Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/928593-7a0a-4312-86e2-f82d600dd4e2/1/8J3iYg0i-mnFTL68by9IUFbOL-U.mft
File: 8J3iYg0i-mnFTL68by9IUFbOL-U.mft (raw, json)
Hash identifier: 8CQ+aC3f/Avmtm099p81dyLbubIITRncZvcNppRlXnY=
Subject key identifier: DA:EA:BE:79:CB:F1:5D:CD:F1:E1:E9:87:F6:96:84:F7:68:4F:B8:9D
Authority key identifier: F0:9D:E2:62:0D:22:FA:69:C5:4C:BE:BC:6F:2F:48:50:56:CE:2F:E5
Certificate issuer: /CN=f09de2620d22fa69c54cbebc6f2f485056ce2fe5
Certificate serial: 019A4D3D3E3DA4924E777AFD48156F7739FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8J3iYg0i-mnFTL68by9IUFbOL-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/928593-7a0a-4312-86e2-f82d600dd4e2/1/8J3iYg0i-mnFTL68by9IUFbOL-U.mft
Manifest number: 03CB
Signing time: Tue 04 Nov 2025 05:00:50 +0000
Manifest this update: Tue 04 Nov 2025 05:00:50 +0000
Manifest next update: Wed 05 Nov 2025 05:00:50 +0000
Files and hashes: 1: 8J3iYg0i-mnFTL68by9IUFbOL-U.crl (hash: u10Oqyo4ItSLvFoS5iTtmKKLcZC+7pbUOyicBXUqaJk=)
2: gtqtvDZxxq5MJdwetq5IVth42z0.roa (hash: DsoC8S+ekUdxd5VaMM9eODyiV+OQ6KDTcMckhDvQ+dw=)
3: vlbjkguhua3sXNAb4WL9C-kH7NI.roa (hash: W2Tg0b912XPXpVMo5wmJMbF6s29yN1E6dtpyPDGr82E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/928593-7a0a-4312-86e2-f82d600dd4e2/1/8J3iYg0i-mnFTL68by9IUFbOL-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/928593-7a0a-4312-86e2-f82d600dd4e2/1/8J3iYg0i-mnFTL68by9IUFbOL-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/8J3iYg0i-mnFTL68by9IUFbOL-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3d:3e:3d:a4:92:4e:77:7a:fd:48:15:6f:77:39:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f09de2620d22fa69c54cbebc6f2f485056ce2fe5
Validity
Not Before: Nov 4 05:00:50 2025 GMT
Not After : Nov 5 05:00:50 2025 GMT
Subject: CN=daeabe79cbf15dcdf1e1e987f69684f7684fb89d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:94:03:e0:88:a2:72:c7:f2:18:42:fc:b2:27:
88:2e:f5:52:de:25:80:f2:67:b4:44:8a:e5:c5:1f:
14:c6:c2:93:6a:db:75:ee:05:5f:79:ca:2a:d2:08:
61:5c:dc:e8:90:ca:4f:52:92:ba:33:b7:4b:b7:ce:
ba:bf:fc:30:0b:2c:b0:c4:cb:24:39:66:11:7d:98:
2d:61:2d:77:fc:66:c2:6d:3d:b4:13:f4:b0:b4:97:
0a:2b:2c:6d:94:44:d2:92:90:1a:c9:68:43:55:89:
14:58:fb:1f:4f:ce:d4:cd:5d:2a:0f:17:98:23:0d:
90:c9:21:bb:02:8c:52:99:6d:63:95:c8:c2:c3:00:
20:cd:c4:00:1a:f2:05:f5:02:74:f6:c2:8b:ac:76:
16:18:dd:21:55:2c:25:52:59:c5:5c:77:7d:ef:41:
75:46:50:ce:0e:07:c1:e6:ef:2f:ae:1e:51:f8:f8:
d2:04:f8:86:95:10:50:75:7e:00:af:78:be:31:98:
7a:43:2a:28:8d:48:50:f4:a6:76:b5:ac:7d:d0:02:
73:c0:c2:fb:30:39:87:25:c7:39:63:cb:07:43:46:
a5:7d:96:cf:65:29:b0:47:3c:53:4f:d9:07:2f:d2:
8e:33:da:9d:31:0e:a5:da:a1:3e:d6:b3:ca:e3:ed:
b5:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:EA:BE:79:CB:F1:5D:CD:F1:E1:E9:87:F6:96:84:F7:68:4F:B8:9D
X509v3 Authority Key Identifier:
keyid:F0:9D:E2:62:0D:22:FA:69:C5:4C:BE:BC:6F:2F:48:50:56:CE:2F:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8J3iYg0i-mnFTL68by9IUFbOL-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/928593-7a0a-4312-86e2-f82d600dd4e2/1/8J3iYg0i-mnFTL68by9IUFbOL-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/928593-7a0a-4312-86e2-f82d600dd4e2/1/8J3iYg0i-mnFTL68by9IUFbOL-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:cb:93:b8:ce:e0:79:34:6f:c6:e9:3f:52:e9:bd:c5:df:a1:
85:9e:fb:27:f0:67:da:cc:c6:7f:f0:d7:cf:db:6d:a6:77:ae:
bc:cf:b3:55:1d:01:34:35:29:a7:c5:39:d0:4f:8d:14:a2:e0:
c9:2a:c7:8c:b7:a8:bc:dd:9a:fe:d1:ee:e7:41:18:f2:fa:c8:
dd:72:f8:f6:cc:97:3d:79:bd:ac:5a:95:1a:07:97:ee:f7:bb:
2b:66:00:e9:99:f4:05:b7:cd:e3:7a:0c:e4:c4:22:a3:8c:22:
ff:2c:89:73:2f:be:ab:40:77:02:e3:a4:66:b0:eb:71:9e:c0:
3a:62:87:d8:e9:87:45:31:bc:b4:2c:a6:19:51:c3:51:c0:12:
59:36:dd:a1:dc:9a:f6:b4:7a:d3:e7:e5:14:dd:c9:99:d1:e7:
d5:ac:31:fa:70:98:d5:e0:7b:09:ac:72:f7:53:1f:bf:0a:98:
46:cd:6d:25:88:60:af:92:5f:08:6e:2f:b1:b0:9a:92:95:ba:
f1:67:fc:68:10:a5:32:53:7a:42:53:b1:2a:83:5d:2d:8b:34:
27:17:13:9a:68:d2:71:92:45:a4:c3:b5:34:c0:22:b9:fe:59:
dc:d7:84:51:4d:38:91:b8:37:12:6a:05:f3:c0:06:87:4c:62:
9a:11:33:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNPT49pJJOd3r9SBVvdzn/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwOWRlMjYyMGQyMmZhNjljNTRjYmViYzZmMmY0ODUwNTZj
ZTJmZTUwHhcNMjUxMTA0MDUwMDUwWhcNMjUxMTA1MDUwMDUwWjAzMTEwLwYDVQQD
EyhkYWVhYmU3OWNiZjE1ZGNkZjFlMWU5ODdmNjk2ODRmNzY4NGZiODlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz5QD4IiicsfyGEL8sieILvVS3iWA
8me0RIrlxR8UxsKTatt17gVfecoq0ghhXNzokMpPUpK6M7dLt866v/wwCyywxMsk
OWYRfZgtYS13/GbCbT20E/SwtJcKKyxtlETSkpAayWhDVYkUWPsfT87UzV0qDxeY
Iw2QySG7AoxSmW1jlcjCwwAgzcQAGvIF9QJ09sKLrHYWGN0hVSwlUlnFXHd970F1
RlDODgfB5u8vrh5R+PjSBPiGlRBQdX4Ar3i+MZh6QyoojUhQ9KZ2tax90AJzwML7
MDmHJcc5Y8sHQ0alfZbPZSmwRzxTT9kHL9KOM9qdMQ6l2qE+1rPK4+213QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNrqvnnL8V3N8eHph/aWhPdoT7idMB8GA1UdIwQY
MBaAFPCd4mINIvppxUy+vG8vSFBWzi/lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEozaVlnMGktbW5GVEw2OGJ5OUlVRmJPTC1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS85Mjg1OTMtN2EwYS00MzEyLTg2ZTIt
ZjgyZDYwMGRkNGUyLzEvOEozaVlnMGktbW5GVEw2OGJ5OUlVRmJPTC1VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS85Mjg1OTMtN2EwYS00MzEyLTg2ZTItZjgyZDYwMGRkNGUy
LzEvOEozaVlnMGktbW5GVEw2OGJ5OUlVRmJPTC1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh8uTuM7g
eTRvxuk/Uum9xd+hhZ77J/Bn2szGf/DXz9ttpneuvM+zVR0BNDUpp8U50E+NFKLg
ySrHjLeovN2a/tHu50EY8vrI3XL49syXPXm9rFqVGgeX7ve7K2YA6Zn0BbfN43oM
5MQio4wi/yyJcy++q0B3AuOkZrDrcZ7AOmKH2OmHRTG8tCymGVHDUcASWTbdodya
9rR60+flFN3JmdHn1awx+nCY1eB7Caxy91MfvwqYRs1tJYhgr5JfCG4vsbCakpW6
8Wf8aBClMlN6QlOxKoNdLYs0JxcTmmjScZJFpMO1NMAiuf5Z3NeEUU04kbg3EmoF
88AGh0ximhEzZQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:54:34 2025 by rpki-client