Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/cbac08-c11e-4806-a2fd-7c88c4e04f91/1/8WCQxfYjPLrq8xnc-uaSqVbuoQI.mft
File: 8WCQxfYjPLrq8xnc-uaSqVbuoQI.mft (raw, json)
Hash identifier: SIMW7rx6n/7fde72kstBuHA0ukaFlChDZDmauCbQiAQ=
Subject key identifier: 3B:B0:59:95:11:7C:9C:C6:60:9F:93:A6:0B:CA:CF:A1:3A:9D:C2:7A
Authority key identifier: F1:60:90:C5:F6:23:3C:BA:EA:F3:19:DC:FA:E6:92:A9:56:EE:A1:02
Certificate issuer: /CN=f16090c5f6233cbaeaf319dcfae692a956eea102
Certificate serial: 019A4D73D0903BFDBEFFABFBE28A00915920
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8WCQxfYjPLrq8xnc-uaSqVbuoQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/cbac08-c11e-4806-a2fd-7c88c4e04f91/1/8WCQxfYjPLrq8xnc-uaSqVbuoQI.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 06:00:26 +0000
Manifest this update: Tue 04 Nov 2025 06:00:26 +0000
Manifest next update: Wed 05 Nov 2025 06:00:26 +0000
Files and hashes: 1: 7Kmoa0mTT-hmQesiS2Vd310k5jw.roa (hash: USbTJdTp4AkhAgtWaDPdpVWCdumqCodGAPlzgsbWpqI=)
2: 8WCQxfYjPLrq8xnc-uaSqVbuoQI.crl (hash: KfZVt/xdX0klKCIqpNvmdbD9lu1aeSPmeS8ybcNijwc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/cbac08-c11e-4806-a2fd-7c88c4e04f91/1/8WCQxfYjPLrq8xnc-uaSqVbuoQI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/cbac08-c11e-4806-a2fd-7c88c4e04f91/1/8WCQxfYjPLrq8xnc-uaSqVbuoQI.mft
rsync://rpki.ripe.net/repository/DEFAULT/8WCQxfYjPLrq8xnc-uaSqVbuoQI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:d0:90:3b:fd:be:ff:ab:fb:e2:8a:00:91:59:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f16090c5f6233cbaeaf319dcfae692a956eea102
Validity
Not Before: Nov 4 06:00:26 2025 GMT
Not After : Nov 5 06:00:26 2025 GMT
Subject: CN=3bb05995117c9cc6609f93a60bcacfa13a9dc27a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:5a:61:4f:15:83:01:fc:a3:4e:1d:13:1a:2f:
f3:ff:d6:8e:0e:a3:3f:8b:08:94:40:72:9f:bd:c7:
5e:45:2d:21:bc:a6:b9:b1:fd:51:80:a9:1c:26:75:
57:ee:89:00:2f:12:db:fb:f6:62:ae:93:3e:65:9a:
77:90:a2:35:3a:af:11:1f:6b:80:53:77:ac:7c:f8:
c5:5c:4d:a6:34:f7:05:ae:03:4a:de:60:6d:41:81:
f5:ab:40:bd:2c:ad:b3:58:39:3d:43:ab:09:7a:97:
6d:58:4d:15:03:35:26:ea:33:6c:bb:6c:85:39:29:
75:c2:d9:4c:03:12:c6:e3:32:cd:92:ae:03:1e:93:
17:56:03:60:dc:e6:24:fa:05:3a:e6:84:ba:5c:08:
bc:6f:15:31:a6:42:9f:d9:53:45:d7:ef:66:7e:68:
8a:3c:ed:a2:8f:37:8e:10:b7:1f:90:f2:52:5f:67:
ea:c7:2b:61:8f:65:9b:49:79:0c:63:27:26:c6:75:
6c:13:9b:c3:76:b4:28:2e:4c:26:9b:8a:e0:29:73:
e0:ff:87:91:10:07:52:ba:f8:9a:56:ce:b4:7e:46:
1d:c7:c4:4d:9b:e4:fd:2f:5b:dd:d7:d7:26:d2:aa:
b6:60:73:38:2a:65:29:93:15:a9:c4:39:49:6b:fc:
37:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:B0:59:95:11:7C:9C:C6:60:9F:93:A6:0B:CA:CF:A1:3A:9D:C2:7A
X509v3 Authority Key Identifier:
keyid:F1:60:90:C5:F6:23:3C:BA:EA:F3:19:DC:FA:E6:92:A9:56:EE:A1:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8WCQxfYjPLrq8xnc-uaSqVbuoQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/cbac08-c11e-4806-a2fd-7c88c4e04f91/1/8WCQxfYjPLrq8xnc-uaSqVbuoQI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/cbac08-c11e-4806-a2fd-7c88c4e04f91/1/8WCQxfYjPLrq8xnc-uaSqVbuoQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:50:fe:50:d7:c8:fb:6a:1e:ea:cc:f7:13:10:64:07:65:f4:
75:10:dd:0e:ca:69:02:d6:aa:ed:5b:5d:c1:27:aa:83:a3:84:
0c:3a:2b:1f:b0:10:24:d8:32:d6:b3:fd:fc:16:1b:4b:90:59:
05:db:1b:de:c0:c0:c1:4e:6d:01:e0:50:49:57:ee:dd:ee:0d:
ff:0d:e1:d5:56:09:af:a5:3c:1c:4e:71:24:f4:11:90:bd:1b:
e5:28:0d:88:ec:d8:8d:e7:e3:bf:8f:cf:8b:9b:bb:93:3f:f7:
3e:ed:7f:0a:b8:86:75:87:be:5f:d4:23:97:3f:67:20:46:4c:
3b:32:bd:33:b4:84:04:21:8a:9a:0d:da:0c:05:59:03:36:cb:
62:7b:09:83:18:a2:ab:8a:5d:1e:e3:19:c3:2c:e9:22:6d:5d:
5b:1f:9b:5f:76:0d:55:f9:f2:37:99:ee:24:fb:07:13:d3:c0:
a2:12:31:68:13:aa:b3:5f:1a:25:04:88:cf:a7:6e:27:c6:42:
b1:b9:9d:1d:a4:c0:48:61:48:56:42:5d:a0:81:cd:0b:45:29:
7f:12:54:28:3a:45:66:8d:08:df:e6:a2:b3:de:d4:25:2b:c7:
b6:11:e9:49:cc:b5:77:3b:2a:62:ca:93:d2:eb:16:70:29:48:
9e:40:0e:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:54:54 2025 by rpki-client