Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/f7ec70-0ded-42ca-9d00-9d9e1b6beee9/1/p8qa2kRST8U2-j7Kv3WN8mQHyLE.mft
File: p8qa2kRST8U2-j7Kv3WN8mQHyLE.mft (raw, json)
Hash identifier: owu9cnQARE5s/aR49RY3Pg6FcpYvxOB8F+Wes2tipgw=
Subject key identifier: E7:9F:E2:F5:6A:F4:68:1F:F9:A7:76:00:36:58:13:B3:CE:71:6B:8B
Authority key identifier: A7:CA:9A:DA:44:52:4F:C5:36:FA:3E:CA:BF:75:8D:F2:64:07:C8:B1
Certificate issuer: /CN=a7ca9ada44524fc536fa3ecabf758df26407c8b1
Certificate serial: 019A0222B38CAA91F9BF861AC870503480E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p8qa2kRST8U2-j7Kv3WN8mQHyLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/f7ec70-0ded-42ca-9d00-9d9e1b6beee9/1/p8qa2kRST8U2-j7Kv3WN8mQHyLE.mft
Manifest number: 13B3
Signing time: Mon 20 Oct 2025 15:00:19 +0000
Manifest this update: Mon 20 Oct 2025 15:00:19 +0000
Manifest next update: Tue 21 Oct 2025 15:00:19 +0000
Files and hashes: 1: AGh_BXwDaFnqdr1rluMLMPMOrnM.roa (hash: L7VSHEAFfvwnZGbHuhPcAH6Mmh4M0FtFsSBsZ0VnfV0=)
2: p8qa2kRST8U2-j7Kv3WN8mQHyLE.crl (hash: 2vAsnCbL9OI2HRsDn/4GCdfXmHDaQjt7sFL1+GKVobA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/f7ec70-0ded-42ca-9d00-9d9e1b6beee9/1/p8qa2kRST8U2-j7Kv3WN8mQHyLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/f7ec70-0ded-42ca-9d00-9d9e1b6beee9/1/p8qa2kRST8U2-j7Kv3WN8mQHyLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/p8qa2kRST8U2-j7Kv3WN8mQHyLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:22:b3:8c:aa:91:f9:bf:86:1a:c8:70:50:34:80:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7ca9ada44524fc536fa3ecabf758df26407c8b1
Validity
Not Before: Oct 20 15:00:19 2025 GMT
Not After : Oct 21 15:00:19 2025 GMT
Subject: CN=e79fe2f56af4681ff9a77600365813b3ce716b8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a4:57:af:b6:ee:fc:f6:8d:f7:d1:bc:b9:50:
95:9a:40:fe:9e:c2:1c:57:d2:6b:21:a4:a4:2f:eb:
52:57:6f:55:e2:30:53:0c:94:50:95:0f:93:63:b9:
8f:19:f8:24:02:ee:e1:f4:95:05:b2:00:a1:31:d6:
9d:52:3b:cb:5b:6c:bb:f7:cd:3a:7b:b4:5a:4c:68:
be:0d:78:9e:8a:0e:34:fe:07:1b:13:fa:b9:3a:e5:
7a:8c:2c:65:96:7b:6a:e1:b3:23:29:79:b1:27:df:
45:c2:c6:b7:eb:67:87:27:9d:a4:d6:49:a2:92:0b:
ee:09:43:d0:6a:86:63:c8:37:53:a9:0f:ac:18:73:
d5:9e:78:fe:54:c3:2a:fb:71:7d:eb:23:c0:23:04:
31:0a:53:e9:5e:85:08:9a:40:06:da:cd:8f:c2:47:
f9:c3:3c:c1:9a:f0:70:cf:d0:0e:2c:58:88:e8:76:
d8:80:91:2f:1c:d3:6c:b9:17:99:a6:0d:28:4c:93:
fd:64:d4:60:3c:3e:4a:c1:00:1f:60:97:81:f7:57:
5d:f8:94:e8:9b:f7:e1:c9:92:df:ef:dc:a0:f9:76:
86:d4:84:82:6d:68:c6:2a:71:95:9a:cf:75:08:6a:
20:4c:43:5b:13:f4:b0:b8:b2:57:19:7a:ec:1f:8d:
3c:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:9F:E2:F5:6A:F4:68:1F:F9:A7:76:00:36:58:13:B3:CE:71:6B:8B
X509v3 Authority Key Identifier:
keyid:A7:CA:9A:DA:44:52:4F:C5:36:FA:3E:CA:BF:75:8D:F2:64:07:C8:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p8qa2kRST8U2-j7Kv3WN8mQHyLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/f7ec70-0ded-42ca-9d00-9d9e1b6beee9/1/p8qa2kRST8U2-j7Kv3WN8mQHyLE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/f7ec70-0ded-42ca-9d00-9d9e1b6beee9/1/p8qa2kRST8U2-j7Kv3WN8mQHyLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:bf:19:8b:01:28:32:cf:5d:6b:49:a6:92:75:52:b9:34:bb:
36:bb:b9:e3:d4:a1:6e:2a:49:58:75:3e:44:02:67:d3:68:55:
c5:10:a2:89:4c:9c:b4:d0:ec:9a:06:86:be:34:ca:23:ec:45:
b8:44:42:cd:d0:7e:a6:f5:ad:83:74:39:f4:54:a5:36:99:cd:
23:d7:5e:20:c3:20:dd:b8:ac:74:a5:a7:18:f6:5b:a7:86:b7:
c1:15:85:e0:0c:74:7e:f1:df:ff:bc:26:6f:db:fd:a5:e6:ea:
50:01:75:38:3a:60:25:db:05:50:57:5d:84:06:20:4c:b1:88:
81:a1:b2:d5:ab:74:ae:03:48:b3:1b:9a:9a:61:57:27:3c:69:
97:3b:72:62:22:df:80:fb:29:2f:11:bf:86:59:6a:20:db:41:
7b:c6:34:e3:83:be:5d:60:27:9e:5f:54:08:dc:b1:20:dd:7d:
f5:5b:93:89:69:bf:fe:39:cb:a8:71:4a:2f:16:a2:be:ff:96:
3b:85:3b:2e:e8:e5:b6:d9:03:b1:14:5e:55:1a:6c:a2:fa:ae:
6e:ef:bf:f5:44:6c:99:f8:c6:d0:91:59:fc:29:ee:f3:e7:9e:
f7:b6:0f:d7:00:ec:a2:c5:5c:07:25:9e:d9:e5:59:d8:a4:a6:
9e:55:23:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:16:39 2025 by rpki-client