Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/789851-57c2-4a58-a06c-3eb1488ce8e1/1/793Ia4IAX_jHwmSi4GcDemCLSB8.mft
File: 793Ia4IAX_jHwmSi4GcDemCLSB8.mft (raw, json)
Hash identifier: zw6ku3ku/oThRfYW43VGrJup1wL466ogpoN0X2J8j7w=
Subject key identifier: 84:44:49:23:04:BF:E0:51:E4:1A:B2:9D:D1:E7:B3:E1:F0:5F:3A:41
Authority key identifier: EF:DD:C8:6B:82:00:5F:F8:C7:C2:64:A2:E0:67:03:7A:60:8B:48:1F
Certificate issuer: /CN=efddc86b82005ff8c7c264a2e067037a608b481f
Certificate serial: 019A50E2D481966E56C47A34F03F68ABEDCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/793Ia4IAX_jHwmSi4GcDemCLSB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/789851-57c2-4a58-a06c-3eb1488ce8e1/1/793Ia4IAX_jHwmSi4GcDemCLSB8.mft
Manifest number: 170A
Signing time: Tue 04 Nov 2025 22:00:33 +0000
Manifest this update: Tue 04 Nov 2025 22:00:33 +0000
Manifest next update: Wed 05 Nov 2025 22:00:33 +0000
Files and hashes: 1: 793Ia4IAX_jHwmSi4GcDemCLSB8.crl (hash: tnaibF0zCknJ+T+nBLeVQoIIR2cHx2fcFsN0BS2055I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/789851-57c2-4a58-a06c-3eb1488ce8e1/1/793Ia4IAX_jHwmSi4GcDemCLSB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/789851-57c2-4a58-a06c-3eb1488ce8e1/1/793Ia4IAX_jHwmSi4GcDemCLSB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/793Ia4IAX_jHwmSi4GcDemCLSB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e2:d4:81:96:6e:56:c4:7a:34:f0:3f:68:ab:ed:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efddc86b82005ff8c7c264a2e067037a608b481f
Validity
Not Before: Nov 4 22:00:33 2025 GMT
Not After : Nov 5 22:00:33 2025 GMT
Subject: CN=8444492304bfe051e41ab29dd1e7b3e1f05f3a41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:fd:73:70:07:ee:c7:10:e0:c7:86:5f:97:94:
76:d7:43:fc:83:32:6c:8a:dc:cc:0c:f7:a1:88:9f:
1d:69:e4:5b:1a:e1:5d:73:f9:80:51:35:e3:4b:98:
61:c3:67:e3:bb:1d:af:ba:0b:1f:a0:8f:39:56:2f:
34:f3:fa:41:5f:d0:16:16:6e:94:7e:4f:eb:d9:5d:
17:ea:e4:f8:61:81:5b:da:68:8d:0c:23:a3:47:65:
97:6e:8d:b5:e9:7f:ce:2c:cb:04:7b:76:b7:25:7c:
ad:9f:35:bf:67:0b:36:c5:f8:e0:01:30:4b:05:8c:
8c:3d:53:33:e4:77:02:64:31:05:a1:cb:1f:dc:e8:
7f:a7:3b:0a:29:f2:8a:53:f3:8f:8a:1e:0c:05:59:
7d:7e:7e:8e:15:50:3f:50:5f:73:01:4e:ba:61:7e:
c7:c9:96:67:19:4a:43:61:6d:b0:79:c8:b7:ae:05:
19:3c:4f:5e:4e:21:1a:10:27:8f:3a:18:0a:cc:84:
7a:63:0b:78:bd:5d:a8:7d:06:82:2b:c0:e5:df:12:
8b:57:b9:43:2c:89:cd:19:99:73:21:34:94:04:7c:
fc:9e:4a:33:64:e9:f6:6d:47:fe:02:50:c2:43:2d:
f6:9a:4c:43:95:4b:45:79:95:28:96:d1:03:86:9e:
8b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:44:49:23:04:BF:E0:51:E4:1A:B2:9D:D1:E7:B3:E1:F0:5F:3A:41
X509v3 Authority Key Identifier:
