Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.mft
File: bQaeGeEsEEAE6LS3X4p3ibfhE5Y.mft (raw, json)
Hash identifier: O2JaG008JOIYwD7qIHpNsuI6jrZ4WHG6V6hpg3k/2OU=
Subject key identifier: FE:E7:5C:CF:F6:B2:59:C5:95:D7:50:D9:9B:15:D4:57:99:3D:0C:45
Authority key identifier: 6D:06:9E:19:E1:2C:10:40:04:E8:B4:B7:5F:8A:77:89:B7:E1:13:96
Certificate issuer: /CN=6d069e19e12c104004e8b4b75f8a7789b7e11396
Certificate serial: 019A51BE95D0743E505CE3FC4F7569571EA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.mft
Manifest number: 1721
Signing time: Wed 05 Nov 2025 02:00:35 +0000
Manifest this update: Wed 05 Nov 2025 02:00:35 +0000
Manifest next update: Thu 06 Nov 2025 02:00:35 +0000
Files and hashes: 1: 0J1BscA7ehqbG9hZ9JbrawPNkVs.roa (hash: /iRggTw1aJBwhVUj4BhUfXwzpsGpq6zWBqZNLYzvF+Y=)
2: 1-azSbIQFoiVO3W2ZCWv9_QAR8i8.roa (hash: FijndDQD15Q5KHsLR44grscBnJeuQXrV0d05uzJTvBY=)
3: AVQz8sHW23ixrQTRE03QG3YvTuU.roa (hash: SrjP+GRC/1VbpeKx6pNwtWpLK3oTGv/QT5J47D5iwOs=)
4: QjaJHSSDpfkaW3VbsOBmx9Mwnzo.roa (hash: lX+/PQmgzRGcO03gKK10JR9EWKqWcF8NtT9etzyJ8ik=)
5: RXltaGeVSLLvEtVhuI8kryyqAEY.roa (hash: Sq4O0eAJlnMKv+pxipVDsrh+Q6PzS4fGsNzZeo0CJmQ=)
6: ZRpAC-jGxlGBX0TpAicAbhbJP7s.roa (hash: AYh7o4pPNeSE82/KXuBs2qGeurfhiF1NFTbsPaoM8YM=)
7: bO4Y5DyMm5PVD_pzuU-0jz4Eg9I.roa (hash: 5jBL9u4QzLNJlmw7QwIFNZbn9Ii2njf8Ib+9j7ROPhw=)
8: bQaeGeEsEEAE6LS3X4p3ibfhE5Y.crl (hash: sNlknEaVljpyIKQ6xwch9Ov07LBUAoBMjGq7+U6gLrw=)
9: vvWlGNuFGuXkBItTH9Zxu-JLKW8.roa (hash: 1uFZJRbOaGcxjskFgOQZk9WcrerBZqMlxk6lZA11nCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 02:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:be:95:d0:74:3e:50:5c:e3:fc:4f:75:69:57:1e:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d069e19e12c104004e8b4b75f8a7789b7e11396
Validity
Not Before: Nov 5 02:00:35 2025 GMT
Not After : Nov 6 02:00:35 2025 GMT
Subject: CN=fee75ccff6b259c595d750d99b15d457993d0c45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d5:83:c5:7f:76:5b:94:6a:13:54:53:79:6c:
9e:63:9f:3d:f5:2e:fd:54:e6:63:d3:0c:73:25:03:
35:81:63:ac:dc:ed:67:f6:42:1a:1a:c5:b9:ab:19:
3e:0b:69:3e:c3:30:17:f2:0d:50:c5:50:c2:25:14:
53:79:c1:6f:cf:09:ad:b6:42:70:ef:55:2d:71:08:
b8:bf:a9:1c:cf:da:a0:73:08:a5:95:72:cf:78:50:
5e:14:1d:69:4c:a7:d4:89:97:73:ed:34:04:7c:cd:
25:07:16:5b:22:4c:07:b5:2c:6b:9d:4e:13:24:12:
86:e5:b5:7e:82:1f:58:cc:87:a8:ff:96:31:81:c6:
b9:46:39:6d:16:a4:77:45:ca:1a:2c:8f:1f:bb:60:
04:47:1d:41:03:2e:db:44:b3:85:6c:02:4b:9e:75:
8e:cd:bd:bd:3d:b7:7d:81:a3:c3:4d:e2:37:e9:0a:
7e:b3:d6:c2:ae:53:5d:13:5b:4d:b1:61:3b:f8:c6:
ff:22:aa:a6:c3:6d:40:e6:f6:80:0a:e4:05:cd:3b:
f5:74:47:67:3b:1c:ae:f0:ea:4e:08:62:d0:08:41:
60:4d:31:77:c8:99:65:ab:40:01:08:99:3f:8d:51:
c8:d9:61:90:6c:e0:5b:28:eb:df:69:1f:c9:b0:da:
89:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:E7:5C:CF:F6:B2:59:C5:95:D7:50:D9:9B:15:D4:57:99:3D:0C:45
X509v3 Authority Key Identifier:
keyid:6D:06:9E:19:E1:2C:10:40:04:E8:B4:B7:5F:8A:77:89:B7:E1:13:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:00:fb:0c:f5:25:cb:3e:b8:cc:0e:4b:44:3e:a4:8e:fe:5c:
99:98:d9:e8:10:9f:4a:a4:16:65:5d:b6:d1:b0:17:cf:fc:c9:
9c:f3:0a:df:24:86:c3:63:9e:a2:95:3c:4e:55:ce:05:84:ea:
b0:b5:3a:5f:22:e7:bf:35:58:15:18:7d:6e:6c:c2:48:f4:1c:
7a:80:60:4a:5c:d3:ce:20:0e:64:c7:4b:5d:6e:96:70:13:3a:
96:cc:c1:de:09:c5:40:b0:6d:77:c5:99:ce:98:6c:94:6e:55:
5d:3f:44:2a:02:f8:dc:1e:74:b5:7f:3a:d8:39:10:52:45:1a:
fd:7b:c7:d4:9f:e0:08:ba:f3:11:c5:f9:e7:3e:39:1b:54:91:
10:48:5f:70:33:46:1a:56:23:55:64:fe:7e:7d:0c:64:45:44:
2c:ad:98:da:56:7a:57:92:c8:ee:5e:eb:d4:d5:59:3e:6c:a2:
6a:ea:65:8d:d4:42:9a:f9:2b:24:8c:96:29:f3:3b:45:62:f2:
bc:6c:10:9c:a1:3d:3a:f1:58:1f:89:eb:19:22:64:da:54:1d:
a1:50:ba:83:51:c1:39:c6:7e:35:7a:50:05:2f:d4:1a:7c:85:
e2:d1:df:54:b0:78:10:f8:1e:e3:1a:5c:6f:c3:94:d1:86:6c:
87:80:f4:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:55:14 2025 by rpki-client