Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/88a383-030c-4545-9e9c-4ebeec7e8275/1/8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.mft
File: 8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.mft (raw, json)
Hash identifier: 3TZX4M1FK8+MlIPpCDoKHOZHon1vrLNY/ix2EqMmPco=
Subject key identifier: 92:33:77:0A:71:75:0F:E7:04:1A:42:CB:81:8C:4E:AD:DF:36:2A:51
Authority key identifier: F2:A9:59:DC:16:71:5C:8A:54:C8:09:42:67:B8:E4:91:FE:32:1D:2C
Certificate issuer: /CN=f2a959dc16715c8a54c8094267b8e491fe321d2c
Certificate serial: 019A4C97F458F3B5993893465495C1806A64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/88a383-030c-4545-9e9c-4ebeec7e8275/1/8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.mft
Manifest number: 160C
Signing time: Tue 04 Nov 2025 02:00:18 +0000
Manifest this update: Tue 04 Nov 2025 02:00:18 +0000
Manifest next update: Wed 05 Nov 2025 02:00:18 +0000
Files and hashes: 1: 8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.crl (hash: JMvE6Eh6wZN39TScxHlBl3Ir7AupsEBhrPFkO6N3eGw=)
2: d2hoUpvor7BPW8nmpz4xnZjE2u4.roa (hash: hIY/GtYHLCsuos0GvnTm5ot49GmbZ9W7yYzcGZgrlOw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/88a383-030c-4545-9e9c-4ebeec7e8275/1/8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/88a383-030c-4545-9e9c-4ebeec7e8275/1/8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 02:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:97:f4:58:f3:b5:99:38:93:46:54:95:c1:80:6a:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2a959dc16715c8a54c8094267b8e491fe321d2c
Validity
Not Before: Nov 4 02:00:18 2025 GMT
Not After : Nov 5 02:00:18 2025 GMT
Subject: CN=9233770a71750fe7041a42cb818c4eaddf362a51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:65:a5:ac:00:b3:d8:33:39:de:68:47:52:af:
7a:63:ff:02:c4:06:e9:d3:f4:e5:77:82:41:4b:ab:
6b:00:96:8c:fe:f3:ec:1f:06:f0:38:49:22:3f:3e:
56:91:89:ae:aa:05:4a:ec:7a:fe:47:13:21:87:d4:
e1:43:f6:aa:8d:b3:e7:0f:57:54:8a:fe:8f:9d:82:
00:e1:02:79:d1:db:65:43:51:f2:5f:4e:ff:12:a0:
db:8f:ac:54:46:1f:e8:88:10:2f:97:a5:74:3d:3a:
4c:18:f4:11:c3:53:d7:0a:fc:0f:e8:9f:03:8f:36:
6d:d6:ea:64:12:01:d4:be:d3:0c:c1:94:d7:a8:ad:
03:55:23:26:df:31:b7:6c:9e:c3:59:0a:65:3b:f3:
81:1e:c7:fd:19:d8:0d:62:32:85:cc:9a:80:fc:be:
b4:8b:66:56:da:b9:06:97:42:d1:9b:96:00:09:21:
2f:22:b2:92:5a:78:69:77:73:0d:fe:1c:de:38:9f:
e6:a3:ec:45:eb:2c:34:a8:db:f3:80:20:93:79:50:
51:2d:d7:38:17:2f:5e:ba:fd:63:a4:39:31:b0:33:
dc:da:a0:7c:0b:64:4e:61:00:13:84:e0:85:55:f4:
c0:58:8d:ca:b7:5b:c2:03:e9:e7:6e:86:2b:12:02:
95:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:33:77:0A:71:75:0F:E7:04:1A:42:CB:81:8C:4E:AD:DF:36:2A:51
X509v3 Authority Key Identifier:
keyid:F2:A9:59:DC:16:71:5C:8A:54:C8:09:42:67:B8:E4:91:FE:32:1D:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/88a383-030c-4545-9e9c-4ebeec7e8275/1/8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/88a383-030c-4545-9e9c-4ebeec7e8275/1/8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dc:15:e1:c2:9f:e4:3d:70:45:82:73:84:5c:d4:2f:b8:d8:2b:
a2:a4:bd:db:9e:06:b2:18:42:d6:ff:9d:72:78:d8:d1:9a:64:
99:18:1c:f8:d4:35:1e:6c:da:04:4f:14:c1:16:c3:75:0d:09:
a0:25:b3:03:33:48:7a:a6:d1:04:1e:9b:7c:14:73:09:fe:48:
5a:fc:56:a1:86:87:42:5f:2c:74:a0:8f:6a:47:c0:0d:fd:53:
e8:d5:bb:e0:6e:db:39:c4:a3:b7:2b:c4:1f:4b:03:be:0f:00:
cb:29:d8:25:8b:20:2a:b7:e6:51:d3:9b:29:d8:7b:26:0b:00:
93:e6:6c:43:65:3f:f9:14:f1:ba:ea:38:6d:15:fa:a4:6f:dc:
02:21:cd:f3:5a:9e:84:3d:46:a4:15:99:8d:21:ff:30:46:bb:
70:d5:29:c4:64:4f:b6:1f:09:5c:a7:be:55:f5:74:f2:c6:b4:
a1:2e:52:40:9c:fd:5d:c3:f9:00:46:ce:f8:2b:3c:d5:2e:5e:
b2:14:81:48:ed:f4:31:9e:a3:62:8d:79:10:2d:5b:d9:af:03:
d8:9b:4d:7d:ad:67:a3:e1:ed:3e:3e:99:28:ad:cb:c0:3b:f0:
83:f9:6b:e3:eb:91:8d:a9:32:3d:40:db:74:31:3e:47:49:64:
44:0d:56:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:48:06 2025 by rpki-client