Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/f879a2-2881-43b1-a810-f2c892c2dc7d/1/i8qzttz8va_XYxEPhmqCgV3qRGM.mft
File: i8qzttz8va_XYxEPhmqCgV3qRGM.mft (raw, json)
Hash identifier: x22YO650W9N8JQhVTLCpje6n2hTpDDoR4xeu65Tt5mk=
Subject key identifier: 63:E7:28:F6:58:B6:F8:64:B0:16:75:46:41:CD:A4:2A:AA:11:0D:20
Authority key identifier: 8B:CA:B3:B6:DC:FC:BD:AF:D7:63:11:0F:86:6A:82:81:5D:EA:44:63
Certificate issuer: /CN=8bcab3b6dcfcbdafd763110f866a82815dea4463
Certificate serial: 019A71B88A533F136CA8886D536E6E9BA833
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i8qzttz8va_XYxEPhmqCgV3qRGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/f879a2-2881-43b1-a810-f2c892c2dc7d/1/i8qzttz8va_XYxEPhmqCgV3qRGM.mft
Manifest number: 0392
Signing time: Tue 11 Nov 2025 07:01:50 +0000
Manifest this update: Tue 11 Nov 2025 07:01:50 +0000
Manifest next update: Wed 12 Nov 2025 07:01:50 +0000
Files and hashes: 1: XDaCGcZealj-spshbO6gPk6HDcA.roa (hash: nsrfqrdgPjlaid22aLgk/rpbmAlJVh+pY8pGwnfkSSY=)
2: i8qzttz8va_XYxEPhmqCgV3qRGM.crl (hash: Zz67Vm12PmOyYoyo06TgXv6rZiUIN34/aD4tx+r8K1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/f879a2-2881-43b1-a810-f2c892c2dc7d/1/i8qzttz8va_XYxEPhmqCgV3qRGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/f879a2-2881-43b1-a810-f2c892c2dc7d/1/i8qzttz8va_XYxEPhmqCgV3qRGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/i8qzttz8va_XYxEPhmqCgV3qRGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:8a:53:3f:13:6c:a8:88:6d:53:6e:6e:9b:a8:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bcab3b6dcfcbdafd763110f866a82815dea4463
Validity
Not Before: Nov 11 07:01:50 2025 GMT
Not After : Nov 12 07:01:50 2025 GMT
Subject: CN=63e728f658b6f864b016754641cda42aaa110d20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e4:0b:d4:a1:bb:fe:b1:56:1b:d6:9e:7d:dd:
91:64:78:00:e9:d4:ff:0a:e2:2b:89:de:fd:83:df:
98:46:5b:c7:ef:5f:6d:02:3c:09:8c:f8:f1:07:32:
9c:50:fa:b4:5a:b9:23:a5:f6:d9:f2:34:61:19:85:
96:c5:00:d0:5a:f0:ea:f3:c8:bf:d0:28:70:c2:cc:
5f:00:ba:4a:d4:a2:74:b8:b1:d1:b7:87:81:f1:a7:
3e:81:02:06:24:7e:25:8a:21:90:bc:2c:d2:4b:2d:
cd:72:65:e7:6a:8c:94:1c:46:82:84:f2:90:d1:15:
30:1b:9f:b5:5f:a1:50:85:5c:12:e4:32:1d:96:06:
f2:00:86:ff:76:5a:3d:c7:1c:a6:8d:6e:5d:af:d7:
25:e5:63:61:ee:c2:56:bc:d9:54:96:2d:22:07:3b:
ff:0e:76:a7:d1:31:3a:bd:ce:2c:59:f8:9d:be:b9:
14:f2:30:0d:78:cc:23:fd:54:58:91:e3:24:ae:05:
8f:9b:6e:5f:99:f6:ea:2b:a5:7f:c8:7a:a5:24:d0:
21:fb:3d:3d:8d:c3:36:2d:2f:c7:a6:05:71:2f:e7:
e7:66:12:40:01:e8:98:09:42:07:3e:73:17:8f:1b:
00:92:06:16:d7:60:08:83:f9:87:20:7d:fc:77:87:
f1:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:E7:28:F6:58:B6:F8:64:B0:16:75:46:41:CD:A4:2A:AA:11:0D:20
X509v3 Authority Key Identifier:
keyid:8B:CA:B3:B6:DC:FC:BD:AF:D7:63:11:0F:86:6A:82:81:5D:EA:44:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i8qzttz8va_XYxEPhmqCgV3qRGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/f879a2-2881-43b1-a810-f2c892c2dc7d/1/i8qzttz8va_XYxEPhmqCgV3qRGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/f879a2-2881-43b1-a810-f2c892c2dc7d/1/i8qzttz8va_XYxEPhmqCgV3qRGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:66:4e:9e:e8:5c:a9:78:46:40:b9:31:3c:85:49:5a:46:62:
4b:4f:23:f2:41:ff:ab:50:12:51:8d:77:d0:92:db:3e:2d:82:
34:ee:b7:ef:3e:79:52:bb:bc:7e:ca:6b:2a:0b:c4:b7:fc:49:
9a:57:5d:3a:c1:c0:3c:f4:43:b8:a0:f1:77:ee:f7:e0:79:2b:
3c:ff:95:85:bb:df:87:e5:04:1d:dc:5a:54:87:e2:72:b0:73:
ea:cc:ea:42:d2:0f:ce:e9:a2:a2:2b:e3:58:8f:42:58:40:7f:
c4:73:05:fd:39:a8:76:d5:2f:cd:34:4c:f1:04:ea:9c:99:28:
89:37:33:fe:47:ea:5e:4b:a7:78:bb:0f:05:a9:a0:49:1c:ff:
9b:f3:84:44:99:c9:ba:95:d2:fb:c2:14:1a:27:e4:6f:c3:50:
ce:c1:2e:1a:2d:98:a4:23:91:2e:b0:01:5a:3b:52:24:14:57:
a4:d4:2d:7d:c3:da:67:de:d4:d4:1d:a8:2b:b9:59:8f:a0:a0:
bf:45:aa:bd:6e:28:8f:de:b4:c9:ab:19:70:53:6b:1c:3f:d8:
3b:f8:fe:7f:46:62:80:2c:fe:fe:09:83:d6:38:f1:7b:98:cb:
34:22:c0:ec:bc:a0:3b:4b:80:14:2d:6f:4b:8a:45:bd:a0:63:
ae:28:cd:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:24 2025 by rpki-client