
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/fb92fa-5e4f-402f-9539-a4b961808201/1/j-7pSg47IoCXZK7h4o8Hj61ja8M.mft
File: j-7pSg47IoCXZK7h4o8Hj61ja8M.mft (raw, json)
Hash identifier: 1Jo8EZJXGFA5YYP4GfJ10Uj1fF/OAoXzYion2OEz2FU=
Subject key identifier: 20:05:39:61:84:3A:B8:A9:C8:71:5F:7D:48:49:D7:05:7D:27:0E:36
Authority key identifier: 8F:EE:E9:4A:0E:3B:22:80:97:64:AE:E1:E2:8F:07:8F:AD:63:6B:C3
Certificate issuer: /CN=8feee94a0e3b22809764aee1e28f078fad636bc3
Certificate serial: 019A556434F88D191C45951EE86057A08F64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j-7pSg47IoCXZK7h4o8Hj61ja8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/fb92fa-5e4f-402f-9539-a4b961808201/1/j-7pSg47IoCXZK7h4o8Hj61ja8M.mft
Manifest number: 170F
Signing time: Wed 05 Nov 2025 19:00:21 +0000
Manifest this update: Wed 05 Nov 2025 19:00:21 +0000
Manifest next update: Thu 06 Nov 2025 19:00:21 +0000
Files and hashes: 1: j-7pSg47IoCXZK7h4o8Hj61ja8M.crl (hash: dm8pHNUQRvpK+TWYpvg1TSxJ/Me3TjbCn68l/nmoaM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/fb92fa-5e4f-402f-9539-a4b961808201/1/j-7pSg47IoCXZK7h4o8Hj61ja8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/fb92fa-5e4f-402f-9539-a4b961808201/1/j-7pSg47IoCXZK7h4o8Hj61ja8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/j-7pSg47IoCXZK7h4o8Hj61ja8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:55:64:34:f8:8d:19:1c:45:95:1e:e8:60:57:a0:8f:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8feee94a0e3b22809764aee1e28f078fad636bc3
Validity
Not Before: Nov 5 19:00:21 2025 GMT
Not After : Nov 6 19:00:21 2025 GMT
Subject: CN=20053961843ab8a9c8715f7d4849d7057d270e36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:23:44:d8:d8:28:4b:a9:7c:83:37:fe:9e:19:
f2:2a:23:71:e7:ee:be:bd:9a:98:9f:e1:32:39:ce:
74:ea:d4:aa:ac:fa:b2:a7:41:7e:6e:d7:eb:81:49:
08:c7:52:2d:4f:bf:a9:95:90:a7:99:f2:c2:78:6e:
d2:11:6e:22:af:07:4b:4f:e9:97:0b:39:7d:ee:18:
ab:26:fd:1c:14:4f:7d:aa:f6:36:4a:32:1d:bb:ad:
3b:4e:4a:5d:a0:94:ae:94:d1:c5:7e:18:1f:31:7f:
b0:ce:62:87:f5:3d:bb:84:c8:bb:9b:f9:41:5c:ec:
b7:0f:41:a5:02:bb:1f:35:da:d3:04:4f:2e:1f:75:
83:b5:8d:e3:5a:4a:6d:9b:a2:5e:a8:d2:76:62:f6:
d6:5f:87:2d:db:6b:fe:04:29:89:26:9d:68:92:8e:
d4:0d:77:88:3a:28:ef:30:50:7f:61:82:b7:52:8c:
b3:18:7f:93:fb:4c:bc:32:ff:89:52:61:01:61:c4:
c3:d3:ca:13:6a:1f:6b:d3:35:a1:1d:50:d8:aa:8c:
35:c4:c8:93:18:e8:25:6b:77:51:dc:fe:4e:fd:bb:
64:dd:75:5b:f5:08:64:d2:9e:7d:f8:96:83:1d:04:
3d:ec:f1:c9:b4:83:08:d6:9a:6d:b8:a6:5c:64:7b:
57:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:05:39:61:84:3A:B8:A9:C8:71:5F:7D:48:49:D7:05:7D:27:0E:36
X509v3 Authority Key Identifier:
