Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/3052de-558b-4334-8a70-9ad33ae653ad/1/y8g8OSxUIcWVzV-3lCjoJ1vbWUw.mft
File: y8g8OSxUIcWVzV-3lCjoJ1vbWUw.mft (raw, json)
Hash identifier: Dt4bXnITlnfZMXlwEeoR9Ethkqw70Zs77SVRs1SWJ/I=
Subject key identifier: 4D:80:04:DC:78:85:8D:80:2F:F4:E0:44:91:BE:8C:1A:CD:8A:54:69
Authority key identifier: CB:C8:3C:39:2C:54:21:C5:95:CD:5F:B7:94:28:E8:27:5B:DB:59:4C
Certificate issuer: /CN=cbc83c392c5421c595cd5fb79428e8275bdb594c
Certificate serial: 019A533F3546AB39C7F0D15BCBDC1C894671
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y8g8OSxUIcWVzV-3lCjoJ1vbWUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/3052de-558b-4334-8a70-9ad33ae653ad/1/y8g8OSxUIcWVzV-3lCjoJ1vbWUw.mft
Manifest number: FD
Signing time: Wed 05 Nov 2025 09:00:42 +0000
Manifest this update: Wed 05 Nov 2025 09:00:42 +0000
Manifest next update: Thu 06 Nov 2025 09:00:42 +0000
Files and hashes: 1: EXTeJ0xnJWTRkgHDu_AxpeIu9iA.roa (hash: qrWsqJSnf72iIeO/vT24niegliGNcW4B28Wyc7Pg4x4=)
2: WmXOt_58syUmTkr0foDjL7xiI4Q.roa (hash: +erBuoZ6Ct32kt0eWK4wbg4Fa+dtktRUNZ/SHpJZIGk=)
3: X9W0b9P6Ek_A8a9BpsvnX133VZw.roa (hash: 8NxMp0DgdQySkZvwKlqGylrfX1726nGJj79qXZbDO7M=)
4: xs2uXZDt7cVA7jwMLyODUbD1r5A.roa (hash: CK+GsD3c++kM/6BpDz2kJy3N5LQsGAx/QUYH0SzjPAM=)
5: y8g8OSxUIcWVzV-3lCjoJ1vbWUw.crl (hash: K3nk6v7mwQ+aGc7Wn7hZB1uRcScEEFMav+xIobHrhJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/3052de-558b-4334-8a70-9ad33ae653ad/1/y8g8OSxUIcWVzV-3lCjoJ1vbWUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/3052de-558b-4334-8a70-9ad33ae653ad/1/y8g8OSxUIcWVzV-3lCjoJ1vbWUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/y8g8OSxUIcWVzV-3lCjoJ1vbWUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:3f:35:46:ab:39:c7:f0:d1:5b:cb:dc:1c:89:46:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbc83c392c5421c595cd5fb79428e8275bdb594c
Validity
Not Before: Nov 5 09:00:42 2025 GMT
Not After : Nov 6 09:00:42 2025 GMT
Subject: CN=4d8004dc78858d802ff4e04491be8c1acd8a5469
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:7a:ad:96:0e:a7:b9:3e:23:3c:26:71:a1:2f:
24:0f:12:1d:06:87:28:09:d8:90:88:5b:4f:80:c3:
c9:d8:91:de:51:83:63:55:42:9f:d0:26:72:2f:60:
6c:c8:e4:49:b2:bf:aa:12:4d:08:38:02:21:25:cf:
3f:4e:7a:29:65:59:4d:27:0c:75:8c:79:45:b6:13:
f3:c6:be:c5:7b:19:2d:dd:c3:39:4e:53:24:b1:1c:
29:e2:0e:40:06:9e:09:7f:36:dd:77:ce:43:de:18:
e9:0a:10:d1:92:75:70:c3:84:8c:4d:0a:88:f2:61:
63:d9:ea:2a:0f:12:95:0e:49:22:e4:2d:85:dd:72:
4e:8a:21:50:43:82:ca:28:4c:71:82:ba:97:f1:16:
13:25:e2:ed:01:e0:7f:dd:bf:18:e3:66:5a:37:d6:
0e:23:5c:af:4f:69:a9:4f:8e:f3:12:2a:cb:2d:89:
83:47:a7:2f:de:25:f6:13:ec:79:c0:5b:87:a0:16:
52:0b:31:61:e4:27:ce:99:fa:7a:84:35:5d:79:fe:
80:f0:21:46:b3:d1:fc:14:12:a3:6e:04:9f:74:53:
38:08:bd:c2:1b:46:e8:2c:0d:d8:b5:cf:16:bc:e3:
fa:35:d2:38:25:39:36:2a:e4:b6:d1:07:eb:4e:e7:
bc:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:80:04:DC:78:85:8D:80:2F:F4:E0:44:91:BE:8C:1A:CD:8A:54:69
X509v3 Authority Key Identifier:
keyid:CB:C8:3C:39:2C:54:21:C5:95:CD:5F:B7:94:28:E8:27:5B:DB:59:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y8g8OSxUIcWVzV-3lCjoJ1vbWUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/3052de-558b-4334-8a70-9ad33ae653ad/1/y8g8OSxUIcWVzV-3lCjoJ1vbWUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/3052de-558b-4334-8a70-9ad33ae653ad/1/y8g8OSxUIcWVzV-3lCjoJ1vbWUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:24:03:4d:f2:a4:fe:a4:e0:02:5f:27:3d:1a:8b:32:1f:71:
c3:fa:e1:f3:51:f4:21:bb:22:8e:fc:ff:43:56:71:50:9a:16:
b4:8d:7a:eb:33:8b:79:e7:8b:59:b6:ea:b9:06:6c:95:f8:b1:
d0:c2:21:67:cb:89:93:3d:0f:ee:3e:4d:cd:81:9b:9a:cf:3c:
d5:54:df:c6:e4:54:ba:04:8b:79:d2:5a:17:f8:60:ca:a8:b0:
46:be:ae:50:db:b5:ca:79:0f:80:6e:2e:e2:c5:eb:db:42:8b:
b5:df:c9:69:9d:4e:19:4e:04:16:c3:d2:be:9b:3f:d9:a4:dc:
c1:c3:ac:11:80:1a:5e:1d:2f:36:36:be:05:9b:a7:b3:e7:6e:
ef:0a:49:df:a9:b0:21:1d:96:08:d8:71:e3:9d:7b:7c:f1:74:
bc:83:7e:8c:d2:1a:50:51:4f:f1:ee:07:0e:20:2e:30:12:ee:
5b:e8:10:f6:7e:aa:fa:94:c6:32:18:06:2a:e0:58:43:68:45:
71:85:c3:67:fc:f9:96:fb:f7:7b:8d:65:f1:53:41:aa:3e:1e:
f9:ad:67:77:b8:5b:48:8f:ca:26:1b:6b:4f:a9:a3:6c:a5:8d:
43:2f:86:15:c3:aa:73:5c:0e:05:62:29:0f:74:3a:21:a5:00:
95:80:25:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:31:57 2025 by rpki-client