Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/e116c2-8f82-4cba-b5ae-97dcbb0086e3/1/B8QNcBYPMIZCEpobcq5a5S24g8Q.mft
File: B8QNcBYPMIZCEpobcq5a5S24g8Q.mft (raw, json)
Hash identifier: lhyITBlEPDSySyxMEojMHN4SPbGeAWTH8rft0dJMkjI=
Subject key identifier: 45:33:93:EA:25:B0:C2:8C:AB:5E:B1:DE:C3:91:59:7E:05:D0:E0:FA
Authority key identifier: 07:C4:0D:70:16:0F:30:86:42:12:9A:1B:72:AE:5A:E5:2D:B8:83:C4
Certificate issuer: /CN=07c40d70160f308642129a1b72ae5ae52db883c4
Certificate serial: 0199FD3421D208CEECAD52E518925CA8D679
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B8QNcBYPMIZCEpobcq5a5S24g8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/e116c2-8f82-4cba-b5ae-97dcbb0086e3/1/B8QNcBYPMIZCEpobcq5a5S24g8Q.mft
Manifest number: 0FA1
Signing time: Sun 19 Oct 2025 16:01:16 +0000
Manifest this update: Sun 19 Oct 2025 16:01:16 +0000
Manifest next update: Mon 20 Oct 2025 16:01:16 +0000
Files and hashes: 1: B8QNcBYPMIZCEpobcq5a5S24g8Q.crl (hash: YKeE9RvPeOYvDcQ8gK+QGgMpL9tuPSE5ILxxPF8AOho=)
2: FrqlWltvg2IIueyy45ogVbfzXOI.roa (hash: I5FtBNSL1o5XSBQN3V8eqj4CiYkfCwGhk95ch/7f1y0=)
3: w7QCmizrQXeuidochTL3wPaTPwQ.roa (hash: H6wbvBF9uFQ8IN4rm+CScPncC9WaN8oR2hYLVqdaZWA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/e116c2-8f82-4cba-b5ae-97dcbb0086e3/1/B8QNcBYPMIZCEpobcq5a5S24g8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/e116c2-8f82-4cba-b5ae-97dcbb0086e3/1/B8QNcBYPMIZCEpobcq5a5S24g8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/B8QNcBYPMIZCEpobcq5a5S24g8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:21:d2:08:ce:ec:ad:52:e5:18:92:5c:a8:d6:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07c40d70160f308642129a1b72ae5ae52db883c4
Validity
Not Before: Oct 19 16:01:16 2025 GMT
Not After : Oct 20 16:01:16 2025 GMT
Subject: CN=453393ea25b0c28cab5eb1dec391597e05d0e0fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:41:1d:ae:0a:6e:bf:59:68:26:e6:34:01:fb:
c8:f3:e4:88:8e:9a:e6:19:6e:64:90:17:f6:be:dd:
9c:65:e4:9d:ab:3b:d8:d5:1b:c4:34:0b:31:81:2e:
70:d7:db:48:56:9f:d3:e9:bf:d2:1e:fe:e4:de:91:
78:5e:1e:d2:3c:bb:41:92:b6:f9:16:0e:f5:e1:1b:
cd:3f:68:e7:db:b1:02:73:4f:a7:f2:67:40:4e:c8:
cc:54:e6:0b:93:d6:44:dd:b7:37:95:6b:68:94:4c:
17:0e:45:ab:b8:a8:6f:b6:8a:4f:5f:4b:6e:1d:bc:
47:32:9a:f2:ef:9e:02:b7:99:af:2d:0a:43:0b:46:
b0:1c:f8:ac:a7:af:be:da:bb:36:01:08:ae:78:6a:
34:54:a3:34:c9:7c:75:3f:ca:3b:5c:db:44:03:73:
37:e1:73:92:5d:4a:48:74:29:f5:4c:3c:b2:47:24:
8d:38:92:71:67:45:d3:ce:91:e9:43:ac:a1:67:dc:
72:87:4e:83:0e:05:3a:e2:20:d1:c1:d2:9d:df:8f:
a2:ed:6e:21:2b:83:2a:7f:96:08:d5:f7:31:d0:41:
89:fd:82:7f:04:be:07:34:96:63:26:f5:d6:46:a8:
7b:f8:39:31:a8:42:b9:1f:fb:3c:30:24:f5:a6:6a:
35:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:33:93:EA:25:B0:C2:8C:AB:5E:B1:DE:C3:91:59:7E:05:D0:E0:FA
X509v3 Authority Key Identifier:
keyid:07:C4:0D:70:16:0F:30:86:42:12:9A:1B:72:AE:5A:E5:2D:B8:83:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B8QNcBYPMIZCEpobcq5a5S24g8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e116c2-8f82-4cba-b5ae-97dcbb0086e3/1/B8QNcBYPMIZCEpobcq5a5S24g8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e116c2-8f82-4cba-b5ae-97dcbb0086e3/1/B8QNcBYPMIZCEpobcq5a5S24g8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:d5:31:fc:d0:c3:92:4c:f7:4f:59:50:ef:b1:67:4a:af:0f:
74:71:68:c6:99:40:9d:9a:3d:a1:43:30:d6:76:7b:22:e6:50:
8d:23:c6:1f:5f:c0:9a:2f:a8:79:d1:b2:aa:f3:9e:25:fa:8c:
02:e2:01:77:dc:9b:b8:c0:48:8b:d7:0c:20:e3:04:c1:44:c4:
da:92:93:3d:00:ef:56:34:34:28:38:1c:b7:bb:04:0d:6e:3d:
b4:d5:b8:02:77:77:15:cd:a9:6a:52:77:a1:70:58:90:e2:ea:
80:25:29:77:2c:53:3e:14:51:4c:9f:d0:54:e0:3d:6e:97:aa:
d4:5c:ee:b9:40:34:44:8c:f4:3b:01:03:a4:d5:f4:22:d5:2f:
6e:ba:33:12:4d:f1:04:b3:75:cf:ac:7c:95:1c:2b:d6:4a:7a:
03:dc:5d:1c:97:ff:61:de:6b:9c:f0:d9:01:d4:34:92:37:96:
e2:0f:0b:85:b1:7c:01:2d:c1:e6:be:c1:58:72:c3:92:68:05:
81:18:87:ec:35:81:e7:b3:86:72:0f:15:63:c5:9b:81:a6:52:
89:31:70:0f:9c:1a:15:75:54:6c:6f:6b:58:39:93:86:18:ca:
dc:1e:ef:0d:36:31:35:5c:98:c8:7c:57:02:08:92:a0:72:48:
8f:8b:57:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:42:18 2025 by rpki-client