
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/q8GRjB9F5uwX2spnp60ZPK8Et7I.mft
File: q8GRjB9F5uwX2spnp60ZPK8Et7I.mft (raw, json)
Hash identifier: WJDyyaAx348BV4ly41R5OYraXsh3KXbgyUBJyTtuCPM=
Subject key identifier: 8D:E1:2F:57:8D:A7:D5:91:EE:45:DB:EF:AA:63:8C:9B:E8:F3:2E:8B
Authority key identifier: AB:C1:91:8C:1F:45:E6:EC:17:DA:CA:67:A7:AD:19:3C:AF:04:B7:B2
Certificate issuer: /CN=abc1918c1f45e6ec17daca67a7ad193caf04b7b2
Certificate serial: 01993191ED724AA380C4DD93B53087132777
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8GRjB9F5uwX2spnp60ZPK8Et7I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/q8GRjB9F5uwX2spnp60ZPK8Et7I.mft
Manifest number: 04EE
Signing time: Wed 10 Sep 2025 03:01:11 +0000
Manifest this update: Wed 10 Sep 2025 03:01:11 +0000
Manifest next update: Thu 11 Sep 2025 03:01:11 +0000
Files and hashes: 1: L4RKq9blDuun-Ov7h4-EXCJDU7o.roa (hash: rV2ghgo1vc0bF0beR2sZL8zKS4novhD+fyLSyA4fGEk=)
2: TKYCIQIu4F23JxsEDfGIzBctkEc.roa (hash: EAnr/9lW4r6/S4hhnfhRdmsx8JCo45r2zRW9cF9kcLo=)
3: q8GRjB9F5uwX2spnp60ZPK8Et7I.crl (hash: AXYeCGZ/Q1cu+50Yg6Y3GsI1E5+zAl8WdsjTSYTnPrY=)
4: qvNjDJ9eS48JlV1R7hV7YEei3s0.roa (hash: 7WHrrqOQZDnykzDETa13+ZYZFeNzxM1H1+r8MstF8cE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/q8GRjB9F5uwX2spnp60ZPK8Et7I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/q8GRjB9F5uwX2spnp60ZPK8Et7I.mft
rsync://rpki.ripe.net/repository/DEFAULT/q8GRjB9F5uwX2spnp60ZPK8Et7I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 02:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:31:91:ed:72:4a:a3:80:c4:dd:93:b5:30:87:13:27:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abc1918c1f45e6ec17daca67a7ad193caf04b7b2
Validity
Not Before: Sep 10 03:01:11 2025 GMT
Not After : Sep 11 03:01:11 2025 GMT
Subject: CN=8de12f578da7d591ee45dbefaa638c9be8f32e8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:dc:3d:80:2c:81:cb:2d:1d:91:91:5e:b1:a7:
35:93:bf:4f:fc:b8:cc:37:54:b8:94:7e:18:cf:c7:
19:29:52:ae:a9:6d:49:ab:4c:6a:11:b8:24:ea:df:
b2:a7:37:2d:04:4e:fc:86:fb:b9:d2:7f:90:df:c8:
da:69:b6:33:3c:d7:1a:ac:16:0d:7d:d1:d4:8d:fd:
7a:38:b3:a4:ac:57:09:8a:57:a8:01:74:53:37:77:
4f:6b:15:a4:1b:b4:26:2f:10:18:84:d8:6e:8c:96:
e2:44:71:d4:f2:e5:42:05:46:27:63:4e:92:1c:91:
5a:9e:2f:2b:85:ff:bb:22:ca:7b:d5:67:bb:a0:d9:
51:ab:38:b1:5d:2a:c1:16:c0:ae:0b:27:13:d5:fa:
fd:bc:22:55:dd:7c:c2:2b:2c:63:dd:4a:87:7c:9a:
24:a8:a2:9b:03:85:9d:8e:b0:52:bf:9c:50:68:6f:
c8:5b:00:b2:e3:ff:96:bc:e9:ff:b3:5f:e3:8d:19:
31:0b:d5:bb:8f:30:3d:50:49:00:c5:44:7d:01:da:
51:0f:be:5f:0e:fc:c8:85:9c:5f:e9:0b:82:c4:d9:
c7:aa:fc:76:cf:fe:45:64:10:ed:8d:7c:f8:00:8c:
75:1c:43:11:3e:2f:7b:70:ae:64:71:bc:e7:4f:39:
b0:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:E1:2F:57:8D:A7:D5:91:EE:45:DB:EF:AA:63:8C:9B:E8:F3:2E:8B
X509v3 Authority Key Identifier:
keyid:AB:C1:91:8C:1F:45:E6:EC:17:DA:CA:67:A7:AD:19:3C:AF:04:B7:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8GRjB9F5uwX2spnp60ZPK8Et7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/q8GRjB9F5uwX2spnp60ZPK8Et7I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/q8GRjB9F5uwX2spnp60ZPK8Et7I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:1e:ca:c8:20:28:00:4e:99:e3:f2:e9:0d:16:ad:24:c8:95:
64:1f:9f:bb:41:42:7f:59:c7:fc:67:0d:6f:b2:89:09:df:bd:
50:bb:4f:2e:27:fa:7c:86:6d:d2:30:83:0c:e0:21:29:5f:f2:
4b:2c:01:c4:30:95:a4:ff:dd:94:78:dc:cf:8e:b4:83:a9:f1:
3a:bb:47:94:86:95:6c:35:9e:bd:02:2a:df:3f:23:49:4a:68:
56:b5:88:22:84:05:c3:a0:6c:6a:36:37:56:17:ef:35:74:35:
b6:bb:68:66:62:5b:04:49:49:08:92:84:cc:e5:fe:60:f1:bc:
ee:c8:33:28:b7:0a:ec:41:22:ab:57:40:e8:21:7a:a9:26:f4:
07:1a:42:14:c7:c5:ec:af:d8:1f:5a:c5:e5:1c:51:59:fb:82:
de:e5:dd:7a:1d:46:4d:36:39:2e:16:9f:12:7f:3e:ff:c0:c3:
80:86:8b:50:9a:5c:74:0d:c9:39:db:14:ee:b1:ab:04:ec:9f:
6e:d2:5c:29:e8:45:16:d3:c9:74:2c:81:e2:19:f4:ee:ba:d9:
d1:0f:6f:29:98:ce:24:e5:8b:92:0f:8f:2f:23:b9:4d:71:b5:
cc:18:0d:cc:43:46:a1:76:59:d2:1f:08:69:85:4f:2d:75:88:
18:e5:aa:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 12:00:08 2025 by rpki-client