Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/deb648-f433-43f1-9c83-d0edec9728e5/1/j6L4iSbgvYQBxzztt36ZyU3MUtc.mft
File: j6L4iSbgvYQBxzztt36ZyU3MUtc.mft (raw, json)
Hash identifier: emgYyrK/bZ3OO96qj3Gqv/ChBJakMY6qHw9EPZP24ss=
Subject key identifier: 8F:0E:B5:49:8D:03:5D:86:56:06:2C:E3:51:42:C7:88:C8:B0:A5:67
Authority key identifier: 8F:A2:F8:89:26:E0:BD:84:01:C7:3C:ED:B7:7E:99:C9:4D:CC:52:D7
Certificate issuer: /CN=8fa2f88926e0bd8401c73cedb77e99c94dcc52d7
Certificate serial: 019A4E187FB9A90AC24F6E31D5C5FF34E2B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j6L4iSbgvYQBxzztt36ZyU3MUtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/deb648-f433-43f1-9c83-d0edec9728e5/1/j6L4iSbgvYQBxzztt36ZyU3MUtc.mft
Manifest number: 1568
Signing time: Tue 04 Nov 2025 09:00:19 +0000
Manifest this update: Tue 04 Nov 2025 09:00:19 +0000
Manifest next update: Wed 05 Nov 2025 09:00:19 +0000
Files and hashes: 1: hqd990q1gLSW7SBs-f4MtsS4OUs.roa (hash: Cj5NNPUEfRQP2HpFQ4Vq0r88rz0ljjQnf6HR7Q/0ozE=)
2: j6L4iSbgvYQBxzztt36ZyU3MUtc.crl (hash: Yx/s+CgXqxF+Q0xQmvOgjg2qEx79UyDJ3yevTCSIASE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/deb648-f433-43f1-9c83-d0edec9728e5/1/j6L4iSbgvYQBxzztt36ZyU3MUtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/deb648-f433-43f1-9c83-d0edec9728e5/1/j6L4iSbgvYQBxzztt36ZyU3MUtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/j6L4iSbgvYQBxzztt36ZyU3MUtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:7f:b9:a9:0a:c2:4f:6e:31:d5:c5:ff:34:e2:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fa2f88926e0bd8401c73cedb77e99c94dcc52d7
Validity
Not Before: Nov 4 09:00:19 2025 GMT
Not After : Nov 5 09:00:19 2025 GMT
Subject: CN=8f0eb5498d035d8656062ce35142c788c8b0a567
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:d9:14:84:87:44:fd:ef:76:08:a8:02:60:61:
62:7e:d6:af:5e:dc:8e:25:06:cd:43:3f:22:07:53:
01:a2:62:c3:65:86:87:ed:f2:bb:c2:1f:0f:37:fe:
8c:96:bf:28:a3:7b:4d:a2:18:3d:a0:e7:b9:5d:d7:
06:59:54:62:6e:43:99:37:e1:55:84:89:cd:bd:ed:
f6:d4:0a:8a:33:19:ab:c4:86:5d:dd:6b:e1:88:a8:
1c:14:ec:c7:34:76:cd:92:8b:41:37:0a:4a:53:fe:
51:b7:3e:30:88:50:14:2f:37:0d:14:8a:ea:12:d0:
80:40:82:f7:be:06:a5:ce:76:30:28:4d:c4:be:62:
22:01:11:e0:29:7c:14:b0:db:80:30:3e:8a:db:07:
38:b6:40:87:06:fb:4a:f0:88:1f:5e:c5:fd:c2:48:
84:72:5b:73:85:b5:e6:4c:83:c5:bf:e5:ac:c0:73:
c9:08:84:74:cd:ba:eb:4d:8f:bf:69:22:d9:7e:79:
d4:f2:3e:23:39:14:96:1e:b9:e3:83:bd:b5:03:d6:
10:cd:6a:08:89:44:f3:df:6b:ce:3b:5e:03:63:ce:
64:2d:97:d1:57:7f:85:b7:4a:f2:ae:57:62:9b:66:
f9:1f:eb:63:37:be:99:19:05:28:34:05:46:4e:ba:
d1:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:0E:B5:49:8D:03:5D:86:56:06:2C:E3:51:42:C7:88:C8:B0:A5:67
X509v3 Authority Key Identifier:
