Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/1fffbb-ff24-4fab-a763-50adbeac8cb4/1/00J0yPw5e9vGx1haFcgyErBQIh8.mft
File: 00J0yPw5e9vGx1haFcgyErBQIh8.mft (raw, json)
Hash identifier: HTO9Fdhk61iOjO+L9gC55VzJi/366ClKAzbXjk4ohZM=
Subject key identifier: 8C:9A:04:25:DA:CE:91:52:A4:F2:B4:59:35:DA:41:A2:E4:A6:1C:EB
Authority key identifier: D3:42:74:C8:FC:39:7B:DB:C6:C7:58:5A:15:C8:32:12:B0:50:22:1F
Certificate issuer: /CN=d34274c8fc397bdbc6c7585a15c83212b050221f
Certificate serial: 019A5074CC31A567ED4BE19F36AB42A5B659
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/00J0yPw5e9vGx1haFcgyErBQIh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/1fffbb-ff24-4fab-a763-50adbeac8cb4/1/00J0yPw5e9vGx1haFcgyErBQIh8.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 20:00:22 +0000
Manifest this update: Tue 04 Nov 2025 20:00:22 +0000
Manifest next update: Wed 05 Nov 2025 20:00:22 +0000
Files and hashes: 1: 00J0yPw5e9vGx1haFcgyErBQIh8.crl (hash: MPD6fn+0KbzX2SVcH37nPOOSb6Cbb4DrYgw/WMZ2meI=)
2: JfpCcJQQ7HN-Dv4ophHtkQofaT0.roa (hash: xefZz0TBx0gKqWeUjL3ez873hj1QBBW9YJlq5BqFZZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/1fffbb-ff24-4fab-a763-50adbeac8cb4/1/00J0yPw5e9vGx1haFcgyErBQIh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/1fffbb-ff24-4fab-a763-50adbeac8cb4/1/00J0yPw5e9vGx1haFcgyErBQIh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/00J0yPw5e9vGx1haFcgyErBQIh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:74:cc:31:a5:67:ed:4b:e1:9f:36:ab:42:a5:b6:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d34274c8fc397bdbc6c7585a15c83212b050221f
Validity
Not Before: Nov 4 20:00:22 2025 GMT
Not After : Nov 5 20:00:22 2025 GMT
Subject: CN=8c9a0425dace9152a4f2b45935da41a2e4a61ceb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ae:9a:bf:11:1c:b7:29:18:87:4d:60:72:6b:
db:55:3d:97:0c:e8:c6:03:e7:ca:41:09:be:59:1d:
01:2f:06:ea:a1:ea:10:2e:61:a7:b5:5a:81:88:ee:
65:33:21:89:58:f0:ee:5d:c4:ec:05:26:0f:e0:de:
f2:e3:37:46:2d:3d:dc:b4:2b:e6:78:44:cb:63:8b:
ce:26:47:9a:d6:ad:1a:d2:01:8d:2e:20:e5:70:3f:
bf:c1:40:dd:80:90:00:30:53:8d:45:11:4e:d5:38:
0d:bc:58:7f:99:9e:1c:07:33:a8:b7:84:4c:f9:46:
1b:13:fb:12:dd:0f:ae:bd:b8:d9:4d:b7:56:08:3b:
c8:81:4a:c3:25:4e:d8:db:85:e4:94:ad:ba:ae:30:
4b:2c:aa:10:6e:a5:b7:84:01:f8:9b:4c:ae:37:59:
29:2a:55:9a:ae:c5:3c:f9:44:ea:03:e7:d9:de:86:
14:48:34:32:0f:17:a5:ad:73:c2:98:87:49:7c:33:
d5:d3:33:e5:94:99:c5:f9:5c:3b:f6:7a:5a:22:bb:
0f:88:97:a9:fc:fb:ce:24:17:74:54:32:dc:39:4a:
9a:75:ab:d1:0b:63:46:fc:94:ea:ad:f4:38:77:1d:
56:98:26:6d:1a:b0:ca:0d:f8:19:a6:e7:4a:36:78:
12:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:9A:04:25:DA:CE:91:52:A4:F2:B4:59:35:DA:41:A2:E4:A6:1C:EB
X509v3 Authority Key Identifier:
keyid:D3:42:74:C8:FC:39:7B:DB:C6:C7:58:5A:15:C8:32:12:B0:50:22:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00J0yPw5e9vGx1haFcgyErBQIh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/1fffbb-ff24-4fab-a763-50adbeac8cb4/1/00J0yPw5e9vGx1haFcgyErBQIh8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/1fffbb-ff24-4fab-a763-50adbeac8cb4/1/00J0yPw5e9vGx1haFcgyErBQIh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:3c:6e:d8:cc:bc:46:ed:56:eb:51:79:63:06:4b:56:ce:a5:
e5:b2:6c:e3:a4:b8:47:8c:09:0b:85:59:41:6b:ae:e5:48:84:
1f:12:20:ed:95:b3:3c:17:b4:09:88:bf:29:68:68:28:36:47:
c7:77:2b:4a:d5:dc:29:47:1d:42:02:10:c2:8f:ab:ed:a6:83:
d1:4c:cd:c6:b5:a5:38:cd:53:d2:af:e0:95:11:58:bd:f2:40:
4f:2a:70:44:7d:c8:34:2a:64:db:aa:fe:44:a4:52:8e:a1:4f:
6b:43:ea:b6:49:a3:2f:60:92:21:f0:5e:57:96:8c:e8:59:3f:
3e:4a:3a:c0:78:54:8a:a7:5f:64:e1:f3:36:a8:38:17:a5:40:
b8:8c:3a:1b:f9:dd:31:e6:99:20:b8:c7:da:4b:23:39:3d:63:
cd:b8:8c:25:72:3c:69:dc:01:dc:1f:2c:82:fd:c6:f7:a6:32:
49:26:47:3d:2f:9c:78:31:0e:49:0f:26:ae:6b:ce:4e:82:52:
04:18:dd:d6:a8:b6:48:e6:b3:09:c1:b1:bc:5b:a4:68:0f:55:
c1:0b:ee:2e:d1:b7:35:17:22:65:a3:49:64:96:70:89:54:81:
1c:4c:fa:67:0e:f6:b5:e1:e8:53:88:aa:1c:42:58:f8:c4:39:
d1:2b:f0:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQdMwxpWftS+GfNqtCpbZZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzNDI3NGM4ZmMzOTdiZGJjNmM3NTg1YTE1YzgzMjEyYjA1
MDIyMWYwHhcNMjUxMTA0MjAwMDIyWhcNMjUxMTA1MjAwMDIyWjAzMTEwLwYDVQQD
Eyg4YzlhMDQyNWRhY2U5MTUyYTRmMmI0NTkzNWRhNDFhMmU0YTYxY2ViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA166avxEctykYh01gcmvbVT2XDOjG
A+fKQQm+WR0BLwbqoeoQLmGntVqBiO5lMyGJWPDuXcTsBSYP4N7y4zdGLT3ctCvm
eETLY4vOJkea1q0a0gGNLiDlcD+/wUDdgJAAMFONRRFO1TgNvFh/mZ4cBzOot4RM
+UYbE/sS3Q+uvbjZTbdWCDvIgUrDJU7Y24XklK26rjBLLKoQbqW3hAH4m0yuN1kp
KlWarsU8+UTqA+fZ3oYUSDQyDxelrXPCmIdJfDPV0zPllJnF+Vw79npaIrsPiJep
/PvOJBd0VDLcOUqadavRC2NG/JTqrfQ4dx1WmCZtGrDKDfgZpudKNngS1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIyaBCXazpFSpPK0WTXaQaLkphzrMB8GA1UdIwQY
MBaAFNNCdMj8OXvbxsdYWhXIMhKwUCIfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDBKMHlQdzVlOXZHeDFoYUZjZ3lFckJRSWg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC8xZmZmYmItZmYyNC00ZmFiLWE3NjMt
NTBhZGJlYWM4Y2I0LzEvMDBKMHlQdzVlOXZHeDFoYUZjZ3lFckJRSWg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC8xZmZmYmItZmYyNC00ZmFiLWE3NjMtNTBhZGJlYWM4Y2I0
LzEvMDBKMHlQdzVlOXZHeDFoYUZjZ3lFckJRSWg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlDxu2My8
Ru1W61F5YwZLVs6l5bJs46S4R4wJC4VZQWuu5UiEHxIg7ZWzPBe0CYi/KWhoKDZH
x3crStXcKUcdQgIQwo+r7aaD0UzNxrWlOM1T0q/glRFYvfJATypwRH3INCpk26r+
RKRSjqFPa0PqtkmjL2CSIfBeV5aM6Fk/Pko6wHhUiqdfZOHzNqg4F6VAuIw6G/nd
MeaZILjH2ksjOT1jzbiMJXI8adwB3B8sgv3G96YySSZHPS+ceDEOSQ8mrmvOToJS
BBjd1qi2SOazCcGxvFukaA9VwQvuLtG3NRciZaNJZJZwiVSBHEz6Zw72teHoU4iq
HEJY+MQ50SvwHQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 00:16:42 2025 by rpki-client