Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/846a03-de24-485b-b9b7-c4bc803d893f/1/8QA9LHGrB2mR-wPtZgC_HUi3K-U.mft
File: 8QA9LHGrB2mR-wPtZgC_HUi3K-U.mft (raw, json)
Hash identifier: 4avlZJb37D+3UA/hU2phXpUHcP9zTo78mVONqwEN0sg=
Subject key identifier: 36:CB:A5:AC:74:AA:82:43:0E:4E:9F:43:64:C1:05:8E:41:B8:3B:E6
Authority key identifier: F1:00:3D:2C:71:AB:07:69:91:FB:03:ED:66:00:BF:1D:48:B7:2B:E5
Certificate issuer: /CN=f1003d2c71ab076991fb03ed6600bf1d48b72be5
Certificate serial: 019A71B7700275C8AC35BBF4D4A7DDA7C0A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8QA9LHGrB2mR-wPtZgC_HUi3K-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/846a03-de24-485b-b9b7-c4bc803d893f/1/8QA9LHGrB2mR-wPtZgC_HUi3K-U.mft
Manifest number: 110F
Signing time: Tue 11 Nov 2025 07:00:38 +0000
Manifest this update: Tue 11 Nov 2025 07:00:38 +0000
Manifest next update: Wed 12 Nov 2025 07:00:38 +0000
Files and hashes: 1: 8QA9LHGrB2mR-wPtZgC_HUi3K-U.crl (hash: mOsz15dk0BxA9aoHo9otFRarU37HiQft30kAEDr6umk=)
2: qPfR7RG57f18LNEfOXECDUWuxuU.roa (hash: QgXqOHY45cNI3RJ9Yex5GhM6/GX8GPU2S0Ij2p9Y640=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/846a03-de24-485b-b9b7-c4bc803d893f/1/8QA9LHGrB2mR-wPtZgC_HUi3K-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/846a03-de24-485b-b9b7-c4bc803d893f/1/8QA9LHGrB2mR-wPtZgC_HUi3K-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/8QA9LHGrB2mR-wPtZgC_HUi3K-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:70:02:75:c8:ac:35:bb:f4:d4:a7:dd:a7:c0:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1003d2c71ab076991fb03ed6600bf1d48b72be5
Validity
Not Before: Nov 11 07:00:38 2025 GMT
Not After : Nov 12 07:00:38 2025 GMT
Subject: CN=36cba5ac74aa82430e4e9f4364c1058e41b83be6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:df:b1:69:ce:c7:9c:7c:36:bf:ab:1d:a0:77:
c7:d3:c4:55:e5:55:83:09:40:45:61:5c:60:70:27:
6f:95:5a:39:83:32:21:69:b6:f0:49:d4:ac:60:c2:
a4:65:81:ae:cb:ae:76:f0:f1:f2:65:2b:dd:10:8b:
fc:f6:ca:4f:51:75:54:af:b3:5a:54:9d:bd:29:5e:
b6:ab:c8:30:d3:18:2b:50:23:e3:f2:39:59:d6:19:
62:cc:32:8a:f2:f0:74:82:22:85:ae:17:45:1e:90:
1d:8b:f2:31:2b:42:26:3b:be:82:76:9f:ec:cb:b1:
eb:e3:44:8d:e7:0d:91:2e:7d:a9:95:bb:41:73:f6:
af:da:c4:94:de:01:b9:95:93:f1:19:fd:9a:f2:7a:
bf:2e:2f:25:bd:e1:ea:e1:6d:6a:f2:06:cc:5c:ec:
5c:03:d7:8f:0c:60:c9:21:fe:28:9a:f1:b4:c7:42:
10:47:d8:2f:b2:5e:13:bb:af:b1:e8:25:2a:9d:c4:
c4:23:4f:e7:c3:7f:2f:53:5e:62:a0:b0:da:80:69:
62:f2:5f:38:c7:bf:1a:58:4d:fa:53:54:0b:7a:e2:
1a:c9:c2:0d:63:55:95:57:88:8a:ac:35:bd:3d:66:
ac:1f:bf:91:da:52:6c:a9:16:41:e0:a8:f2:cf:27:
f8:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:CB:A5:AC:74:AA:82:43:0E:4E:9F:43:64:C1:05:8E:41:B8:3B:E6
X509v3 Authority Key Identifier:
keyid:F1:00:3D:2C:71:AB:07:69:91:FB:03:ED:66:00:BF:1D:48:B7:2B:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8QA9LHGrB2mR-wPtZgC_HUi3K-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/846a03-de24-485b-b9b7-c4bc803d893f/1/8QA9LHGrB2mR-wPtZgC_HUi3K-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/846a03-de24-485b-b9b7-c4bc803d893f/1/8QA9LHGrB2mR-wPtZgC_HUi3K-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:f4:53:82:04:9e:05:fb:05:e1:ee:64:0f:37:af:de:3b:24:
aa:0a:10:5c:8a:49:4a:d9:6f:18:7a:7a:12:37:8b:a8:4a:50:
48:fa:58:50:ad:82:a0:bc:6a:6e:02:6e:22:22:33:f7:8d:f2:
a9:09:df:53:03:2b:b3:6e:ad:47:de:29:70:12:26:4a:25:aa:
86:48:bc:84:fe:47:cb:f8:e3:52:72:00:4c:fe:e1:17:4c:d7:
15:2d:a7:ea:e3:e7:46:d6:63:06:d0:8e:63:7e:23:c3:a0:99:
c9:16:38:c4:84:40:4c:f0:9b:29:11:63:69:10:34:67:64:2c:
b0:22:f9:41:32:a8:eb:0e:de:92:9a:30:a2:ff:fb:d3:c2:5a:
d9:cf:57:5b:71:98:bc:de:0e:36:c2:b7:18:03:e3:02:69:4f:
14:75:c5:d0:16:e0:c5:8a:bc:0c:c3:c6:c6:54:d4:b1:36:a4:
be:d0:71:6c:59:80:ee:c9:b9:3d:e0:f9:c7:a7:e2:6d:8d:f4:
15:f4:4e:19:f2:a9:44:02:a9:9b:29:36:d5:32:68:9c:c2:2f:
6b:55:74:55:4d:dd:cc:9d:80:5c:88:cf:52:87:7d:1b:66:5d:
f6:0a:53:d1:a3:e0:2d:ec:d8:d3:3b:44:ee:cc:06:d1:81:27:
cc:72:a4:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:48:41 2025 by rpki-client