Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.mft
File: 8E0nhIX_rqeekQomJTOoC1q5HIo.mft (raw, json)
Hash identifier: GbHgcvEMogQ1uD1cGkcNDylgZtrvrGcUjtGaJmq8+dE=
Subject key identifier: 4A:6D:87:52:EB:89:23:63:C6:33:30:F3:40:78:57:CD:A0:57:C7:D9
Authority key identifier: F0:4D:27:84:85:FF:AE:A7:9E:91:0A:26:25:33:A8:0B:5A:B9:1C:8A
Certificate issuer: /CN=f04d278485ffaea79e910a262533a80b5ab91c8a
Certificate serial: 019A4F623E4B1A0860A38BF9C52EC382580A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8E0nhIX_rqeekQomJTOoC1q5HIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.mft
Manifest number: 0B66
Signing time: Tue 04 Nov 2025 15:00:29 +0000
Manifest this update: Tue 04 Nov 2025 15:00:29 +0000
Manifest next update: Wed 05 Nov 2025 15:00:29 +0000
Files and hashes: 1: 8E0nhIX_rqeekQomJTOoC1q5HIo.crl (hash: 7/YwE5a1iwbckERKWq9BoiY3pFcjUYX0k2qwrFsXpPc=)
2: 9fWa2lfLkLJ8sCmivN6TQyBLwDA.roa (hash: IPb2Fry6AFROnpqPDxpsLGmfQRyiCcADkUuNtSOH1vw=)
3: M0hmVP_O7pmzGC1lZ8auVtUv08M.roa (hash: O6keKWXCa23CBnMYQ5j2NdMEa5h/R6dRjRYYfD56tpY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/8E0nhIX_rqeekQomJTOoC1q5HIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:3e:4b:1a:08:60:a3:8b:f9:c5:2e:c3:82:58:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04d278485ffaea79e910a262533a80b5ab91c8a
Validity
Not Before: Nov 4 15:00:29 2025 GMT
Not After : Nov 5 15:00:29 2025 GMT
Subject: CN=4a6d8752eb892363c63330f3407857cda057c7d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:9d:f4:d6:c4:c5:2f:d0:95:2f:75:9f:2e:4f:
cc:a5:a6:ef:17:8e:85:f1:29:d6:06:50:13:0b:44:
5a:20:78:08:fb:13:24:74:59:a6:f5:9b:09:ad:bc:
94:45:13:8a:91:92:0b:5a:d2:9f:1c:9f:6a:e0:75:
25:7c:44:2c:9d:6c:1f:9e:92:98:96:1f:26:d8:65:
e9:1f:ba:96:9c:06:4a:8e:fa:a0:9b:9f:14:77:97:
dc:0e:02:ff:e0:a8:cd:aa:bf:3a:d2:73:12:b1:ed:
85:3f:65:c4:92:c7:cf:23:dd:c1:a9:b4:75:8b:cc:
b0:5c:be:5a:18:04:cf:ac:9a:72:10:75:09:25:cd:
fd:11:fc:cf:db:09:db:79:e0:85:91:38:ca:c3:56:
f6:a9:25:26:04:06:d5:e1:0d:91:ce:be:a2:59:79:
f0:77:48:72:7c:c1:a5:e8:c9:8d:69:c4:88:86:eb:
1c:8d:28:d9:db:c8:6f:32:1b:5a:8c:68:b0:00:63:
21:a4:a3:76:6b:d1:d2:c1:0c:25:85:53:66:b3:9f:
ec:b9:4d:b1:b8:4b:5e:ab:cd:e3:5b:62:16:fd:87:
66:a0:52:3b:20:dd:12:ba:3a:b4:91:7d:76:11:be:
89:05:f2:e1:97:28:43:e3:f4:95:c7:29:dc:f5:c2:
0a:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:6D:87:52:EB:89:23:63:C6:33:30:F3:40:78:57:CD:A0:57:C7:D9
X509v3 Authority Key Identifier:
keyid:F0:4D:27:84:85:FF:AE:A7:9E:91:0A:26:25:33:A8:0B:5A:B9:1C:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8E0nhIX_rqeekQomJTOoC1q5HIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:ec:f3:da:6a:de:31:d2:a7:74:20:55:a5:f4:bf:10:75:9b:
d6:54:59:81:fe:e6:1e:6a:b5:9e:1e:02:af:a1:6e:d9:c1:bf:
9a:60:22:f4:23:c8:32:a8:1a:d9:ba:20:b1:88:16:90:1b:0f:
2d:3e:5b:86:a2:f5:56:05:05:12:e6:22:9e:5c:a8:75:90:22:
14:41:e7:69:38:fc:eb:d0:46:88:db:35:bd:0a:7d:20:52:45:
60:2a:7b:25:9b:af:e1:d0:a9:b4:c7:58:b4:45:be:91:60:ce:
e0:b5:d7:2b:b5:73:15:ae:40:40:4d:06:db:dd:01:8d:44:cd:
bc:09:61:e0:e0:5e:29:63:f5:d9:bb:28:11:04:72:77:c2:2e:
31:05:f3:d5:8b:ed:25:50:f3:98:f9:60:88:46:e0:79:ee:68:
12:97:63:5e:5b:17:a1:dd:d4:f2:71:25:d1:b4:d1:6d:3b:1e:
39:95:30:13:9e:a6:98:81:42:77:e2:e7:e1:ed:de:6a:ad:de:
dd:4b:31:76:09:59:61:f1:4e:53:90:cc:47:50:50:da:bd:00:
5a:a5:20:00:8f:fa:41:95:93:85:5e:4a:44:9f:da:6a:d7:3a:
a8:cb:b5:92:de:e8:ec:a3:87:5c:c3:b8:e8:c5:c4:2e:d2:65:
b7:d2:df:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:47:29 2025 by rpki-client