Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
File: A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft (raw, json)
Hash identifier: FRcsMK9jCIWEnOWSAx1fGK9O8zjniF608ZMm6SKfs94=
Subject key identifier: EB:31:73:1E:61:42:98:57:EC:C8:D8:D8:8D:BE:C3:E8:59:4C:C3:70
Authority key identifier: 03:C3:3E:43:EF:56:52:7A:16:9D:6A:C6:D7:E6:2C:63:D1:97:30:51
Certificate issuer: /CN=03c33e43ef56527a169d6ac6d7e62c63d1973051
Certificate serial: 019950E62A8CEAB5F68350167FB449461EE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
Manifest number: 16AB
Signing time: Tue 16 Sep 2025 05:01:25 +0000
Manifest this update: Tue 16 Sep 2025 05:01:25 +0000
Manifest next update: Wed 17 Sep 2025 05:01:25 +0000
Files and hashes: 1: 19QpkXgghLM3Nv0nEMVJTVhhYlk.roa (hash: J5AzJxFSrkUz6NEqgZpKHFp1Qkuuq+hf2j4tyd26uK8=)
2: A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl (hash: 2nycBPLVFPoXM7sUiqw018dHNadV07xo/4NjLBtMjMc=)
3: aUt9STDYB4WpJzoIeOhkBXlmRGY.roa (hash: OBmceRN0cnIIMX2WS5mLBG1wMtaz4OUFUqNkNJhbrA8=)
4: c9sXvnnFKQwKh05j0TaYAQugLQM.roa (hash: eyB+ysjYhGow5lnf5FUGFEiyTh1wZN2qzaaHi/6zhTQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Sep 2025 05:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:50:e6:2a:8c:ea:b5:f6:83:50:16:7f:b4:49:46:1e:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03c33e43ef56527a169d6ac6d7e62c63d1973051
Validity
Not Before: Sep 16 05:01:25 2025 GMT
Not After : Sep 17 05:01:25 2025 GMT
Subject: CN=eb31731e61429857ecc8d8d88dbec3e8594cc370
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:85:0b:6c:85:79:9a:dd:07:04:2e:61:30:c4:
d0:50:a9:d6:b4:9f:a8:e2:ad:0b:85:b2:6f:38:66:
86:8a:37:1a:31:2b:3c:31:28:2d:c4:74:83:f5:b3:
5a:29:22:b9:b3:69:54:ae:be:fc:1c:6e:70:af:20:
f3:31:e6:a9:8b:61:09:8a:91:d2:90:24:aa:50:1b:
6c:ed:d3:31:c3:17:7e:ef:b6:d1:a3:ae:74:fa:cd:
3a:8d:2f:c5:5f:d8:74:5e:97:1f:74:5a:ef:f6:68:
c1:21:65:47:cd:d9:33:88:81:0b:8d:2e:99:bb:19:
92:31:1e:d1:ba:73:b3:4c:7f:52:81:2c:ff:3b:00:
36:97:55:05:f7:af:98:69:07:25:7d:9d:f2:12:27:
7f:14:6e:f0:48:26:44:91:77:cf:bb:03:92:e2:27:
d3:bf:19:bd:b0:c7:14:4b:c0:0e:27:7a:e7:52:b5:
7c:2c:7b:75:a1:f5:50:82:63:b1:8e:ae:c1:b0:87:
25:a2:89:19:2e:31:ab:71:d3:a5:da:71:58:64:9e:
5b:8a:0e:a0:b5:61:5f:00:b0:e0:d4:11:cb:a0:39:
53:2c:2a:c5:2e:cc:02:c7:70:13:da:67:08:5f:92:
ae:37:f9:1c:7d:2e:65:5b:0c:3c:05:3c:be:91:81:
48:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:31:73:1E:61:42:98:57:EC:C8:D8:D8:8D:BE:C3:E8:59:4C:C3:70
X509v3 Authority Key Identifier:
keyid:03:C3:3E:43:EF:56:52:7A:16:9D:6A:C6:D7:E6:2C:63:D1:97:30:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:38:da:f9:7e:a0:0f:f9:cd:27:0b:9b:04:57:c5:55:67:ca:
67:70:63:36:cb:e3:3b:fb:92:59:f6:aa:8f:b6:ea:0f:e6:08:
6d:44:b1:dc:ff:a1:81:65:98:14:b3:85:3c:19:15:b6:df:42:
cf:97:8b:11:7f:5f:1c:c4:cd:87:0b:b3:43:54:c0:cf:e1:17:
7e:48:e8:ae:2a:83:bb:80:a6:12:a5:0a:23:68:bf:be:8f:a3:
08:0b:53:c8:7d:0c:26:56:fa:df:a3:ed:05:ee:7d:37:53:fa:
eb:74:4c:46:1e:06:3f:9b:c7:2f:62:82:1e:c6:31:6a:06:fb:
2b:25:48:b4:6e:6c:81:45:5a:b3:d6:40:e8:2e:61:d8:64:79:
a2:07:c1:d5:0c:d7:89:b1:0d:d8:18:09:05:e2:62:78:76:19:
f2:4d:fa:bb:cf:84:e9:53:0d:5c:04:b6:45:13:91:66:90:4f:
20:a4:53:92:7b:eb:cc:7b:14:6c:78:3b:b6:d3:74:2a:86:1e:
c4:45:3c:c7:e6:a5:a8:52:aa:7f:a7:ad:03:5b:dc:f5:f8:e4:
2e:b5:57:cf:db:61:cd:4f:bd:b6:5f:34:a4:23:41:5c:81:ae:
15:de:7d:27:68:ad:6f:b1:44:ca:26:f2:76:b4:e1:df:da:fe:
f2:52:4d:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 09:17:18 2025 by rpki-client