Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/2581f4-8410-4a43-9186-0fab2269ea8e/1/M8Ww18CpzSS3PNy5LIdG6FpKW48.mft
File: M8Ww18CpzSS3PNy5LIdG6FpKW48.mft (raw, json)
Hash identifier: wCBvdJrg82cpr0VR4wnoedSFyTbHo91vGT7nmppK0ro=
Subject key identifier: 2F:9C:3A:EE:38:15:0D:51:75:A1:9A:E6:45:C0:DF:2B:08:D0:05:F0
Authority key identifier: 33:C5:B0:D7:C0:A9:CD:24:B7:3C:DC:B9:2C:87:46:E8:5A:4A:5B:8F
Certificate issuer: /CN=33c5b0d7c0a9cd24b73cdcb92c8746e85a4a5b8f
Certificate serial: 019A4D0651E507DA25B18517FEC73D833F6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M8Ww18CpzSS3PNy5LIdG6FpKW48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/2581f4-8410-4a43-9186-0fab2269ea8e/1/M8Ww18CpzSS3PNy5LIdG6FpKW48.mft
Manifest number: 0B31
Signing time: Tue 04 Nov 2025 04:00:50 +0000
Manifest this update: Tue 04 Nov 2025 04:00:50 +0000
Manifest next update: Wed 05 Nov 2025 04:00:50 +0000
Files and hashes: 1: G9IMCDRzOQuPbahdvenWDMel-ec.roa (hash: KIE/h3OnsvTFha1HUMyujy3OIfah+sKBRWCgbRO+mg8=)
2: M8Ww18CpzSS3PNy5LIdG6FpKW48.crl (hash: P+rVeWfgXlmDNm3KG4v/cstV8Br9r1tu1vWPsloyf3M=)
3: kaCKh69UCH1e8YxXvfDRSIMinp4.roa (hash: 1RbgYWWGOgFXxNNpggiv1pAr13/5f1ITVmQGcqYLD8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/2581f4-8410-4a43-9186-0fab2269ea8e/1/M8Ww18CpzSS3PNy5LIdG6FpKW48.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/2581f4-8410-4a43-9186-0fab2269ea8e/1/M8Ww18CpzSS3PNy5LIdG6FpKW48.mft
rsync://rpki.ripe.net/repository/DEFAULT/M8Ww18CpzSS3PNy5LIdG6FpKW48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:06:51:e5:07:da:25:b1:85:17:fe:c7:3d:83:3f:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33c5b0d7c0a9cd24b73cdcb92c8746e85a4a5b8f
Validity
Not Before: Nov 4 04:00:50 2025 GMT
Not After : Nov 5 04:00:50 2025 GMT
Subject: CN=2f9c3aee38150d5175a19ae645c0df2b08d005f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:1b:a1:40:e8:87:f9:54:7c:29:d8:c7:e1:57:
d1:ff:62:25:15:77:3c:96:3c:1e:07:bb:fb:ce:26:
4e:57:d4:bf:ee:d2:f1:95:b8:f9:58:40:a9:5a:55:
6b:81:9f:db:bd:91:18:b0:54:8a:75:b4:e4:db:02:
60:68:cc:ac:bb:b2:b3:1a:a0:d9:6a:62:47:f4:8b:
cd:df:2b:e6:4d:15:96:91:f8:25:4e:87:79:b2:56:
69:29:8a:cd:db:e5:cf:19:eb:ae:8d:27:7a:cc:9e:
a3:b4:2b:08:e7:ff:d2:fe:68:f9:07:59:f7:cc:91:
6a:29:56:1d:b9:7f:09:a5:61:b2:36:12:30:a2:02:
26:67:49:33:27:78:e3:c4:ca:a7:39:1c:67:43:39:
fe:14:5a:87:5b:98:b4:d5:15:dc:fa:6b:f8:05:e8:
33:47:70:cd:6d:37:14:9e:64:f3:02:85:df:da:2a:
34:60:da:62:68:50:21:57:0f:d2:82:b4:12:c1:43:
a9:1e:90:a4:c6:0e:a7:fe:ba:71:4a:8a:97:b1:93:
16:9d:3e:62:95:2e:26:0d:0b:03:f4:a3:bd:61:94:
70:ae:f8:77:60:63:02:bd:30:58:8b:5e:a4:50:38:
33:41:f7:2e:96:7a:7b:30:2f:84:4b:90:a4:7b:a6:
d3:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:9C:3A:EE:38:15:0D:51:75:A1:9A:E6:45:C0:DF:2B:08:D0:05:F0
X509v3 Authority Key Identifier:
keyid:33:C5:B0:D7:C0:A9:CD:24:B7:3C:DC:B9:2C:87:46:E8:5A:4A:5B:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M8Ww18CpzSS3PNy5LIdG6FpKW48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/2581f4-8410-4a43-9186-0fab2269ea8e/1/M8Ww18CpzSS3PNy5LIdG6FpKW48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/2581f4-8410-4a43-9186-0fab2269ea8e/1/M8Ww18CpzSS3PNy5LIdG6FpKW48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:3c:0e:a6:bb:24:8d:1e:e9:a0:74:e4:a5:58:97:9e:d2:c0:
4b:81:74:76:4f:a6:6d:ff:b1:55:e0:2f:f8:28:7f:46:20:2e:
bf:55:d3:7e:5b:c2:de:b7:26:44:28:0a:1c:30:69:af:bb:88:
c0:51:96:f9:fa:f7:e6:c0:fc:50:c7:ee:58:bc:99:85:26:e5:
ac:20:b3:68:b1:f3:1a:d1:7b:e8:be:2b:ce:f4:b3:d1:e7:83:
56:75:28:ec:80:82:3e:e8:1d:7e:39:e7:e5:a5:7d:ae:a7:7d:
f2:10:52:9e:34:82:96:5c:32:77:5e:9d:86:69:2f:70:75:36:
93:b2:b9:19:c6:f7:c5:79:bf:2b:7a:08:b8:3f:a7:37:1a:2f:
2a:1b:ae:3b:79:af:22:2a:3e:53:13:bf:2c:5a:0c:a9:d8:6f:
55:bf:2c:05:a7:3c:ee:10:66:b7:7f:e5:8e:45:52:61:8c:cd:
bb:38:ec:3c:eb:ea:ed:de:49:22:1b:da:cf:ad:1e:d3:82:53:
45:e6:3b:63:68:b2:41:64:38:c7:ab:e0:44:1f:d7:52:c6:4b:
a2:c4:31:9a:90:a3:3c:07:a1:7a:93:18:7a:3e:f4:98:37:91:
76:ff:f2:be:6b:d7:00:96:98:84:fb:3f:32:e5:43:f9:5a:d6:
2d:ff:63:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:46:51 2025 by rpki-client