Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/047982-37de-4e70-bebd-7c9e10517c25/1/8M0rO57YMSbUXboSAD1sbjWms4A.mft
File: 8M0rO57YMSbUXboSAD1sbjWms4A.mft (raw, json)
Hash identifier: DylZQE22WrcHP04MF3dmEeia0k7CfAaQItIe7uwHTmE=
Subject key identifier: 39:19:E3:EF:04:67:FE:81:A2:B0:3E:92:7E:01:09:5F:2F:D3:32:D7
Authority key identifier: F0:CD:2B:3B:9E:D8:31:26:D4:5D:BA:12:00:3D:6C:6E:35:A6:B3:80
Certificate issuer: /CN=f0cd2b3b9ed83126d45dba12003d6c6e35a6b380
Certificate serial: 0199FF22F2D7AD4359AC3DA784F28F4B327C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8M0rO57YMSbUXboSAD1sbjWms4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/047982-37de-4e70-bebd-7c9e10517c25/1/8M0rO57YMSbUXboSAD1sbjWms4A.mft
Manifest number: 140A
Signing time: Mon 20 Oct 2025 01:01:44 +0000
Manifest this update: Mon 20 Oct 2025 01:01:44 +0000
Manifest next update: Tue 21 Oct 2025 01:01:44 +0000
Files and hashes: 1: 8M0rO57YMSbUXboSAD1sbjWms4A.crl (hash: CHQMFXbdv1SPPHj8YPS8GvBjzu/M9H0fYUXa10t88OU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/047982-37de-4e70-bebd-7c9e10517c25/1/8M0rO57YMSbUXboSAD1sbjWms4A.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/047982-37de-4e70-bebd-7c9e10517c25/1/8M0rO57YMSbUXboSAD1sbjWms4A.mft
rsync://rpki.ripe.net/repository/DEFAULT/8M0rO57YMSbUXboSAD1sbjWms4A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 01:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:22:f2:d7:ad:43:59:ac:3d:a7:84:f2:8f:4b:32:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0cd2b3b9ed83126d45dba12003d6c6e35a6b380
Validity
Not Before: Oct 20 01:01:44 2025 GMT
Not After : Oct 21 01:01:44 2025 GMT
Subject: CN=3919e3ef0467fe81a2b03e927e01095f2fd332d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:79:f9:ac:bf:f8:f6:66:ab:87:98:99:6f:1f:
5b:e4:9e:09:dd:7c:7a:e9:16:55:10:a3:2b:ee:9c:
f8:fb:ec:ee:eb:d6:2b:a2:be:e2:f9:3e:b1:84:6d:
20:94:2f:72:d3:85:5a:e3:c9:54:bb:67:20:ff:98:
05:01:8c:35:ef:b6:24:00:35:42:4e:a4:2a:f2:56:
89:8a:24:9c:66:64:51:d4:61:78:fb:05:4c:7f:ed:
7b:07:bb:fb:6b:9f:e8:68:78:51:ee:d2:c8:86:ed:
c8:98:7d:07:c4:52:7a:72:57:86:17:6c:d0:2d:f4:
33:25:d9:6f:27:35:79:8d:e2:0f:16:a4:6c:50:c5:
53:45:41:79:a9:38:0d:ff:fa:e9:e3:8c:49:c6:ff:
09:e3:6a:16:91:06:7c:84:30:7d:7b:bc:63:ac:40:
fd:fd:fb:4d:24:ed:91:0d:ec:0e:79:a5:26:60:9b:
25:df:7e:5c:b0:e9:ae:fb:1a:71:c3:2c:e9:07:f8:
5a:9a:8c:2e:be:96:42:22:1f:ae:68:07:45:68:14:
68:4a:5e:1a:66:32:12:23:43:b2:af:59:62:2e:3a:
2e:03:eb:67:08:76:fc:55:5e:11:ed:a5:d8:76:02:
a5:1d:41:47:f3:34:d2:92:6c:c2:d6:04:f1:44:52:
b4:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:19:E3:EF:04:67:FE:81:A2:B0:3E:92:7E:01:09:5F:2F:D3:32:D7
X509v3 Authority Key Identifier:
