Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/ad050f-a22d-4a77-958c-357a61361dcb/1/M8-_vy7M05OqMMIhNplluEcZLag.mft
File: M8-_vy7M05OqMMIhNplluEcZLag.mft (raw, json)
Hash identifier: 4HCV4kCyAxxxHcBkQn54vrijlh3QlTxIlAKSapOmDlY=
Subject key identifier: 9D:CE:5B:95:77:59:7F:FD:35:8B:C8:9E:66:48:E4:96:B1:CE:29:13
Authority key identifier: 33:CF:BF:BF:2E:CC:D3:93:AA:30:C2:21:36:99:65:B8:47:19:2D:A8
Certificate issuer: /CN=33cfbfbf2eccd393aa30c221369965b847192da8
Certificate serial: 019A4A04D61DD2650A35B99EA9DBB6C17F38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M8-_vy7M05OqMMIhNplluEcZLag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/ad050f-a22d-4a77-958c-357a61361dcb/1/M8-_vy7M05OqMMIhNplluEcZLag.mft
Manifest number: 1283
Signing time: Mon 03 Nov 2025 14:00:22 +0000
Manifest this update: Mon 03 Nov 2025 14:00:22 +0000
Manifest next update: Tue 04 Nov 2025 14:00:22 +0000
Files and hashes: 1: M8-_vy7M05OqMMIhNplluEcZLag.crl (hash: 6YrG/YlqgVDSwVom2lQh08Gqgi6PkO1w7oLNXh81Hd0=)
2: MMfXFIBTN4EF53B-qz6xr0lTa60.roa (hash: PppBDUKwa5tmMVRDOOI/PKjma94X0CuRbdLOVWnm99g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/ad050f-a22d-4a77-958c-357a61361dcb/1/M8-_vy7M05OqMMIhNplluEcZLag.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/ad050f-a22d-4a77-958c-357a61361dcb/1/M8-_vy7M05OqMMIhNplluEcZLag.mft
rsync://rpki.ripe.net/repository/DEFAULT/M8-_vy7M05OqMMIhNplluEcZLag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Nov 2025 14:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4a:04:d6:1d:d2:65:0a:35:b9:9e:a9:db:b6:c1:7f:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33cfbfbf2eccd393aa30c221369965b847192da8
Validity
Not Before: Nov 3 14:00:22 2025 GMT
Not After : Nov 4 14:00:22 2025 GMT
Subject: CN=9dce5b9577597ffd358bc89e6648e496b1ce2913
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:66:5f:15:6e:bf:42:4a:15:bb:aa:8b:84:76:
71:33:b7:e4:58:48:32:06:25:1b:65:1f:52:14:23:
30:2b:2a:43:b4:8a:9e:79:f6:1d:20:81:06:8e:07:
d3:5f:c3:8e:49:59:78:dd:7c:62:2b:af:9d:1c:5c:
6f:83:ed:15:fe:40:cc:2b:8f:ed:b3:09:e9:41:f2:
d1:ea:2c:7c:b5:90:5a:b9:11:70:31:7e:44:49:79:
f3:5f:de:73:61:1e:f8:5f:89:c2:4c:65:74:cb:e7:
ad:fa:b2:ba:96:c6:78:63:a4:a5:50:09:fa:70:94:
4e:66:a9:3f:80:5a:8e:26:06:0e:5e:97:91:d8:f4:
41:05:d8:b6:ec:c9:e9:2a:d3:37:12:7a:5a:43:2d:
cb:0a:cd:de:b2:2b:b8:9f:67:c4:92:c9:65:0b:d0:
12:16:fa:a5:57:e8:c2:54:75:6d:d2:59:63:b4:c9:
1c:d2:f9:b0:ff:b2:6b:cd:85:17:9e:e7:2c:f1:97:
49:69:39:d2:8e:ab:c2:b7:75:63:e9:21:58:d6:7d:
8c:74:88:80:e9:ef:cc:2c:3c:fb:dc:93:9c:72:40:
db:20:1c:4f:18:06:4e:e5:28:15:fb:f4:d3:67:a6:
91:59:08:2e:82:ac:d1:20:d2:f6:f2:8d:7f:9f:2a:
33:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:CE:5B:95:77:59:7F:FD:35:8B:C8:9E:66:48:E4:96:B1:CE:29:13
X509v3 Authority Key Identifier:
keyid:33:CF:BF:BF:2E:CC:D3:93:AA:30:C2:21:36:99:65:B8:47:19:2D:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M8-_vy7M05OqMMIhNplluEcZLag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ad050f-a22d-4a77-958c-357a61361dcb/1/M8-_vy7M05OqMMIhNplluEcZLag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ad050f-a22d-4a77-958c-357a61361dcb/1/M8-_vy7M05OqMMIhNplluEcZLag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:fb:2b:cd:7c:87:7b:34:2d:8e:1d:94:70:66:f6:26:57:41:
26:ec:61:58:f9:af:00:4e:f4:53:37:20:ed:ad:56:4b:63:cd:
ef:13:81:fa:91:f2:8e:29:10:90:bf:fa:f8:c8:e7:55:16:ac:
16:5e:b3:ff:0d:f3:da:64:8f:d5:52:69:83:10:12:f6:6f:e1:
61:60:1c:af:72:b9:6d:b4:14:22:ed:5a:63:c1:4d:36:9e:ec:
f8:70:91:91:1a:95:7c:06:ab:7d:0e:22:66:d9:16:b5:31:12:
54:7d:a1:c1:42:fb:ae:6b:e0:0e:47:38:1e:21:50:92:16:94:
a2:96:5e:41:c6:4c:ab:52:d8:66:0b:6c:a4:68:22:f9:23:f0:
ff:8f:97:7a:1b:20:a3:c0:c8:09:81:01:2d:01:e0:88:e9:c0:
86:69:56:c2:6e:c4:ea:07:a0:14:1f:fd:f2:ba:7a:29:f8:29:
47:ed:55:de:a9:9e:36:5e:d8:2a:7d:45:5e:51:74:77:ac:70:
a0:f1:2d:9f:b7:44:0e:c2:4f:14:c3:61:31:3c:60:43:ed:a9:
fd:ba:83:57:d9:a6:7c:18:51:83:a0:26:c7:4f:c1:39:b9:b1:
c5:b4:6a:51:77:e2:2f:c4:d5:b8:91:c9:87:8a:2f:0c:ce:5e:
25:c1:3e:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 17:51:44 2025 by rpki-client