Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/a36fb2-e60d-4f8b-9c8a-490c88301fce/1/qCRriLgptKOq3CgNoUW2PpnpKg4.mft
File: qCRriLgptKOq3CgNoUW2PpnpKg4.mft (raw, json)
Hash identifier: fU0zWdkUOyY4swdxBQfxfEQe2392FHC3AwBl4VjtuwE=
Subject key identifier: 2D:02:D5:75:A8:48:2B:F3:30:D5:77:58:28:AF:F9:FB:98:F4:40:34
Authority key identifier: A8:24:6B:88:B8:29:B4:A3:AA:DC:28:0D:A1:45:B6:3E:99:E9:2A:0E
Certificate issuer: /CN=a8246b88b829b4a3aadc280da145b63e99e92a0e
Certificate serial: 0199EE9CF55ACBB3E3C04C326DA577978B2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qCRriLgptKOq3CgNoUW2PpnpKg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/a36fb2-e60d-4f8b-9c8a-490c88301fce/1/qCRriLgptKOq3CgNoUW2PpnpKg4.mft
Manifest number: A8
Signing time: Thu 16 Oct 2025 20:01:27 +0000
Manifest this update: Thu 16 Oct 2025 20:01:27 +0000
Manifest next update: Fri 17 Oct 2025 20:01:27 +0000
Files and hashes: 1: 6-EX2htJlHImEHBSvQOybhHaeO0.roa (hash: 1ZsDmzKZ+zRhoeIFPi5/Pw5pQ/dfpTV0ipC/YNmanno=)
2: fl64q3w812YfzXLS36kYEo550Os.roa (hash: FCrMbgS1Qp2Ghje1H1/gJu/F21+3Pg9qcnIqWk+O48U=)
3: qCRriLgptKOq3CgNoUW2PpnpKg4.crl (hash: NwULKleJ45nf6M0t/zMzb37OWxABXIa1OVPt4ROGIX4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/a36fb2-e60d-4f8b-9c8a-490c88301fce/1/qCRriLgptKOq3CgNoUW2PpnpKg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/a36fb2-e60d-4f8b-9c8a-490c88301fce/1/qCRriLgptKOq3CgNoUW2PpnpKg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qCRriLgptKOq3CgNoUW2PpnpKg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Oct 2025 20:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ee:9c:f5:5a:cb:b3:e3:c0:4c:32:6d:a5:77:97:8b:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8246b88b829b4a3aadc280da145b63e99e92a0e
Validity
Not Before: Oct 16 20:01:27 2025 GMT
Not After : Oct 17 20:01:27 2025 GMT
Subject: CN=2d02d575a8482bf330d5775828aff9fb98f44034
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:71:bd:56:89:43:a7:f4:71:02:53:ac:b8:37:
a5:c3:a1:43:4a:b9:ef:e7:53:3d:ad:59:a2:53:d7:
12:cf:a1:67:e0:51:fd:93:d8:55:66:a0:9b:3a:3f:
28:da:c0:5b:4d:a8:b9:a4:8f:b8:93:c0:7e:36:2e:
e8:dc:15:00:0f:a9:63:a7:1a:3f:20:cf:4c:d3:9b:
b5:eb:1e:32:9e:0b:eb:54:8d:f9:fc:1f:42:9a:b5:
c6:14:d4:f5:40:40:02:1c:4a:a0:34:2e:61:38:17:
cd:c4:cd:42:c8:9d:21:34:ce:a4:c8:08:5d:ed:3c:
cd:8b:ad:8f:67:e2:6b:32:e7:2e:df:42:56:46:7e:
4c:ad:5f:b0:17:14:05:35:2b:59:a6:a4:1d:57:a3:
4a:22:a2:a7:c4:a4:b2:d5:66:53:af:8d:82:10:28:
06:63:a3:3a:bb:8d:0b:42:79:f2:d1:49:ae:78:3b:
ab:6a:bc:62:31:0e:16:9d:77:72:f9:75:7d:99:13:
d4:ef:53:a9:57:a6:99:88:56:e6:78:5b:75:22:46:
93:0f:3e:49:1d:d5:d5:be:ad:e5:fb:19:11:7f:88:
8e:a7:78:c4:5f:29:c0:83:6e:f0:51:d2:34:9a:0a:
ab:71:7f:13:45:c7:55:0a:fe:20:e8:90:08:02:22:
fd:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:02:D5:75:A8:48:2B:F3:30:D5:77:58:28:AF:F9:FB:98:F4:40:34
X509v3 Authority Key Identifier:
keyid:A8:24:6B:88:B8:29:B4:A3:AA:DC:28:0D:A1:45:B6:3E:99:E9:2A:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qCRriLgptKOq3CgNoUW2PpnpKg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a36fb2-e60d-4f8b-9c8a-490c88301fce/1/qCRriLgptKOq3CgNoUW2PpnpKg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a36fb2-e60d-4f8b-9c8a-490c88301fce/1/qCRriLgptKOq3CgNoUW2PpnpKg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:45:81:6e:ea:d9:dc:5c:ad:61:41:5c:57:7d:d0:64:b6:bb:
b1:e5:b6:27:7e:a0:c6:cb:ee:cb:9c:80:86:2f:5e:ef:d1:d9:
9e:e4:ab:f3:e0:ae:7f:86:60:b8:87:32:8c:e5:62:0f:1c:ed:
95:5e:06:de:cf:df:fb:b4:ee:89:c3:29:5c:e1:43:0f:a2:f8:
a2:a8:a3:fd:5e:07:f6:9b:57:3c:bc:e0:db:b9:dd:5c:45:35:
3b:86:58:de:d6:f1:20:4c:80:7a:53:69:2f:71:a6:15:f1:bd:
a3:17:f5:f1:92:f9:c5:65:9f:52:96:0c:3e:f7:78:8e:9d:8f:
0e:1e:ee:b7:51:2e:b2:a1:b7:0d:0e:cf:11:16:ee:0b:b4:22:
62:ac:bc:98:5c:4e:5d:c5:26:bf:b1:a2:2c:8d:96:e2:fb:b0:
47:b7:5c:de:fa:3a:62:d9:b4:2e:bf:a0:bf:b0:b2:9e:e4:f3:
f3:0a:38:52:d7:e2:9d:d2:c9:47:f4:d5:cc:4f:90:24:0f:e5:
cc:aa:4a:2e:0e:bb:cd:6a:d0:4e:59:3c:75:15:d6:25:70:4b:
65:5f:91:29:e8:e1:73:da:55:b9:6d:99:c8:94:e5:d0:24:70:
6a:d6:d6:62:b8:b5:f6:1d:fd:a2:72:66:98:8f:75:bb:0d:15:
20:d5:bd:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 17 04:41:04 2025 by rpki-client