Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/c104c6-9b65-4d46-9e45-50261b11916b/1/8METQT0N9bj6BpAR7rEJ8Ge1V5o.mft
File: 8METQT0N9bj6BpAR7rEJ8Ge1V5o.mft (raw, json)
Hash identifier: 0YgaQ8D66/c4Qq/miHGOucPibWq2ZWJm6HBR8YRXERs=
Subject key identifier: A8:7F:15:F4:A2:31:1C:85:B3:E2:46:60:CE:B4:1F:75:BC:E3:45:52
Authority key identifier: F0:C1:13:41:3D:0D:F5:B8:FA:06:90:11:EE:B1:09:F0:67:B5:57:9A
Certificate issuer: /CN=f0c113413d0df5b8fa069011eeb109f067b5579a
Certificate serial: 019A02228CB119F5EA3F72F67330524E7A59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8METQT0N9bj6BpAR7rEJ8Ge1V5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/c104c6-9b65-4d46-9e45-50261b11916b/1/8METQT0N9bj6BpAR7rEJ8Ge1V5o.mft
Manifest number: 0873
Signing time: Mon 20 Oct 2025 15:00:09 +0000
Manifest this update: Mon 20 Oct 2025 15:00:09 +0000
Manifest next update: Tue 21 Oct 2025 15:00:09 +0000
Files and hashes: 1: 8METQT0N9bj6BpAR7rEJ8Ge1V5o.crl (hash: SwwzRacqvoTWZgzK2OLtQp99QXXKtR60m8suYovUUAE=)
2: ldnhn_HcdxbmKydPEkl1v4zgEq4.roa (hash: SSQVI5X02ZNHeqKS7hQmKhf33IKgywQaf0lBe0I6EpY=)
3: o4RLvNlxcTjRoMHQG0NwWxkUYb4.roa (hash: B+fFcwV95+as9F86sHUOjXkwuPQBko5Sfhe+H4+0kBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/c104c6-9b65-4d46-9e45-50261b11916b/1/8METQT0N9bj6BpAR7rEJ8Ge1V5o.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/c104c6-9b65-4d46-9e45-50261b11916b/1/8METQT0N9bj6BpAR7rEJ8Ge1V5o.mft
rsync://rpki.ripe.net/repository/DEFAULT/8METQT0N9bj6BpAR7rEJ8Ge1V5o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:22:8c:b1:19:f5:ea:3f:72:f6:73:30:52:4e:7a:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0c113413d0df5b8fa069011eeb109f067b5579a
Validity
Not Before: Oct 20 15:00:09 2025 GMT
Not After : Oct 21 15:00:09 2025 GMT
Subject: CN=a87f15f4a2311c85b3e24660ceb41f75bce34552
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e9:aa:da:54:a8:33:18:89:9b:17:1d:58:bd:
0e:63:03:3b:6f:c9:86:fd:65:a3:f8:67:b8:e4:63:
6a:fd:84:85:0d:77:6d:8b:ca:97:6b:b6:a0:a3:05:
c0:38:b8:96:81:19:a1:52:73:cb:72:c3:0b:89:69:
de:ad:ee:12:6e:a5:c0:ab:9e:ff:7d:5f:3e:70:11:
fe:c8:08:0b:84:ad:eb:1b:f6:38:d7:08:a8:c6:59:
03:a2:d3:4c:1d:5b:c4:74:9b:e4:b4:1a:2c:29:d6:
17:e0:ae:69:75:e2:01:52:a8:fb:fc:05:19:19:5d:
92:6b:fe:99:aa:c7:4d:fc:63:ff:5b:57:40:0d:1c:
a1:67:83:90:c2:df:1d:6d:74:05:f8:7a:c9:54:5a:
04:73:14:99:ed:6b:4c:70:dd:01:78:ef:a2:93:1b:
c4:61:9c:4b:01:e0:0c:79:28:64:94:fb:81:9c:06:
90:38:6c:22:1d:f4:30:13:ee:da:6e:61:5a:f1:43:
0d:b4:aa:be:bc:64:18:87:01:0f:e7:39:28:9f:9e:
9a:83:08:0c:6a:7d:4d:a5:48:03:23:0b:fb:7f:79:
42:2f:e2:2c:55:4e:cd:56:47:f6:71:d1:21:62:88:
17:0e:74:31:39:d0:d4:50:e2:f1:3d:af:5d:1c:49:
dc:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:7F:15:F4:A2:31:1C:85:B3:E2:46:60:CE:B4:1F:75:BC:E3:45:52
X509v3 Authority Key Identifier:
keyid:F0:C1:13:41:3D:0D:F5:B8:FA:06:90:11:EE:B1:09:F0:67:B5:57:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8METQT0N9bj6BpAR7rEJ8Ge1V5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/c104c6-9b65-4d46-9e45-50261b11916b/1/8METQT0N9bj6BpAR7rEJ8Ge1V5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/c104c6-9b65-4d46-9e45-50261b11916b/1/8METQT0N9bj6BpAR7rEJ8Ge1V5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:6c:ab:76:cf:74:b4:d2:88:a1:a9:0f:53:f3:f9:49:8f:9b:
f4:a1:0d:0f:9d:d8:cb:93:53:77:1c:87:51:60:8a:a3:02:f9:
29:b5:e9:6c:a8:c9:3e:5d:f3:86:1e:50:0a:af:58:85:58:5c:
95:0e:de:46:18:10:5e:39:41:87:3a:d6:84:29:7b:3a:c3:69:
65:0d:26:0b:6b:01:d5:5c:d2:83:63:48:37:17:76:3d:1c:c0:
58:13:e4:93:e9:ff:46:ae:20:7a:d3:19:38:a1:75:03:12:31:
45:8f:49:9e:42:6f:4e:61:77:b6:6c:bd:e1:08:e9:6d:5c:64:
f9:f3:8d:a8:d5:e6:15:c4:10:69:d2:52:49:b2:b2:6c:f1:34:
14:df:23:10:81:c3:87:25:a5:fe:9d:e6:62:d8:85:2a:28:23:
ee:ea:8a:30:31:d6:0b:d1:a0:e9:93:a6:f0:01:a7:c1:46:64:
14:e2:bd:c8:d1:56:5a:8f:0c:bb:ea:cc:0a:c2:87:97:41:66:
79:fb:b8:7d:a3:a8:e5:c9:4c:5c:da:c3:9a:29:df:1f:4a:6c:
14:87:07:80:1a:6b:3a:83:f9:f1:10:a7:2a:80:41:63:95:e6:
98:1b:15:ce:5e:d7:cf:19:82:2d:53:59:76:c4:14:0e:70:ea:
32:b3:44:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:12:39 2025 by rpki-client