Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/ad050f-a22d-4a77-958c-357a61361dcb/1/M8-_vy7M05OqMMIhNplluEcZLag.mft
File: M8-_vy7M05OqMMIhNplluEcZLag.mft (raw, json)
Hash identifier: QNUReUO76zsbqx6LSZBrJ7sbX5BhcP5oUySYEVEMXsA=
Subject key identifier: 6A:16:16:D2:8E:60:01:0E:6E:9D:3E:B6:B8:60:B1:6E:2A:8A:FD:B7
Authority key identifier: 33:CF:BF:BF:2E:CC:D3:93:AA:30:C2:21:36:99:65:B8:47:19:2D:A8
Certificate issuer: /CN=33cfbfbf2eccd393aa30c221369965b847192da8
Certificate serial: 019A00A345AD15FA99170E38BEEE284D8DE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M8-_vy7M05OqMMIhNplluEcZLag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/ad050f-a22d-4a77-958c-357a61361dcb/1/M8-_vy7M05OqMMIhNplluEcZLag.mft
Manifest number: 125D
Signing time: Mon 20 Oct 2025 08:01:31 +0000
Manifest this update: Mon 20 Oct 2025 08:01:31 +0000
Manifest next update: Tue 21 Oct 2025 08:01:31 +0000
Files and hashes: 1: M8-_vy7M05OqMMIhNplluEcZLag.crl (hash: PG4CRAVU3tc3kWoeMg76CB+u20DPE2ilAYkhDOwWTpM=)
2: MMfXFIBTN4EF53B-qz6xr0lTa60.roa (hash: PppBDUKwa5tmMVRDOOI/PKjma94X0CuRbdLOVWnm99g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/ad050f-a22d-4a77-958c-357a61361dcb/1/M8-_vy7M05OqMMIhNplluEcZLag.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/ad050f-a22d-4a77-958c-357a61361dcb/1/M8-_vy7M05OqMMIhNplluEcZLag.mft
rsync://rpki.ripe.net/repository/DEFAULT/M8-_vy7M05OqMMIhNplluEcZLag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 08:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:a3:45:ad:15:fa:99:17:0e:38:be:ee:28:4d:8d:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33cfbfbf2eccd393aa30c221369965b847192da8
Validity
Not Before: Oct 20 08:01:31 2025 GMT
Not After : Oct 21 08:01:31 2025 GMT
Subject: CN=6a1616d28e60010e6e9d3eb6b860b16e2a8afdb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:72:d7:1e:bd:03:cc:75:04:00:21:b9:0a:11:
e5:fe:c3:dd:fa:2d:d9:0e:6f:72:6e:4b:d5:1b:61:
3d:df:50:03:29:23:56:23:30:af:98:5c:6e:5a:27:
60:f7:b5:a9:b2:b7:cf:7e:6f:72:11:8e:95:b6:a9:
f9:f4:46:92:d9:85:cf:a0:a8:b6:33:13:66:00:44:
0b:e3:2b:e0:72:53:9c:d5:50:7d:38:26:ca:8c:de:
d9:79:a8:4a:94:90:5b:e5:f4:27:d1:21:a2:35:ef:
44:3c:af:87:93:ea:5e:6f:ca:48:8a:8c:5d:02:b3:
ee:54:0e:22:80:be:d0:dc:49:8e:3f:da:4e:ee:2e:
2e:15:c5:99:49:92:6a:46:ba:34:35:55:c4:3e:1a:
40:64:74:f3:19:9f:92:e1:e2:e0:8d:08:23:45:c7:
3e:13:44:42:7c:36:bf:9a:cb:c0:d8:96:5f:c9:a4:
f9:07:df:e0:f9:08:54:68:ae:c5:18:13:1c:21:48:
34:2c:7e:17:20:c5:49:4e:5e:41:b3:08:95:a9:8c:
4a:2b:f6:a0:c4:95:1c:74:e0:c9:91:ee:ae:9b:99:
aa:a6:e7:d9:45:aa:e7:dc:13:83:eb:8b:87:fb:7e:
d5:d7:e7:de:f0:f3:f2:72:b1:1e:8f:bf:b6:2f:50:
0a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:16:16:D2:8E:60:01:0E:6E:9D:3E:B6:B8:60:B1:6E:2A:8A:FD:B7
X509v3 Authority Key Identifier:
keyid:33:CF:BF:BF:2E:CC:D3:93:AA:30:C2:21:36:99:65:B8:47:19:2D:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M8-_vy7M05OqMMIhNplluEcZLag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ad050f-a22d-4a77-958c-357a61361dcb/1/M8-_vy7M05OqMMIhNplluEcZLag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ad050f-a22d-4a77-958c-357a61361dcb/1/M8-_vy7M05OqMMIhNplluEcZLag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:91:80:7a:ce:64:55:61:cc:e4:d9:85:8e:97:18:7f:01:7f:
25:8c:95:e7:76:0f:66:a1:72:c1:76:ad:fc:5c:a9:ef:b8:e4:
de:38:01:56:10:91:2e:f1:57:d2:c7:97:d1:c6:99:35:89:8a:
30:5d:09:9a:33:ce:37:b7:a8:d5:1e:06:20:8a:54:a3:c6:07:
26:bf:8b:0a:21:f8:ab:77:94:f6:90:64:b0:79:1c:5f:b7:38:
89:27:12:37:d7:22:c6:96:05:06:8c:1d:b7:01:3d:f4:36:c9:
b8:9c:dd:2b:64:18:6c:f6:68:df:31:01:79:8f:75:bb:2a:ec:
33:35:51:30:ef:f2:7a:f0:86:5c:82:9a:7d:71:85:e3:5a:4b:
e4:63:81:c2:80:0b:47:12:35:57:b2:fe:63:a6:37:35:60:1f:
13:88:e0:ab:d4:b5:26:5c:c5:14:d3:d2:e2:4b:e1:6f:8c:e4:
6b:79:5e:68:52:be:45:23:c5:17:21:8c:12:dc:8f:e9:38:48:
fa:60:fe:ba:7c:3d:12:4d:e2:98:da:37:a7:1a:d7:dd:26:50:
de:09:42:cf:42:f3:a7:68:60:32:29:37:ea:73:b7:29:d2:5e:
e6:d6:38:61:cf:ac:6f:65:15:4a:4a:d8:be:96:0f:96:bd:26:
0f:2b:5f:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:02:41 2025 by rpki-client