg+YyYmPM0+ODCfAWCU2/7fETeFx+AjCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/293698-949d-4665-ba07-8cb4e253f175/1/b61qcd7-VgoOXCH_u0A4-0EJEpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/293698-949d-4665-ba07-8cb4e253f175/1/b61qcd7-VgoOXCH_u0A4-0EJEpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b61qcd7-VgoOXCH_u0A4-0EJEpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Sep 2025 22:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:63:fe:9c:e4:d3:74:c3:a4:25:f8:40:7b:33:aa:91:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fad6a71defe560a0e5c21ffbb4038fb41091295
Validity
Not Before: Sep 19 22:00:54 2025 GMT
Not After : Sep 20 22:00:54 2025 GMT
Subject: CN=cea1dff7a357cd3bb4692891f897940ea8642e0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:03:89:33:a6:a7:31:08:e8:26:e6:08:47:5e:
6e:73:2e:67:16:ac:f3:70:12:f7:20:a7:50:4d:de:
35:fa:47:28:43:31:d8:aa:2d:09:23:8a:4f:93:db:
41:48:e1:32:90:e2:da:d8:ab:e0:94:2d:41:e9:d5:
ce:f7:9b:0a:81:fe:c7:60:f6:86:32:e2:96:83:fe:
fb:61:7a:67:cf:e5:e2:2e:d8:32:63:4a:b5:e9:1d:
f7:ab:fd:04:cb:09:c6:8a:25:b4:9c:53:20:da:a2:
fb:7e:95:ee:64:7b:74:27:19:9e:02:3a:7c:6e:8f:
36:f8:76:de:02:64:72:8f:9c:41:56:34:0a:c1:4e:
18:47:1b:6d:64:b8:bb:28:81:48:97:69:86:23:c6:
92:93:a4:68:23:f5:f7:4b:29:04:fc:fc:a1:dd:60:
36:16:14:a4:1e:d7:08:3b:f4:e1:ab:af:69:bf:8a:
0a:be:77:66:c2:cb:e0:39:2c:d4:d5:d3:50:15:10:
f8:45:00:bf:2e:67:c4:54:fe:92:de:32:3f:e0:6e:
ef:3c:a2:b9:43:ae:3f:d0:45:64:c5:ba:07:31:23:
b2:d1:de:25:bd:e1:bc:cc:68:81:c6:71:de:f3:45:
4c:5d:96:4d:3c:c7:34:a8:01:2b:53:2e:e3:4d:37:
0d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:A1:DF:F7:A3:57:CD:3B:B4:69:28:91:F8:97:94:0E:A8:64:2E:0B
X509v3 Authority Key Identifier:
keyid:6F:AD:6A:71:DE:FE:56:0A:0E:5C:21:FF:BB:40:38:FB:41:09:12:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b61qcd7-VgoOXCH_u0A4-0EJEpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/293698-949d-4665-ba07-8cb4e253f175/1/b61qcd7-VgoOXCH_u0A4-0EJEpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/293698-949d-4665-ba07-8cb4e253f175/1/b61qcd7-VgoOXCH_u0A4-0EJEpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:16:f0:08:09:55:ba:ff:d6:ef:a6:a9:ba:c6:7d:ed:2a:6c:
a6:cb:f1:2f:5f:e8:81:c3:48:be:17:69:5a:f3:25:29:b8:ec:
7e:12:10:07:5c:7a:d7:26:51:c8:0b:3f:79:02:5d:a1:0a:19:
