Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/da3b1d-7acf-451f-b68b-99bcbe6d7f63/1/8yvpggYKQ3NNCtEmrUbaLzlcne8.mft
File: 8yvpggYKQ3NNCtEmrUbaLzlcne8.mft (raw, json)
Hash identifier: lmp08suKOEF1gd6FlcKoqmIWJ5JnsS370BMyF1erBlA=
Subject key identifier: F1:A6:B1:F9:EB:8A:E9:FB:F8:E6:71:34:69:56:4D:34:6A:DD:5A:A5
Authority key identifier: F3:2B:E9:82:06:0A:43:73:4D:0A:D1:26:AD:46:DA:2F:39:5C:9D:EF
Certificate issuer: /CN=f32be982060a43734d0ad126ad46da2f395c9def
Certificate serial: 019A4FCFE64CCFC6D1386F0193CEBEA6BDBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yvpggYKQ3NNCtEmrUbaLzlcne8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/da3b1d-7acf-451f-b68b-99bcbe6d7f63/1/8yvpggYKQ3NNCtEmrUbaLzlcne8.mft
Manifest number: 1714
Signing time: Tue 04 Nov 2025 17:00:15 +0000
Manifest this update: Tue 04 Nov 2025 17:00:15 +0000
Manifest next update: Wed 05 Nov 2025 17:00:15 +0000
Files and hashes: 1: 8yvpggYKQ3NNCtEmrUbaLzlcne8.crl (hash: cpYL/tLGFxrI/k0/GSo7ak0TiGT7U3o/UZz2LZy6Wwc=)
2: _ez--C0KRSwSRmH4lyGu5zUk1HU.roa (hash: KFrEJZmjOcmfSBpY7GDcoqxz0mSObldiNHL67FlKf8w=)
3: bHl4gP55LgKhhE_L1xho4xppPEo.roa (hash: rqcbN4+Al2DH9m3ppJi1E488vxtH8t3M86sJsdVuXgY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/da3b1d-7acf-451f-b68b-99bcbe6d7f63/1/8yvpggYKQ3NNCtEmrUbaLzlcne8.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/da3b1d-7acf-451f-b68b-99bcbe6d7f63/1/8yvpggYKQ3NNCtEmrUbaLzlcne8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8yvpggYKQ3NNCtEmrUbaLzlcne8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:cf:e6:4c:cf:c6:d1:38:6f:01:93:ce:be:a6:bd:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f32be982060a43734d0ad126ad46da2f395c9def
Validity
Not Before: Nov 4 17:00:15 2025 GMT
Not After : Nov 5 17:00:15 2025 GMT
Subject: CN=f1a6b1f9eb8ae9fbf8e6713469564d346add5aa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6f:bd:77:f7:72:6a:0c:56:23:b1:05:98:69:
05:93:3d:17:9b:f5:55:d6:ea:08:d6:b7:58:04:da:
4a:95:c0:01:b9:89:0f:65:44:a3:a2:53:57:96:f1:
5a:f2:63:a7:eb:8c:a2:62:2f:49:ac:36:81:7f:43:
01:80:cb:fd:0a:de:0b:ce:3a:00:5b:46:6d:d8:6e:
04:97:28:94:e9:00:b2:3a:67:7a:9f:94:85:83:bc:
4d:c8:6d:24:67:b3:9e:f4:67:b1:5d:cb:11:c0:bf:
31:04:76:a1:1e:39:d5:4a:5c:9c:c3:56:78:61:4c:
bd:2c:58:7d:ac:0c:70:e9:68:cd:de:7d:6e:4a:d8:
3b:d3:5b:58:02:3b:9d:ed:d4:c7:44:9a:60:8d:6d:
82:6a:c7:e7:72:42:e8:22:4e:7a:54:05:69:6a:44:
07:c2:0c:5d:36:3c:e1:7b:d1:29:8a:4c:7d:f1:ac:
f4:60:23:b5:d9:65:8a:46:ee:b1:9d:81:dd:4a:46:
47:6c:23:39:cf:02:f7:ca:17:e1:46:e1:63:05:ef:
fc:54:c0:65:ad:75:89:7d:f5:16:52:5e:88:bb:12:
93:b4:8a:11:c7:36:4d:81:89:a9:48:79:04:a1:0b:
0b:e9:b0:95:9f:75:15:19:c6:61:b8:c5:2a:95:41:
d4:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:A6:B1:F9:EB:8A:E9:FB:F8:E6:71:34:69:56:4D:34:6A:DD:5A:A5
X509v3 Authority Key Identifier:
keyid:F3:2B:E9:82:06:0A:43:73:4D:0A:D1:26:AD:46:DA:2F:39:5C:9D:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yvpggYKQ3NNCtEmrUbaLzlcne8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/da3b1d-7acf-451f-b68b-99bcbe6d7f63/1/8yvpggYKQ3NNCtEmrUbaLzlcne8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/da3b1d-7acf-451f-b68b-99bcbe6d7f63/1/8yvpggYKQ3NNCtEmrUbaLzlcne8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:35:bb:17:af:60:85:4e:15:c0:e9:a3:04:93:77:31:f3:2c:
2c:62:37:bf:48:e9:c9:73:b2:65:8f:13:4c:28:d2:77:9e:10:
62:95:f4:71:b9:0e:16:db:5b:0a:31:fb:de:33:dd:2c:90:6e:
f0:e7:ac:78:06:56:e7:01:ad:fc:e6:55:be:ba:90:88:75:2b:
89:61:71:27:c7:10:e8:d1:0f:c6:f1:25:7b:f6:29:94:b9:5c:
1b:bb:ad:53:3c:da:be:bb:c5:a9:b2:70:17:31:c9:0e:ba:82:
18:bd:5c:17:0b:4a:62:f5:a3:a1:e5:d7:f3:4d:be:8f:8b:7d:
06:77:be:9b:7b:97:31:16:ba:57:2a:01:21:1a:63:42:19:c1:
39:28:9a:9e:b6:78:e2:42:04:70:9c:9c:a8:f3:24:2e:8c:3a:
69:06:aa:33:84:68:b9:f2:b5:d4:83:a7:02:1f:6f:b8:c1:27:
cf:a5:34:62:52:db:f1:8b:9f:fa:4e:b8:fd:11:f9:02:6a:2b:
f4:37:7f:07:d1:9f:68:ed:ed:9b:df:73:ca:23:ec:63:27:32:
2b:8d:a9:68:97:ca:20:6c:0f:00:af:55:2c:9f:29:76:3d:3e:
b1:8c:fc:43:7c:64:3c:ca:73:d5:b9:d0:d8:35:ca:8b:f0:20:
c9:13:e2:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPz+ZMz8bROG8Bk86+pr27MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzMmJlOTgyMDYwYTQzNzM0ZDBhZDEyNmFkNDZkYTJmMzk1
YzlkZWYwHhcNMjUxMTA0MTcwMDE1WhcNMjUxMTA1MTcwMDE1WjAzMTEwLwYDVQQD
EyhmMWE2YjFmOWViOGFlOWZiZjhlNjcxMzQ2OTU2NGQzNDZhZGQ1YWE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAum+9d/dyagxWI7EFmGkFkz0Xm/VV
1uoI1rdYBNpKlcABuYkPZUSjolNXlvFa8mOn64yiYi9JrDaBf0MBgMv9Ct4LzjoA
W0Zt2G4ElyiU6QCyOmd6n5SFg7xNyG0kZ7Oe9GexXcsRwL8xBHahHjnVSlycw1Z4
YUy9LFh9rAxw6WjN3n1uStg701tYAjud7dTHRJpgjW2CasfnckLoIk56VAVpakQH
wgxdNjzhe9Epikx98az0YCO12WWKRu6xnYHdSkZHbCM5zwL3yhfhRuFjBe/8VMBl
rXWJffUWUl6IuxKTtIoRxzZNgYmpSHkEoQsL6bCVn3UVGcZhuMUqlUHUdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPGmsfnriun7+OZxNGlWTTRq3VqlMB8GA1UdIwQY
MBaAFPMr6YIGCkNzTQrRJq1G2i85XJ3vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHl2cGdnWUtRM05OQ3RFbXJVYmFMemxjbmU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9kYTNiMWQtN2FjZi00NTFmLWI2OGIt
OTliY2JlNmQ3ZjYzLzEvOHl2cGdnWUtRM05OQ3RFbXJVYmFMemxjbmU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC9kYTNiMWQtN2FjZi00NTFmLWI2OGItOTliY2JlNmQ3ZjYz
LzEvOHl2cGdnWUtRM05OQ3RFbXJVYmFMemxjbmU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOjW7F69g
hU4VwOmjBJN3MfMsLGI3v0jpyXOyZY8TTCjSd54QYpX0cbkOFttbCjH73jPdLJBu
8OeseAZW5wGt/OZVvrqQiHUriWFxJ8cQ6NEPxvEle/YplLlcG7utUzzavrvFqbJw
FzHJDrqCGL1cFwtKYvWjoeXX802+j4t9Bne+m3uXMRa6VyoBIRpjQhnBOSianrZ4
4kIEcJycqPMkLow6aQaqM4RoufK11IOnAh9vuMEnz6U0YlLb8Yuf+k64/RH5Amor
9Dd/B9GfaO3tm99zyiPsYycyK42paJfKIGwPAK9VLJ8pdj0+sYz8Q3xkPMpz1bnQ
2DXKi/AgyRPi2A==
-----END CERTIFICATE-----
Generated at Tue Nov 4 20:22:42 2025 by rpki-client