Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/ad050f-a22d-4a77-958c-357a61361dcb/1/M8-_vy7M05OqMMIhNplluEcZLag.mft
File: M8-_vy7M05OqMMIhNplluEcZLag.mft (raw, json)
Hash identifier: mCrWzomYdeykl7H7HgY/r7TqLlvSJbZmOIvnYFkq7TQ=
Subject key identifier: A5:F6:29:C5:48:3D:04:FB:6E:08:BA:0E:53:DF:ED:C5:E2:DE:23:18
Authority key identifier: 33:CF:BF:BF:2E:CC:D3:93:AA:30:C2:21:36:99:65:B8:47:19:2D:A8
Certificate issuer: /CN=33cfbfbf2eccd393aa30c221369965b847192da8
Certificate serial: 019A4FCFBEAEA13005F7FB8819614416836E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M8-_vy7M05OqMMIhNplluEcZLag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/ad050f-a22d-4a77-958c-357a61361dcb/1/M8-_vy7M05OqMMIhNplluEcZLag.mft
Manifest number: 1286
Signing time: Tue 04 Nov 2025 17:00:05 +0000
Manifest this update: Tue 04 Nov 2025 17:00:05 +0000
Manifest next update: Wed 05 Nov 2025 17:00:05 +0000
Files and hashes: 1: M8-_vy7M05OqMMIhNplluEcZLag.crl (hash: aaDmCzxb9gWvGrq61cKYaE/Mmw12EruKjldc99DucUU=)
2: MMfXFIBTN4EF53B-qz6xr0lTa60.roa (hash: PppBDUKwa5tmMVRDOOI/PKjma94X0CuRbdLOVWnm99g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/ad050f-a22d-4a77-958c-357a61361dcb/1/M8-_vy7M05OqMMIhNplluEcZLag.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/ad050f-a22d-4a77-958c-357a61361dcb/1/M8-_vy7M05OqMMIhNplluEcZLag.mft
rsync://rpki.ripe.net/repository/DEFAULT/M8-_vy7M05OqMMIhNplluEcZLag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:cf:be:ae:a1:30:05:f7:fb:88:19:61:44:16:83:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33cfbfbf2eccd393aa30c221369965b847192da8
Validity
Not Before: Nov 4 17:00:05 2025 GMT
Not After : Nov 5 17:00:05 2025 GMT
Subject: CN=a5f629c5483d04fb6e08ba0e53dfedc5e2de2318
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:12:57:5c:2d:b7:64:1b:c7:cf:89:22:5a:7e:
0d:c3:9f:0b:3a:f5:0e:2d:40:9d:87:69:b6:4d:8b:
fb:be:ae:d0:31:b3:e5:90:1b:5a:62:77:4f:a1:dc:
a4:3b:e5:4d:7f:10:f8:ad:a2:44:ff:e4:a3:d7:c1:
f1:d4:bb:f2:d5:d0:6d:1d:d8:a4:66:4d:3c:5e:c3:
22:ab:08:6a:34:03:00:b0:49:72:97:a3:61:6c:5d:
8d:64:fc:5d:e9:3b:f7:17:dd:4e:6d:04:6a:e4:f3:
1c:49:40:d4:31:14:41:9f:30:ae:cc:23:08:8b:0d:
4c:3f:cb:40:37:6d:79:9f:df:3d:4d:8f:ab:8e:2e:
42:5c:0a:6b:7b:f1:15:40:b0:7a:7f:2b:d7:34:1d:
69:cc:ec:30:41:90:b0:ff:b0:d1:d6:43:5e:29:c2:
c5:7d:b9:3c:f8:06:ab:cb:3a:90:dd:a6:bf:5e:15:
2d:02:fd:8a:83:cc:81:7d:54:6a:07:23:06:ce:14:
07:25:93:da:6e:ab:7b:97:23:31:ea:28:c8:e0:17:
fc:56:0f:74:a8:1b:2b:f2:44:ce:39:6c:0d:a4:b5:
90:93:0e:03:ac:fb:e3:4b:a2:f6:8e:d8:8c:32:34:
8d:46:31:31:0d:a4:70:55:84:c8:0e:30:80:c7:a0:
78:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:F6:29:C5:48:3D:04:FB:6E:08:BA:0E:53:DF:ED:C5:E2:DE:23:18
X509v3 Authority Key Identifier:
keyid:33:CF:BF:BF:2E:CC:D3:93:AA:30:C2:21:36:99:65:B8:47:19:2D:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M8-_vy7M05OqMMIhNplluEcZLag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ad050f-a22d-4a77-958c-357a61361dcb/1/M8-_vy7M05OqMMIhNplluEcZLag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ad050f-a22d-4a77-958c-357a61361dcb/1/M8-_vy7M05OqMMIhNplluEcZLag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:94:18:97:49:52:4f:6a:01:83:56:73:ee:57:87:3b:fa:b0:
68:51:ff:c7:d5:18:42:d4:c6:99:6a:9e:93:ea:bf:ab:42:e6:
e2:aa:ea:3a:1f:b3:04:9b:d6:1f:90:fb:d1:b2:c3:b0:c0:c6:
b0:38:a0:a3:cc:70:57:56:4f:bb:d4:d0:cf:3e:f4:83:b7:5e:
b3:f1:2f:34:35:95:a3:0d:40:bb:16:00:99:16:ec:0b:55:78:
3b:74:71:fd:02:90:44:8a:ef:95:15:d1:f9:d3:e5:d3:f2:f8:
30:82:95:d7:2d:34:1b:27:fd:92:8b:90:79:37:f1:88:91:76:
4c:82:e2:c7:fd:8d:48:30:e6:4f:06:61:43:a6:89:be:71:48:
45:45:32:27:1f:2d:3e:8a:fa:0f:68:1a:9d:9b:8a:80:6f:d1:
2d:39:59:2f:61:5c:e0:5d:59:86:1c:dd:13:01:cb:c1:63:01:
7f:c6:d7:61:5a:dc:b2:26:15:16:3b:4f:78:0c:c4:8a:86:c9:
3e:87:9b:17:91:ca:cb:ac:cc:45:ae:45:99:43:f1:e0:2d:91:
d1:c8:7f:2a:88:37:62:26:e4:7e:50:1e:7e:50:72:2e:da:5b:
44:58:98:be:22:a9:e8:0a:b0:a3:5a:59:1b:1e:43:a2:a2:80:
64:71:19:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:34:01 2025 by rpki-client