Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
File: A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft (raw, json)
Hash identifier: zXJr4wloXs3vxZw7kfTMstLXfJ+7y9xFjf4ITWlkK1c=
Subject key identifier: FA:5B:90:29:B6:D4:00:FC:3C:8D:D4:A9:56:B8:13:E5:81:6F:F0:3E
Authority key identifier: 03:C3:3E:43:EF:56:52:7A:16:9D:6A:C6:D7:E6:2C:63:D1:97:30:51
Certificate issuer: /CN=03c33e43ef56527a169d6ac6d7e62c63d1973051
Certificate serial: 019A02911EF2EF02CE720236F6287E9A844F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
Manifest number: 1707
Signing time: Mon 20 Oct 2025 17:00:56 +0000
Manifest this update: Mon 20 Oct 2025 17:00:56 +0000
Manifest next update: Tue 21 Oct 2025 17:00:56 +0000
Files and hashes: 1: 19QpkXgghLM3Nv0nEMVJTVhhYlk.roa (hash: J5AzJxFSrkUz6NEqgZpKHFp1Qkuuq+hf2j4tyd26uK8=)
2: A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl (hash: C1jUDHz5FbmPbmlTUyWiazUGfXQjGgUfVKkrXBE4hV0=)
3: aUt9STDYB4WpJzoIeOhkBXlmRGY.roa (hash: OBmceRN0cnIIMX2WS5mLBG1wMtaz4OUFUqNkNJhbrA8=)
4: c9sXvnnFKQwKh05j0TaYAQugLQM.roa (hash: eyB+ysjYhGow5lnf5FUGFEiyTh1wZN2qzaaHi/6zhTQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:91:1e:f2:ef:02:ce:72:02:36:f6:28:7e:9a:84:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03c33e43ef56527a169d6ac6d7e62c63d1973051
Validity
Not Before: Oct 20 17:00:56 2025 GMT
Not After : Oct 21 17:00:56 2025 GMT
Subject: CN=fa5b9029b6d400fc3c8dd4a956b813e5816ff03e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b7:85:ae:f2:9c:fa:f6:79:33:18:26:db:01:
d2:63:9a:90:2e:96:28:e6:0c:f5:df:f5:5e:c8:22:
15:b2:42:96:c6:4c:2a:46:e4:6a:13:7e:d1:29:b7:
ec:b1:cd:12:36:ed:2d:8e:70:4f:2c:4b:7f:9c:14:
6c:97:f0:68:8c:d0:ca:70:0d:af:55:4d:ad:40:e5:
06:cd:49:25:a0:19:a3:45:67:95:c0:90:37:95:dc:
03:89:c3:e3:46:aa:f6:57:0f:01:33:a3:54:4b:a6:
b0:c3:a0:9a:49:48:43:69:6e:7d:a1:1f:d2:ad:b1:
5b:4a:5f:a6:cd:57:b1:a7:6f:1a:1a:90:c3:52:fe:
12:83:15:cf:00:c1:15:b1:fa:6a:09:88:ad:76:d3:
ff:a8:7d:b3:3f:ca:63:dc:1d:a8:37:1c:37:2a:f9:
65:08:1d:c9:ba:c7:53:09:10:da:71:bb:41:b1:ca:
2d:13:1c:74:f4:b5:b1:7a:d1:46:7b:46:f7:fc:cc:
44:3f:44:0f:be:bb:df:9b:d0:00:ec:45:c6:bb:36:
bd:87:5c:f0:a0:72:ba:ff:f7:0d:fb:67:cb:e4:a7:
8c:a8:94:b9:7f:86:66:35:bd:f8:46:e8:45:40:19:
6c:a6:d1:2c:4d:42:1d:30:3d:15:da:d4:b7:d9:2b:
a9:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:5B:90:29:B6:D4:00:FC:3C:8D:D4:A9:56:B8:13:E5:81:6F:F0:3E
X509v3 Authority Key Identifier:
keyid:03:C3:3E:43:EF:56:52:7A:16:9D:6A:C6:D7:E6:2C:63:D1:97:30:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:ea:c4:25:f9:eb:b1:b2:9d:1f:c2:64:7a:c9:0c:e3:b2:69:
59:9b:d3:01:de:a6:ce:39:cb:6b:1c:c8:e8:48:11:78:6f:28:
7f:c5:d8:bd:23:0d:8c:95:a5:47:d6:cc:73:cb:b8:eb:d4:97:
ea:6f:7d:1c:17:04:67:8e:6b:32:aa:e9:02:20:8b:c7:2e:5b:
70:05:81:86:14:40:14:dc:44:fa:cc:d0:f1:e6:dc:26:58:67:
35:c9:82:fa:1f:f2:6f:af:a3:52:4e:8d:1c:d1:fa:6c:2e:b0:
d9:0f:0a:71:bd:44:43:1b:54:03:db:7c:ca:cc:41:b5:da:48:
14:35:82:8c:c3:26:77:69:34:00:ee:a2:75:40:f7:ea:6b:7c:
0f:0f:76:77:e0:23:4c:af:32:3d:d6:e6:b8:49:8d:4d:01:16:
90:fa:c1:93:2e:0d:a6:71:37:76:5a:a7:20:0a:92:24:72:69:
0c:a6:24:9e:08:f3:ab:3c:e0:14:29:6c:3c:6a:38:2f:25:10:
c7:f2:d9:a5:21:6c:88:c6:ca:47:3e:39:35:c1:ff:14:13:46:
a4:ad:c2:ed:1a:99:78:0c:aa:f2:cc:70:0c:d1:bc:c6:5d:13:
85:c7:9d:5d:fb:f1:88:08:e4:43:07:94:74:26:50:7f:e3:24:
a8:11:91:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:27:46 2025 by rpki-client