Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/557962-051a-46c5-8a93-1cc1a538c3ce/1/s8k12EMWos9WpllXttebevgRpwc.mft
File: s8k12EMWos9WpllXttebevgRpwc.mft (raw, json)
Hash identifier: HGmbAei8Oh1lQPqbB9MvmybQ+gOqvDYlHQYKsrOLO28=
Subject key identifier: A0:21:53:97:FF:F7:E9:D1:1F:E4:87:5F:33:8F:14:85:8D:F7:55:93
Authority key identifier: B3:C9:35:D8:43:16:A2:CF:56:A6:59:57:B6:D7:9B:7A:F8:11:A7:07
Certificate issuer: /CN=b3c935d84316a2cf56a65957b6d79b7af811a707
Certificate serial: 0199FDD9219A3935DE57F2B3A7F30A715090
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s8k12EMWos9WpllXttebevgRpwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/557962-051a-46c5-8a93-1cc1a538c3ce/1/s8k12EMWos9WpllXttebevgRpwc.mft
Manifest number: 09D5
Signing time: Sun 19 Oct 2025 19:01:29 +0000
Manifest this update: Sun 19 Oct 2025 19:01:29 +0000
Manifest next update: Mon 20 Oct 2025 19:01:29 +0000
Files and hashes: 1: s8k12EMWos9WpllXttebevgRpwc.crl (hash: 1clh7wyDa0yTcrHjH/ET1j+upeqxOxVeVuHLe93Golk=)
2: udh3xGDNJXhOcF-5H4cWJu3ktiY.roa (hash: ocPGT+ldVCPhS+IwJUZcLKrDX+p6H2fIq+UgAUlkPrU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/557962-051a-46c5-8a93-1cc1a538c3ce/1/s8k12EMWos9WpllXttebevgRpwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/557962-051a-46c5-8a93-1cc1a538c3ce/1/s8k12EMWos9WpllXttebevgRpwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/s8k12EMWos9WpllXttebevgRpwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:21:9a:39:35:de:57:f2:b3:a7:f3:0a:71:50:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3c935d84316a2cf56a65957b6d79b7af811a707
Validity
Not Before: Oct 19 19:01:29 2025 GMT
Not After : Oct 20 19:01:29 2025 GMT
Subject: CN=a0215397fff7e9d11fe4875f338f14858df75593
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:cf:d3:7c:9f:be:39:a6:2b:35:79:ad:4d:8d:
dc:58:10:27:9f:c1:02:cd:9d:cd:df:1f:c2:32:eb:
99:d9:2d:39:c7:21:c8:95:c7:0b:85:5a:c0:d8:d9:
98:41:11:f3:80:c1:6b:34:ff:df:99:23:04:a3:3c:
fc:aa:19:47:e4:d6:d2:da:f4:8f:e7:15:12:6d:2b:
78:88:e7:64:00:f5:52:82:17:a2:13:b2:75:e8:19:
09:5b:db:f5:cc:2f:20:46:07:cc:e1:c6:d1:b8:f8:
ca:4e:4f:77:5b:56:05:d2:48:4a:10:bb:9e:f5:dd:
a9:91:72:d9:f2:50:20:79:68:8a:b1:44:d2:55:6e:
e7:11:ca:e1:36:ec:cd:67:a3:58:9c:81:5b:6d:6d:
cf:b6:20:52:79:d5:c6:91:13:06:9e:14:8d:89:d9:
5e:2f:f0:0e:4d:b6:9f:87:1b:4c:15:8d:3b:ab:e9:
96:3b:40:14:db:41:a5:c4:9d:93:8e:a4:72:db:79:
d8:e6:d9:4e:21:14:e1:dc:ab:df:c6:db:24:92:fe:
a7:4c:60:ca:31:0d:3b:20:cc:22:a4:61:05:48:c8:
45:00:cc:fd:3c:51:11:f7:c0:b0:05:49:2f:fc:b9:
51:4a:4b:63:24:a6:cd:5f:10:79:36:04:af:90:4b:
3d:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:21:53:97:FF:F7:E9:D1:1F:E4:87:5F:33:8F:14:85:8D:F7:55:93
X509v3 Authority Key Identifier:
keyid:B3:C9:35:D8:43:16:A2:CF:56:A6:59:57:B6:D7:9B:7A:F8:11:A7:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s8k12EMWos9WpllXttebevgRpwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/557962-051a-46c5-8a93-1cc1a538c3ce/1/s8k12EMWos9WpllXttebevgRpwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/557962-051a-46c5-8a93-1cc1a538c3ce/1/s8k12EMWos9WpllXttebevgRpwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:22:a2:03:bf:b5:7c:b9:4b:f4:44:ea:93:39:e5:04:6e:a9:
f3:67:e5:ed:68:fc:d6:04:2f:4d:5d:c6:95:64:4c:f3:f0:e6:
59:b3:2b:13:82:8a:38:4f:45:85:62:dc:e5:a4:72:54:0b:35:
de:4d:bd:86:33:af:ca:a7:b9:8f:de:03:ff:8f:ed:f5:1f:fb:
f0:3f:6b:e4:60:be:4e:45:65:5e:27:79:12:3a:ae:ce:92:a3:
c3:24:91:58:b5:2f:27:90:03:64:46:4a:4c:00:82:45:0e:50:
70:51:0e:ab:bc:49:cc:08:7a:d2:c3:0d:d3:72:5e:55:80:ba:
03:28:81:dd:5c:ca:23:54:36:b9:82:62:4b:41:ac:1d:b6:16:
bd:13:38:53:bd:b8:61:47:4c:17:1d:9f:1c:c3:67:b2:de:9c:
8b:11:ce:43:56:d8:85:e3:3c:06:b1:58:0c:eb:82:71:47:bd:
c1:d3:2f:71:1c:2a:76:cf:2d:f3:86:c0:25:14:34:74:7e:16:
75:19:47:97:6c:1b:52:36:05:f9:3c:82:97:6f:cb:b0:50:da:
5f:fb:9c:b4:0a:5b:19:8a:db:60:a2:23:5c:06:94:8f:b0:d3:
db:58:24:b1:93:75:d0:85:fb:92:b7:99:3e:9b:a5:6e:d5:76:
15:43:aa:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:15:21 2025 by rpki-client