Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.mft
File: cS8iadFWM728cdjNP0WMvQP-Ax8.mft (raw, json)
Hash identifier: JUt55hZmF1IsRSx7LP/tFG3Sa4aEElNwKwtsiuhp9iE=
Subject key identifier: 39:6D:27:8C:94:2F:83:9F:67:10:50:F8:CA:B0:04:63:FF:F3:42:89
Authority key identifier: 71:2F:22:69:D1:56:33:BD:BC:71:D8:CD:3F:45:8C:BD:03:FE:03:1F
Certificate issuer: /CN=712f2269d15633bdbc71d8cd3f458cbd03fe031f
Certificate serial: 019A5C424709E619FD65EA1642DF5E5381CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cS8iadFWM728cdjNP0WMvQP-Ax8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.mft
Manifest number: 0AC0
Signing time: Fri 07 Nov 2025 03:00:38 +0000
Manifest this update: Fri 07 Nov 2025 03:00:38 +0000
Manifest next update: Sat 08 Nov 2025 03:00:38 +0000
Files and hashes: 1: 9BckWYd3Zpv7VuHw83B3GgbSq2c.roa (hash: 1ciDlQb2CZ1qp4TAdUK8jkR1eFPaY1eqjyHYTIjMv0Y=)
2: H1EL1U-GIPFFr0f1Q-aFy7Wb8e4.roa (hash: iqzV8mEdZbkZ5VJezg/UaqQeyUszupnBM56S/6XnGcM=)
3: J8a8mMzsBimsq6oHwHx5bIHWD4Y.roa (hash: 1VJlid4hfVo+Bv+c5fIKw8LhPKdHBzjl0S3JZl+3O5c=)
4: ZgwCc5_6MulL4iL_zC1XUNHyAbI.roa (hash: /jcVyr8eQJZjytkrqctvHq37ILkIvanUDZTLnrClopA=)
5: cS8iadFWM728cdjNP0WMvQP-Ax8.crl (hash: BD1qcZV9oVuhGXxP1obBJyN7nX/lmyGAz8Ik/dKxXls=)
6: m5c36cD4HEnvnKSFkdVs5FAdwfY.roa (hash: zDDIqdWDgnB3uWdjXBi6MQIDiaHOTeoGWkwt3yBBNJ4=)
7: u95K4fV2qtYCciDZ9UwzIFzAw5A.roa (hash: ayZrkho31pPxiVCGyzfE95bEFSC8qkDwrF+lSVt63SM=)
8: xpgO3ZCBY-qjN8oFsOWEPvUCvtE.roa (hash: +qRt4PQpWMMvJjygxcf9dSJhb+lYPMjbz4U/lEmLHfc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.mft
rsync://rpki.ripe.net/repository/DEFAULT/cS8iadFWM728cdjNP0WMvQP-Ax8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Nov 2025 03:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:5c:42:47:09:e6:19:fd:65:ea:16:42:df:5e:53:81:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=712f2269d15633bdbc71d8cd3f458cbd03fe031f
Validity
Not Before: Nov 7 03:00:38 2025 GMT
Not After : Nov 8 03:00:38 2025 GMT
Subject: CN=396d278c942f839f671050f8cab00463fff34289
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ef:16:6c:30:ae:87:a5:bb:c7:3c:05:10:1a:
f2:24:db:df:ca:4c:43:e6:69:0e:d9:d4:bc:01:24:
b4:e6:c1:b6:93:19:82:63:ac:65:15:93:52:17:6d:
59:03:db:9d:aa:09:22:69:b3:1e:55:c8:7d:c8:b4:
b9:95:30:ab:c4:8c:0f:2b:ad:8c:6c:68:6f:f0:eb:
c8:75:99:0e:42:23:dd:b6:73:a4:e9:f6:f6:a0:09:
88:ce:ec:4d:51:11:0b:e7:11:46:3e:0f:2a:dd:ae:
3b:4d:00:06:d8:ec:c9:72:c1:49:32:f7:98:c5:2f:
c1:5f:00:62:f3:5f:88:47:f2:7d:18:1d:80:74:99:
da:81:ff:a6:3a:24:fd:70:11:3f:72:fa:9f:17:51:
1d:71:53:a7:eb:30:b3:bb:bc:a0:9a:dc:75:10:58:
a6:80:68:f1:ee:53:05:11:0a:44:9d:ab:71:69:05:
46:fc:96:02:c4:63:31:1d:53:80:9a:19:ee:c9:33:
86:e3:fb:47:2d:e2:fc:00:b3:b5:0b:2e:3f:7d:13:
7b:79:5a:de:eb:52:82:d0:3a:6d:14:0b:61:a1:ef:
00:b0:ee:31:d5:2b:b3:40:14:22:ac:4a:51:07:22:
26:1e:78:ae:0b:40:a1:2e:15:0c:21:9c:f7:12:b4:
e3:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:6D:27:8C:94:2F:83:9F:67:10:50:F8:CA:B0:04:63:FF:F3:42:89
X509v3 Authority Key Identifier:
keyid:71:2F:22:69:D1:56:33:BD:BC:71:D8:CD:3F:45:8C:BD:03:FE:03:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cS8iadFWM728cdjNP0WMvQP-Ax8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:a6:7c:c6:44:3b:b5:19:dc:19:e2:08:94:6b:33:25:c3:b3:
89:c0:e6:20:bd:bf:bf:c2:6f:bc:f5:3b:1b:52:d1:67:29:09:
97:8e:82:36:0e:70:79:79:6c:11:c9:8b:eb:5c:c8:64:f5:f3:
38:bf:9c:4e:cd:33:29:27:e9:a8:20:c0:b5:89:f4:cf:c6:42:
90:83:cf:db:04:7a:c0:2a:be:c7:bb:18:a7:61:31:64:09:9a:
b0:6d:cd:a7:fb:da:bc:78:96:43:c9:ef:1d:0b:d4:c6:73:89:
8a:97:2a:43:5b:70:38:eb:b3:44:d5:8c:3e:45:0a:85:24:f3:
4e:52:26:1a:a2:3f:13:31:a5:1d:c9:e3:ee:60:80:dd:25:cf:
80:8f:5c:c4:4d:30:92:89:b2:b8:ec:fb:e7:46:de:fa:22:3e:
b3:47:79:4b:6d:e2:5d:06:04:93:2c:6c:03:ee:d3:50:6d:b8:
f7:4f:2f:b2:c8:20:f3:84:b5:bd:46:70:d1:a9:4f:21:1b:ce:
48:ec:7a:55:a4:c1:26:9f:11:0d:13:39:33:ef:b9:c0:c2:e0:
87:0c:b3:7a:1e:fe:3d:a9:44:c7:fc:0a:20:9c:6e:46:53:58:
1c:f2:40:8d:db:8b:0e:09:6b:92:f4:e8:47:23:c7:b7:3c:03:
8b:62:5d:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 7 11:06:21 2025 by rpki-client