Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/e116c2-8f82-4cba-b5ae-97dcbb0086e3/1/B8QNcBYPMIZCEpobcq5a5S24g8Q.mft
File: B8QNcBYPMIZCEpobcq5a5S24g8Q.mft (raw, json)
Hash identifier: HZ0c/jXZYK+ekOAOYjo/W56Pf88k/E+ZsNfxB18fEUY=
Subject key identifier: 1E:2D:3D:2D:06:C3:B5:66:40:74:58:C0:1F:B1:D1:72:F4:B3:84:37
Authority key identifier: 07:C4:0D:70:16:0F:30:86:42:12:9A:1B:72:AE:5A:E5:2D:B8:83:C4
Certificate issuer: /CN=07c40d70160f308642129a1b72ae5ae52db883c4
Certificate serial: 019A23D30FB06EC29B97CEC11270C1A21FB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B8QNcBYPMIZCEpobcq5a5S24g8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/e116c2-8f82-4cba-b5ae-97dcbb0086e3/1/B8QNcBYPMIZCEpobcq5a5S24g8Q.mft
Manifest number: 0FB5
Signing time: Mon 27 Oct 2025 04:00:25 +0000
Manifest this update: Mon 27 Oct 2025 04:00:25 +0000
Manifest next update: Tue 28 Oct 2025 04:00:25 +0000
Files and hashes: 1: B8QNcBYPMIZCEpobcq5a5S24g8Q.crl (hash: G8cFkgFgNVzwBDIoxJQZ0DuCa26UVT5bxcb7V39653E=)
2: FrqlWltvg2IIueyy45ogVbfzXOI.roa (hash: I5FtBNSL1o5XSBQN3V8eqj4CiYkfCwGhk95ch/7f1y0=)
3: w7QCmizrQXeuidochTL3wPaTPwQ.roa (hash: H6wbvBF9uFQ8IN4rm+CScPncC9WaN8oR2hYLVqdaZWA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/e116c2-8f82-4cba-b5ae-97dcbb0086e3/1/B8QNcBYPMIZCEpobcq5a5S24g8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/e116c2-8f82-4cba-b5ae-97dcbb0086e3/1/B8QNcBYPMIZCEpobcq5a5S24g8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/B8QNcBYPMIZCEpobcq5a5S24g8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:d3:0f:b0:6e:c2:9b:97:ce:c1:12:70:c1:a2:1f:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07c40d70160f308642129a1b72ae5ae52db883c4
Validity
Not Before: Oct 27 04:00:25 2025 GMT
Not After : Oct 28 04:00:25 2025 GMT
Subject: CN=1e2d3d2d06c3b566407458c01fb1d172f4b38437
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b4:c5:d2:fb:44:db:60:8e:23:3a:2a:7a:e0:
30:a4:7b:9c:e0:33:db:ec:f2:16:dd:77:3e:11:4a:
64:88:cb:47:fc:49:5e:ec:1e:29:ce:ce:de:ae:c7:
40:cc:26:5e:23:3a:ae:f6:99:45:44:24:6b:63:23:
24:98:3a:98:b1:d2:c6:e1:74:01:53:c5:83:26:fc:
af:7e:77:ba:f4:7d:11:0c:09:94:1c:ac:c4:de:b6:
6f:5f:a8:ff:3d:d7:24:8a:2a:71:d1:21:92:87:2d:
7f:36:45:f2:e5:05:5d:c3:f2:bb:ef:8b:5d:42:5a:
64:51:1c:73:a9:ca:95:46:0e:9b:60:08:ec:d6:10:
bc:68:1d:1c:8b:27:3f:60:38:7b:9b:9e:69:56:fa:
06:f1:5c:c4:f8:3e:42:62:8f:34:67:61:16:f9:b6:
e5:19:19:91:cb:93:54:27:2e:ee:49:4b:58:56:be:
e8:d6:4a:77:f2:7a:96:f9:f5:40:c5:87:0a:e7:ef:
b3:29:66:07:a4:47:1a:ca:92:d8:90:15:18:84:2e:
59:61:be:76:df:a3:8e:65:41:77:0e:57:db:91:13:
1f:c9:a4:4a:66:f5:1d:c7:79:36:a1:5e:24:05:d2:
fa:65:0b:e5:8c:65:e1:63:0e:fc:d4:05:2b:fd:e9:
e7:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:2D:3D:2D:06:C3:B5:66:40:74:58:C0:1F:B1:D1:72:F4:B3:84:37
X509v3 Authority Key Identifier:
keyid:07:C4:0D:70:16:0F:30:86:42:12:9A:1B:72:AE:5A:E5:2D:B8:83:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B8QNcBYPMIZCEpobcq5a5S24g8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e116c2-8f82-4cba-b5ae-97dcbb0086e3/1/B8QNcBYPMIZCEpobcq5a5S24g8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e116c2-8f82-4cba-b5ae-97dcbb0086e3/1/B8QNcBYPMIZCEpobcq5a5S24g8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:40:0d:84:d9:0c:78:79:c5:f6:8a:45:b5:65:e8:9f:c5:ca:
44:fb:dd:b2:aa:38:c3:86:a7:12:1f:92:26:9c:3e:37:54:8e:
b1:39:8d:af:48:b6:b6:b2:0b:a2:5a:9b:af:4d:1f:77:1d:cb:
3f:c3:ce:a7:60:f3:a8:fb:23:7e:01:31:50:c6:41:9b:0d:1e:
99:28:1d:18:b5:95:2d:a5:03:d4:d8:7a:fa:ed:db:83:2e:9d:
18:3d:90:6f:ef:ef:7a:0d:4d:5d:04:1b:ef:7a:40:9f:7a:55:
46:35:b4:16:4e:dc:00:b2:e1:a4:23:13:2e:d3:37:fe:6d:8c:
7d:e0:ce:ad:56:af:3e:46:8d:1c:71:d6:69:41:d4:83:4c:08:
ff:87:3e:11:47:b9:44:5c:3a:d9:98:5f:e6:87:13:2b:86:6b:
9b:da:a1:29:8c:c7:a3:1e:f4:bd:4e:5b:2b:ed:be:52:fc:0e:
bc:c5:c3:6e:c2:f6:f1:b0:cc:7f:66:21:01:7c:32:81:cb:87:
4a:73:15:71:21:9c:fa:b9:b7:f6:a5:ff:fe:ff:4e:1a:8c:27:
6a:a6:b2:86:ad:00:c8:5a:83:e5:d3:51:ce:2a:b1:5e:b0:eb:
34:bf:b5:6e:8d:19:02:d6:3b:61:a5:28:cd:b1:e8:0e:e1:95:
9a:be:ac:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 07:13:47 2025 by rpki-client