Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/44ee8d-2ae8-4844-a935-d24c2ce23ab7/1/j8HWvjunicXa61l6E13l7Myrj5U.mft
File: j8HWvjunicXa61l6E13l7Myrj5U.mft (raw, json)
Hash identifier: RQv7JgiTB8toLXHjLuIwxXl6Xzr+GiydbhknvfUzOuY=
Subject key identifier: 95:AA:D5:75:9D:D6:68:33:AA:F0:9C:04:8F:86:D4:35:E4:9D:CE:63
Authority key identifier: 8F:C1:D6:BE:3B:A7:89:C5:DA:EB:59:7A:13:5D:E5:EC:CC:AB:8F:95
Certificate issuer: /CN=8fc1d6be3ba789c5daeb597a135de5ecccab8f95
Certificate serial: 019A4DAA7FD3522AD010987FA6FF400E59ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j8HWvjunicXa61l6E13l7Myrj5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/44ee8d-2ae8-4844-a935-d24c2ce23ab7/1/j8HWvjunicXa61l6E13l7Myrj5U.mft
Manifest number: 15FC
Signing time: Tue 04 Nov 2025 07:00:10 +0000
Manifest this update: Tue 04 Nov 2025 07:00:10 +0000
Manifest next update: Wed 05 Nov 2025 07:00:10 +0000
Files and hashes: 1: j8HWvjunicXa61l6E13l7Myrj5U.crl (hash: +fcRiulpSZB/jIPS+swn/yBrwV2X7YNG3Y9lkYRep2M=)
2: ns9Iu925uNPqm9SyfjZghoXo_D0.roa (hash: 5KxIGOmUfDj5TmcmXox7HeyHg9DfY+4gQjDvtCkMxCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/44ee8d-2ae8-4844-a935-d24c2ce23ab7/1/j8HWvjunicXa61l6E13l7Myrj5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/44ee8d-2ae8-4844-a935-d24c2ce23ab7/1/j8HWvjunicXa61l6E13l7Myrj5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/j8HWvjunicXa61l6E13l7Myrj5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:7f:d3:52:2a:d0:10:98:7f:a6:ff:40:0e:59:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fc1d6be3ba789c5daeb597a135de5ecccab8f95
Validity
Not Before: Nov 4 07:00:10 2025 GMT
Not After : Nov 5 07:00:10 2025 GMT
Subject: CN=95aad5759dd66833aaf09c048f86d435e49dce63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:05:92:63:95:75:01:6d:5a:06:97:71:d4:cb:
38:69:90:cc:0a:73:5e:b0:3c:3c:1c:2c:21:b2:42:
33:1c:d4:64:ef:67:a0:fb:6b:d8:3f:24:f8:ec:e8:
20:d9:f5:d4:73:7a:00:59:c3:b2:76:e3:be:11:0e:
5d:e2:0b:51:a1:c0:1f:c7:1d:01:37:8f:06:ab:e8:
34:3f:69:46:70:5e:c6:87:02:c6:81:48:b4:06:1b:
d7:00:44:b8:e1:dc:d9:d5:94:1e:49:5b:c1:45:c1:
9f:2c:0c:84:3d:31:1a:24:da:18:7d:f3:72:a5:ec:
4e:6a:83:ff:57:db:84:22:06:f5:b1:0e:54:55:d7:
37:27:ab:e5:fc:64:a2:95:36:ad:7a:ef:a3:b1:40:
c2:14:ca:ae:60:e4:cc:02:df:b1:97:83:67:b3:fc:
16:b2:93:c5:21:c5:06:3a:06:14:f4:8a:1b:bc:64:
29:f7:e8:0c:3e:7d:91:f1:f8:f7:ad:ce:f4:d7:a4:
ff:14:0a:7c:bd:8e:25:0c:7c:3c:2b:09:cd:2c:28:
c4:84:3f:02:98:9d:f3:1e:67:2a:cd:7b:2f:d2:e0:
b4:da:6c:f9:d5:2a:96:8c:0d:43:2c:2a:7e:f6:3c:
7e:ad:c5:d3:a0:5b:79:ff:37:15:51:ec:d9:0a:dc:
9b:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:AA:D5:75:9D:D6:68:33:AA:F0:9C:04:8F:86:D4:35:E4:9D:CE:63
