Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
File: A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft (raw, json)
Hash identifier: WJgDqOnOqL1d1kEwNBAFOodq4A7k9r+FpKgx/r2zK50=
Subject key identifier: 48:44:4F:FF:C3:C9:AE:5D:36:8F:47:52:85:45:F8:9A:3F:AD:09:E9
Authority key identifier: 03:C3:3E:43:EF:56:52:7A:16:9D:6A:C6:D7:E6:2C:63:D1:97:30:51
Certificate issuer: /CN=03c33e43ef56527a169d6ac6d7e62c63d1973051
Certificate serial: 019A4FCFEA2DB1256CA4BF1EFB0A804D2867
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
Manifest number: 172F
Signing time: Tue 04 Nov 2025 17:00:17 +0000
Manifest this update: Tue 04 Nov 2025 17:00:17 +0000
Manifest next update: Wed 05 Nov 2025 17:00:17 +0000
Files and hashes: 1: 19QpkXgghLM3Nv0nEMVJTVhhYlk.roa (hash: J5AzJxFSrkUz6NEqgZpKHFp1Qkuuq+hf2j4tyd26uK8=)
2: A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl (hash: +fQe1iHj8rF/iGLSBpky7TPSIBjR7W3rlCEjwLHIcN8=)
3: aUt9STDYB4WpJzoIeOhkBXlmRGY.roa (hash: OBmceRN0cnIIMX2WS5mLBG1wMtaz4OUFUqNkNJhbrA8=)
4: c9sXvnnFKQwKh05j0TaYAQugLQM.roa (hash: eyB+ysjYhGow5lnf5FUGFEiyTh1wZN2qzaaHi/6zhTQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:cf:ea:2d:b1:25:6c:a4:bf:1e:fb:0a:80:4d:28:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03c33e43ef56527a169d6ac6d7e62c63d1973051
Validity
Not Before: Nov 4 17:00:17 2025 GMT
Not After : Nov 5 17:00:17 2025 GMT
Subject: CN=48444fffc3c9ae5d368f47528545f89a3fad09e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:d7:cb:bc:7a:5a:1d:bf:f8:98:f8:a1:38:19:
31:c4:e7:cf:b6:1f:18:5d:d9:0a:ae:74:2e:a7:80:
0a:d9:d1:94:fb:94:31:7d:b5:1f:79:8c:33:4a:34:
6b:2b:7b:18:c8:ca:41:4a:e1:fe:f0:dc:14:af:0c:
53:33:ab:b7:ee:a4:17:4f:7e:22:ef:d6:98:a4:5e:
e3:64:1d:53:07:a6:eb:5c:93:d7:3d:32:97:08:a9:
dd:2b:5a:de:09:89:fc:be:04:72:5e:12:a5:93:0a:
76:28:89:af:4b:21:c2:da:ff:fe:eb:02:d9:57:bb:
65:da:08:ed:7a:27:c0:6a:e9:cd:f7:63:2c:39:82:
a5:c8:b1:ae:c5:f5:ab:ee:53:78:18:55:c6:88:71:
34:0b:ef:dd:b4:82:95:35:f4:e2:7a:bf:66:13:46:
47:16:9e:74:28:b0:d2:52:e1:91:39:6e:eb:82:bf:
63:5e:58:fa:07:12:76:99:06:95:3f:e4:db:10:fd:
6b:99:2a:2a:5b:ed:b4:82:6b:42:83:8e:36:1e:4e:
97:9c:4a:19:04:01:84:f9:6e:c5:b1:61:8c:65:8a:
76:72:cf:e3:d1:18:d3:7b:ea:75:f7:7f:e9:57:30:
be:d4:e5:ff:d2:2c:64:3b:b1:b8:53:3a:83:7c:93:
e8:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:44:4F:FF:C3:C9:AE:5D:36:8F:47:52:85:45:F8:9A:3F:AD:09:E9
X509v3 Authority Key Identifier:
keyid:03:C3:3E:43:EF:56:52:7A:16:9D:6A:C6:D7:E6:2C:63:D1:97:30:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:c9:6b:96:9f:6e:03:7a:c6:91:97:a5:05:ab:d7:7e:a2:e5:
f4:d4:68:e7:14:31:d6:fc:fc:0e:ca:b3:6e:d6:2f:ee:56:3b:
b9:d3:dc:8b:37:37:7c:b4:b8:cf:29:0f:08:86:03:9a:9a:8d:
55:bf:72:3a:07:62:40:e7:1c:07:34:f8:a5:fd:74:b9:2c:67:
27:3c:ed:de:24:64:e5:9e:d7:7d:7d:39:64:aa:1e:02:0d:88:
44:33:6f:4c:d6:91:6f:7c:14:bc:c0:23:55:ac:07:22:51:0c:
cc:3d:eb:89:83:01:26:07:9d:30:19:25:63:0e:e2:17:a6:2d:
ae:10:7f:01:ae:47:fb:d0:7c:97:49:0c:52:80:3a:1a:ac:58:
5d:99:8a:03:2f:54:a4:8e:12:e6:0c:17:be:68:8b:a8:92:11:
44:d5:6e:96:79:f8:80:f4:ae:ba:a4:6f:c5:3f:5a:71:20:8a:
0c:25:3f:6f:9e:f4:5c:62:c5:2b:29:ea:08:01:79:ae:9e:f2:
3e:96:cf:2e:52:11:20:b9:58:76:ba:6a:d9:a1:0c:f6:5f:5f:
fa:bf:b8:86:f3:e8:33:0f:8c:79:51:aa:c5:4e:cc:f4:7b:e5:
e8:12:a9:7a:57:51:bb:53:af:80:54:04:9d:48:52:7c:ae:af:
c0:3e:bc:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:45:02 2025 by rpki-client