Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
File: A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft (raw, json)
Hash identifier: GZANMP+SqVYeKvEan09/xTmJnWPqcra2XDPBF4IAbRE=
Subject key identifier: 2C:53:F7:CF:B0:30:88:3F:4B:97:8C:ED:22:4F:C1:4B:F1:6D:79:E4
Authority key identifier: 03:C3:3E:43:EF:56:52:7A:16:9D:6A:C6:D7:E6:2C:63:D1:97:30:51
Certificate issuer: /CN=03c33e43ef56527a169d6ac6d7e62c63d1973051
Certificate serial: 019A047F0151144774577F3DE2AF2DBF1DCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
Manifest number: 1708
Signing time: Tue 21 Oct 2025 02:00:23 +0000
Manifest this update: Tue 21 Oct 2025 02:00:23 +0000
Manifest next update: Wed 22 Oct 2025 02:00:23 +0000
Files and hashes: 1: 19QpkXgghLM3Nv0nEMVJTVhhYlk.roa (hash: J5AzJxFSrkUz6NEqgZpKHFp1Qkuuq+hf2j4tyd26uK8=)
2: A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl (hash: LEJcIgsOpHvQoIaBrhlOKYGSE45sqtOAiuo/+p/Rqo8=)
3: aUt9STDYB4WpJzoIeOhkBXlmRGY.roa (hash: OBmceRN0cnIIMX2WS5mLBG1wMtaz4OUFUqNkNJhbrA8=)
4: c9sXvnnFKQwKh05j0TaYAQugLQM.roa (hash: eyB+ysjYhGow5lnf5FUGFEiyTh1wZN2qzaaHi/6zhTQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 22:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:04:7f:01:51:14:47:74:57:7f:3d:e2:af:2d:bf:1d:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03c33e43ef56527a169d6ac6d7e62c63d1973051
Validity
Not Before: Oct 21 02:00:23 2025 GMT
Not After : Oct 22 02:00:23 2025 GMT
Subject: CN=2c53f7cfb030883f4b978ced224fc14bf16d79e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:42:30:cc:fb:c3:93:2f:b4:46:ae:77:a4:dd:
d4:1c:b1:85:8b:ca:9d:8d:d0:82:84:b3:9c:22:80:
1a:a7:5e:04:28:c0:ba:a9:d0:22:e0:86:41:84:5d:
36:15:5b:72:b0:b5:dd:ba:f7:2c:90:6c:2f:9d:7f:
40:3a:c2:e0:9e:af:65:ff:b4:31:f1:2f:b7:76:8d:
2e:de:52:77:8a:fe:ba:9f:3f:21:de:d0:31:07:23:
9f:07:1f:b3:23:74:ea:47:af:58:4e:29:d3:f8:6a:
cb:02:f6:ae:63:de:3d:7b:ed:37:ab:82:0f:ba:35:
14:16:17:06:55:40:e3:e0:24:15:e7:c8:08:d0:1d:
fd:c7:06:ce:79:4e:bb:78:23:d5:3c:57:21:a8:f5:
a9:95:ef:97:ef:55:1f:ed:29:02:3c:a8:76:11:65:
66:c2:d5:34:f3:c3:39:cf:92:d4:66:aa:da:e3:a3:
af:71:b6:b3:85:61:65:44:76:2d:14:cd:1c:76:91:
90:d1:4a:72:3f:1f:56:80:2d:4e:a3:b4:f6:4f:17:
0e:b8:d2:3d:be:94:d8:35:7a:73:b4:fa:51:58:93:
76:a5:d0:cd:34:f1:da:10:9c:f3:31:88:5b:ac:eb:
04:db:f2:57:22:11:5d:fe:8b:05:3a:46:81:5a:4d:
83:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:53:F7:CF:B0:30:88:3F:4B:97:8C:ED:22:4F:C1:4B:F1:6D:79:E4
X509v3 Authority Key Identifier:
keyid:03:C3:3E:43:EF:56:52:7A:16:9D:6A:C6:D7:E6:2C:63:D1:97:30:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:be:20:8d:81:88:88:51:db:ca:d0:20:7e:bf:20:5b:9c:be:
66:33:05:dc:81:e5:3d:a9:14:cf:ea:fd:17:59:f8:1e:c3:df:
41:f5:43:8b:30:86:9d:30:9a:ae:54:64:80:99:1e:bf:82:81:
8d:6b:cf:e7:31:4e:55:9a:47:ff:0c:9d:f7:ee:8c:c5:fe:d3:
31:03:ba:10:51:3e:a5:1f:1b:6e:11:6b:40:69:93:a6:5c:4c:
c9:c9:1b:00:ce:07:4d:2a:14:08:b9:3e:8e:82:f3:e6:48:89:
a0:2b:a3:3b:e2:60:50:12:24:be:01:74:d5:86:07:3e:4b:7c:
28:9f:0d:52:1b:e7:5e:65:a1:3a:bf:c4:7a:2f:b5:76:c8:d0:
01:c1:d4:31:7e:07:12:8e:45:83:a7:9d:ed:81:8f:a6:89:a2:
ba:72:9e:dc:4f:b4:c1:2e:51:57:cd:ad:a6:41:cf:ef:d2:4a:
24:4d:75:ad:02:2b:e1:0b:4e:c7:3d:8d:01:e5:27:fd:c1:1a:
7a:34:33:9b:a4:9c:34:97:73:24:3d:98:ef:ec:4c:05:22:00:
9f:b7:42:a4:4e:ff:d9:7c:0c:b6:37:53:5c:95:f5:15:14:4f:
33:4b:30:48:5e:e1:b1:b3:e9:0b:5f:99:3c:22:44:35:01:0b:
be:86:54:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 06:19:23 2025 by rpki-client