Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
File: A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft (raw, json)
Hash identifier: by9MmnEY14ZO+p9qPlF3yKOqgn1tH+PPVozCVseLHtA=
Subject key identifier: D8:4F:DD:D6:E6:19:B8:1F:C5:CE:A6:28:A5:18:D2:A8:AD:92:91:7D
Authority key identifier: 03:C3:3E:43:EF:56:52:7A:16:9D:6A:C6:D7:E6:2C:63:D1:97:30:51
Certificate issuer: /CN=03c33e43ef56527a169d6ac6d7e62c63d1973051
Certificate serial: 019A53AD2E10BD71B19F421CF8C6AFB36C4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
Manifest number: 1731
Signing time: Wed 05 Nov 2025 11:00:49 +0000
Manifest this update: Wed 05 Nov 2025 11:00:49 +0000
Manifest next update: Thu 06 Nov 2025 11:00:49 +0000
Files and hashes: 1: 19QpkXgghLM3Nv0nEMVJTVhhYlk.roa (hash: J5AzJxFSrkUz6NEqgZpKHFp1Qkuuq+hf2j4tyd26uK8=)
2: A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl (hash: q4twCz+ljzwnjO/b5QW8nzDlWNzoRHbuwL5LIs0oVts=)
3: aUt9STDYB4WpJzoIeOhkBXlmRGY.roa (hash: OBmceRN0cnIIMX2WS5mLBG1wMtaz4OUFUqNkNJhbrA8=)
4: c9sXvnnFKQwKh05j0TaYAQugLQM.roa (hash: eyB+ysjYhGow5lnf5FUGFEiyTh1wZN2qzaaHi/6zhTQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 11:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:ad:2e:10:bd:71:b1:9f:42:1c:f8:c6:af:b3:6c:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03c33e43ef56527a169d6ac6d7e62c63d1973051
Validity
Not Before: Nov 5 11:00:49 2025 GMT
Not After : Nov 6 11:00:49 2025 GMT
Subject: CN=d84fddd6e619b81fc5cea628a518d2a8ad92917d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:41:25:a8:5e:e0:01:eb:67:01:b0:ff:1e:f2:
c6:5d:29:6e:f2:9d:c2:2f:39:1f:15:6a:2e:47:6d:
07:cb:1c:e2:66:fb:91:61:26:8e:fc:b2:56:35:88:
e0:13:f3:62:6a:52:35:33:5c:18:9a:b9:6f:8a:e2:
a6:4c:e1:9b:6c:16:d1:26:ba:36:01:9b:0d:4a:40:
d1:a6:fb:65:1f:14:d5:cb:b6:54:0c:16:59:28:8b:
e8:5f:2e:26:6e:49:5f:88:f2:47:ff:d9:21:77:02:
8f:69:9f:3d:58:b3:eb:d5:be:83:8c:a6:26:41:86:
bf:d5:11:ff:bb:e3:76:f4:58:37:63:4c:e6:8f:a1:
18:92:59:5f:d2:89:53:51:7d:33:48:bd:a0:5e:ec:
30:b5:81:fb:a2:fc:e3:ff:62:d2:a6:93:13:36:87:
fe:d3:0c:8f:03:25:02:5c:b7:0c:ef:2a:b9:15:05:
a8:d3:7f:93:19:ae:ca:0e:6b:3f:1f:03:4c:11:20:
b5:ef:be:2e:e7:67:92:48:f9:03:92:46:13:3d:b6:
c3:40:ec:ca:e0:a7:17:9f:bb:08:05:d7:58:e2:a3:
1c:ae:88:92:df:df:98:d6:9a:f6:04:cc:95:f4:a1:
94:fb:a2:af:37:0b:b3:ab:c8:df:46:3b:99:50:c4:
9f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:4F:DD:D6:E6:19:B8:1F:C5:CE:A6:28:A5:18:D2:A8:AD:92:91:7D
X509v3 Authority Key Identifier:
keyid:03:C3:3E:43:EF:56:52:7A:16:9D:6A:C6:D7:E6:2C:63:D1:97:30:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:2e:d4:c7:45:54:0e:31:11:9f:b3:48:44:83:62:e5:0f:c0:
f1:82:a4:3e:c3:24:8d:f0:09:30:85:de:a3:fe:a9:c8:58:e3:
99:a2:ae:5b:1e:6f:bc:c1:d0:e6:4a:ce:6e:27:da:d0:ae:68:
1d:81:01:b2:cc:e5:6c:a6:a6:5d:8c:40:40:0b:2d:b1:af:97:
80:e6:a4:7e:fe:26:eb:57:d8:51:95:ff:ac:02:fd:55:69:b2:
54:9a:d7:e4:1b:d3:37:43:0c:c8:fd:7d:50:02:28:29:f7:57:
93:9f:4b:c6:8f:dc:e8:0d:8a:83:75:e3:88:10:9c:1a:f0:7b:
4a:b1:65:3c:04:e8:ec:da:37:0f:64:32:2c:39:13:9b:a1:08:
e9:a3:e0:ae:88:02:a0:fe:f7:ae:87:6c:3b:13:d5:26:0e:e5:
a2:29:cc:97:3d:98:70:31:87:02:f2:86:4b:2c:2c:0e:b4:a8:
df:87:dc:e6:53:e1:e2:1d:67:77:e5:38:ef:ea:c0:08:b1:25:
83:8c:ce:7d:41:2c:0e:2b:25:9a:80:a6:07:bf:d5:8d:b1:b4:
02:6a:32:8d:fd:10:9a:df:45:94:01:13:60:a0:b7:ab:23:1d:
68:e7:9a:81:ef:e1:70:b8:d3:b6:de:66:63:a7:b0:69:1b:6f:
41:02:e7:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 18:02:50 2025 by rpki-client