Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/92d33c-8a69-4db3-b628-b62db772bbfa/1/B47RoBU3Yqki5V4PlIzRpUEceok.mft
File: B47RoBU3Yqki5V4PlIzRpUEceok.mft (raw, json)
Hash identifier: 3WQ849oCBKf9sVVM7Kt2T3hukVhSl8WuUj3II5ULAMs=
Subject key identifier: 8E:59:15:97:CC:A8:47:88:89:1A:99:F9:B1:14:9E:3F:A1:C6:2A:BA
Authority key identifier: 07:8E:D1:A0:15:37:62:A9:22:E5:5E:0F:94:8C:D1:A5:41:1C:7A:89
Certificate issuer: /CN=078ed1a0153762a922e55e0f948cd1a5411c7a89
Certificate serial: 019A4F62AAFA31E7E79DB91109BF666AB8EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B47RoBU3Yqki5V4PlIzRpUEceok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/92d33c-8a69-4db3-b628-b62db772bbfa/1/B47RoBU3Yqki5V4PlIzRpUEceok.mft
Manifest number: 127D
Signing time: Tue 04 Nov 2025 15:00:57 +0000
Manifest this update: Tue 04 Nov 2025 15:00:57 +0000
Manifest next update: Wed 05 Nov 2025 15:00:57 +0000
Files and hashes: 1: B47RoBU3Yqki5V4PlIzRpUEceok.crl (hash: qZUiRMqrXxzZajA4meKX91YpVbkDbixXtMuByi7/fU0=)
2: c4TFBL4EL5IADMniHZ0GVJJb_4Q.roa (hash: ZOFMhPaK+bFDPt6Ze8LlHlzvSqEu3m14aAhhA1S86RQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/92d33c-8a69-4db3-b628-b62db772bbfa/1/B47RoBU3Yqki5V4PlIzRpUEceok.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/92d33c-8a69-4db3-b628-b62db772bbfa/1/B47RoBU3Yqki5V4PlIzRpUEceok.mft
rsync://rpki.ripe.net/repository/DEFAULT/B47RoBU3Yqki5V4PlIzRpUEceok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:aa:fa:31:e7:e7:9d:b9:11:09:bf:66:6a:b8:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=078ed1a0153762a922e55e0f948cd1a5411c7a89
Validity
Not Before: Nov 4 15:00:57 2025 GMT
Not After : Nov 5 15:00:57 2025 GMT
Subject: CN=8e591597cca84788891a99f9b1149e3fa1c62aba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:97:7d:cd:6a:8e:26:88:ac:ca:a0:8f:a5:3f:
9e:80:ad:2c:c9:ba:18:90:1e:41:d0:35:18:a8:1a:
49:30:b3:f5:c0:79:1a:24:6e:a7:6f:3a:5d:1d:af:
ee:a1:33:b7:2f:f9:ff:25:4b:d6:5a:8b:e9:59:6f:
07:ab:90:47:d7:5f:a8:ad:44:2a:58:0b:78:ba:24:
9d:56:9c:7b:02:ae:79:1f:43:31:46:e7:72:73:54:
2e:46:a0:5a:45:1b:b5:ae:ee:50:08:44:40:8a:a2:
90:2a:7f:14:6a:39:d7:7c:1f:2f:2c:5e:6c:e5:5f:
eb:84:2e:09:45:20:8b:4f:6d:dd:6a:38:0c:ab:fd:
bd:46:8e:75:27:6c:84:52:5c:d9:92:ea:e1:c7:e8:
cd:9a:0b:69:58:17:f6:01:e8:e9:89:33:a7:1c:65:
f2:b3:7a:58:d6:8e:f6:33:b3:de:7c:34:26:e6:dd:
62:6a:2b:f7:f2:58:92:56:69:c3:5e:b1:98:89:38:
d2:b1:cf:7a:30:a5:ed:e4:f2:cf:6d:a9:07:2a:e6:
a9:4b:99:22:2b:1b:de:3f:7a:5a:ab:c9:31:f4:d7:
88:05:f0:54:b1:b1:10:d5:4c:a9:50:e6:b1:07:b2:
c8:ea:80:17:9c:d0:0c:64:58:a4:0f:02:63:f5:58:
3c:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:59:15:97:CC:A8:47:88:89:1A:99:F9:B1:14:9E:3F:A1:C6:2A:BA
X509v3 Authority Key Identifier:
keyid:07:8E:D1:A0:15:37:62:A9:22:E5:5E:0F:94:8C:D1:A5:41:1C:7A:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B47RoBU3Yqki5V4PlIzRpUEceok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/92d33c-8a69-4db3-b628-b62db772bbfa/1/B47RoBU3Yqki5V4PlIzRpUEceok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/92d33c-8a69-4db3-b628-b62db772bbfa/1/B47RoBU3Yqki5V4PlIzRpUEceok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:43:b3:e5:4d:41:b7:b5:59:dc:1a:07:1f:ed:67:34:6a:71:
a0:60:49:04:20:13:87:bd:42:0c:76:4f:ff:93:ed:fb:72:0f:
05:12:0a:a5:c8:88:8a:1c:e2:ee:00:cd:b9:08:bb:e4:3e:2f:
4e:60:70:37:03:e0:2d:19:d2:69:07:ef:72:16:08:eb:8b:5f:
11:0a:7c:31:3d:ee:9e:fb:94:d6:56:d5:cb:bd:31:6e:79:79:
c3:a4:ca:f2:1c:ab:fb:81:21:7c:3b:28:27:5e:43:a7:f2:2c:
dc:d5:66:02:e5:97:04:30:a9:f0:50:eb:82:00:85:91:62:13:
64:ca:31:e8:a1:a5:4d:b6:c4:96:43:c8:c9:3e:c0:0c:ed:48:
32:40:d6:03:9f:cb:6c:11:61:a3:6b:55:80:fd:1a:3b:28:74:
47:76:83:37:4b:79:48:22:bf:3e:e0:15:c2:1c:2d:c2:a3:a0:
95:3a:ff:7a:cf:50:6e:81:5b:43:59:31:5c:e5:c8:93:bc:9d:
43:9c:10:8b:b4:32:74:74:38:8c:e4:85:ad:7d:1e:30:ff:e1:
ee:a8:54:59:d0:87:72:f4:51:79:31:ed:a5:8b:60:a4:66:59:
6c:dc:46:b0:24:61:2d:70:c3:f7:04:d0:35:2e:5c:0d:7c:bb:
6a:b6:ff:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPYqr6MefnnbkRCb9marjvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3OGVkMWEwMTUzNzYyYTkyMmU1NWUwZjk0OGNkMWE1NDEx
YzdhODkwHhcNMjUxMTA0MTUwMDU3WhcNMjUxMTA1MTUwMDU3WjAzMTEwLwYDVQQD
Eyg4ZTU5MTU5N2NjYTg0Nzg4ODkxYTk5ZjliMTE0OWUzZmExYzYyYWJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJd9zWqOJoisyqCPpT+egK0syboY
kB5B0DUYqBpJMLP1wHkaJG6nbzpdHa/uoTO3L/n/JUvWWovpWW8Hq5BH11+orUQq
WAt4uiSdVpx7Aq55H0MxRudyc1QuRqBaRRu1ru5QCERAiqKQKn8UajnXfB8vLF5s
5V/rhC4JRSCLT23dajgMq/29Ro51J2yEUlzZkurhx+jNmgtpWBf2AejpiTOnHGXy
s3pY1o72M7PefDQm5t1iaiv38liSVmnDXrGYiTjSsc96MKXt5PLPbakHKuapS5ki
KxveP3paq8kx9NeIBfBUsbEQ1UypUOaxB7LI6oAXnNAMZFikDwJj9Vg8GwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI5ZFZfMqEeIiRqZ+bEUnj+hxiq6MB8GA1UdIwQY
MBaAFAeO0aAVN2KpIuVeD5SM0aVBHHqJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjQ3Um9CVTNZcWtpNVY0UGxJelJwVUVjZW9rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy85MmQzM2MtOGE2OS00ZGIzLWI2Mjgt
YjYyZGI3NzJiYmZhLzEvQjQ3Um9CVTNZcWtpNVY0UGxJelJwVUVjZW9rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy85MmQzM2MtOGE2OS00ZGIzLWI2MjgtYjYyZGI3NzJiYmZh
LzEvQjQ3Um9CVTNZcWtpNVY0UGxJelJwVUVjZW9rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATkOz5U1B
t7VZ3BoHH+1nNGpxoGBJBCATh71CDHZP/5Pt+3IPBRIKpciIihzi7gDNuQi75D4v
TmBwNwPgLRnSaQfvchYI64tfEQp8MT3unvuU1lbVy70xbnl5w6TK8hyr+4EhfDso
J15Dp/Is3NVmAuWXBDCp8FDrggCFkWITZMox6KGlTbbElkPIyT7ADO1IMkDWA5/L
bBFho2tVgP0aOyh0R3aDN0t5SCK/PuAVwhwtwqOglTr/es9QboFbQ1kxXOXIk7yd
Q5wQi7QydHQ4jOSFrX0eMP/h7qhUWdCHcvRReTHtpYtgpGZZbNxGsCRhLXDD9wTQ
NS5cDXy7arb/wQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:00:24 2025 by rpki-client