Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/e22fea-84d0-406a-8a6f-46f5fa2c9303/1/8MScIXjoL9wfQZ9afFFyHfU9ekg.mft
File: 8MScIXjoL9wfQZ9afFFyHfU9ekg.mft (raw, json)
Hash identifier: Ja/9FphtEi0ySsA3oUIJB63ivfffsMJsWzpJCfPrBXc=
Subject key identifier: 39:9B:26:F6:4D:E5:EB:24:EC:50:B2:DB:B0:22:DD:E1:8E:35:CD:D6
Authority key identifier: F0:C4:9C:21:78:E8:2F:DC:1F:41:9F:5A:7C:51:72:1D:F5:3D:7A:48
Certificate issuer: /CN=f0c49c2178e82fdc1f419f5a7c51721df53d7a48
Certificate serial: 019A5119825C752902031C501F900925F8CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8MScIXjoL9wfQZ9afFFyHfU9ekg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/e22fea-84d0-406a-8a6f-46f5fa2c9303/1/8MScIXjoL9wfQZ9afFFyHfU9ekg.mft
Manifest number: 15F8
Signing time: Tue 04 Nov 2025 23:00:17 +0000
Manifest this update: Tue 04 Nov 2025 23:00:17 +0000
Manifest next update: Wed 05 Nov 2025 23:00:17 +0000
Files and hashes: 1: 8MScIXjoL9wfQZ9afFFyHfU9ekg.crl (hash: W15WOaJeBAmo0AaWVOn6bh07A8tJu7xltH1Ujpc9r7U=)
2: E1bqejAdTN3uYMBTKCwH33KmoEE.roa (hash: /XRVb9kLwHV21UKOVZ0MM6evc9apWkwvTlQRZL1Tohg=)
3: gAbWpwUUphvqV25CUB0maQ_pAx0.roa (hash: BLsk+LJxA+WagSmLj3Bzfhh4p3QvCZDF/XVfmTYGdec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/e22fea-84d0-406a-8a6f-46f5fa2c9303/1/8MScIXjoL9wfQZ9afFFyHfU9ekg.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/e22fea-84d0-406a-8a6f-46f5fa2c9303/1/8MScIXjoL9wfQZ9afFFyHfU9ekg.mft
rsync://rpki.ripe.net/repository/DEFAULT/8MScIXjoL9wfQZ9afFFyHfU9ekg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:19:82:5c:75:29:02:03:1c:50:1f:90:09:25:f8:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0c49c2178e82fdc1f419f5a7c51721df53d7a48
Validity
Not Before: Nov 4 23:00:17 2025 GMT
Not After : Nov 5 23:00:17 2025 GMT
Subject: CN=399b26f64de5eb24ec50b2dbb022dde18e35cdd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:83:a6:69:81:34:03:9a:32:67:d2:54:ba:7a:
fa:c4:6f:fb:c7:78:06:fb:50:d8:c9:69:ae:85:a7:
de:fa:7b:06:23:12:72:f0:a1:de:33:a0:ef:35:47:
c5:56:09:eb:68:45:28:07:9c:d3:d6:2f:81:64:2a:
25:59:11:23:90:95:c4:52:e2:30:a7:7f:d2:41:97:
77:88:04:33:a1:64:4e:06:91:a0:f5:1b:35:f6:49:
0d:9e:26:77:29:f1:2a:96:3f:39:eb:f4:48:93:71:
ba:a1:aa:69:80:ec:4f:d2:ad:89:19:d7:bd:c0:f2:
f8:1f:99:03:53:8b:75:b8:ec:2c:4e:ba:6b:52:cc:
d6:68:c6:69:35:5b:b4:39:16:f4:26:93:5a:2c:08:
1c:c8:f7:38:b3:a3:c0:5d:54:3c:ad:df:1a:a1:dc:
f8:41:28:c1:ef:d2:03:f7:ca:d6:e7:c4:3e:22:d9:
0b:8b:2c:5c:27:7c:aa:39:25:2e:be:7e:c1:23:4c:
16:b1:5b:8c:c4:54:61:1a:c4:84:5e:4f:dd:47:46:
2d:14:dc:f6:91:23:1a:0b:c2:d3:9e:3e:f0:87:5f:
bb:b9:27:0c:ce:d3:d1:5d:7e:7b:ba:c2:ec:0c:02:
b0:5e:6a:99:1c:69:48:0b:89:9e:f2:30:28:8b:56:
44:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:9B:26:F6:4D:E5:EB:24:EC:50:B2:DB:B0:22:DD:E1:8E:35:CD:D6
X509v3 Authority Key Identifier:
keyid:F0:C4:9C:21:78:E8:2F:DC:1F:41:9F:5A:7C:51:72:1D:F5:3D:7A:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8MScIXjoL9wfQZ9afFFyHfU9ekg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/e22fea-84d0-406a-8a6f-46f5fa2c9303/1/8MScIXjoL9wfQZ9afFFyHfU9ekg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/e22fea-84d0-406a-8a6f-46f5fa2c9303/1/8MScIXjoL9wfQZ9afFFyHfU9ekg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:6a:1e:9b:7d:12:4c:91:e3:20:40:ac:8f:40:cc:f5:1a:e6:
7d:b8:f4:61:30:4e:24:60:d2:69:e7:e3:fd:23:31:b6:92:18:
d6:72:ac:0e:a3:b2:34:3a:b8:2e:4b:bf:c6:dd:35:00:54:7b:
4d:82:c5:66:32:9c:cb:9e:13:0e:d1:8c:10:8f:8a:98:0a:ff:
0c:bf:ed:13:de:d0:af:c2:81:ea:db:1b:86:b3:4d:e7:6d:40:
ff:b9:c9:a8:40:89:c7:a1:dc:7d:f9:9d:c4:61:d3:5c:3c:e0:
07:b4:32:4e:5c:a5:e5:1d:88:7a:92:0f:7f:6e:87:23:e2:cd:
01:53:f3:d7:c4:c8:de:80:5a:bf:78:e1:29:d4:f1:ad:2f:81:
2a:5c:5e:0e:00:fa:37:3e:57:28:30:df:bd:0d:4f:ed:32:72:
c1:e3:87:87:7f:7b:da:9c:bd:d0:0b:38:54:88:fc:2b:8b:41:
af:94:6c:9d:f9:68:fa:95:cb:ca:b9:85:25:94:8d:41:a2:6b:
4c:1d:53:e3:f7:39:9c:33:81:9c:96:5a:a1:2f:99:fd:3e:04:
e2:a2:29:c9:51:6d:fe:14:32:17:41:31:37:3f:9d:4f:8a:cf:
b5:9a:8e:74:90:37:0a:e7:57:72:1c:b6:8e:f0:b0:2d:9d:be:
2f:7a:b2:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:44:04 2025 by rpki-client