Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.mft
File: bQaeGeEsEEAE6LS3X4p3ibfhE5Y.mft (raw, json)
Hash identifier: l6WVfvSafGJGefxvQH+Jno81v+fow8EbFhrsx90AmDE=
Subject key identifier: FE:60:9A:F1:EC:6A:C2:80:AB:DD:95:AC:3C:44:F8:E6:AF:CC:38:DA
Authority key identifier: 6D:06:9E:19:E1:2C:10:40:04:E8:B4:B7:5F:8A:77:89:B7:E1:13:96
Certificate issuer: /CN=6d069e19e12c104004e8b4b75f8a7789b7e11396
Certificate serial: 019A0290FF598086F68D920AC8F44921E4FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.mft
Manifest number: 16F8
Signing time: Mon 20 Oct 2025 17:00:48 +0000
Manifest this update: Mon 20 Oct 2025 17:00:48 +0000
Manifest next update: Tue 21 Oct 2025 17:00:48 +0000
Files and hashes: 1: 0J1BscA7ehqbG9hZ9JbrawPNkVs.roa (hash: /iRggTw1aJBwhVUj4BhUfXwzpsGpq6zWBqZNLYzvF+Y=)
2: 1-azSbIQFoiVO3W2ZCWv9_QAR8i8.roa (hash: FijndDQD15Q5KHsLR44grscBnJeuQXrV0d05uzJTvBY=)
3: AVQz8sHW23ixrQTRE03QG3YvTuU.roa (hash: SrjP+GRC/1VbpeKx6pNwtWpLK3oTGv/QT5J47D5iwOs=)
4: QjaJHSSDpfkaW3VbsOBmx9Mwnzo.roa (hash: lX+/PQmgzRGcO03gKK10JR9EWKqWcF8NtT9etzyJ8ik=)
5: RXltaGeVSLLvEtVhuI8kryyqAEY.roa (hash: Sq4O0eAJlnMKv+pxipVDsrh+Q6PzS4fGsNzZeo0CJmQ=)
6: ZRpAC-jGxlGBX0TpAicAbhbJP7s.roa (hash: AYh7o4pPNeSE82/KXuBs2qGeurfhiF1NFTbsPaoM8YM=)
7: bO4Y5DyMm5PVD_pzuU-0jz4Eg9I.roa (hash: 5jBL9u4QzLNJlmw7QwIFNZbn9Ii2njf8Ib+9j7ROPhw=)
8: bQaeGeEsEEAE6LS3X4p3ibfhE5Y.crl (hash: psfpVcO3A1kuWfUl1OpkkVJk693EDTMVLUBdSZCIZL8=)
9: vvWlGNuFGuXkBItTH9Zxu-JLKW8.roa (hash: 1uFZJRbOaGcxjskFgOQZk9WcrerBZqMlxk6lZA11nCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 15:16:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:90:ff:59:80:86:f6:8d:92:0a:c8:f4:49:21:e4:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d069e19e12c104004e8b4b75f8a7789b7e11396
Validity
Not Before: Oct 20 17:00:48 2025 GMT
Not After : Oct 21 17:00:48 2025 GMT
Subject: CN=fe609af1ec6ac280abdd95ac3c44f8e6afcc38da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c3:48:ed:00:ad:da:dc:f4:1b:ef:96:c4:f6:
60:18:5d:94:ce:5c:af:a2:de:3c:dd:b5:21:fd:1a:
80:ff:9e:6f:0b:a1:f8:ca:a3:bd:9a:12:47:1c:30:
ef:7b:b1:63:98:56:95:89:3e:ff:1d:05:16:28:db:
8c:40:00:ba:35:7f:d9:cb:a4:6f:b5:55:0a:66:01:
89:08:f4:bc:ac:b0:b4:e2:f0:e1:d5:09:00:1c:85:
5e:e7:10:4c:d8:00:ec:58:70:24:92:ab:71:90:1b:
56:98:ae:f6:72:ae:d0:0e:8c:a1:13:b2:a2:c3:be:
40:aa:17:03:44:09:cb:69:77:48:a7:e0:c4:5a:9a:
ca:2e:fc:5f:cc:d1:74:e8:89:e6:57:64:f8:5c:c9:
20:71:93:8e:8b:51:b0:34:cd:03:70:d4:eb:60:04:
da:b3:e5:c8:51:75:c3:61:9e:e6:d9:69:0b:9c:8e:
73:aa:ac:6e:18:6f:53:28:b9:26:03:5e:c6:6c:fa:
0c:b1:8a:5d:12:60:23:1e:c1:5d:aa:1d:fb:65:19:
cf:15:19:47:14:d9:54:60:c5:3c:30:69:24:4b:df:
1b:80:a3:80:1e:e3:32:e8:c3:89:9a:66:bd:b1:c2:
99:a1:2f:a5:bb:da:ec:39:04:10:5e:c7:0c:45:cd:
0a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:60:9A:F1:EC:6A:C2:80:AB:DD:95:AC:3C:44:F8:E6:AF:CC:38:DA
X509v3 Authority Key Identifier:
keyid:6D:06:9E:19:E1:2C:10:40:04:E8:B4:B7:5F:8A:77:89:B7:E1:13:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:e8:b1:c1:6e:a5:5c:c8:9e:27:4a:2e:6d:5f:1f:f8:4a:b6:
b9:07:44:1c:91:46:55:6c:34:62:f8:70:e6:1a:81:20:4c:ce:
b1:9f:3c:51:ae:c0:b2:2c:55:c1:74:c7:aa:88:a6:01:e9:e4:
e9:ad:ca:92:59:56:26:70:d7:74:3f:39:62:f4:3c:78:48:dd:
21:7c:18:fb:f0:2d:78:89:85:85:45:70:19:42:b3:8a:cd:a8:
66:1d:36:e6:85:6d:f3:80:ff:24:39:81:84:a3:8e:f8:ad:50:
05:31:3c:8e:ea:68:cd:93:78:66:94:8b:b0:4f:bd:91:30:da:
8c:f5:77:42:7a:3d:c4:51:27:96:53:e5:44:ae:f2:e2:c2:45:
8e:5d:dc:20:c3:64:09:93:09:48:e0:86:26:15:d3:5d:0e:c8:
b3:b3:75:52:41:c1:32:86:fc:8c:1e:3f:d8:06:3e:1b:f0:75:
e2:ee:16:7c:d0:29:8b:16:31:40:8b:99:d9:e0:a3:f3:b5:bb:
73:58:33:11:d7:c5:05:eb:8a:35:3d:fe:6c:64:95:38:ed:00:
ac:53:b1:d6:c1:8f:7f:e3:77:b5:81:b6:60:ca:15:53:b8:72:
ec:c1:d0:1d:68:2e:62:27:88:4c:de:61:a2:c1:ee:c7:cf:9d:
37:53:e5:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 00:26:42 2025 by rpki-client