Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/e22fea-84d0-406a-8a6f-46f5fa2c9303/1/8MScIXjoL9wfQZ9afFFyHfU9ekg.mft
File: 8MScIXjoL9wfQZ9afFFyHfU9ekg.mft (raw, json)
Hash identifier: HwzNjZJLNzq+lLi1Sew5v6Llvqphfk9pmWm8n4e/bKg=
Subject key identifier: 61:60:F1:8A:E7:91:7C:BF:49:9D:1E:B3:93:80:AF:9D:E6:38:11:20
Authority key identifier: F0:C4:9C:21:78:E8:2F:DC:1F:41:9F:5A:7C:51:72:1D:F5:3D:7A:48
Certificate issuer: /CN=f0c49c2178e82fdc1f419f5a7c51721df53d7a48
Certificate serial: 019A22C069512B0C84CE245ED088E1FB6A88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8MScIXjoL9wfQZ9afFFyHfU9ekg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/e22fea-84d0-406a-8a6f-46f5fa2c9303/1/8MScIXjoL9wfQZ9afFFyHfU9ekg.mft
Manifest number: 15E0
Signing time: Sun 26 Oct 2025 23:00:26 +0000
Manifest this update: Sun 26 Oct 2025 23:00:26 +0000
Manifest next update: Mon 27 Oct 2025 23:00:26 +0000
Files and hashes: 1: 8MScIXjoL9wfQZ9afFFyHfU9ekg.crl (hash: UBRJJFk1l3/IN86g4UlnHp+Ye7yvrcTUr9+5m7ut49w=)
2: E1bqejAdTN3uYMBTKCwH33KmoEE.roa (hash: /XRVb9kLwHV21UKOVZ0MM6evc9apWkwvTlQRZL1Tohg=)
3: gAbWpwUUphvqV25CUB0maQ_pAx0.roa (hash: BLsk+LJxA+WagSmLj3Bzfhh4p3QvCZDF/XVfmTYGdec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/e22fea-84d0-406a-8a6f-46f5fa2c9303/1/8MScIXjoL9wfQZ9afFFyHfU9ekg.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/e22fea-84d0-406a-8a6f-46f5fa2c9303/1/8MScIXjoL9wfQZ9afFFyHfU9ekg.mft
rsync://rpki.ripe.net/repository/DEFAULT/8MScIXjoL9wfQZ9afFFyHfU9ekg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:c0:69:51:2b:0c:84:ce:24:5e:d0:88:e1:fb:6a:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0c49c2178e82fdc1f419f5a7c51721df53d7a48
Validity
Not Before: Oct 26 23:00:26 2025 GMT
Not After : Oct 27 23:00:26 2025 GMT
Subject: CN=6160f18ae7917cbf499d1eb39380af9de6381120
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:51:49:61:df:2c:10:3d:a5:5e:7e:98:ad:b0:
83:5f:d9:8d:b5:11:b5:42:f5:45:18:c7:5f:62:c9:
b9:eb:8f:8e:b9:b1:25:13:90:af:2a:26:12:9e:38:
4c:f4:b5:a9:35:b3:8d:76:b6:55:07:e7:9f:1b:29:
2c:68:90:d0:6c:b3:e1:6c:dc:af:36:e6:67:86:08:
f3:f3:e1:92:31:36:6e:0a:69:60:95:a8:22:4f:a8:
cb:ad:e4:1f:d6:ec:b2:de:fe:d4:83:a3:1b:14:72:
22:7a:3f:89:47:3d:6c:92:4c:1a:60:a8:71:8f:ea:
c4:a1:4a:9c:c3:6f:70:84:57:c3:38:a2:4f:ba:1d:
cf:e7:ee:58:bb:e1:32:d8:4c:9d:9e:34:be:56:5b:
0f:4c:62:7b:5e:d6:e5:2d:65:67:8f:be:e9:5a:3e:
4b:c0:b4:97:df:5a:e7:59:17:6e:7c:dd:8f:97:7d:
e0:11:41:4b:38:ac:29:6c:b7:2f:62:40:20:43:75:
02:25:6d:94:2c:f1:a6:6c:ab:d3:8b:ab:ca:ba:c3:
48:17:e3:96:0d:93:a4:11:4c:4a:04:f6:7d:4b:13:
d9:ad:4d:9c:e5:20:4e:e8:76:47:07:4e:8b:71:ab:
44:be:bc:39:93:15:9f:03:ee:bb:7c:a2:7b:a1:52:
1d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:60:F1:8A:E7:91:7C:BF:49:9D:1E:B3:93:80:AF:9D:E6:38:11:20
X509v3 Authority Key Identifier:
keyid:F0:C4:9C:21:78:E8:2F:DC:1F:41:9F:5A:7C:51:72:1D:F5:3D:7A:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8MScIXjoL9wfQZ9afFFyHfU9ekg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/e22fea-84d0-406a-8a6f-46f5fa2c9303/1/8MScIXjoL9wfQZ9afFFyHfU9ekg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/e22fea-84d0-406a-8a6f-46f5fa2c9303/1/8MScIXjoL9wfQZ9afFFyHfU9ekg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:8a:6b:84:44:73:4c:1e:ba:8f:4e:91:73:63:98:78:5b:c9:
04:43:82:10:8b:02:af:fa:e5:31:10:5c:ad:4d:8b:f3:51:d8:
4d:d6:af:5c:c9:b7:87:2e:72:f9:62:3f:58:ff:e5:2c:e0:e1:
a1:b0:e9:f8:33:97:74:ad:12:db:cd:c7:76:2a:72:b9:35:11:
31:1e:0f:c6:16:23:37:42:76:6f:9f:8d:01:d8:92:64:09:ab:
5e:9c:6c:4b:c2:14:27:d8:08:fc:df:b3:c8:13:d6:b6:18:5c:
1a:fe:a6:79:d2:c4:6b:d3:1c:97:95:ea:a5:d7:45:56:4f:6f:
da:3f:a9:77:c3:b8:73:91:76:e8:ee:36:47:5f:1c:58:30:fa:
4c:2b:7f:df:1b:cd:32:f3:7c:a2:9b:56:dc:b8:46:77:60:e8:
28:d0:f1:ee:53:5f:6a:a5:a7:27:1f:01:eb:bc:55:c4:62:cf:
c0:7d:b8:e2:86:ad:71:48:c8:a8:38:50:02:e2:0b:1a:42:58:
49:29:a2:82:18:c9:a9:88:41:8f:b0:68:25:19:05:41:9b:f8:
11:77:c8:36:93:07:4b:f0:e8:c9:c5:e4:33:4d:f4:e8:d1:8d:
1e:b7:45:c3:9e:ed:34:41:4c:30:a9:22:d5:76:a3:0f:b5:e7:
f1:18:43:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 07:08:47 2025 by rpki-client