keyid:8F:EE:E9:4A:0E:3B:22:80:97:64:AE:E1:E2:8F:07:8F:AD:63:6B:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j-7pSg47IoCXZK7h4o8Hj61ja8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fb92fa-5e4f-402f-9539-a4b961808201/1/j-7pSg47IoCXZK7h4o8Hj61ja8M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fb92fa-5e4f-402f-9539-a4b961808201/1/j-7pSg47IoCXZK7h4o8Hj61ja8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:a0:5e:c0:2c:75:f3:00:71:55:ac:0e:80:ae:42:ea:58:bb:
8d:22:33:bd:47:55:a0:0f:e8:a3:64:c3:55:21:bc:a9:8f:52:
e5:d7:93:cc:7f:99:4e:5a:80:7c:0b:d8:17:a5:04:31:fe:b4:
d3:4f:a3:09:f1:c1:d9:db:de:81:df:47:64:ee:d6:07:36:34:
82:ce:6a:21:1c:46:fb:06:3d:5a:b0:0f:c6:64:64:d7:0c:dc:
7c:81:6f:68:67:61:62:77:85:a7:e6:ba:98:a1:3f:1a:b8:09:
d5:e5:23:1f:55:57:81:5a:6a:6d:a5:a3:52:6a:23:d2:c7:3c:
4b:ba:34:e4:ca:95:ba:61:eb:3f:25:60:36:a2:2c:29:a4:7a:
6e:af:b1:05:87:09:bf:82:0b:f1:be:c4:33:ef:b2:55:bc:62:
35:ce:92:28:4c:e5:5a:c5:32:ef:71:d8:5b:48:ba:98:23:02:
bb:46:bf:1a:d0:ae:39:57:33:9e:44:3a:c2:e2:1c:1b:bb:ef:
0a:15:38:59:c8:b9:54:58:a6:ce:92:4d:1d:ed:0e:41:34:e7:
d6:86:70:08:18:bd:77:be:0a:1c:2d:67:3d:26:48:57:58:e2:
57:e1:e1:07:bd:af:44:f9:64:2d:2b:c5:30:b0:ee:99:3a:ae:
fc:43:e9:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpVZDT4jRkcRZUe6GBXoI9kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmZWVlOTRhMGUzYjIyODA5NzY0YWVlMWUyOGYwNzhmYWQ2
MzZiYzMwHhcNMjUxMTA1MTkwMDIxWhcNMjUxMTA2MTkwMDIxWjAzMTEwLwYDVQQD
EygyMDA1Mzk2MTg0M2FiOGE5Yzg3MTVmN2Q0ODQ5ZDcwNTdkMjcwZTM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5SNE2NgoS6l8gzf+nhnyKiNx5+6+
vZqYn+EyOc506tSqrPqyp0F+btfrgUkIx1ItT7+plZCnmfLCeG7SEW4irwdLT+mX
Czl97hirJv0cFE99qvY2SjIdu607TkpdoJSulNHFfhgfMX+wzmKH9T27hMi7m/lB
XOy3D0GlArsfNdrTBE8uH3WDtY3jWkptm6JeqNJ2YvbWX4ct22v+BCmJJp1oko7U
DXeIOijvMFB/YYK3UoyzGH+T+0y8Mv+JUmEBYcTD08oTah9r0zWhHVDYqow1xMiT
GOgla3dR3P5O/btk3XVb9Qhk0p59+JaDHQQ97PHJtIMI1pptuKZcZHtXNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCAFOWGEOripyHFffUhJ1wV9Jw42MB8GA1UdIwQY
MBaAFI/u6UoOOyKAl2Su4eKPB4+tY2vDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvai03cFNnNDdJb0NYWks3aDRvOEhqNjFqYThNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9mYjkyZmEtNWU0Zi00MDJmLTk1Mzkt
YTRiOTYxODA4MjAxLzEvai03cFNnNDdJb0NYWks3aDRvOEhqNjFqYThNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC9mYjkyZmEtNWU0Zi00MDJmLTk1MzktYTRiOTYxODA4MjAx
LzEvai03cFNnNDdJb0NYWks3aDRvOEhqNjFqYThNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoqBewCx1
8wBxVawOgK5C6li7jSIzvUdVoA/oo2TDVSG8qY9S5deTzH+ZTlqAfAvYF6UEMf60
00+jCfHB2dvegd9HZO7WBzY0gs5qIRxG+wY9WrAPxmRk1wzcfIFvaGdhYneFp+a6
mKE/GrgJ1eUjH1VXgVpqbaWjUmoj0sc8S7o05MqVumHrPyVgNqIsKaR6bq+xBYcJ
v4IL8b7EM++yVbxiNc6SKEzlWsUy73HYW0i6mCMCu0a/GtCuOVcznkQ6wuIcG7vv
ChU4Wci5VFimzpJNHe0OQTTn1oZwCBi9d74KHC1nPSZIV1jiV+HhB72vRPlkLSvF
MLDumTqu/EPp6Q==
-----END CERTIFICATE-----
Generated at Wed Nov 5 20:48:05 2025 by rpki-client