Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/f7ec70-0ded-42ca-9d00-9d9e1b6beee9/1/p8qa2kRST8U2-j7Kv3WN8mQHyLE.mft
File: p8qa2kRST8U2-j7Kv3WN8mQHyLE.mft (raw, json)
Hash identifier: BWgdre1rYcL5AE7rljt+Vi2NV7zPjFkkqzz9gtORULE=
Subject key identifier: B1:E2:11:2B:C2:F3:73:55:66:99:F2:50:6D:8E:60:24:D7:9D:8C:F0
Authority key identifier: A7:CA:9A:DA:44:52:4F:C5:36:FA:3E:CA:BF:75:8D:F2:64:07:C8:B1
Certificate issuer: /CN=a7ca9ada44524fc536fa3ecabf758df26407c8b1
Certificate serial: 019A7225961C6348089696D07D6C9093287B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p8qa2kRST8U2-j7Kv3WN8mQHyLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/f7ec70-0ded-42ca-9d00-9d9e1b6beee9/1/p8qa2kRST8U2-j7Kv3WN8mQHyLE.mft
Manifest number: 13ED
Signing time: Tue 11 Nov 2025 09:00:57 +0000
Manifest this update: Tue 11 Nov 2025 09:00:57 +0000
Manifest next update: Wed 12 Nov 2025 09:00:57 +0000
Files and hashes: 1: AGh_BXwDaFnqdr1rluMLMPMOrnM.roa (hash: L7VSHEAFfvwnZGbHuhPcAH6Mmh4M0FtFsSBsZ0VnfV0=)
2: p8qa2kRST8U2-j7Kv3WN8mQHyLE.crl (hash: w65i89nybTU9QSIzAEAmvt7eUt64wmhccBSfVRWoRag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/f7ec70-0ded-42ca-9d00-9d9e1b6beee9/1/p8qa2kRST8U2-j7Kv3WN8mQHyLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/f7ec70-0ded-42ca-9d00-9d9e1b6beee9/1/p8qa2kRST8U2-j7Kv3WN8mQHyLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/p8qa2kRST8U2-j7Kv3WN8mQHyLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:96:1c:63:48:08:96:96:d0:7d:6c:90:93:28:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7ca9ada44524fc536fa3ecabf758df26407c8b1
Validity
Not Before: Nov 11 09:00:57 2025 GMT
Not After : Nov 12 09:00:57 2025 GMT
Subject: CN=b1e2112bc2f373556699f2506d8e6024d79d8cf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:94:ad:f8:e9:6c:1f:58:d0:f0:9f:2e:74:fa:
52:00:67:2b:dc:84:e8:5d:1d:99:66:52:fc:45:78:
96:09:91:6f:25:16:12:0b:14:a4:62:bb:4b:1d:ac:
79:68:74:09:51:df:9c:53:ce:3b:03:9d:e0:1f:fa:
c7:54:28:f8:b1:cb:30:63:30:1f:86:79:90:1a:80:
0d:44:27:d3:e5:08:97:88:d5:ee:d6:93:e3:65:69:
e4:fa:29:46:d2:aa:d2:93:92:fc:40:5c:92:9a:f2:
be:c4:8e:3a:cb:06:a1:b5:09:7e:de:48:24:3d:00:
2c:9c:ef:8a:f5:95:d0:42:30:4e:01:4d:e1:01:d4:
c5:b7:a1:17:1a:17:57:b6:37:e6:58:11:23:8a:cd:
84:18:a9:95:d9:a2:7d:bb:5e:5b:55:a6:84:ce:dd:
fc:d3:9d:d8:9f:38:17:c7:65:29:a1:b5:95:22:5b:
11:e3:95:f6:09:e2:85:54:13:05:95:7e:15:5d:1e:
d9:24:2a:4d:2f:72:24:c8:47:75:d1:0c:e8:a0:bf:
8b:c2:07:c6:c5:4e:0d:21:2b:e0:91:41:6b:39:87:
0f:b2:e6:43:83:f2:9b:20:7a:31:31:92:a8:f3:d0:
93:39:57:5e:22:78:fa:2c:7f:c3:10:6a:3d:15:87:
0f:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:E2:11:2B:C2:F3:73:55:66:99:F2:50:6D:8E:60:24:D7:9D:8C:F0
X509v3 Authority Key Identifier:
keyid:A7:CA:9A:DA:44:52:4F:C5:36:FA:3E:CA:BF:75:8D:F2:64:07:C8:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p8qa2kRST8U2-j7Kv3WN8mQHyLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/f7ec70-0ded-42ca-9d00-9d9e1b6beee9/1/p8qa2kRST8U2-j7Kv3WN8mQHyLE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/f7ec70-0ded-42ca-9d00-9d9e1b6beee9/1/p8qa2kRST8U2-j7Kv3WN8mQHyLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:93:2d:f1:8a:3a:75:f3:65:b0:2d:a3:c8:0f:57:88:d1:30:
8b:2e:d4:0b:32:64:e6:17:e7:b3:ae:71:d5:9e:46:8f:6d:ca:
61:df:35:48:b1:d8:9e:7b:3d:16:1f:7b:36:e3:6f:2c:86:06:
21:99:35:9c:5e:2b:6d:db:cf:fd:d8:3a:6a:e3:97:78:a8:3b:
79:3a:34:41:31:7c:b2:aa:be:30:59:1f:c1:c4:d2:db:27:87:
71:10:ae:e8:b2:69:f2:17:95:e6:8f:86:b1:89:bf:74:09:74:
ff:26:81:66:ae:d6:f0:1d:e2:e8:6d:8c:cc:ec:7b:d3:a8:c6:
d7:c9:6c:1a:4d:5a:8b:fb:72:19:7d:3a:f3:5c:ea:97:b8:16:
48:8e:4f:2a:e7:e6:c4:a3:d9:80:fa:f9:b2:9a:a0:53:94:69:
d1:56:87:e2:ed:1d:25:1a:0d:2b:7b:11:62:6d:49:3b:d9:2d:
fe:4e:85:24:0c:12:ff:29:4b:f4:61:4c:4e:49:ae:9f:8b:71:
7e:2f:9b:5d:5a:60:6c:a4:8b:cb:7b:55:02:93:00:35:78:1a:
93:72:fe:78:b9:18:c5:1d:69:db:04:d6:95:60:42:5b:e7:a9:
98:d0:b1:97:86:68:95:80:f8:38:8a:e2:52:1d:c7:e8:b5:99:
0d:ee:5d:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:20:22 2025 by rpki-client