Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/e75ad2-1e30-455e-9787-3b55f2327b34/1/MC8J8mXpsnj4Bz1pgv8XVxOloPo.mft
File: MC8J8mXpsnj4Bz1pgv8XVxOloPo.mft (raw, json)
Hash identifier: c0aqT766VirYA3/uKqaSkSuVK/DEZgrB6bsF8sJ67Mw=
Subject key identifier: E7:DF:D6:98:69:A5:3C:7A:0C:4A:43:D9:76:38:2A:D8:F4:7E:27:1D
Authority key identifier: 30:2F:09:F2:65:E9:B2:78:F8:07:3D:69:82:FF:17:57:13:A5:A0:FA
Certificate issuer: /CN=302f09f265e9b278f8073d6982ff175713a5a0fa
Certificate serial: 019A522C0FE33DCFA9EF3E566108B98AF25D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MC8J8mXpsnj4Bz1pgv8XVxOloPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/e75ad2-1e30-455e-9787-3b55f2327b34/1/MC8J8mXpsnj4Bz1pgv8XVxOloPo.mft
Manifest number: 0884
Signing time: Wed 05 Nov 2025 04:00:10 +0000
Manifest this update: Wed 05 Nov 2025 04:00:10 +0000
Manifest next update: Thu 06 Nov 2025 04:00:10 +0000
Files and hashes: 1: Dz49aMuKRlKMoJhdInbOpT8odb0.roa (hash: eGQZ4ljYZGoi2bWlhPeueYms1SjbBMBvU/96IhPjXeA=)
2: ESyXldKwtms-9as-fPqZA06oJF8.roa (hash: ux8w7uiQ2u3yqvfbtVufiAk64n37yIym0ehvJixmaFU=)
3: MC8J8mXpsnj4Bz1pgv8XVxOloPo.crl (hash: WVfnhjcZNgyRfC2G6teGeXxMf5G3ruMS7ZerVQgRsvk=)
4: PmMRDG9xx1iegEvlwTgY94xn0uY.roa (hash: rnYe+7KnzmmrVpmGGJ0sYn/ALtPwvcJTUyQU0nsWM1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/e75ad2-1e30-455e-9787-3b55f2327b34/1/MC8J8mXpsnj4Bz1pgv8XVxOloPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/e75ad2-1e30-455e-9787-3b55f2327b34/1/MC8J8mXpsnj4Bz1pgv8XVxOloPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/MC8J8mXpsnj4Bz1pgv8XVxOloPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:2c:0f:e3:3d:cf:a9:ef:3e:56:61:08:b9:8a:f2:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=302f09f265e9b278f8073d6982ff175713a5a0fa
Validity
Not Before: Nov 5 04:00:10 2025 GMT
Not After : Nov 6 04:00:10 2025 GMT
Subject: CN=e7dfd69869a53c7a0c4a43d976382ad8f47e271d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:dc:d0:56:2c:f3:4c:a3:f2:e2:b0:ec:51:5c:
3b:69:d2:38:00:24:b5:68:fd:73:65:6a:21:93:ba:
dd:df:63:c1:1f:b6:2a:dc:d3:ba:6d:24:ac:68:45:
83:a9:f8:7c:c0:27:13:be:72:df:dc:ad:f7:3d:22:
2a:37:cf:f2:40:80:22:76:e4:c7:db:28:8e:cc:dd:
03:dd:1b:41:8f:18:f6:20:a5:c6:97:3c:43:65:df:
c2:d7:d3:eb:84:5d:42:e2:a4:19:fd:f9:ad:f0:43:
53:f5:f2:7f:21:55:cd:29:2a:4d:91:b6:32:6c:aa:
08:3a:08:29:ef:da:68:50:f0:ca:8a:f1:27:2b:ac:
7d:89:e0:5f:a3:b0:c8:fc:ef:67:2e:a3:1a:7b:2a:
eb:85:9f:fa:84:ce:6b:4a:7e:4d:6a:99:1c:ec:d9:
6d:ce:20:4d:2e:fe:43:d8:ab:50:1f:3a:c0:f3:ab:
0c:b5:d1:a0:cf:80:30:7b:60:ed:5d:73:26:a9:53:
42:49:a8:6d:a0:ee:bb:75:7f:b4:82:db:a1:1c:87:
67:9c:18:96:76:e3:97:a2:fc:c8:5c:65:73:27:99:
d9:a8:ef:19:05:86:b5:b3:95:1c:1c:96:05:d6:c8:
52:6d:d6:e8:cf:22:45:7b:47:45:94:4e:d7:c9:5d:
d3:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:DF:D6:98:69:A5:3C:7A:0C:4A:43:D9:76:38:2A:D8:F4:7E:27:1D
X509v3 Authority Key Identifier:
keyid:30:2F:09:F2:65:E9:B2:78:F8:07:3D:69:82:FF:17:57:13:A5:A0:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MC8J8mXpsnj4Bz1pgv8XVxOloPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/e75ad2-1e30-455e-9787-3b55f2327b34/1/MC8J8mXpsnj4Bz1pgv8XVxOloPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/e75ad2-1e30-455e-9787-3b55f2327b34/1/MC8J8mXpsnj4Bz1pgv8XVxOloPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:fa:38:e6:d3:c7:95:d9:df:7f:b6:3f:f0:21:51:a0:10:45:
4c:50:c9:6e:17:57:11:d3:e2:44:58:5b:1a:9d:b7:4f:56:22:
da:1f:7f:21:90:32:d2:3a:22:76:6e:86:1e:f4:53:67:08:e9:
61:43:0d:ee:8a:01:eb:91:3c:03:37:b8:a7:e8:6c:51:78:29:
8f:a5:5a:7d:69:f4:c1:f2:48:65:fc:43:e0:78:28:13:77:b3:
93:b6:58:34:6c:09:df:4f:40:9a:07:04:66:23:15:cb:85:17:
07:e8:32:02:fc:39:a7:77:60:0b:95:18:2e:eb:18:6f:d4:66:
12:1d:0f:74:2d:85:c3:44:3e:ef:c1:1f:d5:3d:0b:16:20:87:
0a:fb:fc:8e:b0:57:aa:93:6a:26:01:01:7e:4a:65:2a:10:81:
f4:c1:71:8b:ca:8e:25:3c:03:8a:76:82:68:31:87:57:ae:72:
bb:c8:7e:02:ac:1e:d7:ca:68:12:3c:4a:6a:fa:c5:46:b5:50:
ea:19:c0:19:e1:ef:a4:7c:13:35:81:81:c3:ee:0d:c5:78:22:
38:6e:e1:5a:4b:c2:fc:98:f9:c4:7e:ff:c3:33:0c:90:43:0f:
0b:eb:45:24:8e:df:fe:68:85:e7:8c:82:6e:b4:84:f0:0e:49:
65:57:1a:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:43:21 2025 by rpki-client