Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/2581f4-8410-4a43-9186-0fab2269ea8e/1/M8Ww18CpzSS3PNy5LIdG6FpKW48.mft
File: M8Ww18CpzSS3PNy5LIdG6FpKW48.mft (raw, json)
Hash identifier: B9YR4uAYvodrywXkBRZiimZebdrBOQM0WgoeiyCpxrE=
Subject key identifier: A8:75:78:12:AF:73:BF:19:38:94:88:8B:9C:C2:68:EF:6B:2B:42:A8
Authority key identifier: 33:C5:B0:D7:C0:A9:CD:24:B7:3C:DC:B9:2C:87:46:E8:5A:4A:5B:8F
Certificate issuer: /CN=33c5b0d7c0a9cd24b73cdcb92c8746e85a4a5b8f
Certificate serial: 019A0780AE26FB2BD72037C9D00872B9B2B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M8Ww18CpzSS3PNy5LIdG6FpKW48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/2581f4-8410-4a43-9186-0fab2269ea8e/1/M8Ww18CpzSS3PNy5LIdG6FpKW48.mft
Manifest number: 0B0D
Signing time: Tue 21 Oct 2025 16:01:04 +0000
Manifest this update: Tue 21 Oct 2025 16:01:04 +0000
Manifest next update: Wed 22 Oct 2025 16:01:04 +0000
Files and hashes: 1: G9IMCDRzOQuPbahdvenWDMel-ec.roa (hash: KIE/h3OnsvTFha1HUMyujy3OIfah+sKBRWCgbRO+mg8=)
2: M8Ww18CpzSS3PNy5LIdG6FpKW48.crl (hash: qfQt9I1DUOb6ixDEidD3iM813iouQ8zZmHNrFO0aE5s=)
3: kaCKh69UCH1e8YxXvfDRSIMinp4.roa (hash: 1RbgYWWGOgFXxNNpggiv1pAr13/5f1ITVmQGcqYLD8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/2581f4-8410-4a43-9186-0fab2269ea8e/1/M8Ww18CpzSS3PNy5LIdG6FpKW48.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/2581f4-8410-4a43-9186-0fab2269ea8e/1/M8Ww18CpzSS3PNy5LIdG6FpKW48.mft
rsync://rpki.ripe.net/repository/DEFAULT/M8Ww18CpzSS3PNy5LIdG6FpKW48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 14:12:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:07:80:ae:26:fb:2b:d7:20:37:c9:d0:08:72:b9:b2:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33c5b0d7c0a9cd24b73cdcb92c8746e85a4a5b8f
Validity
Not Before: Oct 21 16:01:04 2025 GMT
Not After : Oct 22 16:01:04 2025 GMT
Subject: CN=a8757812af73bf193894888b9cc268ef6b2b42a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:63:96:49:74:68:94:be:ad:d9:2b:48:25:aa:
31:5b:2f:5e:7f:96:da:83:95:e5:aa:cb:91:9c:ac:
ba:ec:c2:46:d9:9b:bf:ac:c8:d0:82:2a:e4:7d:e9:
0e:8c:a5:9f:b7:cc:22:ea:5d:a9:7b:36:92:6b:49:
df:a5:16:e0:73:c4:bc:a2:28:86:8e:68:d9:b3:61:
6b:e9:e4:c9:f5:f1:a5:9c:a8:09:51:04:b3:6c:b9:
a2:6e:e9:0e:22:df:f6:fa:16:a0:42:fd:29:f8:0a:
4e:7d:8f:17:45:41:eb:fb:34:4f:f0:a7:11:1b:32:
33:0d:a8:88:c1:97:b7:5e:97:fb:ec:4d:26:37:78:
0a:6a:5b:08:03:dc:8b:e9:e1:43:68:60:1a:d4:bd:
5d:3a:bb:4b:74:60:c8:d7:79:34:ce:a2:16:ee:6e:
ef:fe:de:fd:0a:6c:a9:49:f6:4d:30:bb:69:2c:bf:
f3:5f:28:3e:f1:a6:2f:6a:e5:80:85:95:fc:1d:f6:
ac:55:2b:ec:d1:8e:cf:83:c7:c2:9e:f9:c0:ac:08:
cc:b6:ce:62:28:d9:a1:2f:4a:49:a4:a1:7a:3e:c7:
86:da:bc:a9:6d:60:b0:d6:ec:14:b0:66:3a:5a:5e:
e7:97:43:6a:81:bf:ee:7e:12:e8:a3:40:42:9e:a5:
7e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:75:78:12:AF:73:BF:19:38:94:88:8B:9C:C2:68:EF:6B:2B:42:A8
X509v3 Authority Key Identifier:
keyid:33:C5:B0:D7:C0:A9:CD:24:B7:3C:DC:B9:2C:87:46:E8:5A:4A:5B:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M8Ww18CpzSS3PNy5LIdG6FpKW48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/2581f4-8410-4a43-9186-0fab2269ea8e/1/M8Ww18CpzSS3PNy5LIdG6FpKW48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/2581f4-8410-4a43-9186-0fab2269ea8e/1/M8Ww18CpzSS3PNy5LIdG6FpKW48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dd:28:81:4b:8b:b2:07:12:31:d5:03:18:a4:4f:bf:99:17:1f:
b5:f6:41:09:2e:25:d9:8c:d4:af:7d:56:d6:2f:ff:21:8d:e0:
a4:7e:df:29:96:47:44:c5:85:20:f3:3c:3f:00:a9:b3:9e:67:
2d:84:07:21:e8:a7:4d:25:f5:ce:ef:97:aa:32:8c:75:c7:3b:
7a:66:6f:15:c1:fb:18:db:58:d3:e0:9c:cd:a2:74:e8:bd:ec:
16:27:b4:82:10:55:b2:bd:dc:6f:d4:95:a1:97:43:8c:ef:3b:
a0:dd:ba:dc:02:4f:6e:f7:c1:e5:67:42:f5:20:fe:ef:ab:d8:
90:51:31:84:b3:fd:0d:f0:7b:fb:49:f3:2a:5d:19:9b:ee:ef:
95:47:0a:6d:d5:38:09:94:aa:3f:5c:a4:1c:56:cf:5c:a5:9d:
b1:f2:ea:1f:bb:7c:e3:f4:64:05:9a:05:da:e0:26:9c:ae:68:
56:1e:75:d3:34:09:4c:58:a1:5e:88:8b:e2:5a:c3:52:27:34:
c3:0f:79:3f:cb:96:0f:93:21:7c:7a:f6:44:b7:75:cf:b1:c4:
51:16:ad:73:4e:c4:22:f2:85:68:38:cf:dc:5d:a8:34:a3:05:
42:23:ae:17:11:78:66:8a:12:2a:e5:57:6d:5c:a6:15:8d:69:
39:d4:75:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 21:09:17 2025 by rpki-client