Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.mft
File: A8vbBZX8SJApOKePQsHq8KFZv0Y.mft (raw, json)
Hash identifier: MkooCtf4gHhQfhu5TfiwxMG43MwLYvIgwTpqDWsaTh4=
Subject key identifier: 32:34:D8:5A:6A:21:98:6F:33:8F:A3:66:28:FC:1B:BD:D7:58:72:EB
Authority key identifier: 03:CB:DB:05:95:FC:48:90:29:38:A7:8F:42:C1:EA:F0:A1:59:BF:46
Certificate issuer: /CN=03cbdb0595fc48902938a78f42c1eaf0a159bf46
Certificate serial: 019A4E4FB062FA9B301BB58C31743E3AD1F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A8vbBZX8SJApOKePQsHq8KFZv0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.mft
Manifest number: 0BF9
Signing time: Tue 04 Nov 2025 10:00:36 +0000
Manifest this update: Tue 04 Nov 2025 10:00:36 +0000
Manifest next update: Wed 05 Nov 2025 10:00:36 +0000
Files and hashes: 1: A8vbBZX8SJApOKePQsHq8KFZv0Y.crl (hash: NyMvqatn0OTMgkMRrvK9WG2TMInFHf1hWFoRJr3QEC0=)
2: GK_repQ6rwK9wKBexoj_8KHn0ps.roa (hash: BVRGH6L3m9qE1hNSh0udH+0Cqw8KHPDP3+FP2Bc+9Fo=)
3: PwFex15w_vGu9rMsC-NGPYybEsw.roa (hash: oh3ulFFupTLJCwmoHULEmcM0EU2doUd+YoDkAtl9zLo=)
4: Se_t6NLKu8IA2sTkrVOBiKVsQwY.roa (hash: phtV0BDD2FsHScjhDeHLatllFRKkRPV0UJtMe0PEg8c=)
5: UU-ZPgHLSl7n9-aFlFBn6cpPmcU.roa (hash: Q6YDAvzuzbvQcAN8CcizevWV2gHJhbtqI7OUoG4zkxk=)
6: cWH5PPaYfZWUJba_G0n_uzh_rsc.roa (hash: C8oVSKijBzzlBacVotbOoAmP0eM+u3jK9TaM8PG08eI=)
7: eK7sZ1D_OT19uO-hHprpcrVXcWU.roa (hash: bVKg53TVS+OiFbk3Bkeg0BfOZQFTwlQ5IxwlXslILAc=)
8: gHxt-7VNY3fc7Ia-bzrqoQMWyk4.roa (hash: zNJ0Kmvb3CH4yE59hTArSJep5ChElM6AnbN5rY/o7aE=)
9: xLGL3BfWxMtcUVRxtiUbq631owE.roa (hash: +UNhAurOfSKP8/97u/DACbGsjraqdASOxaVTIj4mWJM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/A8vbBZX8SJApOKePQsHq8KFZv0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:b0:62:fa:9b:30:1b:b5:8c:31:74:3e:3a:d1:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03cbdb0595fc48902938a78f42c1eaf0a159bf46
Validity
Not Before: Nov 4 10:00:36 2025 GMT
Not After : Nov 5 10:00:36 2025 GMT
Subject: CN=3234d85a6a21986f338fa36628fc1bbdd75872eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e4:ca:26:b7:82:ad:86:1b:11:eb:09:2f:74:
e5:bd:f3:be:50:ee:62:47:e9:37:41:74:71:27:30:
24:14:b9:d4:c7:17:88:fc:44:fd:39:9c:84:4b:2d:
bb:6b:51:da:e5:eb:be:8e:4a:c8:f9:c2:1a:4f:0c:
ca:90:37:a3:6f:c0:89:eb:0c:bf:54:8f:1e:2f:b6:
48:12:de:76:85:20:d8:9d:a2:19:7e:c9:4b:fd:1f:
39:ed:73:61:7e:75:14:f2:35:87:e1:21:5a:c2:10:
3b:ff:1c:a4:06:2c:50:68:e8:12:b1:fa:f3:d2:19:
7f:9b:f4:4d:60:d4:3d:3c:53:a9:04:8a:99:93:d9:
fd:31:a9:8c:b0:05:c2:20:ab:6b:55:a8:d1:1e:a7:
e3:3e:b2:0c:3a:9d:01:4f:76:4c:1d:f1:d2:aa:7e:
8e:2e:c2:ec:e8:a7:6e:03:83:ac:82:3b:8b:26:ea:
35:28:78:84:ad:65:e3:3b:94:53:5e:6d:2b:7d:cc:
01:e7:e8:9e:f1:4b:34:8a:db:ae:82:d2:04:95:98:
75:23:9e:2d:be:ef:85:ed:3b:c2:2a:7c:a2:65:66:
19:30:71:9e:d8:2f:b2:a4:cd:bd:10:dc:cc:b8:67:
61:da:55:be:bd:b1:19:71:63:ce:4d:a9:e5:bf:f0:
9d:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:34:D8:5A:6A:21:98:6F:33:8F:A3:66:28:FC:1B:BD:D7:58:72:EB
X509v3 Authority Key Identifier:
keyid:03:CB:DB:05:95:FC:48:90:29:38:A7:8F:42:C1:EA:F0:A1:59:BF:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8vbBZX8SJApOKePQsHq8KFZv0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:de:7e:e7:93:97:cf:98:ea:c2:96:ca:1c:3e:ff:a6:8c:44:
7e:d9:2c:5a:fe:7e:25:22:d0:3f:ca:75:d2:75:4a:73:19:60:
84:4d:49:5f:9c:9e:57:54:8b:2a:33:b6:a6:b4:6a:ea:f7:57:
1d:21:a5:eb:94:34:a6:30:13:30:bc:05:c1:9f:96:75:a1:4f:
7e:10:ef:7c:c3:6c:81:da:27:76:23:57:90:ad:c3:2b:a2:41:
68:c2:41:4d:22:58:b0:27:b5:9b:dc:46:c9:9d:f4:42:99:6e:
01:e6:37:d7:b3:2c:21:b3:68:fe:80:5a:6f:02:51:55:aa:af:
f9:76:f2:83:08:46:f5:6b:2a:91:eb:5c:f8:d3:38:cf:a6:5d:
ca:6f:1e:51:47:4b:bf:4f:fe:e5:e5:3e:27:ef:37:43:7a:bd:
3b:60:7e:53:1e:98:25:f0:bd:ef:39:25:0c:f1:25:fd:8f:55:
ec:16:1c:ce:aa:f1:2b:ea:5a:66:c7:a0:9f:52:36:36:d9:20:
f9:4b:e7:ec:ff:80:3b:eb:82:d6:ab:0f:d8:63:63:a9:23:12:
4a:bf:d5:e8:08:ea:1e:1f:d7:2a:8e:fc:0b:76:a6:f0:a9:41:
ff:8f:c4:e8:da:f1:ed:40:ac:5f:18:47:c9:de:69:6d:28:3a:
c1:ea:0d:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:58:12 2025 by rpki-client