Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/846a03-de24-485b-b9b7-c4bc803d893f/1/8QA9LHGrB2mR-wPtZgC_HUi3K-U.mft
File: 8QA9LHGrB2mR-wPtZgC_HUi3K-U.mft (raw, json)
Hash identifier: Osant8HG3VkW4KGJs7kGoew+IR2Ipgy5O/wb7a7Kowk=
Subject key identifier: 73:85:09:13:C4:9A:0C:C4:D9:BD:36:FB:2D:FF:3B:B0:C0:41:B2:6B
Authority key identifier: F1:00:3D:2C:71:AB:07:69:91:FB:03:ED:66:00:BF:1D:48:B7:2B:E5
Certificate issuer: /CN=f1003d2c71ab076991fb03ed6600bf1d48b72be5
Certificate serial: 019A50E2E9A5B3CDD0424D30B5C595F09042
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8QA9LHGrB2mR-wPtZgC_HUi3K-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/846a03-de24-485b-b9b7-c4bc803d893f/1/8QA9LHGrB2mR-wPtZgC_HUi3K-U.mft
Manifest number: 10FE
Signing time: Tue 04 Nov 2025 22:00:39 +0000
Manifest this update: Tue 04 Nov 2025 22:00:39 +0000
Manifest next update: Wed 05 Nov 2025 22:00:39 +0000
Files and hashes: 1: 8QA9LHGrB2mR-wPtZgC_HUi3K-U.crl (hash: nqUCUXBRyxQ5stmuPGlo/gJcNy3q81HkTmAg/I1p8Fw=)
2: qPfR7RG57f18LNEfOXECDUWuxuU.roa (hash: QgXqOHY45cNI3RJ9Yex5GhM6/GX8GPU2S0Ij2p9Y640=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/846a03-de24-485b-b9b7-c4bc803d893f/1/8QA9LHGrB2mR-wPtZgC_HUi3K-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/846a03-de24-485b-b9b7-c4bc803d893f/1/8QA9LHGrB2mR-wPtZgC_HUi3K-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/8QA9LHGrB2mR-wPtZgC_HUi3K-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e2:e9:a5:b3:cd:d0:42:4d:30:b5:c5:95:f0:90:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1003d2c71ab076991fb03ed6600bf1d48b72be5
Validity
Not Before: Nov 4 22:00:39 2025 GMT
Not After : Nov 5 22:00:39 2025 GMT
Subject: CN=73850913c49a0cc4d9bd36fb2dff3bb0c041b26b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:df:78:69:f1:77:c4:0f:56:f3:44:5a:d6:7b:
0f:49:f9:b6:0f:12:1b:c3:1b:97:f1:20:e5:de:dc:
11:99:cb:8c:06:71:81:3d:63:76:9b:f4:43:1a:04:
54:7b:2d:da:d7:ae:84:f5:69:97:95:68:b1:1e:35:
9e:53:29:37:d5:f4:1a:a0:6d:da:c3:16:8e:b7:6f:
a9:7e:42:d4:db:d4:68:f6:fc:ba:3c:13:94:79:8c:
f5:9e:24:11:d2:37:c8:a9:db:fd:38:53:aa:5a:97:
2a:59:2c:f2:f7:90:90:2a:32:95:07:ec:c9:e3:87:
90:5c:d3:4b:50:b3:c3:bb:3c:40:a2:86:db:27:0b:
17:56:e4:72:84:8a:e1:9f:df:9b:49:22:46:44:e8:
ca:7d:93:a6:53:f1:2f:66:f3:da:60:b5:0b:e9:0e:
1b:50:2b:67:55:70:55:ee:72:89:a8:3f:41:fb:e6:
60:df:e7:cc:c1:57:27:b6:30:8d:38:5a:25:fa:64:
24:c0:65:92:2f:29:c5:61:d6:60:83:2b:70:8f:41:
23:3e:a0:9f:ab:b2:ed:8b:0d:a5:c9:10:32:b6:a2:
07:aa:0b:5c:68:e6:b8:43:ac:56:51:65:22:3c:8e:
b5:60:c2:4f:d6:d7:e5:fb:06:53:70:21:df:10:3b:
8e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:85:09:13:C4:9A:0C:C4:D9:BD:36:FB:2D:FF:3B:B0:C0:41:B2:6B
X509v3 Authority Key Identifier:
keyid:F1:00:3D:2C:71:AB:07:69:91:FB:03:ED:66:00:BF:1D:48:B7:2B:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8QA9LHGrB2mR-wPtZgC_HUi3K-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/846a03-de24-485b-b9b7-c4bc803d893f/1/8QA9LHGrB2mR-wPtZgC_HUi3K-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/846a03-de24-485b-b9b7-c4bc803d893f/1/8QA9LHGrB2mR-wPtZgC_HUi3K-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:7d:5f:56:0e:93:06:00:b0:e2:28:d5:1e:13:35:9f:fd:8a:
a9:56:34:e2:16:68:f4:12:68:e8:68:35:e8:77:f0:a5:60:1a:
1a:c9:2d:9e:b6:f1:74:a4:95:6a:05:a9:47:4d:6f:d5:f6:ef:
ea:84:6b:e3:2e:26:2b:87:0b:7e:74:d7:b0:21:4b:44:cd:96:
ad:ec:9d:c1:49:41:d4:58:b8:2e:4c:40:13:e5:23:a8:e4:04:
54:80:cd:9b:1a:a8:9b:22:a0:b7:f2:d6:16:67:0d:eb:54:ad:
d3:1a:92:3a:e0:89:00:79:30:8b:54:c4:c7:65:bb:ad:0c:dd:
44:c2:77:1c:22:17:bb:ea:31:1f:b4:6d:3e:9a:13:ea:4a:55:
06:d7:46:be:f6:53:9a:0e:b9:fa:14:8b:5a:70:41:74:4a:17:
13:41:76:a5:5c:b8:2e:ac:a1:f7:25:61:f1:c2:0e:68:7b:76:
cf:ec:0b:01:1a:d7:62:2d:e1:f0:22:58:f8:c0:5c:ee:74:80:
6f:8e:e6:12:16:5c:86:4d:6b:89:a2:4f:1e:f4:26:98:1e:52:
3e:77:e7:1d:f2:fa:3e:e7:da:7d:09:b8:ab:d4:c1:e7:06:e3:
20:3e:6c:55:45:4c:65:c4:50:4c:8a:b6:73:17:67:fa:8b:12:
dc:72:45:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:52:40 2025 by rpki-client