Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/cfc1ba-9c78-4c3d-8ec3-c0ad74ca5d9b/1/8q7r5B0FGChKujpPXl2gXPq9b3Y.mft
File: 8q7r5B0FGChKujpPXl2gXPq9b3Y.mft (raw, json)
Hash identifier: LKfjhWHvSPiBMSB34bvst0b10oBP5Ad//ICXGtjyqOs=
Subject key identifier: 16:3B:11:C3:50:22:97:73:D4:E8:9F:B0:85:CB:96:40:A3:41:F2:B6
Authority key identifier: F2:AE:EB:E4:1D:05:18:28:4A:BA:3A:4F:5E:5D:A0:5C:FA:BD:6F:76
Certificate issuer: /CN=f2aeebe41d0518284aba3a4f5e5da05cfabd6f76
Certificate serial: 019A4EF53CBAB66D8716B64F4CB1BCB8F55D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8q7r5B0FGChKujpPXl2gXPq9b3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/cfc1ba-9c78-4c3d-8ec3-c0ad74ca5d9b/1/8q7r5B0FGChKujpPXl2gXPq9b3Y.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 13:01:25 +0000
Manifest this update: Tue 04 Nov 2025 13:01:25 +0000
Manifest next update: Wed 05 Nov 2025 13:01:25 +0000
Files and hashes: 1: 8q7r5B0FGChKujpPXl2gXPq9b3Y.crl (hash: LhlNkC5RAtOcWLUYy0KiDyj19G3Z4Z4a/9cANiVlmh4=)
2: M0x4P-eqDOpLCOY_5rdYfIPAYXc.roa (hash: Hz1NV4C1yE6vehHnBgkxV2TE2v53JgdybplNGjL2XYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/cfc1ba-9c78-4c3d-8ec3-c0ad74ca5d9b/1/8q7r5B0FGChKujpPXl2gXPq9b3Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/cfc1ba-9c78-4c3d-8ec3-c0ad74ca5d9b/1/8q7r5B0FGChKujpPXl2gXPq9b3Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/8q7r5B0FGChKujpPXl2gXPq9b3Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:3c:ba:b6:6d:87:16:b6:4f:4c:b1:bc:b8:f5:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2aeebe41d0518284aba3a4f5e5da05cfabd6f76
Validity
Not Before: Nov 4 13:01:25 2025 GMT
Not After : Nov 5 13:01:25 2025 GMT
Subject: CN=163b11c350229773d4e89fb085cb9640a341f2b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:cf:e6:a4:95:37:45:93:e8:79:c7:b3:c8:48:
d2:1e:7d:63:fe:17:b3:4d:0e:a6:3a:b2:1c:7e:2b:
0e:f2:24:21:37:ea:ba:a1:5d:35:40:81:74:fb:c2:
a7:65:9d:3d:85:e1:2e:2d:22:d7:30:f4:a5:e0:15:
10:f9:e3:01:1c:21:ef:00:45:5e:10:90:f8:9e:b0:
91:64:e0:c1:d4:46:86:6a:6c:a5:b9:6d:60:b8:09:
cf:6a:af:e8:c9:80:74:76:15:4f:f5:8c:04:eb:3b:
b7:ee:ef:d0:cd:d0:ca:4d:de:d7:59:84:94:70:6e:
af:96:51:aa:b3:c7:17:4f:09:8b:f0:c0:be:61:cc:
63:dd:20:93:ef:87:04:31:15:ca:60:cc:19:7c:05:
d6:1c:bc:2d:6a:82:1c:c5:a3:f4:43:fa:df:9d:b9:
7c:b6:0a:0e:d8:68:53:70:48:b9:46:49:72:37:51:
34:34:80:94:aa:66:b4:b3:27:e7:61:85:a4:90:ac:
c3:5b:24:08:b1:05:64:60:72:93:3f:20:86:c9:bc:
71:01:31:e4:a1:aa:1b:55:47:bf:05:79:bf:fe:23:
f5:ca:23:36:38:a1:d2:74:09:6f:a1:11:ff:70:35:
1d:be:cc:63:82:36:17:0c:67:83:9d:a2:ed:15:4e:
f9:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:3B:11:C3:50:22:97:73:D4:E8:9F:B0:85:CB:96:40:A3:41:F2:B6
X509v3 Authority Key Identifier:
keyid:F2:AE:EB:E4:1D:05:18:28:4A:BA:3A:4F:5E:5D:A0:5C:FA:BD:6F:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8q7r5B0FGChKujpPXl2gXPq9b3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/cfc1ba-9c78-4c3d-8ec3-c0ad74ca5d9b/1/8q7r5B0FGChKujpPXl2gXPq9b3Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/cfc1ba-9c78-4c3d-8ec3-c0ad74ca5d9b/1/8q7r5B0FGChKujpPXl2gXPq9b3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:3a:af:c2:10:b7:55:06:0b:fb:fe:39:ba:a1:e4:77:31:22:
d2:95:41:e2:88:ed:e0:6d:24:98:89:c2:d8:25:47:ad:2e:75:
00:b8:7f:73:d1:8e:47:4f:77:d1:be:0e:f2:8b:fe:c5:2c:54:
94:74:e8:d5:b3:41:be:fb:fa:cf:ce:be:60:b2:0b:80:59:a6:
e0:3f:ac:90:f9:38:84:2d:62:8e:9d:00:e7:f9:5f:c0:5f:64:
6d:68:f6:8b:c8:9e:1d:dd:6c:70:aa:8b:00:5d:9c:f7:24:50:
3f:c0:c9:0c:70:a4:1b:09:9c:34:e4:1c:57:d1:f7:c8:c2:e4:
5d:ed:06:7a:42:eb:fe:35:2c:c8:e5:eb:0d:d3:95:aa:67:e0:
26:6e:af:53:0a:d9:7b:f4:4b:cf:3d:85:c9:51:08:2b:91:3b:
2d:f5:34:4a:d9:fc:8e:8c:8d:d5:c9:41:14:d4:d2:b1:d8:7c:
26:48:e1:5f:f5:07:21:c3:dd:3f:56:79:c4:14:5f:ab:d4:f4:
5a:93:8d:47:dc:cc:bf:bd:ee:64:53:d3:bf:44:15:57:ea:70:
83:44:5d:bd:fd:43:ad:00:08:7b:85:dc:b8:d1:7a:2f:ea:ca:
70:78:e2:80:7c:db:50:ab:fd:83:07:c8:d0:84:93:61:3d:70:
bf:0b:17:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:46:35 2025 by rpki-client