Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/2581f4-8410-4a43-9186-0fab2269ea8e/1/M8Ww18CpzSS3PNy5LIdG6FpKW48.mft
File: M8Ww18CpzSS3PNy5LIdG6FpKW48.mft (raw, json)
Hash identifier: 8nn6qliy/2QhPzID/sZ+LWlLxr26caPT1UZsazLyddI=
Subject key identifier: D2:EC:6B:3F:F7:20:CA:2F:11:C6:9C:67:8A:3B:BC:18:74:C1:E9:B2
Authority key identifier: 33:C5:B0:D7:C0:A9:CD:24:B7:3C:DC:B9:2C:87:46:E8:5A:4A:5B:8F
Certificate issuer: /CN=33c5b0d7c0a9cd24b73cdcb92c8746e85a4a5b8f
Certificate serial: 01984965DF81F101CB3CD8A53CB07FE041C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M8Ww18CpzSS3PNy5LIdG6FpKW48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/2581f4-8410-4a43-9186-0fab2269ea8e/1/M8Ww18CpzSS3PNy5LIdG6FpKW48.mft
Manifest number: 0A26
Signing time: Sun 27 Jul 2025 01:01:09 +0000
Manifest this update: Sun 27 Jul 2025 01:01:09 +0000
Manifest next update: Mon 28 Jul 2025 01:01:09 +0000
Files and hashes: 1: G9IMCDRzOQuPbahdvenWDMel-ec.roa (hash: KIE/h3OnsvTFha1HUMyujy3OIfah+sKBRWCgbRO+mg8=)
2: M8Ww18CpzSS3PNy5LIdG6FpKW48.crl (hash: QotzT2Xwe4wjgaPJWrY+mVYRDJjLaHZPzfBqjcSdefU=)
3: kaCKh69UCH1e8YxXvfDRSIMinp4.roa (hash: 1RbgYWWGOgFXxNNpggiv1pAr13/5f1ITVmQGcqYLD8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/2581f4-8410-4a43-9186-0fab2269ea8e/1/M8Ww18CpzSS3PNy5LIdG6FpKW48.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/2581f4-8410-4a43-9186-0fab2269ea8e/1/M8Ww18CpzSS3PNy5LIdG6FpKW48.mft
rsync://rpki.ripe.net/repository/DEFAULT/M8Ww18CpzSS3PNy5LIdG6FpKW48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:df:81:f1:01:cb:3c:d8:a5:3c:b0:7f:e0:41:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33c5b0d7c0a9cd24b73cdcb92c8746e85a4a5b8f
Validity
Not Before: Jul 27 01:01:09 2025 GMT
Not After : Jul 28 01:01:09 2025 GMT
Subject: CN=d2ec6b3ff720ca2f11c69c678a3bbc1874c1e9b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:68:c4:ba:8d:98:39:6f:4e:a8:a9:5c:0d:f3:
93:5a:65:41:f8:ca:63:b4:9c:10:c1:57:e3:c4:12:
4d:ed:e3:c5:31:df:0c:70:6a:f8:33:13:14:d6:46:
c7:ab:31:40:66:46:b0:05:42:e9:b8:37:87:0d:45:
7a:3a:22:0c:0a:75:bc:6d:dd:ed:d4:de:1c:ae:21:
3e:f7:11:98:76:43:33:2d:f2:d9:07:8e:26:ec:d9:
79:08:c7:50:1b:ee:95:3a:4d:ca:4f:e2:4f:66:61:
2d:ff:60:39:0f:84:ac:a9:50:d1:80:0d:2b:ba:f6:
47:4c:c0:c0:4f:73:c4:d4:1b:b8:46:b0:e6:b8:c2:
fd:24:82:b1:53:d4:20:9a:c2:59:87:45:ba:eb:3e:
b2:6a:49:11:83:a0:89:76:11:fc:8a:80:ef:e7:94:
3d:9a:5b:de:34:62:a3:47:21:f6:4b:64:27:dc:8c:
e8:d0:eb:cb:25:5a:6d:0d:20:81:3a:36:37:1d:8c:
32:5d:04:30:88:34:8d:5f:8d:7d:f0:a2:c9:6c:33:
12:48:50:b2:1f:75:3c:ab:b1:54:90:00:20:0e:fa:
37:a8:28:7c:83:9f:ff:af:a9:eb:b9:33:d5:b6:a6:
bc:b9:5c:7b:33:ec:3a:e7:0a:ef:e1:f3:9b:ea:71:
00:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:EC:6B:3F:F7:20:CA:2F:11:C6:9C:67:8A:3B:BC:18:74:C1:E9:B2
X509v3 Authority Key Identifier:
