Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/2581f4-8410-4a43-9186-0fab2269ea8e/1/M8Ww18CpzSS3PNy5LIdG6FpKW48.mft
File: M8Ww18CpzSS3PNy5LIdG6FpKW48.mft (raw, json)
Hash identifier: iIDJbqkfy9r4b9kHgMX8XDZuwv6eD8uJs1hBEkS7r0Y=
Subject key identifier: 21:3F:11:AC:E3:30:DC:F1:8A:42:33:85:B4:C4:46:54:B3:AF:9D:FC
Authority key identifier: 33:C5:B0:D7:C0:A9:CD:24:B7:3C:DC:B9:2C:87:46:E8:5A:4A:5B:8F
Certificate issuer: /CN=33c5b0d7c0a9cd24b73cdcb92c8746e85a4a5b8f
Certificate serial: 0199FBEAEAFF7E084A26341407764ABFD1B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M8Ww18CpzSS3PNy5LIdG6FpKW48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/2581f4-8410-4a43-9186-0fab2269ea8e/1/M8Ww18CpzSS3PNy5LIdG6FpKW48.mft
Manifest number: 0B07
Signing time: Sun 19 Oct 2025 10:01:40 +0000
Manifest this update: Sun 19 Oct 2025 10:01:40 +0000
Manifest next update: Mon 20 Oct 2025 10:01:40 +0000
Files and hashes: 1: G9IMCDRzOQuPbahdvenWDMel-ec.roa (hash: KIE/h3OnsvTFha1HUMyujy3OIfah+sKBRWCgbRO+mg8=)
2: M8Ww18CpzSS3PNy5LIdG6FpKW48.crl (hash: uzpshvWrykqw4hUkeYsMsZxekaMnVRDhEQhDMpookbE=)
3: kaCKh69UCH1e8YxXvfDRSIMinp4.roa (hash: 1RbgYWWGOgFXxNNpggiv1pAr13/5f1ITVmQGcqYLD8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/2581f4-8410-4a43-9186-0fab2269ea8e/1/M8Ww18CpzSS3PNy5LIdG6FpKW48.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/2581f4-8410-4a43-9186-0fab2269ea8e/1/M8Ww18CpzSS3PNy5LIdG6FpKW48.mft
rsync://rpki.ripe.net/repository/DEFAULT/M8Ww18CpzSS3PNy5LIdG6FpKW48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:ea:ff:7e:08:4a:26:34:14:07:76:4a:bf:d1:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33c5b0d7c0a9cd24b73cdcb92c8746e85a4a5b8f
Validity
Not Before: Oct 19 10:01:40 2025 GMT
Not After : Oct 20 10:01:40 2025 GMT
Subject: CN=213f11ace330dcf18a423385b4c44654b3af9dfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:01:91:f2:36:cb:e0:0e:24:dc:27:06:87:d0:
7c:e7:81:33:73:25:01:03:d2:c1:98:9d:b9:61:9b:
c5:26:ee:02:bd:e2:85:f6:f0:5e:ee:8f:74:9e:b6:
34:75:b7:ae:b5:9c:0b:4d:5f:84:86:8e:e8:4a:22:
d8:5d:01:dd:4e:2e:e8:c9:ba:d4:9a:ec:b4:7e:ec:
35:05:e8:ad:81:5c:56:b0:f5:8e:19:cf:1b:36:19:
b3:8f:02:3a:ee:ce:bc:e1:c8:52:63:a1:b0:ec:f6:
69:5f:49:4d:3e:bb:b0:a6:bf:c1:f4:7a:8b:5f:6d:
66:c2:da:92:59:a5:10:66:69:a7:33:2b:1e:2a:2b:
df:94:6a:43:dd:4d:11:17:43:07:8b:71:91:dd:8a:
9f:88:65:0e:e4:29:b6:52:a8:45:67:6a:3b:22:ed:
4c:78:93:63:ac:cb:36:ed:0c:b9:e0:58:54:bf:35:
34:12:75:3b:29:0f:27:5d:bb:30:7b:b4:73:a2:55:
9c:d7:d8:b8:7c:79:c6:cf:6a:c6:45:a8:ba:36:f6:
e7:23:ba:3c:b0:fd:0c:15:a8:2a:f4:56:13:0e:bd:
14:3d:9b:42:ec:a6:cb:ff:16:b3:54:c5:be:32:ad:
3e:d1:e2:dd:69:e2:ea:b2:2b:50:af:5c:0b:49:87:
49:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:3F:11:AC:E3:30:DC:F1:8A:42:33:85:B4:C4:46:54:B3:AF:9D:FC
X509v3 Authority Key Identifier:
keyid:33:C5:B0:D7:C0:A9:CD:24:B7:3C:DC:B9:2C:87:46:E8:5A:4A:5B:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M8Ww18CpzSS3PNy5LIdG6FpKW48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/2581f4-8410-4a43-9186-0fab2269ea8e/1/M8Ww18CpzSS3PNy5LIdG6FpKW48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/2581f4-8410-4a43-9186-0fab2269ea8e/1/M8Ww18CpzSS3PNy5LIdG6FpKW48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:09:9c:e3:bc:0b:e4:99:d4:2c:f6:48:9c:b6:33:36:19:d2:
7a:b5:dc:97:9c:fa:84:d1:3e:a9:ca:dd:78:5e:81:59:17:34:
dc:d7:dc:31:97:58:ed:f0:25:9c:0c:47:44:a9:82:de:f1:81:
11:42:04:51:bd:a1:ef:1c:74:a1:84:87:e0:06:46:16:1f:28:
62:c1:a5:8f:d0:d7:47:f1:18:ec:ec:e4:02:af:72:14:52:96:
77:6c:39:84:c1:89:64:6a:60:e5:af:42:38:a8:67:fc:79:82:
c4:fc:9b:84:1c:3b:3b:ac:d4:57:32:a7:05:da:c0:8c:14:a8:
5f:dc:2f:be:4f:1e:ba:ee:62:ea:a0:fa:31:6e:18:c1:0f:63:
35:80:24:1e:80:1f:77:1b:73:e9:f3:f7:ba:ae:0c:2a:f1:20:
99:62:47:69:6f:87:ef:66:cb:44:fe:07:6a:8b:d3:59:5b:7b:
dc:21:1c:75:5e:b5:4e:7e:dc:a6:4e:c8:59:0e:ca:2b:b6:ff:
36:62:ef:67:45:db:6a:0d:f9:a8:a9:91:bf:a2:6b:e8:d6:39:
24:26:ed:99:db:7d:f7:2e:63:74:f5:d8:be:4d:be:29:d1:6f:
bd:c3:ce:56:29:cc:c3:dc:cd:8e:26:ba:1b:b1:10:71:55:5f:
ab:2e:7d:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:10:14 2025 by rpki-client