Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/e7d0f0-f481-4fe3-8677-1cd33c62c45c/1/A8nqT5ZYixa9T8o41MHd9lwav9o.mft
File: A8nqT5ZYixa9T8o41MHd9lwav9o.mft (raw, json)
Hash identifier: V2gHUFFuV1QGQo2VddsiXgTThgw+QpvBdnTfzNh3U5o=
Subject key identifier: 89:F7:F3:98:7C:69:08:E2:90:6C:F9:9B:D5:17:94:16:67:C5:57:59
Authority key identifier: 03:C9:EA:4F:96:58:8B:16:BD:4F:CA:38:D4:C1:DD:F6:5C:1A:BF:DA
Certificate issuer: /CN=03c9ea4f96588b16bd4fca38d4c1ddf65c1abfda
Certificate serial: 019A729354D8178156B6810964E3138FF907
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A8nqT5ZYixa9T8o41MHd9lwav9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/e7d0f0-f481-4fe3-8677-1cd33c62c45c/1/A8nqT5ZYixa9T8o41MHd9lwav9o.mft
Manifest number: 032D
Signing time: Tue 11 Nov 2025 11:00:49 +0000
Manifest this update: Tue 11 Nov 2025 11:00:49 +0000
Manifest next update: Wed 12 Nov 2025 11:00:49 +0000
Files and hashes: 1: A8nqT5ZYixa9T8o41MHd9lwav9o.crl (hash: bzCQsUBSw2fRI0iSHuz3YnYXPRVcWa1awWQLdwd06Tk=)
2: jMIN8b0BVc9eEY8W0xUyZYn9gu0.roa (hash: T+38e+ztuuV+6KtpVMPU6c7/hBQtyKbXl9bJ797XzNw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/e7d0f0-f481-4fe3-8677-1cd33c62c45c/1/A8nqT5ZYixa9T8o41MHd9lwav9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/e7d0f0-f481-4fe3-8677-1cd33c62c45c/1/A8nqT5ZYixa9T8o41MHd9lwav9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/A8nqT5ZYixa9T8o41MHd9lwav9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:54:d8:17:81:56:b6:81:09:64:e3:13:8f:f9:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03c9ea4f96588b16bd4fca38d4c1ddf65c1abfda
Validity
Not Before: Nov 11 11:00:49 2025 GMT
Not After : Nov 12 11:00:49 2025 GMT
Subject: CN=89f7f3987c6908e2906cf99bd517941667c55759
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:f5:e7:7c:83:ad:9c:76:47:ec:ca:de:9f:bf:
aa:58:f4:19:96:d2:28:2b:f9:a5:94:0f:a3:12:e0:
b9:ad:06:1f:09:8f:03:de:16:72:1e:e9:55:48:d6:
ed:22:9e:82:fb:20:32:aa:b7:bc:11:ca:e0:c0:74:
a5:86:ff:7c:24:37:8e:b1:14:97:ab:22:89:cd:0a:
57:7e:93:e2:aa:f3:17:c8:df:a1:81:25:f1:3c:82:
50:6b:e5:cc:5d:b6:23:64:71:95:54:a1:54:f2:dc:
06:77:6d:1f:ac:be:7c:09:24:ae:52:d5:f1:38:a7:
c5:49:5b:7b:3c:30:62:29:65:7b:c9:68:d6:27:69:
3c:f7:38:fe:4c:26:d7:12:a2:e2:1e:ce:c7:0c:17:
15:b5:60:b1:6f:a3:37:44:1e:20:74:8f:cf:72:6b:
7a:6a:05:58:30:6f:77:fc:21:9d:b8:ca:f0:ed:ee:
1b:6b:49:4c:1e:b0:52:5e:11:e5:66:23:6f:e0:9a:
5f:a8:be:b8:c1:90:19:c9:0e:27:2f:68:d5:d7:98:
a9:33:db:19:e4:cb:a8:3f:fe:ad:5e:7f:6c:a0:1d:
de:a2:dd:e9:a4:78:7d:75:9d:63:a0:0d:68:12:7f:
90:46:0f:92:d8:22:53:eb:c5:4f:ac:d8:86:9b:c8:
1e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:F7:F3:98:7C:69:08:E2:90:6C:F9:9B:D5:17:94:16:67:C5:57:59
X509v3 Authority Key Identifier:
keyid:03:C9:EA:4F:96:58:8B:16:BD:4F:CA:38:D4:C1:DD:F6:5C:1A:BF:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8nqT5ZYixa9T8o41MHd9lwav9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/e7d0f0-f481-4fe3-8677-1cd33c62c45c/1/A8nqT5ZYixa9T8o41MHd9lwav9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/e7d0f0-f481-4fe3-8677-1cd33c62c45c/1/A8nqT5ZYixa9T8o41MHd9lwav9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:3c:b2:f1:93:31:9c:5c:81:9d:1f:84:69:e7:b9:6c:c0:76:
b9:69:ed:30:5c:7a:1f:da:10:f6:21:1d:66:42:99:98:6a:3f:
85:42:86:d0:a5:1e:33:f1:80:56:2b:b6:37:ac:5f:65:49:db:
84:71:a6:73:dd:03:07:18:27:5b:5e:99:22:a1:af:bc:43:0e:
3b:ee:03:f2:9e:de:78:06:b4:14:ff:1b:09:c7:59:e8:68:f0:
f7:9c:49:c2:42:47:76:d0:5b:4e:0d:3b:59:05:22:53:10:d1:
c2:3a:74:ac:22:ee:60:28:17:37:9e:a2:ee:a0:37:ef:d9:20:
1f:b2:e2:b7:d8:91:39:d8:2f:86:2b:c8:0b:fb:98:94:e3:57:
d7:52:1e:84:40:1c:43:0a:f2:f6:f1:3d:be:f4:06:11:bd:40:
db:0a:fb:52:3c:c8:c8:d2:9a:a5:0d:8b:61:9e:5b:af:4f:34:
af:03:93:09:5b:53:d7:f1:9b:f0:6e:99:fb:b9:cd:76:d7:5f:
53:86:48:86:24:ea:82:14:27:2a:20:11:c7:5d:18:a6:3e:8c:
8a:0b:e3:56:2d:2a:dc:95:9c:69:fa:67:6a:fb:7f:3b:ba:46:
00:7c:7f:4a:98:e5:43:ed:4e:83:4a:da:7f:68:1b:5c:da:a6:
a7:2b:a4:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:38:51 2025 by rpki-client