Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.mft
File: 8qJTzfUHoD4fV50gLY3xHWj1w9c.mft (raw, json)
Hash identifier: CwCjrUV1LsPSVsn49ks7nZ3AwSTNntefPq8/s1MlRo0=
Subject key identifier: 89:E0:FB:6D:07:64:FB:09:C1:16:86:37:B7:DE:83:6B:88:60:2A:49
Authority key identifier: F2:A2:53:CD:F5:07:A0:3E:1F:57:9D:20:2D:8D:F1:1D:68:F5:C3:D7
Certificate issuer: /CN=f2a253cdf507a03e1f579d202d8df11d68f5c3d7
Certificate serial: 0199FE46DFC917D4CBF74C083D248D6E2EF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8qJTzfUHoD4fV50gLY3xHWj1w9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.mft
Manifest number: 12D3
Signing time: Sun 19 Oct 2025 21:01:21 +0000
Manifest this update: Sun 19 Oct 2025 21:01:21 +0000
Manifest next update: Mon 20 Oct 2025 21:01:21 +0000
Files and hashes: 1: 8qJTzfUHoD4fV50gLY3xHWj1w9c.crl (hash: C7zzORJLxuf+ZJHF7ldG7wLW72ofm74UOxMgtgjtg6A=)
2: IPgK_RAdsHuRvKKv6Yp_JI973ng.roa (hash: tX54SYM7m1FlAg3IfdN7mYvGyQfWousk3Km0i1Rx1t4=)
3: Ui6ZcVR5VSgOavfnIix1oy38mjY.roa (hash: yRTuvXTUZnIOOWWsEOiOGa2OWkTQmK3kH5dqt1VxT5k=)
4: X6FDOxTNKh52-I33xxvcwTU1qaA.roa (hash: 2Nya6BSwofcloqYL9ndMBA+GqP5w942e0XCFOKQVeZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.mft
rsync://rpki.ripe.net/repository/DEFAULT/8qJTzfUHoD4fV50gLY3xHWj1w9c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:46:df:c9:17:d4:cb:f7:4c:08:3d:24:8d:6e:2e:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2a253cdf507a03e1f579d202d8df11d68f5c3d7
Validity
Not Before: Oct 19 21:01:21 2025 GMT
Not After : Oct 20 21:01:21 2025 GMT
Subject: CN=89e0fb6d0764fb09c1168637b7de836b88602a49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:27:2b:d8:64:b9:4e:6a:d9:9e:07:d9:f3:c7:
53:84:8a:40:14:7e:0a:73:7a:56:8b:9e:35:47:3a:
e6:de:03:05:e5:4a:8a:ba:70:62:99:eb:af:e7:2d:
3b:c3:3d:61:77:05:ff:bb:ed:aa:03:08:3f:e9:34:
55:20:75:32:7d:53:0f:96:da:50:e2:7a:c9:5c:b3:
83:65:f3:77:c3:7b:8f:0c:6d:b0:fd:62:34:58:81:
d7:9d:9d:a3:e3:00:f9:86:94:97:8b:90:84:7d:57:
0f:08:aa:96:70:53:12:d5:2b:6e:74:ec:e5:cb:97:
bf:d5:40:1d:20:c3:d2:2e:58:58:59:c6:96:0e:23:
a8:61:64:f2:5c:c3:d8:c4:a5:68:1b:d1:dc:b1:ce:
5a:2a:c2:e1:03:85:07:14:2d:4d:ba:3a:11:40:d3:
77:f0:0c:70:a5:03:22:7e:5e:68:15:77:10:3a:1d:
11:f2:77:db:02:65:04:aa:c1:23:45:69:7b:3c:a1:
ed:57:05:e1:de:3b:dd:70:25:1b:ce:df:63:a1:25:
de:da:b9:3f:0b:a0:a3:48:12:13:1c:b6:43:d3:63:
42:c9:ad:0f:33:27:b8:ef:29:3b:9b:1f:93:e1:88:
93:8d:73:d8:b4:21:70:45:05:3b:11:77:72:3b:02:
12:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:E0:FB:6D:07:64:FB:09:C1:16:86:37:B7:DE:83:6B:88:60:2A:49
X509v3 Authority Key Identifier:
keyid:F2:A2:53:CD:F5:07:A0:3E:1F:57:9D:20:2D:8D:F1:1D:68:F5:C3:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8qJTzfUHoD4fV50gLY3xHWj1w9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:b7:10:c9:d1:38:02:f5:96:6f:30:f7:ff:14:9f:91:9c:63:
43:99:a5:7c:4e:90:7b:20:eb:cc:29:81:e6:a1:31:e1:18:de:
de:23:8f:0a:80:32:e6:48:7a:dd:d2:a8:09:4d:fd:a0:ef:22:
56:fd:04:96:eb:91:e4:b2:41:7a:f9:09:21:64:45:2f:c5:86:
94:7d:e5:92:8e:08:c8:7c:1a:4d:03:41:3a:1d:31:53:d0:a0:
d7:01:32:2c:2d:8e:c4:92:59:79:48:4e:12:58:ea:b6:cb:8a:
5a:b6:1f:53:8f:82:b2:82:e9:1c:18:a5:54:e7:0a:62:1e:35:
25:e7:9f:4e:34:31:a1:05:3d:a7:a2:9f:f7:d9:34:3a:83:dd:
7a:a8:04:27:6d:77:4c:25:fb:e4:ab:28:88:57:6e:38:6d:95:
4a:0f:38:70:c1:c8:35:46:01:c1:2d:90:3d:21:a3:15:53:96:
5c:5c:df:7a:c4:61:f8:7f:38:2d:e1:69:41:10:b7:e4:dd:e9:
f5:3b:79:cc:e4:fe:ce:71:d4:47:c2:6d:0b:8b:50:a9:36:7f:
72:80:88:d9:81:c9:e1:2c:df:e1:f6:3d:1b:75:b7:58:27:83:
1f:60:40:bc:1e:27:a9:18:40:8b:c4:e1:06:a9:ab:3e:45:07:
76:b2:30:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:02:10 2025 by rpki-client