Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.mft
File: _8qZfTkM1uRuASjlDXC4Tnq2dA8.mft (raw, json)
Hash identifier: u2qAOcC4SQkhQek2OGnQL97Eq2IQMKOZhDXkQn22Pbc=
Subject key identifier: BE:B4:89:0C:97:FE:FA:16:07:1E:F4:09:7B:75:E4:2C:AD:FC:0B:87
Authority key identifier: FF:CA:99:7D:39:0C:D6:E4:6E:01:28:E5:0D:70:B8:4E:7A:B6:74:0F
Certificate issuer: /CN=ffca997d390cd6e46e0128e50d70b84e7ab6740f
Certificate serial: 019A02FE9E2BAEF9A3B1469FFB240445A0A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_8qZfTkM1uRuASjlDXC4Tnq2dA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.mft
Manifest number: 16E9
Signing time: Mon 20 Oct 2025 19:00:32 +0000
Manifest this update: Mon 20 Oct 2025 19:00:32 +0000
Manifest next update: Tue 21 Oct 2025 19:00:32 +0000
Files and hashes: 1: 2xBb1eN1uQhPtol-uKswad7hTL8.roa (hash: dXJffbqWVGzT51NatOrFAZ7XiueTLyhLa5jFxa/I29Y=)
2: 44uLXBcL_RZwFzmvHMDFnzRLsrc.roa (hash: ebcHWLKhk2lxI2aGu12w8EL09XqOe4qlsJc7YtoQwgs=)
3: _8qZfTkM1uRuASjlDXC4Tnq2dA8.crl (hash: CQVE+Myvq2+BDavTH8mQ/F0VFkgSRyXb+riu+tLipww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/_8qZfTkM1uRuASjlDXC4Tnq2dA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:fe:9e:2b:ae:f9:a3:b1:46:9f:fb:24:04:45:a0:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffca997d390cd6e46e0128e50d70b84e7ab6740f
Validity
Not Before: Oct 20 19:00:32 2025 GMT
Not After : Oct 21 19:00:32 2025 GMT
Subject: CN=beb4890c97fefa16071ef4097b75e42cadfc0b87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:84:05:4a:b5:29:a2:1c:33:0d:c6:38:2a:e2:
84:f0:a0:70:c9:73:2f:40:e3:f2:04:3f:87:32:80:
64:4c:48:a2:82:9b:6e:52:46:b4:73:f3:d0:ea:ca:
02:ca:5c:57:c5:87:f6:dd:e6:d0:66:40:97:b7:7b:
38:66:fc:71:2e:71:83:74:92:4c:65:d7:7c:c7:3b:
de:ec:20:50:f8:9b:e8:e3:29:89:71:d1:ed:ba:d4:
94:26:7d:da:cf:95:cf:bb:d3:b8:f7:f7:69:22:9e:
c0:6f:db:c1:f0:f1:aa:f7:7e:06:dc:ee:78:b5:09:
f9:b0:ca:6a:b6:3a:33:ff:56:bb:45:6b:d0:a0:18:
40:c4:4a:70:3f:42:27:62:3b:bc:00:90:41:35:bc:
c4:f6:da:15:77:49:2b:40:7f:d8:62:b0:ad:ff:c0:
f7:33:98:64:d8:0b:36:33:dc:6f:2f:5c:2f:29:7a:
a5:f9:71:52:a0:47:d6:f1:b8:a2:f3:a3:83:37:a0:
97:3d:62:95:9c:23:7e:c9:cd:df:68:19:e4:99:51:
15:66:68:79:10:6e:61:22:ed:03:b0:8a:29:7b:86:
a8:f6:ca:ee:88:57:32:e0:98:96:29:35:3b:54:2d:
28:47:28:a2:20:46:3e:8c:e7:e0:44:02:50:96:ec:
2d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:B4:89:0C:97:FE:FA:16:07:1E:F4:09:7B:75:E4:2C:AD:FC:0B:87
X509v3 Authority Key Identifier:
keyid:FF:CA:99:7D:39:0C:D6:E4:6E:01:28:E5:0D:70:B8:4E:7A:B6:74:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_8qZfTkM1uRuASjlDXC4Tnq2dA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:61:7e:e2:fd:2c:ca:12:6d:fe:9e:14:c0:b2:00:33:fd:84:
2c:0a:b9:cd:2a:11:c4:05:65:5e:22:67:58:9c:29:19:83:79:
2c:f9:c2:be:67:04:b2:9c:79:07:64:33:95:c7:45:af:b8:41:
de:9f:fc:72:48:3a:0e:e0:9e:ec:2e:fa:68:94:d5:54:5a:e5:
08:be:c3:c0:11:6e:e8:65:4c:54:6e:4d:0a:92:57:db:2a:6d:
cc:e8:27:f5:20:c3:22:e0:b2:d9:0d:cc:ea:ae:2b:65:58:68:
97:0d:67:8a:f9:f9:87:c9:3a:55:f8:a4:97:da:24:bf:d3:ff:
4a:f2:a3:8b:a6:93:58:ef:86:b2:f3:7b:07:5e:6c:ee:80:40:
bf:db:c0:cd:39:ca:62:0c:d1:03:24:20:92:e2:ef:1d:43:ac:
77:43:50:7b:66:ef:eb:67:1a:a8:56:fa:c4:16:06:d3:a4:2b:
4f:49:63:75:d7:de:8f:ab:d5:36:39:c5:56:99:11:5e:8d:d6:
41:27:8c:3c:01:fc:f3:84:15:de:9d:60:fa:bc:2c:0d:03:b7:
7c:88:77:7a:85:7c:85:f9:75:ca:ad:3b:90:e4:3a:ae:95:19:
19:dc:2a:a4:32:73:7d:f7:95:45:5f:33:41:da:8a:a5:37:3b:
93:e1:86:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:33:30 2025 by rpki-client