Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.mft
File: A8vbBZX8SJApOKePQsHq8KFZv0Y.mft (raw, json)
Hash identifier: l76yQbb9JoeZXV/XRV4+0m+1iXpy0hIwn5IahYztL0U=
Subject key identifier: 1E:B9:A9:6C:74:03:55:1F:CD:B1:2C:F3:94:6C:72:3D:38:4D:7C:A1
Authority key identifier: 03:CB:DB:05:95:FC:48:90:29:38:A7:8F:42:C1:EA:F0:A1:59:BF:46
Certificate issuer: /CN=03cbdb0595fc48902938a78f42c1eaf0a159bf46
Certificate serial: 019A1E083DF4A27688A5A18880C6A9355150
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A8vbBZX8SJApOKePQsHq8KFZv0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.mft
Manifest number: 0BE0
Signing time: Sun 26 Oct 2025 01:00:47 +0000
Manifest this update: Sun 26 Oct 2025 01:00:47 +0000
Manifest next update: Mon 27 Oct 2025 01:00:47 +0000
Files and hashes: 1: A8vbBZX8SJApOKePQsHq8KFZv0Y.crl (hash: h5Q8kOMR8rmksPT7aZ9/Vxf38qNHvJoHa6OB6iJrEWg=)
2: GK_repQ6rwK9wKBexoj_8KHn0ps.roa (hash: BVRGH6L3m9qE1hNSh0udH+0Cqw8KHPDP3+FP2Bc+9Fo=)
3: PwFex15w_vGu9rMsC-NGPYybEsw.roa (hash: oh3ulFFupTLJCwmoHULEmcM0EU2doUd+YoDkAtl9zLo=)
4: Se_t6NLKu8IA2sTkrVOBiKVsQwY.roa (hash: phtV0BDD2FsHScjhDeHLatllFRKkRPV0UJtMe0PEg8c=)
5: UU-ZPgHLSl7n9-aFlFBn6cpPmcU.roa (hash: Q6YDAvzuzbvQcAN8CcizevWV2gHJhbtqI7OUoG4zkxk=)
6: cWH5PPaYfZWUJba_G0n_uzh_rsc.roa (hash: C8oVSKijBzzlBacVotbOoAmP0eM+u3jK9TaM8PG08eI=)
7: eK7sZ1D_OT19uO-hHprpcrVXcWU.roa (hash: bVKg53TVS+OiFbk3Bkeg0BfOZQFTwlQ5IxwlXslILAc=)
8: gHxt-7VNY3fc7Ia-bzrqoQMWyk4.roa (hash: zNJ0Kmvb3CH4yE59hTArSJep5ChElM6AnbN5rY/o7aE=)
9: xLGL3BfWxMtcUVRxtiUbq631owE.roa (hash: +UNhAurOfSKP8/97u/DACbGsjraqdASOxaVTIj4mWJM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/A8vbBZX8SJApOKePQsHq8KFZv0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 19:59:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1e:08:3d:f4:a2:76:88:a5:a1:88:80:c6:a9:35:51:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03cbdb0595fc48902938a78f42c1eaf0a159bf46
Validity
Not Before: Oct 26 01:00:47 2025 GMT
Not After : Oct 27 01:00:47 2025 GMT
Subject: CN=1eb9a96c7403551fcdb12cf3946c723d384d7ca1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:1a:7d:dc:68:db:78:e5:1c:ed:9f:20:b2:d6:
45:2f:31:48:a9:cb:cd:a8:7f:19:64:d7:aa:67:cc:
55:db:19:70:ea:8d:85:5f:18:79:f7:84:01:8c:81:
a6:10:25:1a:0f:9e:39:f6:e8:19:8a:b5:2f:09:96:
92:11:3e:fd:9b:87:f7:ac:46:53:77:c5:fb:a0:77:
12:ac:d1:c3:2d:4d:cc:41:b2:f5:91:06:c9:f5:cb:
82:c1:ed:0a:4d:5c:25:d4:3d:4b:27:b5:f0:c5:b0:
03:6c:a7:b3:b3:5b:0e:2c:65:95:4f:59:04:19:30:
ad:97:2e:7c:fd:bd:5d:b7:14:21:35:b4:8c:2f:80:
14:77:c5:36:2d:44:e5:b5:1f:5f:18:12:8f:ce:a8:
09:dd:41:ba:b4:be:01:70:a6:d0:a0:1e:dd:93:4e:
fd:42:44:f3:22:a3:b0:dd:eb:92:3a:82:47:c7:1d:
00:03:80:57:91:a1:75:e7:ff:3a:3a:83:48:20:de:
89:a6:72:c5:e4:dc:09:86:1c:37:82:40:d4:dc:bb:
45:a7:13:41:a4:75:fb:64:b6:cf:66:be:c2:09:86:
72:50:cc:02:55:cc:e4:5c:3d:73:8b:7a:d2:18:bf:
73:22:dc:eb:42:f9:c8:7b:de:b0:9e:2e:78:86:8d:
f3:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:B9:A9:6C:74:03:55:1F:CD:B1:2C:F3:94:6C:72:3D:38:4D:7C:A1
X509v3 Authority Key Identifier:
keyid:03:CB:DB:05:95:FC:48:90:29:38:A7:8F:42:C1:EA:F0:A1:59:BF:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8vbBZX8SJApOKePQsHq8KFZv0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:ee:f6:a1:c6:aa:e7:09:4f:4b:2f:df:4e:a5:c8:2a:67:18:
15:5b:99:e4:92:bb:58:b6:d3:a1:09:df:7d:b5:05:8d:a2:08:
61:47:b8:69:ae:20:da:d6:73:d9:da:36:c0:89:a6:10:4a:6f:
df:60:a1:d9:0a:23:0c:2d:02:b7:57:6d:18:04:a5:c2:69:7e:
f3:03:14:59:e7:82:dc:9f:1a:72:56:1a:04:e9:08:8b:e3:4d:
1b:d9:74:06:c5:63:c7:42:df:0f:b5:8b:c4:b9:4b:0e:71:95:
c8:32:6f:fe:a9:03:4b:ec:f3:5f:99:66:9e:27:59:b7:39:72:
7a:b1:ac:e2:64:fb:4c:93:39:f8:6d:99:4d:eb:2d:d3:27:e0:
43:1d:d8:be:47:c6:7b:32:05:6b:5b:24:7e:97:a4:26:fe:fa:
7c:72:75:f5:6e:e0:dc:11:8b:93:33:b7:85:f5:d0:fb:74:09:
85:ea:10:55:5f:72:05:8d:4a:f2:bb:f2:8a:fb:54:8a:24:47:
49:97:db:2a:4f:83:b7:de:3f:84:9d:2f:17:1f:74:34:64:e8:
43:4d:bf:fa:8b:6b:cb:5d:74:83:0e:52:be:fe:4e:5f:4b:ef:
9b:5c:7c:06:04:73:e6:c5:69:15:14:38:87:17:d3:88:4f:a0:
e7:09:79:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 03:17:36 2025 by rpki-client