Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/25e83d-2365-4126-9aa7-94b9cf2cd2ef/1/i8Wo923xVof4NEHJprVUV48831c.mft
File: i8Wo923xVof4NEHJprVUV48831c.mft (raw, json)
Hash identifier: 5TNUiuxahNQieSEwHmVoUJ8p8NY0sHkTp44NKTCh0jM=
Subject key identifier: E3:B1:A3:0C:09:C8:B7:A9:B7:CE:D6:18:26:F3:8F:C5:FC:F4:59:1E
Authority key identifier: 8B:C5:A8:F7:6D:F1:56:87:F8:34:41:C9:A6:B5:54:57:8F:3C:DF:57
Certificate issuer: /CN=8bc5a8f76df15687f83441c9a6b554578f3cdf57
Certificate serial: 019A4F2B5ABC837B2EBD00E8293E7820F637
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i8Wo923xVof4NEHJprVUV48831c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/25e83d-2365-4126-9aa7-94b9cf2cd2ef/1/i8Wo923xVof4NEHJprVUV48831c.mft
Manifest number: 03AB
Signing time: Tue 04 Nov 2025 14:00:32 +0000
Manifest this update: Tue 04 Nov 2025 14:00:32 +0000
Manifest next update: Wed 05 Nov 2025 14:00:32 +0000
Files and hashes: 1: i8Wo923xVof4NEHJprVUV48831c.crl (hash: oXL/7ImZXS2P8YUq1ej4XV+db7VimKlomVkmmIXLDjk=)
2: xqruQTCgxIM4PNAxf9wXVycyPyQ.roa (hash: hdKTf9nYGB8AkPxxLnuI6L7FG/INFNDmxrZRzLc1Xt0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/25e83d-2365-4126-9aa7-94b9cf2cd2ef/1/i8Wo923xVof4NEHJprVUV48831c.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/25e83d-2365-4126-9aa7-94b9cf2cd2ef/1/i8Wo923xVof4NEHJprVUV48831c.mft
rsync://rpki.ripe.net/repository/DEFAULT/i8Wo923xVof4NEHJprVUV48831c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 14:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:5a:bc:83:7b:2e:bd:00:e8:29:3e:78:20:f6:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bc5a8f76df15687f83441c9a6b554578f3cdf57
Validity
Not Before: Nov 4 14:00:32 2025 GMT
Not After : Nov 5 14:00:32 2025 GMT
Subject: CN=e3b1a30c09c8b7a9b7ced61826f38fc5fcf4591e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:7f:c0:52:1d:ca:99:a3:ca:de:e8:c0:9f:14:
ca:85:32:b9:c9:d8:dd:26:e2:7b:16:8b:16:ef:d0:
db:f2:9a:cb:5c:0a:3c:b4:2c:5e:fd:74:8b:b2:30:
7c:31:b1:44:c8:3b:77:2c:03:13:b2:dd:ad:6b:95:
cb:3c:32:da:58:87:da:64:33:04:65:f4:7b:12:ed:
f7:bc:15:2a:ef:0a:45:51:54:55:9c:b5:c6:a2:02:
a1:ff:5b:a0:05:40:d1:82:dd:03:02:2a:f7:72:46:
2a:8f:48:e4:e2:4c:10:8e:ba:02:e0:b2:cf:bd:47:
bb:31:68:3b:01:46:aa:12:cb:5b:87:b3:b5:ca:5f:
6f:22:6d:50:cb:30:b6:4e:74:b0:5f:f2:d4:e3:60:
e3:a5:0e:a9:f9:66:a5:07:78:32:94:d1:a0:29:a7:
fb:f7:c5:f7:b1:70:5d:9a:ff:68:07:56:84:1c:5f:
5c:d0:aa:9c:f6:6a:2c:eb:39:29:0e:88:8f:34:4f:
a9:97:81:3d:32:d7:49:40:81:90:78:e1:73:69:cc:
5b:2f:6d:3c:3b:ef:b9:ef:74:9e:98:d4:45:9d:1c:
4a:e0:24:01:3c:97:26:6a:33:4e:85:f7:2b:9b:d5:
81:f4:6a:31:2b:80:d4:32:8a:81:69:b3:89:5f:cb:
ab:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:B1:A3:0C:09:C8:B7:A9:B7:CE:D6:18:26:F3:8F:C5:FC:F4:59:1E
X509v3 Authority Key Identifier:
keyid:8B:C5:A8:F7:6D:F1:56:87:F8:34:41:C9:A6:B5:54:57:8F:3C:DF:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i8Wo923xVof4NEHJprVUV48831c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/25e83d-2365-4126-9aa7-94b9cf2cd2ef/1/i8Wo923xVof4NEHJprVUV48831c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/25e83d-2365-4126-9aa7-94b9cf2cd2ef/1/i8Wo923xVof4NEHJprVUV48831c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:50:e6:12:1a:dc:63:c9:fc:92:b9:aa:63:1f:ae:36:9d:c1:
82:08:dc:73:85:68:2f:d8:9c:4d:9a:cf:d8:ea:bd:a2:49:8d:
80:ad:bd:6f:ff:09:23:23:a5:f1:1c:c7:a7:e3:b3:f4:c7:80:
ea:c4:ef:09:dd:a3:3d:a2:bb:03:2f:af:16:c4:0f:02:ca:cf:
47:3d:2f:7d:b6:f2:41:06:50:70:92:8f:8f:f9:ce:d7:7e:8f:
33:69:1b:5c:97:ff:f3:e6:c6:a7:80:9e:3e:c1:9b:76:fa:11:
2c:f7:68:87:0a:44:72:aa:59:66:75:b7:4a:bd:b7:71:ed:81:
09:c5:ca:32:e0:6b:98:31:1f:e8:34:0b:e4:de:72:9b:a1:24:
db:ae:22:6f:3b:ee:a3:83:be:55:a4:d4:45:00:9c:1e:6e:d4:
89:2b:08:5b:22:0b:34:f4:1b:82:1a:b6:f5:28:4d:fc:65:93:
08:bd:73:1e:0d:3a:6a:c8:95:b2:88:d3:f8:04:42:d0:25:4f:
fc:56:b3:83:54:cf:25:b9:95:f8:6d:40:ab:f9:86:c2:13:da:
98:ed:8d:04:b8:0f:a8:22:d4:90:61:26:70:c5:a0:93:e1:9c:
9f:ab:e9:d2:c9:6c:dd:e7:d0:e8:73:48:b6:14:ff:75:90:5f:
7f:b9:f8:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPK1q8g3suvQDoKT54IPY3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiYzVhOGY3NmRmMTU2ODdmODM0NDFjOWE2YjU1NDU3OGYz
Y2RmNTcwHhcNMjUxMTA0MTQwMDMyWhcNMjUxMTA1MTQwMDMyWjAzMTEwLwYDVQQD
EyhlM2IxYTMwYzA5YzhiN2E5YjdjZWQ2MTgyNmYzOGZjNWZjZjQ1OTFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzH/AUh3KmaPK3ujAnxTKhTK5ydjd
JuJ7FosW79Db8prLXAo8tCxe/XSLsjB8MbFEyDt3LAMTst2ta5XLPDLaWIfaZDME
ZfR7Eu33vBUq7wpFUVRVnLXGogKh/1ugBUDRgt0DAir3ckYqj0jk4kwQjroC4LLP
vUe7MWg7AUaqEstbh7O1yl9vIm1QyzC2TnSwX/LU42DjpQ6p+WalB3gylNGgKaf7
98X3sXBdmv9oB1aEHF9c0Kqc9mos6zkpDoiPNE+pl4E9MtdJQIGQeOFzacxbL208
O++573SemNRFnRxK4CQBPJcmajNOhfcrm9WB9GoxK4DUMoqBabOJX8urfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOOxowwJyLept87WGCbzj8X89FkeMB8GA1UdIwQY
MBaAFIvFqPdt8VaH+DRByaa1VFePPN9XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaThXbzkyM3hWb2Y0TkVISnByVlVWNDg4MzFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS8yNWU4M2QtMjM2NS00MTI2LTlhYTct
OTRiOWNmMmNkMmVmLzEvaThXbzkyM3hWb2Y0TkVISnByVlVWNDg4MzFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS8yNWU4M2QtMjM2NS00MTI2LTlhYTctOTRiOWNmMmNkMmVm
LzEvaThXbzkyM3hWb2Y0TkVISnByVlVWNDg4MzFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc1DmEhrc
Y8n8krmqYx+uNp3Bggjcc4VoL9icTZrP2Oq9okmNgK29b/8JIyOl8RzHp+Oz9MeA
6sTvCd2jPaK7Ay+vFsQPAsrPRz0vfbbyQQZQcJKPj/nO136PM2kbXJf/8+bGp4Ce
PsGbdvoRLPdohwpEcqpZZnW3Sr23ce2BCcXKMuBrmDEf6DQL5N5ym6Ek264ibzvu
o4O+VaTURQCcHm7UiSsIWyILNPQbghq29ShN/GWTCL1zHg06asiVsojT+ARC0CVP
/Fazg1TPJbmV+G1Aq/mGwhPamO2NBLgPqCLUkGEmcMWgk+Gcn6vp0sls3efQ6HNI
thT/dZBff7n4LQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 23:56:03 2025 by rpki-client