keyid:F0:CD:2B:3B:9E:D8:31:26:D4:5D:BA:12:00:3D:6C:6E:35:A6:B3:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8M0rO57YMSbUXboSAD1sbjWms4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/047982-37de-4e70-bebd-7c9e10517c25/1/8M0rO57YMSbUXboSAD1sbjWms4A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/047982-37de-4e70-bebd-7c9e10517c25/1/8M0rO57YMSbUXboSAD1sbjWms4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:08:c7:f9:ad:a4:01:5a:8d:6c:30:25:2e:f4:2a:cd:76:7b:
e9:f1:4e:ef:0f:21:c3:c4:d0:55:04:b2:b7:ae:fa:9e:0b:06:
f1:ba:27:45:44:30:8e:95:d3:48:fd:66:b8:23:75:65:d5:55:
a7:67:fc:c9:dd:37:12:4b:e0:c1:59:02:20:b5:62:f1:61:14:
87:26:5f:0c:bd:76:e1:97:fe:be:6d:02:1c:0f:6b:f8:d7:e0:
ad:19:26:57:e1:8f:30:96:a7:ac:29:cc:03:d9:6c:93:01:af:
3e:2e:8b:d3:5e:6a:e5:0a:ff:ea:d3:06:5a:4c:9c:d9:a7:66:
80:3e:07:a9:6f:6a:03:55:99:be:93:b4:be:4a:06:1c:21:f0:
82:40:2c:f5:57:94:92:e4:db:a1:b6:84:8c:26:6d:ca:76:c6:
88:f7:90:fe:28:fb:1d:91:6f:65:2d:07:31:04:e0:74:64:54:
d4:6e:14:85:c0:41:d1:17:49:e8:17:61:07:c3:46:a9:96:e1:
9e:76:98:5a:f6:78:15:3f:28:79:e0:27:d4:0c:00:2a:9e:86:
5a:c1:2b:18:f9:8e:eb:52:56:ac:44:0d:51:de:23:7a:25:14:
9a:2d:84:2d:10:8e:bf:6d:d7:5a:a6:fe:cd:b0:8e:35:ed:48:
d7:40:2d:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/IvLXrUNZrD2nhPKPSzJ8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwY2QyYjNiOWVkODMxMjZkNDVkYmExMjAwM2Q2YzZlMzVh
NmIzODAwHhcNMjUxMDIwMDEwMTQ0WhcNMjUxMDIxMDEwMTQ0WjAzMTEwLwYDVQQD
EygzOTE5ZTNlZjA0NjdmZTgxYTJiMDNlOTI3ZTAxMDk1ZjJmZDMzMmQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnn5rL/49marh5iZbx9b5J4J3Xx6
6RZVEKMr7pz4++zu69Yror7i+T6xhG0glC9y04Va48lUu2cg/5gFAYw177YkADVC
TqQq8laJiiScZmRR1GF4+wVMf+17B7v7a5/oaHhR7tLIhu3ImH0HxFJ6cleGF2zQ
LfQzJdlvJzV5jeIPFqRsUMVTRUF5qTgN//rp44xJxv8J42oWkQZ8hDB9e7xjrED9
/ftNJO2RDewOeaUmYJsl335csOmu+xpxwyzpB/hamowuvpZCIh+uaAdFaBRoSl4a
ZjISI0Oyr1liLjouA+tnCHb8VV4R7aXYdgKlHUFH8zTSkmzC1gTxRFK0kQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDkZ4+8EZ/6BorA+kn4BCV8v0zLXMB8GA1UdIwQY
MBaAFPDNKzue2DEm1F26EgA9bG41prOAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOE0wck81N1lNU2JVWGJvU0FEMXNialdtczRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi8wNDc5ODItMzdkZS00ZTcwLWJlYmQt
N2M5ZTEwNTE3YzI1LzEvOE0wck81N1lNU2JVWGJvU0FEMXNialdtczRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi8wNDc5ODItMzdkZS00ZTcwLWJlYmQtN2M5ZTEwNTE3YzI1
LzEvOE0wck81N1lNU2JVWGJvU0FEMXNialdtczRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfAjH+a2k
AVqNbDAlLvQqzXZ76fFO7w8hw8TQVQSyt676ngsG8bonRUQwjpXTSP1muCN1ZdVV
p2f8yd03EkvgwVkCILVi8WEUhyZfDL124Zf+vm0CHA9r+NfgrRkmV+GPMJanrCnM
A9lskwGvPi6L015q5Qr/6tMGWkyc2admgD4HqW9qA1WZvpO0vkoGHCHwgkAs9VeU
kuTbobaEjCZtynbGiPeQ/ij7HZFvZS0HMQTgdGRU1G4UhcBB0RdJ6BdhB8NGqZbh
nnaYWvZ4FT8oeeAn1AwAKp6GWsErGPmO61JWrEQNUd4jeiUUmi2ELRCOv23XWqb+
zbCONe1I10AtPw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 12:01:07 2025 by rpki-client