Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/501e8f-c7e1-4aa4-8583-66d74e73f254/1/k8JEvms6_7bU5Ufy4ePF6sGyarI.mft
File: k8JEvms6_7bU5Ufy4ePF6sGyarI.mft (raw, json)
Hash identifier: 77n/AT6nHx4uelfVqNvBIGqUP0G1YbenR2TwSBnry8I=
Subject key identifier: AC:12:7C:95:9C:51:97:4F:FB:21:5B:78:D7:25:32:A5:77:DC:BE:46
Authority key identifier: 93:C2:44:BE:6B:3A:FF:B6:D4:E5:47:F2:E1:E3:C5:EA:C1:B2:6A:B2
Certificate issuer: /CN=93c244be6b3affb6d4e547f2e1e3c5eac1b26ab2
Certificate serial: 019A4EF41D66354A96EC326970452B4723AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k8JEvms6_7bU5Ufy4ePF6sGyarI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/501e8f-c7e1-4aa4-8583-66d74e73f254/1/k8JEvms6_7bU5Ufy4ePF6sGyarI.mft
Manifest number: 0E1F
Signing time: Tue 04 Nov 2025 13:00:12 +0000
Manifest this update: Tue 04 Nov 2025 13:00:12 +0000
Manifest next update: Wed 05 Nov 2025 13:00:12 +0000
Files and hashes: 1: W--ZKr5ij0BtuIXs5rvJyXt3d8w.roa (hash: GOtvHAAEQEDyzwtDsA3aSlZZHxuWNeU6Rlg4PiHPszw=)
2: k8JEvms6_7bU5Ufy4ePF6sGyarI.crl (hash: s8nbKaZF+A/y+ssYL7a41Azb/D/EqFO3GKOMI7TlsHg=)
3: uG74c7I0myUDPmZfaSmD4tc9rV4.roa (hash: gFdqnU7r/rSwGKvKSrZSTL5gnMsfd1TYUTvAqWItcO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/501e8f-c7e1-4aa4-8583-66d74e73f254/1/k8JEvms6_7bU5Ufy4ePF6sGyarI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/501e8f-c7e1-4aa4-8583-66d74e73f254/1/k8JEvms6_7bU5Ufy4ePF6sGyarI.mft
rsync://rpki.ripe.net/repository/DEFAULT/k8JEvms6_7bU5Ufy4ePF6sGyarI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:1d:66:35:4a:96:ec:32:69:70:45:2b:47:23:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93c244be6b3affb6d4e547f2e1e3c5eac1b26ab2
Validity
Not Before: Nov 4 13:00:12 2025 GMT
Not After : Nov 5 13:00:12 2025 GMT
Subject: CN=ac127c959c51974ffb215b78d72532a577dcbe46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a4:8b:79:47:46:2c:85:83:7a:e6:8b:ff:03:
d2:d3:ac:b2:4f:6a:ac:f0:44:b8:34:da:2c:f7:5b:
8a:cd:af:c7:b0:d5:65:ca:52:aa:f5:a2:28:e9:28:
a3:fe:90:2d:9d:f8:64:ce:2d:7c:d3:4a:c2:32:24:
e4:a2:6a:12:7d:5f:f8:7c:cb:13:ee:eb:95:c9:a5:
36:86:53:05:06:14:97:a2:4e:69:39:82:1f:29:c6:
03:d1:10:e4:76:7a:5f:2e:8d:9b:18:5a:25:82:0c:
5c:ea:e5:8f:18:08:a1:c2:37:0b:84:62:bf:41:81:
e9:3b:d5:e4:94:4e:a3:49:ee:88:b0:15:65:01:89:
03:fb:3c:82:47:09:da:ca:4e:d4:52:34:43:aa:05:
16:1b:d7:b0:cc:c5:75:c3:16:4f:df:3a:27:79:78:
06:36:23:4a:33:df:a0:5f:51:63:5e:e1:d6:d7:72:
6c:27:a8:59:1d:cd:55:c9:af:10:cc:5b:c4:d9:e4:
a8:59:8a:d7:46:21:94:9c:90:94:bf:bf:83:d4:94:
46:0a:b9:5b:3e:b1:a8:4c:69:b9:0e:e5:4f:01:6b:
96:a5:02:eb:fe:9c:03:b1:b6:1a:8e:4c:0b:85:cc:
3b:da:01:77:99:57:cf:7b:c3:cd:01:25:ff:87:d6:
16:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:12:7C:95:9C:51:97:4F:FB:21:5B:78:D7:25:32:A5:77:DC:BE:46
X509v3 Authority Key Identifier:
keyid:93:C2:44:BE:6B:3A:FF:B6:D4:E5:47:F2:E1:E3:C5:EA:C1:B2:6A:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k8JEvms6_7bU5Ufy4ePF6sGyarI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/501e8f-c7e1-4aa4-8583-66d74e73f254/1/k8JEvms6_7bU5Ufy4ePF6sGyarI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/501e8f-c7e1-4aa4-8583-66d74e73f254/1/k8JEvms6_7bU5Ufy4ePF6sGyarI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:1f:39:bf:cd:9f:d4:62:bb:64:f2:c0:ad:68:fc:7c:20:ff:
2c:dd:44:53:bb:b7:f9:23:41:96:e8:c8:c2:cb:9f:05:fb:12:
6e:c6:67:2b:5a:b9:85:4b:ed:9b:78:20:81:5f:af:47:e3:9c:
00:7b:d5:bc:82:d8:47:b0:39:7b:fd:3f:b4:06:53:35:c4:13:
68:06:c4:62:e8:ae:fd:6a:0f:45:7a:00:6d:fe:2c:28:85:5a:
a4:83:e4:40:d6:92:9f:14:be:38:e5:ae:fc:d2:f1:6f:92:47:
b7:87:ab:fa:d8:a4:46:8b:48:ec:3e:9d:8b:a4:ed:23:83:aa:
af:92:78:38:ff:18:c5:27:44:8e:47:66:2d:85:7b:27:35:9b:
35:18:aa:13:60:5a:36:c9:e7:84:04:ef:eb:a4:4a:b1:8f:07:
68:19:7d:96:5d:8f:2e:01:df:11:3a:c3:6b:22:78:21:82:77:
04:d9:6f:dc:06:3b:3f:15:87:58:e1:14:9d:09:e5:c0:80:31:
b0:49:4e:b2:3a:a2:98:c2:1b:1a:92:3a:08:00:e6:75:b5:4b:
46:28:bd:4d:14:22:ea:6b:5b:21:6d:1e:7b:88:ee:a3:2d:d7:
6b:bc:45:a7:1b:d8:54:f0:17:f8:c2:2c:9b:f8:b0:1c:2e:a9:
6b:d1:0d:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9B1mNUqW7DJpcEUrRyOsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzYzI0NGJlNmIzYWZmYjZkNGU1NDdmMmUxZTNjNWVhYzFi
MjZhYjIwHhcNMjUxMTA0MTMwMDEyWhcNMjUxMTA1MTMwMDEyWjAzMTEwLwYDVQQD
EyhhYzEyN2M5NTljNTE5NzRmZmIyMTViNzhkNzI1MzJhNTc3ZGNiZTQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA06SLeUdGLIWDeuaL/wPS06yyT2qs
8ES4NNos91uKza/HsNVlylKq9aIo6Sij/pAtnfhkzi1800rCMiTkomoSfV/4fMsT
7uuVyaU2hlMFBhSXok5pOYIfKcYD0RDkdnpfLo2bGFolggxc6uWPGAihwjcLhGK/
QYHpO9XklE6jSe6IsBVlAYkD+zyCRwnayk7UUjRDqgUWG9ewzMV1wxZP3zoneXgG
NiNKM9+gX1FjXuHW13JsJ6hZHc1Vya8QzFvE2eSoWYrXRiGUnJCUv7+D1JRGCrlb
PrGoTGm5DuVPAWuWpQLr/pwDsbYajkwLhcw72gF3mVfPe8PNASX/h9YWRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKwSfJWcUZdP+yFbeNclMqV33L5GMB8GA1UdIwQY
MBaAFJPCRL5rOv+21OVH8uHjxerBsmqyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazhKRXZtczZfN2JVNVVmeTRlUEY2c0d5YXJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS81MDFlOGYtYzdlMS00YWE0LTg1ODMt
NjZkNzRlNzNmMjU0LzEvazhKRXZtczZfN2JVNVVmeTRlUEY2c0d5YXJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS81MDFlOGYtYzdlMS00YWE0LTg1ODMtNjZkNzRlNzNmMjU0
LzEvazhKRXZtczZfN2JVNVVmeTRlUEY2c0d5YXJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjh85v82f
1GK7ZPLArWj8fCD/LN1EU7u3+SNBlujIwsufBfsSbsZnK1q5hUvtm3gggV+vR+Oc
AHvVvILYR7A5e/0/tAZTNcQTaAbEYuiu/WoPRXoAbf4sKIVapIPkQNaSnxS+OOWu
/NLxb5JHt4er+tikRotI7D6di6TtI4Oqr5J4OP8YxSdEjkdmLYV7JzWbNRiqE2Ba
NsnnhATv66RKsY8HaBl9ll2PLgHfETrDayJ4IYJ3BNlv3AY7PxWHWOEUnQnlwIAx
sElOsjqimMIbGpI6CADmdbVLRii9TRQi6mtbIW0ee4juoy3Xa7xFpxvYVPAX+MIs
m/iwHC6pa9ENRQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:42:00 2025 by rpki-client