Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/844fd9-fef1-44d9-a6c9-14fab0244948/1/a4T0opa84U1t7tJRFqpwtgvM5KQ.mft
File: a4T0opa84U1t7tJRFqpwtgvM5KQ.mft (raw, json)
Hash identifier: bGwFXxJbtjYaPEcR9VL95wywDKxPdf2s7YuZrhp1Xi8=
Subject key identifier: 90:57:21:00:13:B8:77:8A:E2:44:F0:0C:89:F6:35:2B:B0:45:0E:DD
Authority key identifier: 6B:84:F4:A2:96:BC:E1:4D:6D:EE:D2:51:16:AA:70:B6:0B:CC:E4:A4
Certificate issuer: /CN=6b84f4a296bce14d6deed25116aa70b60bcce4a4
Certificate serial: 019A03DA2E88CB8A8B1D74D25441728D566D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a4T0opa84U1t7tJRFqpwtgvM5KQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/844fd9-fef1-44d9-a6c9-14fab0244948/1/a4T0opa84U1t7tJRFqpwtgvM5KQ.mft
Manifest number: 16EA
Signing time: Mon 20 Oct 2025 23:00:21 +0000
Manifest this update: Mon 20 Oct 2025 23:00:21 +0000
Manifest next update: Tue 21 Oct 2025 23:00:21 +0000
Files and hashes: 1: UoVm8brFC8TtFU0fGuOACP5IJ-8.roa (hash: Z3atFvW5mWSUMqAxQnvjqpFLFTXrIsbjT+DhpXeSnFQ=)
2: a4T0opa84U1t7tJRFqpwtgvM5KQ.crl (hash: UX7nlAHzblBLY3FExQofXYxaXUdAu8yjXDx69t61r1Q=)
3: ed0N60OI4_qO1SXPxnCTduptr6Y.roa (hash: cqf2H2hrYDyV/+kGYl658nAwtCZE+AIJOgr0nZrirug=)
4: iRFLKez3p29rhRwfF7FxUSY2xRQ.roa (hash: 8w+pzA8F3pAUuP2pqUwVGTV18rYsoVREmjASX0Uhtjg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/844fd9-fef1-44d9-a6c9-14fab0244948/1/a4T0opa84U1t7tJRFqpwtgvM5KQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/844fd9-fef1-44d9-a6c9-14fab0244948/1/a4T0opa84U1t7tJRFqpwtgvM5KQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/a4T0opa84U1t7tJRFqpwtgvM5KQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 22:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:03:da:2e:88:cb:8a:8b:1d:74:d2:54:41:72:8d:56:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b84f4a296bce14d6deed25116aa70b60bcce4a4
Validity
Not Before: Oct 20 23:00:21 2025 GMT
Not After : Oct 21 23:00:21 2025 GMT
Subject: CN=9057210013b8778ae244f00c89f6352bb0450edd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:39:58:50:ee:0e:c8:2a:67:f3:cf:66:2b:58:
30:7c:51:93:73:d9:8f:f0:7c:07:63:f8:3b:82:82:
5c:c8:39:d7:46:c8:0d:65:da:4b:39:3a:22:66:7a:
45:1c:8e:2f:39:4f:7b:6f:06:7c:51:93:1c:1c:f2:
a3:a4:8b:ff:e2:7d:c6:54:f6:b2:24:33:b4:8b:c9:
e1:be:5d:06:1a:0c:b4:dc:26:4c:1e:bf:97:1b:c4:
6a:57:49:f0:72:67:8d:1f:95:64:18:10:ea:ed:c6:
41:46:b3:9d:71:25:e3:32:92:37:b6:6b:1c:2d:f5:
79:55:d8:82:d5:0b:f7:9c:8d:62:97:48:b8:4a:8e:
91:8a:2e:31:20:a9:a3:e6:66:28:94:29:a2:2c:75:
da:9d:b3:76:2a:06:a4:01:d9:0f:0b:5b:40:97:33:
9e:b7:e8:6f:7c:28:e4:e5:ec:6b:dc:f0:67:ab:15:
7c:c8:34:26:eb:b5:6e:b6:9b:b6:cc:c8:74:1d:b1:
b3:03:6e:c5:25:ab:99:cf:70:8e:3f:f7:b3:3a:f4:
d3:5f:2e:18:75:94:e6:a0:d8:d7:40:f1:29:7f:cd:
b0:56:10:56:70:5e:9a:80:d6:3b:38:cb:11:61:3e:
57:85:48:4d:22:5c:3c:d7:90:9e:b2:0a:ea:65:25:
ec:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:57:21:00:13:B8:77:8A:E2:44:F0:0C:89:F6:35:2B:B0:45:0E:DD
X509v3 Authority Key Identifier:
keyid:6B:84:F4:A2:96:BC:E1:4D:6D:EE:D2:51:16:AA:70:B6:0B:CC:E4:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4T0opa84U1t7tJRFqpwtgvM5KQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/844fd9-fef1-44d9-a6c9-14fab0244948/1/a4T0opa84U1t7tJRFqpwtgvM5KQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/844fd9-fef1-44d9-a6c9-14fab0244948/1/a4T0opa84U1t7tJRFqpwtgvM5KQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:ea:fb:6d:9c:2e:02:04:2f:48:33:fe:0a:87:6d:28:72:8c:
12:a1:a2:30:92:db:7f:35:37:da:2a:b0:7e:1e:24:b4:61:bd:
53:8d:b8:18:6f:15:de:52:27:85:1a:56:36:7b:d9:ae:64:a0:
dc:de:1a:7b:17:61:05:fa:78:44:ab:f3:39:80:db:89:9e:b9:
65:ef:9c:9d:33:bd:23:7b:51:81:8c:01:b6:3d:23:85:05:92:
05:36:3d:78:91:dc:17:02:88:0e:ba:b3:e5:68:6d:84:00:54:
80:dc:83:f6:c1:21:3c:36:b0:8e:15:3c:f7:6f:43:ab:70:18:
b9:8e:25:66:9c:57:74:a9:35:42:a9:cc:ab:d3:5f:a1:ef:16:
d1:13:a4:aa:2e:00:04:81:de:80:92:60:40:dd:31:9c:0b:3c:
30:ef:df:4d:5a:fe:f7:1d:43:de:70:7c:fd:21:c3:ae:fe:91:
42:3b:bf:c8:ec:35:01:73:38:08:dc:de:cb:fa:cd:f2:9a:f7:
14:f1:27:6d:df:dc:8a:06:de:10:b3:99:ae:b0:52:98:26:3b:
4e:65:84:a4:c2:6c:55:27:b5:3f:5c:0a:b2:9c:1a:58:12:f2:
13:ee:f5:e4:cd:5e:ed:ec:cd:1c:ef:1e:8c:a0:06:b5:8c:d8:
91:8b:1c:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 03:10:07 2025 by rpki-client