Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/e75ad2-1e30-455e-9787-3b55f2327b34/1/MC8J8mXpsnj4Bz1pgv8XVxOloPo.mft
File: MC8J8mXpsnj4Bz1pgv8XVxOloPo.mft (raw, json)
Hash identifier: 8IgtODunrM9WqVEDJRp4wcFVWC7AFNg/FuHxZi4K6+o=
Subject key identifier: D7:09:AF:92:EE:3F:6B:43:DF:9E:A2:6C:56:2F:89:37:03:74:FA:A2
Authority key identifier: 30:2F:09:F2:65:E9:B2:78:F8:07:3D:69:82:FF:17:57:13:A5:A0:FA
Certificate issuer: /CN=302f09f265e9b278f8073d6982ff175713a5a0fa
Certificate serial: 0199FD33ED772832724963FCF86383B0831E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MC8J8mXpsnj4Bz1pgv8XVxOloPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/e75ad2-1e30-455e-9787-3b55f2327b34/1/MC8J8mXpsnj4Bz1pgv8XVxOloPo.mft
Manifest number: 0858
Signing time: Sun 19 Oct 2025 16:01:02 +0000
Manifest this update: Sun 19 Oct 2025 16:01:02 +0000
Manifest next update: Mon 20 Oct 2025 16:01:02 +0000
Files and hashes: 1: Dz49aMuKRlKMoJhdInbOpT8odb0.roa (hash: eGQZ4ljYZGoi2bWlhPeueYms1SjbBMBvU/96IhPjXeA=)
2: ESyXldKwtms-9as-fPqZA06oJF8.roa (hash: ux8w7uiQ2u3yqvfbtVufiAk64n37yIym0ehvJixmaFU=)
3: MC8J8mXpsnj4Bz1pgv8XVxOloPo.crl (hash: fmGh/H5IlkjGzAGjnesBGD8aQVcerN4gow2hg9wHU8A=)
4: PmMRDG9xx1iegEvlwTgY94xn0uY.roa (hash: rnYe+7KnzmmrVpmGGJ0sYn/ALtPwvcJTUyQU0nsWM1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/e75ad2-1e30-455e-9787-3b55f2327b34/1/MC8J8mXpsnj4Bz1pgv8XVxOloPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/e75ad2-1e30-455e-9787-3b55f2327b34/1/MC8J8mXpsnj4Bz1pgv8XVxOloPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/MC8J8mXpsnj4Bz1pgv8XVxOloPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:33:ed:77:28:32:72:49:63:fc:f8:63:83:b0:83:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=302f09f265e9b278f8073d6982ff175713a5a0fa
Validity
Not Before: Oct 19 16:01:02 2025 GMT
Not After : Oct 20 16:01:02 2025 GMT
Subject: CN=d709af92ee3f6b43df9ea26c562f89370374faa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:89:b5:b1:bf:5c:91:90:56:bd:9d:0d:47:41:
51:a1:b3:ef:90:7f:d3:c0:49:f9:a4:ae:94:8d:9a:
fd:79:b2:e1:49:a8:74:ea:9c:59:a7:b8:2b:86:1d:
3e:01:a4:97:36:16:6f:32:0c:e6:44:7e:5e:05:01:
19:a5:72:a0:26:86:32:9c:6a:25:e6:7d:f5:04:39:
a3:a7:04:9c:47:27:35:3a:67:62:8f:7c:21:e4:9b:
93:27:51:d9:89:e1:dc:85:7f:16:ac:96:91:cf:75:
d1:86:9e:28:c9:0f:aa:db:16:07:6b:03:ba:ae:48:
4d:9c:cd:dc:d6:73:6d:7b:00:2f:8e:18:b4:34:a0:
5a:8b:12:c1:a8:44:17:8e:9f:60:cc:f0:72:48:2d:
dd:b6:76:37:01:5f:b6:58:f8:51:73:a1:00:82:93:
64:c0:11:62:39:bd:23:e0:72:74:ec:bb:72:0c:a2:
85:1b:bf:9e:a0:72:ec:ed:cf:29:78:74:49:fb:d3:
31:9b:e2:ab:bf:ad:7a:ce:71:68:95:b9:c4:b5:2a:
c8:46:49:8a:d9:c3:70:88:67:d1:db:29:4e:92:7e:
6e:10:05:25:b9:b5:41:c7:61:af:03:07:07:d9:4f:
b1:0b:b0:51:8d:74:43:81:1b:1c:65:ba:d7:80:01:
ab:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:09:AF:92:EE:3F:6B:43:DF:9E:A2:6C:56:2F:89:37:03:74:FA:A2
X509v3 Authority Key Identifier:
keyid:30:2F:09:F2:65:E9:B2:78:F8:07:3D:69:82:FF:17:57:13:A5:A0:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MC8J8mXpsnj4Bz1pgv8XVxOloPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/e75ad2-1e30-455e-9787-3b55f2327b34/1/MC8J8mXpsnj4Bz1pgv8XVxOloPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/e75ad2-1e30-455e-9787-3b55f2327b34/1/MC8J8mXpsnj4Bz1pgv8XVxOloPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:80:dc:e0:d1:52:06:19:27:7a:23:00:77:65:16:a6:da:ee:
94:45:01:2c:00:6f:37:1e:11:2b:bd:f0:ee:6a:c3:a6:4f:66:
83:e3:d2:51:f6:be:eb:6b:18:55:ce:5d:33:4f:48:45:ee:44:
f1:b2:ff:95:33:1d:52:92:0f:97:83:01:df:7b:bb:4a:45:d9:
5b:51:4c:c5:c6:38:d9:64:e4:5c:a9:bd:12:b9:31:d5:27:87:
ed:2d:1d:bc:dc:26:25:40:0b:cf:f5:c0:de:52:f5:bd:ac:5e:
25:61:22:27:c9:0b:ea:ba:fc:90:94:cd:1f:a9:52:ac:7e:80:
89:54:43:69:4b:2d:e4:ce:aa:73:3e:d8:ec:f0:b6:02:51:6d:
83:c8:84:f6:4c:07:57:bc:86:da:32:95:0e:4e:cf:4d:f8:98:
02:30:82:08:7b:83:d1:c3:4a:3f:77:08:9b:c0:17:2f:b4:ce:
bd:05:88:56:9d:30:be:c2:84:32:2d:08:5a:81:f1:f2:06:7b:
64:90:1f:16:88:33:62:e7:6f:fa:f4:f6:1a:ee:d9:1b:b3:6d:
c2:8d:48:81:7c:cf:86:18:97:26:1a:2d:f2:55:72:b9:6d:62:
13:ed:b7:23:68:a7:ee:ed:3a:f1:0f:cc:9b:00:2f:51:25:0e:
d4:f4:9c:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:09:48 2025 by rpki-client