keyid:8F:A2:F8:89:26:E0:BD:84:01:C7:3C:ED:B7:7E:99:C9:4D:CC:52:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j6L4iSbgvYQBxzztt36ZyU3MUtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/deb648-f433-43f1-9c83-d0edec9728e5/1/j6L4iSbgvYQBxzztt36ZyU3MUtc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/deb648-f433-43f1-9c83-d0edec9728e5/1/j6L4iSbgvYQBxzztt36ZyU3MUtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:8d:5d:30:79:d5:84:0e:9d:a1:55:01:46:c2:22:f1:6e:57:
ba:3b:2c:e6:fc:a7:68:f3:2b:de:c3:b6:06:3f:d6:4b:64:2f:
05:24:aa:9f:fc:c3:ff:4b:4c:1a:b4:b9:67:d8:23:cf:00:5d:
8f:f6:a1:d5:86:5b:6c:b4:59:5d:f5:18:f6:d8:fa:38:09:04:
33:13:c0:cd:27:e3:f5:7c:c6:f6:12:3f:4a:ef:7c:8c:30:47:
ea:6f:77:21:3b:6f:52:33:c8:e4:c3:58:cc:f9:60:10:16:73:
d1:02:0f:54:42:83:d6:5d:10:a2:11:89:5f:93:52:05:22:95:
70:ac:4f:f4:31:9f:21:f5:60:8a:5a:05:ba:cb:a3:8c:9e:5f:
b7:ba:70:ef:ed:c4:e9:9e:67:32:4b:1e:5d:8c:0e:46:8f:cc:
f8:6b:a0:a3:28:a1:1e:5f:e6:21:26:18:44:85:ff:36:e5:22:
ca:d2:42:12:40:30:10:eb:d3:2e:70:db:ae:fc:15:73:64:30:
84:bc:db:25:f7:88:64:55:20:ad:a9:48:52:8e:f6:1c:17:b9:
c5:ff:a0:44:fc:6a:7d:e8:76:f8:f5:d2:fc:b8:48:a9:54:8f:
b1:bc:6d:49:f8:06:3c:f3:4f:3c:8f:6d:fc:6c:4e:93:41:22:
a5:19:27:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOGH+5qQrCT24x1cX/NOK2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmYTJmODg5MjZlMGJkODQwMWM3M2NlZGI3N2U5OWM5NGRj
YzUyZDcwHhcNMjUxMTA0MDkwMDE5WhcNMjUxMTA1MDkwMDE5WjAzMTEwLwYDVQQD
Eyg4ZjBlYjU0OThkMDM1ZDg2NTYwNjJjZTM1MTQyYzc4OGM4YjBhNTY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1dkUhIdE/e92CKgCYGFiftavXtyO
JQbNQz8iB1MBomLDZYaH7fK7wh8PN/6Mlr8oo3tNohg9oOe5XdcGWVRibkOZN+FV
hInNve321AqKMxmrxIZd3WvhiKgcFOzHNHbNkotBNwpKU/5Rtz4wiFAULzcNFIrq
EtCAQIL3vgalznYwKE3EvmIiARHgKXwUsNuAMD6K2wc4tkCHBvtK8IgfXsX9wkiE
cltzhbXmTIPFv+WswHPJCIR0zbrrTY+/aSLZfnnU8j4jORSWHrnjg721A9YQzWoI
iUTz32vOO14DY85kLZfRV3+Ft0ryrldim2b5H+tjN76ZGQUoNAVGTrrRJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI8OtUmNA12GVgYs41FCx4jIsKVnMB8GA1UdIwQY
MBaAFI+i+Ikm4L2EAcc87bd+mclNzFLXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvajZMNGlTYmd2WVFCeHp6dHQzNlp5VTNNVXRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9kZWI2NDgtZjQzMy00M2YxLTljODMt
ZDBlZGVjOTcyOGU1LzEvajZMNGlTYmd2WVFCeHp6dHQzNlp5VTNNVXRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC9kZWI2NDgtZjQzMy00M2YxLTljODMtZDBlZGVjOTcyOGU1
LzEvajZMNGlTYmd2WVFCeHp6dHQzNlp5VTNNVXRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwY1dMHnV
hA6doVUBRsIi8W5Xujss5vynaPMr3sO2Bj/WS2QvBSSqn/zD/0tMGrS5Z9gjzwBd
j/ah1YZbbLRZXfUY9tj6OAkEMxPAzSfj9XzG9hI/Su98jDBH6m93ITtvUjPI5MNY
zPlgEBZz0QIPVEKD1l0QohGJX5NSBSKVcKxP9DGfIfVgiloFusujjJ5ft7pw7+3E
6Z5nMkseXYwORo/M+GugoyihHl/mISYYRIX/NuUiytJCEkAwEOvTLnDbrvwVc2Qw
hLzbJfeIZFUgralIUo72HBe5xf+gRPxqfeh2+PXS/LhIqVSPsbxtSfgGPPNPPI9t
/GxOk0EipRknRg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:52:43 2025 by rpki-client