Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/294a81-5237-4bf3-a05b-a88a4d094af0/1/8KEScQQ06Frl_m-_Qedr3fk4GM8.mft
File: 8KEScQQ06Frl_m-_Qedr3fk4GM8.mft (raw, json)
Hash identifier: nurfZ7f9sPX5JByBYRRck07X7jgUxrUlg2D7Qb1c6MU=
Subject key identifier: 23:F0:F3:84:93:26:A5:50:52:EE:1B:5B:F8:5A:59:78:CB:22:46:EF
Authority key identifier: F0:A1:12:71:04:34:E8:5A:E5:FE:6F:BF:41:E7:6B:DD:F9:38:18:CF
Certificate issuer: /CN=f0a112710434e85ae5fe6fbf41e76bddf93818cf
Certificate serial: 019A1D99E53E6FF193E9605978AEBB6B7A78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8KEScQQ06Frl_m-_Qedr3fk4GM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/294a81-5237-4bf3-a05b-a88a4d094af0/1/8KEScQQ06Frl_m-_Qedr3fk4GM8.mft
Manifest number: 056C
Signing time: Sat 25 Oct 2025 23:00:16 +0000
Manifest this update: Sat 25 Oct 2025 23:00:16 +0000
Manifest next update: Sun 26 Oct 2025 23:00:16 +0000
Files and hashes: 1: 8KEScQQ06Frl_m-_Qedr3fk4GM8.crl (hash: Ox/K5sd/AqtJmYIZttxJAMSr1FdNywwlrT1tHbmnPPY=)
2: QxzsJBZ0KnjdWggXNkiPE3mxTiE.roa (hash: wp71B9vMq7Np21xWaUokwt4Wn7Ga2Zz2FhWmCQz4Lj0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/294a81-5237-4bf3-a05b-a88a4d094af0/1/8KEScQQ06Frl_m-_Qedr3fk4GM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/294a81-5237-4bf3-a05b-a88a4d094af0/1/8KEScQQ06Frl_m-_Qedr3fk4GM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8KEScQQ06Frl_m-_Qedr3fk4GM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 23:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1d:99:e5:3e:6f:f1:93:e9:60:59:78:ae:bb:6b:7a:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0a112710434e85ae5fe6fbf41e76bddf93818cf
Validity
Not Before: Oct 25 23:00:16 2025 GMT
Not After : Oct 26 23:00:16 2025 GMT
Subject: CN=23f0f3849326a55052ee1b5bf85a5978cb2246ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:05:ff:d7:f1:07:c0:2f:fd:6b:5d:49:d4:eb:
30:c9:64:b5:20:ec:f9:45:97:9b:40:aa:9d:92:40:
e5:e0:c4:c8:47:b4:a6:a1:ce:a2:68:87:67:b5:40:
f1:e6:77:86:b9:cb:d6:47:ea:b5:e3:1f:31:22:93:
ca:4b:b3:d7:a7:40:b6:9b:75:ba:0c:c7:ca:7b:91:
87:12:10:ce:4f:17:ab:98:69:40:26:bc:68:52:75:
14:0f:0a:4f:dc:4c:73:a0:5d:16:f9:74:6b:33:c4:
c7:38:83:2e:84:da:9f:fc:ac:01:c5:97:b6:bc:6c:
46:69:89:9b:e1:92:f4:2d:44:75:42:f3:2b:69:8a:
ee:0e:d8:c1:d2:ed:f2:37:1b:41:46:48:9f:cb:4e:
ce:38:92:ee:05:a0:a9:10:46:4a:c5:67:01:5f:06:
42:20:21:e3:54:9a:f6:db:fc:86:40:0b:00:58:6f:
3d:74:ff:8e:7d:95:67:97:7a:71:30:9d:26:59:0e:
90:58:c3:b2:44:56:52:40:72:7c:c5:05:d2:3e:91:
21:81:c6:04:71:61:7d:33:d0:f7:50:f8:b2:82:81:
82:c9:b6:30:16:1b:20:1f:f4:db:1b:21:f2:dd:17:
ce:2b:1f:2d:9b:ab:e5:01:81:ab:b3:97:aa:3e:75:
52:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:F0:F3:84:93:26:A5:50:52:EE:1B:5B:F8:5A:59:78:CB:22:46:EF
X509v3 Authority Key Identifier:
keyid:F0:A1:12:71:04:34:E8:5A:E5:FE:6F:BF:41:E7:6B:DD:F9:38:18:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8KEScQQ06Frl_m-_Qedr3fk4GM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/294a81-5237-4bf3-a05b-a88a4d094af0/1/8KEScQQ06Frl_m-_Qedr3fk4GM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/294a81-5237-4bf3-a05b-a88a4d094af0/1/8KEScQQ06Frl_m-_Qedr3fk4GM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:3a:01:7c:e0:f3:ae:d2:88:f5:4e:08:88:89:b9:01:6e:31:
54:3d:a3:c5:a6:cb:5c:e2:10:d3:94:b6:b0:1c:0c:49:69:d3:
40:a1:67:7c:11:54:df:12:6d:5c:55:64:80:d3:b0:c4:81:28:
1a:66:e2:e5:02:b7:8a:b9:fa:c4:1c:0c:10:98:7f:3b:6a:28:
41:c5:d9:0e:45:79:eb:62:72:f7:26:8d:a0:f4:a7:1a:a3:7b:
1d:32:50:23:4c:4c:13:2b:45:40:32:23:f1:ce:68:2f:25:a4:
08:28:92:3f:67:0d:7a:bd:d4:23:60:0f:37:e5:55:b0:38:08:
26:13:54:29:99:30:a3:e7:00:c0:f2:69:b4:71:27:73:74:78:
af:ee:66:30:2d:4f:b7:45:ba:eb:6d:d6:20:29:80:26:28:5c:
f7:0f:af:f3:56:b5:7a:86:22:e6:ed:6e:ce:8e:66:c9:a5:4b:
7e:7c:b0:48:78:83:5a:df:7e:36:86:7d:d0:58:1e:0b:1f:41:
5f:da:35:35:22:e1:67:4a:03:0e:b9:6d:e1:74:f2:53:0c:d2:
63:e7:e8:75:f7:b3:9c:42:66:58:1c:7a:7f:f2:ef:d6:c7:64:
51:9d:55:66:ea:82:e0:4e:da:e8:dd:63:40:11:e5:f0:4a:23:
02:2e:de:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 07:10:39 2025 by rpki-client