Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.mft
File: Q8p_P2XSlHr5TzmLs8fJwyABkIQ.mft (raw, json)
Hash identifier: VkN8B0cPZKYEc+UutJ+IuUpAdUyOkHMbj8ohZF71yZE=
Subject key identifier: 61:4A:E8:39:3A:00:3C:78:B4:57:5A:4E:12:11:EE:0E:7E:84:20:99
Authority key identifier: 43:CA:7F:3F:65:D2:94:7A:F9:4F:39:8B:B3:C7:C9:C3:20:01:90:84
Certificate issuer: /CN=43ca7f3f65d2947af94f398bb3c7c9c320019084
Certificate serial: 019A4D73E356DB2163E93462A4AAB83C54C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.mft
Manifest number: 0BF0
Signing time: Tue 04 Nov 2025 06:00:31 +0000
Manifest this update: Tue 04 Nov 2025 06:00:31 +0000
Manifest next update: Wed 05 Nov 2025 06:00:31 +0000
Files and hashes: 1: Q8p_P2XSlHr5TzmLs8fJwyABkIQ.crl (hash: e6sDDjCynkk9qZM1Vm9Nb92uYaGq52HSzM/36G2eGxk=)
2: n71Z9zO5i6A3MnYNwx7Uxb_OUGA.roa (hash: CVGNrsSAJVnXCFxttiW1g0o49r+f3Le2U2M52m4z4p8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:e3:56:db:21:63:e9:34:62:a4:aa:b8:3c:54:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43ca7f3f65d2947af94f398bb3c7c9c320019084
Validity
Not Before: Nov 4 06:00:31 2025 GMT
Not After : Nov 5 06:00:31 2025 GMT
Subject: CN=614ae8393a003c78b4575a4e1211ee0e7e842099
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:bf:08:99:21:a7:7a:6f:90:fe:ac:7c:44:93:
78:cd:b9:8f:7d:f2:5e:1f:5a:31:af:29:20:9a:d9:
e7:4e:bf:a9:d0:04:d8:76:0c:84:6d:a4:09:09:4b:
4b:c9:3d:82:1b:19:4e:84:ec:0b:71:0d:44:8d:a5:
8a:42:9c:cd:1f:f8:6f:0d:d3:bc:3d:ac:5c:91:64:
57:d5:9b:42:58:5c:9e:df:bf:55:aa:e2:04:d4:b8:
56:09:3c:63:f9:20:9e:35:15:15:4c:ce:12:9d:fb:
dc:7d:73:73:7c:c0:f8:c9:56:04:fd:39:3d:5b:b6:
92:ed:e6:1c:08:d5:e7:dd:9a:39:94:5c:95:8f:af:
06:d9:bd:09:7a:85:78:d4:4b:10:a7:83:79:1b:30:
1c:c2:3f:06:fc:02:9b:ac:91:5d:f9:a2:16:f4:82:
23:85:bc:e9:37:cf:b8:44:34:8a:4f:aa:15:ef:72:
2f:6b:55:bc:b5:a6:e8:64:c3:a7:0a:02:57:3a:94:
33:b4:4c:bd:d3:f4:72:16:23:5d:ed:6f:c8:47:05:
d5:f9:c1:ec:a5:4d:a4:20:c4:c5:9b:60:60:a9:33:
aa:65:8f:82:03:b9:85:18:93:ac:cd:a5:33:03:6f:
73:d6:ae:ed:3b:87:20:55:e5:69:12:88:0b:92:c4:
0f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:4A:E8:39:3A:00:3C:78:B4:57:5A:4E:12:11:EE:0E:7E:84:20:99
X509v3 Authority Key Identifier:
keyid:43:CA:7F:3F:65:D2:94:7A:F9:4F:39:8B:B3:C7:C9:C3:20:01:90:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:45:bc:15:ad:e5:f9:9a:74:4b:30:9a:30:a6:63:dc:2a:be:
31:40:38:55:b8:93:50:5f:aa:db:7e:d5:b4:c4:0b:b9:ea:16:
8d:2f:e4:61:1d:66:d1:33:98:27:a7:e8:eb:69:15:f9:bb:f9:
01:81:1b:a9:97:1a:f7:9b:09:89:16:73:24:03:70:36:f3:77:
97:05:79:47:68:d3:49:50:82:6e:4f:79:a4:fa:4f:4e:ad:25:
9b:d3:e1:76:9e:39:2b:b3:f7:8d:97:c7:50:30:d8:e6:c3:68:
ae:01:a2:07:85:67:18:1e:b4:1f:f8:17:98:a0:a3:13:06:9c:
54:a3:82:54:24:5f:69:d8:9e:32:2e:c2:29:71:fa:18:6a:57:
c6:d4:9c:ae:66:88:3d:ec:d0:0c:c9:af:b8:ea:e1:84:6e:12:
d4:7c:fe:5b:c9:99:fb:5e:0d:8a:37:c8:0b:6f:f7:94:25:2b:
9d:95:ce:3a:b1:08:d0:e4:eb:52:a2:83:8b:f3:e3:59:7d:7d:
cd:17:c8:77:a6:64:9e:9d:b8:10:f1:e9:13:2d:c3:15:8f:3c:
c8:cc:bc:38:f9:43:74:ac:a2:2b:ac:84:55:77:26:ee:95:bd:
35:ad:8c:65:67:cd:1f:94:20:94:2c:b5:3c:63:2f:33:d6:9a:
75:a0:b0:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:47:37 2025 by rpki-client