Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.mft
File: A8vbBZX8SJApOKePQsHq8KFZv0Y.mft (raw, json)
Hash identifier: oP2W7572tZff2UjpDN8814sBySsc23W0PCrU+rVDJv0=
Subject key identifier: 15:65:B5:E5:48:28:E3:B5:A9:7B:49:A3:04:C2:9C:E8:16:64:26:C4
Authority key identifier: 03:CB:DB:05:95:FC:48:90:29:38:A7:8F:42:C1:EA:F0:A1:59:BF:46
Certificate issuer: /CN=03cbdb0595fc48902938a78f42c1eaf0a159bf46
Certificate serial: 0199FBEAF1380A4CA899CEBA62790740BAF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A8vbBZX8SJApOKePQsHq8KFZv0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.mft
Manifest number: 0BCE
Signing time: Sun 19 Oct 2025 10:01:42 +0000
Manifest this update: Sun 19 Oct 2025 10:01:42 +0000
Manifest next update: Mon 20 Oct 2025 10:01:42 +0000
Files and hashes: 1: A8vbBZX8SJApOKePQsHq8KFZv0Y.crl (hash: xRUW6qhlWC2M/6HcyDjySQISTSfmFb3dnyeXVITRa7U=)
2: GK_repQ6rwK9wKBexoj_8KHn0ps.roa (hash: BVRGH6L3m9qE1hNSh0udH+0Cqw8KHPDP3+FP2Bc+9Fo=)
3: PwFex15w_vGu9rMsC-NGPYybEsw.roa (hash: oh3ulFFupTLJCwmoHULEmcM0EU2doUd+YoDkAtl9zLo=)
4: Se_t6NLKu8IA2sTkrVOBiKVsQwY.roa (hash: phtV0BDD2FsHScjhDeHLatllFRKkRPV0UJtMe0PEg8c=)
5: VrAK-3V8CNeDpB5qVeCvMUDkHWY.roa (hash: LENa2mgDZKaaSJWhIwKS7EyivXKjCiNw/jcO9yMBo6I=)
6: cWH5PPaYfZWUJba_G0n_uzh_rsc.roa (hash: C8oVSKijBzzlBacVotbOoAmP0eM+u3jK9TaM8PG08eI=)
7: eK7sZ1D_OT19uO-hHprpcrVXcWU.roa (hash: bVKg53TVS+OiFbk3Bkeg0BfOZQFTwlQ5IxwlXslILAc=)
8: gHxt-7VNY3fc7Ia-bzrqoQMWyk4.roa (hash: zNJ0Kmvb3CH4yE59hTArSJep5ChElM6AnbN5rY/o7aE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/A8vbBZX8SJApOKePQsHq8KFZv0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:f1:38:0a:4c:a8:99:ce:ba:62:79:07:40:ba:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03cbdb0595fc48902938a78f42c1eaf0a159bf46
Validity
Not Before: Oct 19 10:01:42 2025 GMT
Not After : Oct 20 10:01:42 2025 GMT
Subject: CN=1565b5e54828e3b5a97b49a304c29ce8166426c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d1:ce:be:21:b0:c0:e0:54:39:20:f7:1a:1e:
aa:3b:ab:c2:32:f4:27:37:2f:32:4e:10:d7:4a:3a:
a3:cb:e2:34:22:8b:19:8a:52:21:d7:36:ee:0b:a2:
d6:3b:12:46:fe:08:6c:0f:e1:a3:45:ad:f8:7a:ec:
1a:01:67:1a:2d:93:62:4b:88:1f:0a:d6:82:3b:bb:
66:96:d9:42:d2:3e:1a:e7:f5:bb:18:a8:e8:0f:11:
d1:68:fa:14:e8:13:0f:04:4e:f6:e8:a0:a9:15:5a:
1e:f7:2a:ba:2c:93:73:7f:95:89:e2:0c:6e:60:75:
89:8d:a9:f9:cc:f9:7c:16:dd:26:f0:f3:f7:72:eb:
c8:a6:9d:d2:21:c0:6b:4c:3f:09:a6:4e:be:58:56:
bd:98:ab:3a:6b:47:9f:0a:97:0a:be:4f:f7:18:fa:
d7:d9:a6:1c:0a:b3:1f:d0:13:16:77:67:b4:5d:a1:
4c:3b:20:99:3a:61:4e:69:98:eb:28:a6:1d:46:d2:
de:b4:1f:7e:7a:13:c8:1f:07:8d:ba:b2:79:ef:14:
2a:af:ac:71:93:6f:cf:7b:f8:a9:64:74:61:4e:5d:
79:e1:d8:60:c5:12:7b:94:4c:5a:58:e5:50:43:dd:
cc:7a:98:aa:dc:cd:20:ce:a3:cb:6e:5b:99:d5:b7:
f7:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:65:B5:E5:48:28:E3:B5:A9:7B:49:A3:04:C2:9C:E8:16:64:26:C4
X509v3 Authority Key Identifier:
keyid:03:CB:DB:05:95:FC:48:90:29:38:A7:8F:42:C1:EA:F0:A1:59:BF:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8vbBZX8SJApOKePQsHq8KFZv0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:7d:52:8b:40:5b:e7:5f:b4:0a:da:e3:0c:b8:38:4f:a2:43:
c9:e7:90:d2:1c:57:26:15:ab:4c:e3:0d:9a:e1:51:85:83:ac:
04:4e:8e:75:05:2d:ae:d5:ed:d4:4e:f3:f0:e0:fc:e2:51:f8:
09:10:3d:21:6e:03:2d:f4:18:43:89:2f:4b:01:aa:78:00:1b:
3d:5f:09:9f:19:93:3c:b3:d8:ed:91:2c:8b:0a:c9:26:91:32:
83:6b:7c:78:f8:87:a9:08:09:8e:db:43:79:bd:86:57:6f:27:
c4:86:79:c8:c6:e9:ff:58:cc:70:95:2d:6c:08:23:46:9e:3d:
f2:f3:64:e2:bb:aa:76:65:08:4b:03:b1:0e:65:4c:b9:a6:cc:
31:55:75:4a:b4:7a:3f:8b:eb:8f:98:7a:23:c9:09:40:9f:a6:
14:00:33:53:56:4b:ff:48:af:9a:fa:80:b9:9d:a2:7e:02:72:
b0:6a:fc:fe:0e:6e:79:0a:4a:a5:30:91:c3:fa:2d:00:cb:42:
b7:1b:af:0f:74:19:77:0e:67:46:7e:2e:d8:20:22:f4:25:c2:
83:e1:d0:82:24:7f:83:7e:9d:e6:64:6c:15:bb:0a:4b:9a:12:
b5:3c:e4:b3:34:8d:c3:0a:24:54:7d:7d:41:85:bd:f3:b5:da:
7b:b0:2c:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:14:36 2025 by rpki-client