3f:e7:91:24:45:85:cb:85:78:1a:f1:cf:71:11:7f:5f:6f:63:
35:a0:5a:44:d9:98:07:aa:6f:3b:d6:62:5c:c0:4a:a8:b3:aa:
0b:26:f9:e6:9b:53:61:59:fe:90:87:be:05:f2:b7:70:0f:68:
42:d4:ea:8f:19:42:54:5b:ce:65:37:38:6c:9a:98:89:4d:b1:
65:94:16:08:b3:f2:ba:f3:62:3a:9a:03:f3:e8:6d:6c:82:cc:
6a:3c:79:d8:c0:30:0e:18:97:98:89:0a:77:ce:fe:41:93:90:
76:5a:1b:c4:c4:ec:ba:e9:b8:ae:01:6d:20:fd:86:a7:9a:b2:
b3:e8:04:87:79:28:f2:ea:ff:54:10:a2:8d:ab:58:69:56:27:
57:1d:49:8f:61:2a:bf:e0:28:d4:d6:97:ff:8b:b4:5b:46:4b:
c8:c4:37:4f:92:a1:f7:ce:a8:60:eb:78:6f:1a:d6:37:1e:90:
78:aa:32:14:61:64:aa:86:35:6b:d5:1c:19:8a:3b:01:4e:b3:
5d:4a:01:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZlj/pzk03TDpCX4QHszqpHqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmYWQ2YTcxZGVmZTU2MGEwZTVjMjFmZmJiNDAzOGZiNDEw
OTEyOTUwHhcNMjUwOTE5MjIwMDU0WhcNMjUwOTIwMjIwMDU0WjAzMTEwLwYDVQQD
EyhjZWExZGZmN2EzNTdjZDNiYjQ2OTI4OTFmODk3OTQwZWE4NjQyZTBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmgOJM6anMQjoJuYIR15ucy5nFqzz
cBL3IKdQTd41+kcoQzHYqi0JI4pPk9tBSOEykOLa2KvglC1B6dXO95sKgf7HYPaG
MuKWg/77YXpnz+XiLtgyY0q16R33q/0EywnGiiW0nFMg2qL7fpXuZHt0JxmeAjp8
bo82+HbeAmRyj5xBVjQKwU4YRxttZLi7KIFIl2mGI8aSk6RoI/X3SykE/Pyh3WA2
FhSkHtcIO/Thq69pv4oKvndmwsvgOSzU1dNQFRD4RQC/LmfEVP6S3jI/4G7vPKK5
Q64/0EVkxboHMSOy0d4lveG8zGiBxnHe80VMXZZNPMc0qAErUy7jTTcNBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM6h3/ejV807tGkokfiXlA6oZC4LMB8GA1UdIwQY
MBaAFG+tanHe/lYKDlwh/7tAOPtBCRKVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjYxcWNkNy1WZ29PWENIX3UwQTQtMEVKRXBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny8yOTM2OTgtOTQ5ZC00NjY1LWJhMDct
OGNiNGUyNTNmMTc1LzEvYjYxcWNkNy1WZ29PWENIX3UwQTQtMEVKRXBVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny8yOTM2OTgtOTQ5ZC00NjY1LWJhMDctOGNiNGUyNTNmMTc1
LzEvYjYxcWNkNy1WZ29PWENIX3UwQTQtMEVKRXBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWxbwCAlV
uv/W76apusZ97SpspsvxL1/ogcNIvhdpWvMlKbjsfhIQB1x61yZRyAs/eQJdoQoZ
P+eRJEWFy4V4GvHPcRF/X29jNaBaRNmYB6pvO9ZiXMBKqLOqCyb55ptTYVn+kIe+
BfK3cA9oQtTqjxlCVFvOZTc4bJqYiU2xZZQWCLPyuvNiOpoD8+htbILMajx52MAw
DhiXmIkKd87+QZOQdlobxMTsuum4rgFtIP2Gp5qys+gEh3ko8ur/VBCijatYaVYn
Vx1Jj2Eqv+Ao1NaX/4u0W0ZLyMQ3T5Kh986oYOt4bxrWNx6QeKoyFGFkqoY1a9Uc
GYo7AU6zXUoBiw==
-----END CERTIFICATE-----
Generated at Sat Sep 20 02:42:07 2025 by rpki-client