Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/383f43-84ea-4623-b77d-78927fc78e7d/1/S-8wYkIQwA06ht_WyAEGErsbEqA.mft
File: S-8wYkIQwA06ht_WyAEGErsbEqA.mft (raw, json)
Hash identifier: E601x5A0EcUnslS9+yQwIlNfpFwFIjOVh31Ra77zqvs=
Subject key identifier: 76:BC:3A:1A:3B:74:83:31:CA:6D:87:65:66:19:E6:F2:81:D5:B1:5A
Authority key identifier: 4B:EF:30:62:42:10:C0:0D:3A:86:DF:D6:C8:01:06:12:BB:1B:12:A0
Certificate issuer: /CN=4bef30624210c00d3a86dfd6c8010612bb1b12a0
Certificate serial: 019A4EBD410302946D0C72D4A35C90B65B50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-8wYkIQwA06ht_WyAEGErsbEqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/383f43-84ea-4623-b77d-78927fc78e7d/1/S-8wYkIQwA06ht_WyAEGErsbEqA.mft
Manifest number: 06A8
Signing time: Tue 04 Nov 2025 12:00:16 +0000
Manifest this update: Tue 04 Nov 2025 12:00:16 +0000
Manifest next update: Wed 05 Nov 2025 12:00:16 +0000
Files and hashes: 1: S-8wYkIQwA06ht_WyAEGErsbEqA.crl (hash: o3lqdaCWZ4X8Ncmji5qPV/kH6txgEu6AY6iYGe8XiEg=)
2: hewkwqUbEjrIV_IBVqwAtoymkrQ.roa (hash: Jkl1mlHh6xctvJTfhoOpTm+3C4TmQ7fhy/9GZ6iTL9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/383f43-84ea-4623-b77d-78927fc78e7d/1/S-8wYkIQwA06ht_WyAEGErsbEqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/383f43-84ea-4623-b77d-78927fc78e7d/1/S-8wYkIQwA06ht_WyAEGErsbEqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/S-8wYkIQwA06ht_WyAEGErsbEqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:bd:41:03:02:94:6d:0c:72:d4:a3:5c:90:b6:5b:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bef30624210c00d3a86dfd6c8010612bb1b12a0
Validity
Not Before: Nov 4 12:00:16 2025 GMT
Not After : Nov 5 12:00:16 2025 GMT
Subject: CN=76bc3a1a3b748331ca6d87656619e6f281d5b15a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:73:95:24:85:33:6a:7f:ea:21:d2:57:b1:e6:
c1:52:63:c4:0a:7c:81:2e:5a:51:41:68:d4:d8:a8:
85:4f:aa:2f:d7:f2:c2:bc:d7:95:f8:62:5a:c6:f6:
47:64:6a:31:2f:c2:0b:71:f6:77:72:f8:43:2e:80:
1f:01:50:8a:5c:db:32:0d:6c:d6:94:f2:ec:ac:10:
3b:58:b2:56:1b:12:ad:d2:f2:f0:c2:6f:5c:8f:3b:
45:4a:10:e9:51:4d:dd:ea:66:37:21:3f:64:5b:07:
00:9b:59:87:d0:b1:3a:b1:95:bb:16:b8:37:3d:d8:
a8:8e:da:61:47:c9:0f:0d:90:7e:14:77:68:f5:e2:
f0:76:d9:d0:80:72:23:b4:f6:3d:ad:04:f0:77:ff:
bd:f4:2b:8b:53:38:bb:a0:66:62:cf:55:95:08:a3:
30:50:1f:2a:33:fe:e2:a0:f9:88:fb:1d:c2:92:fc:
9e:cf:52:3f:59:7e:48:93:6d:55:32:ea:ab:5d:8f:
ba:14:c6:ca:c0:29:a0:5d:d7:b0:43:2b:aa:ef:35:
c5:72:4f:b9:59:ee:88:b1:1f:0d:bc:92:7e:34:87:
04:63:dd:a8:e2:c6:b0:19:05:ba:56:84:24:5c:cf:
34:2d:b0:c7:d4:3d:d1:3c:25:c2:4f:83:57:a2:65:
4d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:BC:3A:1A:3B:74:83:31:CA:6D:87:65:66:19:E6:F2:81:D5:B1:5A
X509v3 Authority Key Identifier:
keyid:4B:EF:30:62:42:10:C0:0D:3A:86:DF:D6:C8:01:06:12:BB:1B:12:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-8wYkIQwA06ht_WyAEGErsbEqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/383f43-84ea-4623-b77d-78927fc78e7d/1/S-8wYkIQwA06ht_WyAEGErsbEqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/383f43-84ea-4623-b77d-78927fc78e7d/1/S-8wYkIQwA06ht_WyAEGErsbEqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:32:b1:80:f6:28:e3:bc:a2:0a:12:5f:7d:68:37:05:8c:04:
92:e1:f9:86:9b:d6:6b:98:8d:a4:a5:23:23:2a:e5:3b:b1:41:
57:a9:b9:b5:e1:19:20:8e:4d:9b:be:d3:0b:ae:f7:b0:de:05:
f1:2b:cb:c9:89:ca:8c:75:85:18:94:35:c2:46:a9:8b:3a:b0:
40:56:ba:6d:ca:8b:a7:68:4a:1f:66:02:5f:a8:37:93:e4:45:
75:72:66:da:9f:6c:77:a2:0e:3b:b5:7b:c0:73:77:9c:6f:8b:
31:ab:f8:b9:cd:88:b3:80:33:d3:a8:38:0c:cc:9d:42:17:df:
5c:23:03:44:d5:7b:90:44:7e:ae:89:86:9b:84:5a:d0:7a:82:
f4:8e:59:d7:fe:08:18:41:4a:9e:46:d3:5f:b7:a1:72:c9:a3:
52:88:2c:e2:1c:84:ab:dc:9f:75:e5:3f:37:66:07:2d:82:93:
ed:01:66:ac:e4:91:dd:fe:8a:c9:a9:93:13:3b:ee:b0:c1:a7:
9b:2b:4a:3b:16:0e:5b:1e:a8:77:3b:9c:b1:ec:fa:4e:fc:f0:
d7:2f:12:42:3b:03:9b:b4:bb:11:99:c6:36:7b:13:35:84:10:
b5:b3:06:a2:fc:77:84:21:84:4a:f7:93:2d:7a:ec:fd:f3:83:
df:66:e2:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:27:36 2025 by rpki-client