Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/c0ad4d-20fe-4a93-af06-1d0a4ec827ab/1/q8ETx66mtxSgYOn3w-cVaeYD05U.mft
File: q8ETx66mtxSgYOn3w-cVaeYD05U.mft (raw, json)
Hash identifier: 0nxW787AKdrQ9NwyUON+Y0P+QSibGp1ATAYflSi+d6k=
Subject key identifier: 08:11:AF:7D:53:01:AD:C3:E8:C5:E6:07:12:CA:EC:41:86:FE:DD:91
Authority key identifier: AB:C1:13:C7:AE:A6:B7:14:A0:60:E9:F7:C3:E7:15:69:E6:03:D3:95
Certificate issuer: /CN=abc113c7aea6b714a060e9f7c3e71569e603d395
Certificate serial: 019A7149E59B4742BCFE87F9F15527E815E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8ETx66mtxSgYOn3w-cVaeYD05U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/c0ad4d-20fe-4a93-af06-1d0a4ec827ab/1/q8ETx66mtxSgYOn3w-cVaeYD05U.mft
Manifest number: 0E0F
Signing time: Tue 11 Nov 2025 05:00:59 +0000
Manifest this update: Tue 11 Nov 2025 05:00:59 +0000
Manifest next update: Wed 12 Nov 2025 05:00:59 +0000
Files and hashes: 1: cACLsETFkrWp2y3uSppllbzeN8M.roa (hash: 69+xRQ628SJEg1B3Gvd/lIbJ0dPAum9FWWtmKpGIALk=)
2: q8ETx66mtxSgYOn3w-cVaeYD05U.crl (hash: 3OxmBWK4R6iIWuy1WfkAKOf7EQZsGngd+2FL7q+1oSc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/c0ad4d-20fe-4a93-af06-1d0a4ec827ab/1/q8ETx66mtxSgYOn3w-cVaeYD05U.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/c0ad4d-20fe-4a93-af06-1d0a4ec827ab/1/q8ETx66mtxSgYOn3w-cVaeYD05U.mft
rsync://rpki.ripe.net/repository/DEFAULT/q8ETx66mtxSgYOn3w-cVaeYD05U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:e5:9b:47:42:bc:fe:87:f9:f1:55:27:e8:15:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abc113c7aea6b714a060e9f7c3e71569e603d395
Validity
Not Before: Nov 11 05:00:59 2025 GMT
Not After : Nov 12 05:00:59 2025 GMT
Subject: CN=0811af7d5301adc3e8c5e60712caec4186fedd91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:37:8c:68:6c:69:94:05:03:07:17:6f:11:55:
e8:7c:9e:de:f9:5f:d8:58:c7:dd:5f:3a:98:b2:9f:
b4:82:63:84:c0:e1:4b:c1:a1:f0:98:2a:18:17:0e:
c0:80:74:d1:88:3b:06:00:ad:17:46:86:e0:d9:85:
35:ec:62:af:28:70:82:2e:06:f3:6e:dd:f6:59:f3:
c0:27:e7:01:56:67:2d:c0:18:8c:13:97:1c:a4:b4:
08:bc:b3:84:2d:6f:7c:1b:82:8d:b8:02:57:5e:17:
6b:d2:9c:f6:b7:58:55:f8:c7:62:3d:62:fa:fb:64:
92:95:ca:0f:93:43:ae:ea:a2:22:8f:ca:91:86:c0:
75:64:47:b7:3b:9c:fe:58:87:91:d0:86:35:e5:5e:
b2:77:8d:96:71:2b:b0:66:73:7a:f2:29:7e:c7:77:
47:1a:ab:cb:1a:a4:e1:20:ed:fc:ec:69:e2:96:89:
d1:d9:d2:75:14:8f:95:7f:c0:5b:ee:d3:9e:88:12:
ca:c4:64:eb:1c:6c:9e:e3:fb:c6:97:ae:03:53:28:
9e:bf:dc:ef:7b:9e:0e:a8:4b:70:7a:06:cc:5b:52:
00:b7:2a:58:90:16:7e:99:d6:ff:46:ea:c6:fd:f3:
f6:53:29:44:45:b3:82:78:88:89:bd:f7:ba:7b:fb:
f9:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:11:AF:7D:53:01:AD:C3:E8:C5:E6:07:12:CA:EC:41:86:FE:DD:91
X509v3 Authority Key Identifier:
keyid:AB:C1:13:C7:AE:A6:B7:14:A0:60:E9:F7:C3:E7:15:69:E6:03:D3:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8ETx66mtxSgYOn3w-cVaeYD05U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/c0ad4d-20fe-4a93-af06-1d0a4ec827ab/1/q8ETx66mtxSgYOn3w-cVaeYD05U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/c0ad4d-20fe-4a93-af06-1d0a4ec827ab/1/q8ETx66mtxSgYOn3w-cVaeYD05U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:fb:29:8b:58:f5:01:28:bc:b3:21:98:a7:ff:77:b1:bc:8a:
97:53:b1:69:f9:a2:55:24:55:13:ce:64:08:34:85:2c:f3:43:
fb:bf:bc:ef:7f:28:d8:0f:75:00:0e:fc:33:fe:5d:7e:9d:8f:
d4:f0:8b:04:f3:85:13:dc:93:09:d8:93:1d:a4:4e:af:c2:ba:
be:32:fe:f6:fd:be:96:c3:a6:50:40:c0:83:4e:72:e8:5b:0c:
27:cc:12:12:74:dc:3a:df:a5:de:48:f0:1f:6a:bc:c9:81:dc:
55:eb:45:8d:f9:31:15:e8:6d:5c:2b:4c:bb:9e:26:a0:a3:38:
8c:88:ae:d4:ff:6f:2e:ce:6a:5b:a3:7d:fd:ff:50:a3:93:48:
54:28:dc:2c:7d:d6:d8:28:e6:f5:11:d3:7e:38:99:28:6e:41:
15:78:80:b0:c0:98:59:34:ee:4e:7c:e2:68:81:7c:0a:9a:8b:
6b:e2:1b:b8:67:be:6e:a8:63:cd:35:b9:16:64:c9:71:28:3a:
aa:03:dd:f9:dd:f9:c5:2b:a3:67:b5:12:29:4f:d7:75:b2:bb:
89:ff:a5:15:71:bd:1e:9c:d9:ea:da:c1:da:8d:53:94:3f:59:
4f:aa:df:a6:cd:45:40:dd:30:d2:74:7d:93:9a:e0:7c:fc:c2:
fb:36:e5:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:44:29 2025 by rpki-client