keyid:33:C5:B0:D7:C0:A9:CD:24:B7:3C:DC:B9:2C:87:46:E8:5A:4A:5B:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M8Ww18CpzSS3PNy5LIdG6FpKW48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/2581f4-8410-4a43-9186-0fab2269ea8e/1/M8Ww18CpzSS3PNy5LIdG6FpKW48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/2581f4-8410-4a43-9186-0fab2269ea8e/1/M8Ww18CpzSS3PNy5LIdG6FpKW48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:d6:8f:56:79:fe:0b:89:a6:8e:dd:b8:cb:18:44:dd:0e:ba:
e3:37:cf:0a:b6:39:a2:5c:6c:bc:ab:a1:cc:75:d7:d1:fe:01:
75:28:fe:d3:95:73:8f:56:95:d6:63:98:03:06:1d:73:01:84:
8d:eb:06:06:19:3c:5a:b2:b1:f5:e6:0b:1b:56:90:cc:e2:62:
1d:80:3f:8e:87:29:fc:01:d0:4d:f0:33:2b:c7:33:49:11:0d:
e2:ef:07:88:07:9f:b8:22:9a:8b:21:a5:9f:9b:93:81:73:6c:
91:13:3b:82:1c:1e:e7:52:3e:29:9a:84:83:44:c3:d3:0c:55:
56:e4:3a:d7:ee:d5:9b:65:03:bd:6a:22:60:5c:8c:b9:a8:64:
72:22:0e:91:f5:cb:aa:8c:c0:4b:b7:71:7f:e0:d2:94:de:6b:
a8:31:5c:eb:a9:b3:f1:9e:71:dd:ea:66:8a:22:fb:01:19:cb:
f9:0f:94:6a:60:7b:e3:b4:64:97:7d:6f:00:86:87:ee:f9:38:
26:e4:4d:07:ae:fd:5c:13:99:18:2a:9c:f2:e2:12:a7:90:c7:
29:0a:d8:8a:e8:4c:3a:c5:33:82:72:3e:cb:79:bb:30:27:4d:
7b:02:6e:2e:96:0d:89:7f:86:9e:55:64:6a:6f:6d:bd:ef:b8:
a3:5f:38:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJZd+B8QHLPNilPLB/4EHBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzYzViMGQ3YzBhOWNkMjRiNzNjZGNiOTJjODc0NmU4NWE0
YTViOGYwHhcNMjUwNzI3MDEwMTA5WhcNMjUwNzI4MDEwMTA5WjAzMTEwLwYDVQQD
EyhkMmVjNmIzZmY3MjBjYTJmMTFjNjljNjc4YTNiYmMxODc0YzFlOWIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl2jEuo2YOW9OqKlcDfOTWmVB+Mpj
tJwQwVfjxBJN7ePFMd8McGr4MxMU1kbHqzFAZkawBULpuDeHDUV6OiIMCnW8bd3t
1N4criE+9xGYdkMzLfLZB44m7Nl5CMdQG+6VOk3KT+JPZmEt/2A5D4SsqVDRgA0r
uvZHTMDAT3PE1Bu4RrDmuML9JIKxU9QgmsJZh0W66z6yakkRg6CJdhH8ioDv55Q9
mlveNGKjRyH2S2Qn3Izo0OvLJVptDSCBOjY3HYwyXQQwiDSNX4198KLJbDMSSFCy
H3U8q7FUkAAgDvo3qCh8g5//r6nruTPVtqa8uVx7M+w65wrv4fOb6nEAmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNLsaz/3IMovEcacZ4o7vBh0wemyMB8GA1UdIwQY
MBaAFDPFsNfAqc0ktzzcuSyHRuhaSluPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTThXdzE4Q3B6U1MzUE55NUxJZEc2RnBLVzQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8yNTgxZjQtODQxMC00YTQzLTkxODYt
MGZhYjIyNjllYThlLzEvTThXdzE4Q3B6U1MzUE55NUxJZEc2RnBLVzQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8yNTgxZjQtODQxMC00YTQzLTkxODYtMGZhYjIyNjllYThl
LzEvTThXdzE4Q3B6U1MzUE55NUxJZEc2RnBLVzQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgNaPVnn+
C4mmjt24yxhE3Q664zfPCrY5olxsvKuhzHXX0f4BdSj+05Vzj1aV1mOYAwYdcwGE
jesGBhk8WrKx9eYLG1aQzOJiHYA/jocp/AHQTfAzK8czSREN4u8HiAefuCKaiyGl
n5uTgXNskRM7ghwe51I+KZqEg0TD0wxVVuQ61+7Vm2UDvWoiYFyMuahkciIOkfXL
qozAS7dxf+DSlN5rqDFc66mz8Z5x3epmiiL7ARnL+Q+UamB747Rkl31vAIaH7vk4
JuRNB679XBOZGCqc8uISp5DHKQrYiuhMOsUzgnI+y3m7MCdNewJuLpYNiX+GnlVk
am9tve+4o184lA==
-----END CERTIFICATE-----
Generated at Sun Jul 27 08:47:00 2025 by rpki-client