keyid:EF:DD:C8:6B:82:00:5F:F8:C7:C2:64:A2:E0:67:03:7A:60:8B:48:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/793Ia4IAX_jHwmSi4GcDemCLSB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/789851-57c2-4a58-a06c-3eb1488ce8e1/1/793Ia4IAX_jHwmSi4GcDemCLSB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/789851-57c2-4a58-a06c-3eb1488ce8e1/1/793Ia4IAX_jHwmSi4GcDemCLSB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:74:e2:ba:01:81:26:3b:34:57:27:f9:5b:ac:15:28:3f:d7:
4e:bd:85:d3:7d:99:ec:b1:d5:a0:ee:5f:10:46:5e:52:94:23:
ec:00:51:11:4f:a1:11:87:e9:11:19:bc:d1:05:09:90:7f:69:
73:c3:c2:7f:1f:ba:46:3c:e3:d4:21:b3:ff:73:5d:0f:3e:0f:
8b:2d:75:6a:9b:5a:6e:b7:fe:b7:71:35:03:12:b1:a3:3f:e9:
1e:0f:ce:8d:c8:88:0e:c3:1c:47:ea:35:6d:a4:69:da:9e:40:
57:2f:24:03:02:2a:58:4f:ed:3d:4d:d0:2a:9a:ff:8a:4d:04:
9d:5c:9b:31:72:62:cf:42:51:2b:44:a6:2d:b5:e8:8e:31:e8:
4e:a3:0c:5c:27:04:f1:cd:51:d5:ce:f0:04:6c:14:d5:a9:02:
32:55:95:29:55:bd:96:64:a9:17:06:00:35:ed:2c:e8:8f:06:
ed:d0:0c:96:e6:89:cf:2c:9f:d8:eb:80:43:9c:dd:7c:01:eb:
7d:30:64:c4:c7:41:3d:84:e3:c4:10:b1:0a:fa:cb:e5:b0:41:
8c:3a:43:7e:73:99:5a:66:3d:52:be:18:fc:8c:5b:1f:58:d1:
a4:e9:fe:8d:b0:c4:08:05:a2:25:8a:56:1a:13:d5:d7:0c:5a:
ef:80:01:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQ4tSBlm5WxHo08D9oq+3KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmZGRjODZiODIwMDVmZjhjN2MyNjRhMmUwNjcwMzdhNjA4
YjQ4MWYwHhcNMjUxMTA0MjIwMDMzWhcNMjUxMTA1MjIwMDMzWjAzMTEwLwYDVQQD
Eyg4NDQ0NDkyMzA0YmZlMDUxZTQxYWIyOWRkMWU3YjNlMWYwNWYzYTQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkv1zcAfuxxDgx4Zfl5R210P8gzJs
itzMDPehiJ8daeRbGuFdc/mAUTXjS5hhw2fjux2vugsfoI85Vi808/pBX9AWFm6U
fk/r2V0X6uT4YYFb2miNDCOjR2WXbo216X/OLMsEe3a3JXytnzW/Zws2xfjgATBL
BYyMPVMz5HcCZDEFocsf3Oh/pzsKKfKKU/OPih4MBVl9fn6OFVA/UF9zAU66YX7H
yZZnGUpDYW2weci3rgUZPE9eTiEaECePOhgKzIR6Ywt4vV2ofQaCK8Dl3xKLV7lD
LInNGZlzITSUBHz8nkozZOn2bUf+AlDCQy32mkxDlUtFeZUoltEDhp6LiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIRESSMEv+BR5BqyndHns+HwXzpBMB8GA1UdIwQY
MBaAFO/dyGuCAF/4x8JkouBnA3pgi0gfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzkzSWE0SUFYX2pId21TaTRHY0RlbUNMU0I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS83ODk4NTEtNTdjMi00YTU4LWEwNmMt
M2ViMTQ4OGNlOGUxLzEvNzkzSWE0SUFYX2pId21TaTRHY0RlbUNMU0I4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS83ODk4NTEtNTdjMi00YTU4LWEwNmMtM2ViMTQ4OGNlOGUx
LzEvNzkzSWE0SUFYX2pId21TaTRHY0RlbUNMU0I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe3TiugGB
Jjs0Vyf5W6wVKD/XTr2F032Z7LHVoO5fEEZeUpQj7ABREU+hEYfpERm80QUJkH9p
c8PCfx+6Rjzj1CGz/3NdDz4Piy11aptabrf+t3E1AxKxoz/pHg/OjciIDsMcR+o1
baRp2p5AVy8kAwIqWE/tPU3QKpr/ik0EnVybMXJiz0JRK0SmLbXojjHoTqMMXCcE
8c1R1c7wBGwU1akCMlWVKVW9lmSpFwYANe0s6I8G7dAMluaJzyyf2OuAQ5zdfAHr
fTBkxMdBPYTjxBCxCvrL5bBBjDpDfnOZWmY9Ur4Y/IxbH1jRpOn+jbDECAWiJYpW
GhPV1wxa74ABFw==
-----END CERTIFICATE-----
Generated at Wed Nov 5 01:54:52 2025 by rpki-client