Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.mft
File: cS8iadFWM728cdjNP0WMvQP-Ax8.mft (raw, json)
Hash identifier: ZAxHMedP2ukxK9qXnA8k+HBx6hhsk6vAqeXxRKfO/o0=
Subject key identifier: 79:6B:1C:5A:5B:A0:60:4A:F2:B8:B1:27:68:46:86:F2:38:15:1E:AB
Authority key identifier: 71:2F:22:69:D1:56:33:BD:BC:71:D8:CD:3F:45:8C:BD:03:FE:03:1F
Certificate issuer: /CN=712f2269d15633bdbc71d8cd3f458cbd03fe031f
Certificate serial: 0199FBB3767B6FAED23E0AC5EAA7C2D18D2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cS8iadFWM728cdjNP0WMvQP-Ax8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.mft
Manifest number: 0A8E
Signing time: Sun 19 Oct 2025 09:01:06 +0000
Manifest this update: Sun 19 Oct 2025 09:01:06 +0000
Manifest next update: Mon 20 Oct 2025 09:01:06 +0000
Files and hashes: 1: 9BckWYd3Zpv7VuHw83B3GgbSq2c.roa (hash: 1ciDlQb2CZ1qp4TAdUK8jkR1eFPaY1eqjyHYTIjMv0Y=)
2: H1EL1U-GIPFFr0f1Q-aFy7Wb8e4.roa (hash: iqzV8mEdZbkZ5VJezg/UaqQeyUszupnBM56S/6XnGcM=)
3: J8a8mMzsBimsq6oHwHx5bIHWD4Y.roa (hash: 1VJlid4hfVo+Bv+c5fIKw8LhPKdHBzjl0S3JZl+3O5c=)
4: ZgwCc5_6MulL4iL_zC1XUNHyAbI.roa (hash: /jcVyr8eQJZjytkrqctvHq37ILkIvanUDZTLnrClopA=)
5: cS8iadFWM728cdjNP0WMvQP-Ax8.crl (hash: FPu1lfsp9wE+lH4nCFcPBsAq7m3vTuSY74q06GnPIlY=)
6: m5c36cD4HEnvnKSFkdVs5FAdwfY.roa (hash: zDDIqdWDgnB3uWdjXBi6MQIDiaHOTeoGWkwt3yBBNJ4=)
7: u95K4fV2qtYCciDZ9UwzIFzAw5A.roa (hash: ayZrkho31pPxiVCGyzfE95bEFSC8qkDwrF+lSVt63SM=)
8: xpgO3ZCBY-qjN8oFsOWEPvUCvtE.roa (hash: +qRt4PQpWMMvJjygxcf9dSJhb+lYPMjbz4U/lEmLHfc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.mft
rsync://rpki.ripe.net/repository/DEFAULT/cS8iadFWM728cdjNP0WMvQP-Ax8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 09:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:b3:76:7b:6f:ae:d2:3e:0a:c5:ea:a7:c2:d1:8d:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=712f2269d15633bdbc71d8cd3f458cbd03fe031f
Validity
Not Before: Oct 19 09:01:06 2025 GMT
Not After : Oct 20 09:01:06 2025 GMT
Subject: CN=796b1c5a5ba0604af2b8b127684686f238151eab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:06:87:a4:0c:25:57:bc:d3:f0:41:1a:26:87:
a6:a6:1f:bc:19:22:d6:e9:9c:d2:62:6e:82:11:7a:
99:ef:4b:6b:9a:53:92:82:9a:73:a4:b6:55:4c:95:
40:af:fc:c1:7a:3e:23:f8:2a:af:cd:92:4e:92:ae:
c1:a1:3e:a0:b4:09:04:42:60:80:37:59:64:b7:51:
f0:30:c0:fa:3c:e5:38:65:9e:ae:a2:9b:0f:e1:1d:
f8:42:4e:31:31:eb:7d:af:60:aa:d8:cf:80:12:26:
df:81:5d:05:d5:cd:9f:d0:db:c8:b9:05:66:bf:c4:
c3:24:d2:1b:e0:fe:0e:60:8b:3e:ec:8d:0d:02:b6:
b3:c4:dc:c2:57:81:6e:44:9d:23:cf:8a:24:a7:51:
87:21:72:f4:80:ea:20:df:51:61:38:bd:93:4d:6d:
2a:fe:b8:c9:80:56:af:6b:91:f3:c8:f0:e4:c3:90:
c7:90:30:fe:c5:d9:2f:b6:a5:52:2c:fb:7c:9c:09:
21:a5:04:4e:62:4a:08:e5:d3:02:f3:12:a1:bc:38:
66:9d:d7:75:16:ef:56:7b:a6:6e:d5:9f:51:76:1a:
52:49:7e:b4:c4:3f:a9:fe:32:1e:d1:4a:fb:5c:1e:
a6:a1:c5:2d:54:d2:84:a6:0e:19:bb:f3:ac:62:a7:
ba:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:6B:1C:5A:5B:A0:60:4A:F2:B8:B1:27:68:46:86:F2:38:15:1E:AB
X509v3 Authority Key Identifier:
keyid:71:2F:22:69:D1:56:33:BD:BC:71:D8:CD:3F:45:8C:BD:03:FE:03:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cS8iadFWM728cdjNP0WMvQP-Ax8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:28:4b:eb:bb:9f:bc:db:99:45:01:82:02:d0:14:2b:5a:0d:
3a:38:e6:7c:a7:40:ca:68:22:8a:da:75:e8:d2:ca:36:7a:05:
2d:bd:5f:1f:14:eb:1b:55:92:75:6a:d1:fd:1f:1f:70:94:16:
03:ee:81:61:53:4d:4c:eb:19:1a:f2:d0:24:48:1a:92:f4:d2:
f7:3d:24:d0:11:66:3a:ad:7c:16:dd:df:d1:ea:90:3f:60:17:
2b:93:d8:08:af:ae:15:d9:d1:39:44:5d:77:85:35:d2:e4:1c:
7d:33:02:32:4d:dc:02:65:3f:30:91:82:a5:aa:6f:44:c1:e6:
5d:99:d3:42:bd:7c:56:17:e5:eb:5f:21:52:89:14:0e:ca:63:
1c:2e:75:12:2d:b5:50:0c:b2:9b:fe:be:6b:d5:23:26:57:11:
cb:1b:01:1f:bf:d8:40:49:36:18:4d:44:03:76:7b:ab:30:4f:
e2:68:ae:95:1b:b7:15:23:c6:b3:f9:f3:3d:00:a2:26:c2:af:
d7:66:c9:20:86:8c:8a:89:c3:58:61:7e:a8:5e:f3:3d:1a:f2:
3d:d9:18:5f:2f:29:7e:62:7a:49:49:1b:78:67:98:d8:92:dc:
65:89:8c:09:45:4e:a6:22:c3:69:4a:0b:0d:f5:3e:60:c7:ce:
ef:37:8f:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:27:05 2025 by rpki-client