Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/557962-051a-46c5-8a93-1cc1a538c3ce/1/s8k12EMWos9WpllXttebevgRpwc.mft
File: s8k12EMWos9WpllXttebevgRpwc.mft (raw, json)
Hash identifier: xU+GeOopLtcLuW4v8AN05BrqNiATzZXcPQm/yGJbbKk=
Subject key identifier: 8C:D8:3A:A7:EB:77:C9:2F:AF:9C:0F:BD:C0:9D:17:6B:16:1A:C3:E7
Authority key identifier: B3:C9:35:D8:43:16:A2:CF:56:A6:59:57:B6:D7:9B:7A:F8:11:A7:07
Certificate issuer: /CN=b3c935d84316a2cf56a65957b6d79b7af811a707
Certificate serial: 019A1CBFDBEED96ABA4214B1B3D291AB4135
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s8k12EMWos9WpllXttebevgRpwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/557962-051a-46c5-8a93-1cc1a538c3ce/1/s8k12EMWos9WpllXttebevgRpwc.mft
Manifest number: 09E5
Signing time: Sat 25 Oct 2025 19:02:06 +0000
Manifest this update: Sat 25 Oct 2025 19:02:06 +0000
Manifest next update: Sun 26 Oct 2025 19:02:06 +0000
Files and hashes: 1: s8k12EMWos9WpllXttebevgRpwc.crl (hash: s/kGVWjk8SH63ejzZg2Wq+fPYEw8lGZh5S0lIJq0Aic=)
2: udh3xGDNJXhOcF-5H4cWJu3ktiY.roa (hash: ocPGT+ldVCPhS+IwJUZcLKrDX+p6H2fIq+UgAUlkPrU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/557962-051a-46c5-8a93-1cc1a538c3ce/1/s8k12EMWos9WpllXttebevgRpwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/557962-051a-46c5-8a93-1cc1a538c3ce/1/s8k12EMWos9WpllXttebevgRpwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/s8k12EMWos9WpllXttebevgRpwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 19:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1c:bf:db:ee:d9:6a:ba:42:14:b1:b3:d2:91:ab:41:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3c935d84316a2cf56a65957b6d79b7af811a707
Validity
Not Before: Oct 25 19:02:06 2025 GMT
Not After : Oct 26 19:02:06 2025 GMT
Subject: CN=8cd83aa7eb77c92faf9c0fbdc09d176b161ac3e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:d4:c7:b3:31:ac:64:d8:c4:ad:85:9e:6c:7b:
c2:26:f6:b1:eb:7f:32:76:5d:69:b5:c5:ea:2d:cc:
cd:1a:0c:d7:64:06:64:50:a7:ab:c7:7e:28:86:76:
30:02:d9:5f:4e:d3:7e:2a:c7:46:3d:2c:9d:14:30:
d3:04:0f:21:43:45:79:9e:5b:79:c4:27:3e:8d:3f:
55:ed:c0:9d:57:3e:5d:52:2c:fa:8e:68:10:5f:55:
ef:94:3b:b2:50:fc:db:10:f7:d1:33:c5:d5:26:90:
31:3f:3a:b8:f4:85:f2:74:1e:37:81:45:0e:5b:30:
9c:fc:fc:c6:a0:96:be:f9:36:70:c8:0c:0b:96:e6:
2e:4e:31:82:ed:cb:ee:07:41:1e:ac:ec:92:2c:c8:
69:03:5e:90:88:70:eb:66:7a:05:e7:67:69:aa:d3:
31:c9:6c:e0:68:56:33:8d:e7:30:e8:ba:95:a1:d0:
a8:08:70:65:42:2f:ca:5d:43:64:01:6b:74:f0:c5:
9d:1c:86:fb:fc:4f:3f:9c:08:5c:6e:ab:88:d8:65:
d0:d5:f7:d2:81:32:8f:d0:8b:47:e3:26:3e:9f:47:
c6:05:9e:6b:2a:33:68:64:05:9d:90:3a:70:43:32:
c5:a2:1d:c5:d2:11:4a:46:f6:11:05:77:45:15:7b:
75:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:D8:3A:A7:EB:77:C9:2F:AF:9C:0F:BD:C0:9D:17:6B:16:1A:C3:E7
X509v3 Authority Key Identifier:
keyid:B3:C9:35:D8:43:16:A2:CF:56:A6:59:57:B6:D7:9B:7A:F8:11:A7:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s8k12EMWos9WpllXttebevgRpwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/557962-051a-46c5-8a93-1cc1a538c3ce/1/s8k12EMWos9WpllXttebevgRpwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/557962-051a-46c5-8a93-1cc1a538c3ce/1/s8k12EMWos9WpllXttebevgRpwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:62:e4:c1:11:00:2a:1c:5d:e1:f6:83:f8:58:ea:c9:ae:4c:
1c:b9:eb:10:b9:52:fd:83:fb:02:45:55:a3:7e:23:cf:22:1b:
88:19:5d:ec:cb:9c:2c:19:36:8a:e3:cb:36:d2:40:16:9a:63:
f8:ef:e3:9d:63:f2:bf:b9:65:7c:d8:f1:f5:62:7b:f2:4d:78:
b2:27:f4:79:63:11:6e:9f:43:ba:53:b1:cb:d4:e2:e4:33:d3:
77:53:71:5c:43:db:42:ae:20:bb:e7:8f:7a:ae:12:1d:ed:46:
ed:06:16:11:ec:37:06:7a:3e:e4:f8:5e:3e:f9:1a:7d:de:6a:
eb:77:e1:3c:08:9f:1d:50:73:ad:9f:1e:40:66:26:da:44:c8:
44:64:56:99:e6:4e:8a:36:72:90:b5:ae:57:e6:81:69:47:4b:
8d:16:14:e9:13:b4:5f:6b:7d:95:f0:a5:46:92:64:76:5e:e6:
d0:ae:84:64:a6:79:ec:0a:4b:ad:11:b1:20:31:9d:86:fa:83:
76:d1:26:31:63:61:67:ff:71:82:82:c7:dc:04:f8:39:c2:ff:
ea:c5:1d:24:93:fd:a0:03:d8:45:2a:30:34:3f:c3:0d:6d:b2:
c4:c4:6a:77:eb:d0:ac:02:b8:90:1b:ae:df:c0:1d:4d:9e:6b:
c4:87:78:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 04:33:25 2025 by rpki-client