X509v3 Authority Key Identifier:
keyid:8F:C1:D6:BE:3B:A7:89:C5:DA:EB:59:7A:13:5D:E5:EC:CC:AB:8F:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j8HWvjunicXa61l6E13l7Myrj5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/44ee8d-2ae8-4844-a935-d24c2ce23ab7/1/j8HWvjunicXa61l6E13l7Myrj5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/44ee8d-2ae8-4844-a935-d24c2ce23ab7/1/j8HWvjunicXa61l6E13l7Myrj5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:fe:5b:ef:71:7e:60:34:58:20:87:d4:c0:66:8a:4e:e8:f4:
e2:f3:c0:5e:bf:2a:75:57:25:bf:e6:01:e7:ae:1e:1f:7b:39:
06:de:7d:d2:05:16:08:fa:5a:5e:5e:b5:be:3c:0c:74:df:56:
9a:7b:5a:63:f4:b4:9f:4c:ab:73:be:fc:bb:37:c2:c9:59:53:
26:86:61:c5:63:b4:f5:03:63:2c:8b:5e:27:3c:bb:90:74:f3:
db:19:f3:9a:4e:62:5b:02:76:9c:17:67:7d:7b:d9:5e:c7:19:
99:f2:8d:16:40:df:47:59:21:57:dc:28:86:fa:a1:ad:ba:9d:
08:7d:7b:09:7f:1d:0e:fd:47:97:c5:77:4c:fb:16:ea:5a:74:
69:12:57:1a:e6:2a:75:dc:f3:98:82:67:88:37:9f:c7:e2:d6:
fa:05:e3:ad:00:37:2d:c7:0f:70:9d:dc:d1:45:b7:ae:ce:8b:
04:db:96:71:cc:95:cf:e4:6c:aa:a1:db:84:e9:15:51:d6:6c:
5d:83:b4:e9:4c:46:2c:cd:84:9c:ed:fc:41:7a:3f:ad:ed:6d:
9d:28:85:36:03:d9:14:84:20:85:c3:68:b9:6a:1e:f5:00:72:
1f:3c:fd:0c:73:b5:ed:45:14:74:57:cb:4a:61:fb:be:23:07:
0d:d7:a3:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNqn/TUirQEJh/pv9ADlntMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmYzFkNmJlM2JhNzg5YzVkYWViNTk3YTEzNWRlNWVjY2Nh
YjhmOTUwHhcNMjUxMTA0MDcwMDEwWhcNMjUxMTA1MDcwMDEwWjAzMTEwLwYDVQQD
Eyg5NWFhZDU3NTlkZDY2ODMzYWFmMDljMDQ4Zjg2ZDQzNWU0OWRjZTYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiQWSY5V1AW1aBpdx1Ms4aZDMCnNe
sDw8HCwhskIzHNRk72eg+2vYPyT47Ogg2fXUc3oAWcOyduO+EQ5d4gtRocAfxx0B
N48Gq+g0P2lGcF7GhwLGgUi0BhvXAES44dzZ1ZQeSVvBRcGfLAyEPTEaJNoYffNy
pexOaoP/V9uEIgb1sQ5UVdc3J6vl/GSilTateu+jsUDCFMquYOTMAt+xl4Nns/wW
spPFIcUGOgYU9IobvGQp9+gMPn2R8fj3rc7016T/FAp8vY4lDHw8KwnNLCjEhD8C
mJ3zHmcqzXsv0uC02mz51SqWjA1DLCp+9jx+rcXToFt5/zcVUezZCtybCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJWq1XWd1mgzqvCcBI+G1DXknc5jMB8GA1UdIwQY
MBaAFI/B1r47p4nF2utZehNd5ezMq4+VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvajhIV3ZqdW5pY1hhNjFsNkUxM2w3TXlyajVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi80NGVlOGQtMmFlOC00ODQ0LWE5MzUt
ZDI0YzJjZTIzYWI3LzEvajhIV3ZqdW5pY1hhNjFsNkUxM2w3TXlyajVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi80NGVlOGQtMmFlOC00ODQ0LWE5MzUtZDI0YzJjZTIzYWI3
LzEvajhIV3ZqdW5pY1hhNjFsNkUxM2w3TXlyajVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfv5b73F+
YDRYIIfUwGaKTuj04vPAXr8qdVclv+YB564eH3s5Bt590gUWCPpaXl61vjwMdN9W
mntaY/S0n0yrc778uzfCyVlTJoZhxWO09QNjLIteJzy7kHTz2xnzmk5iWwJ2nBdn
fXvZXscZmfKNFkDfR1khV9wohvqhrbqdCH17CX8dDv1Hl8V3TPsW6lp0aRJXGuYq
ddzzmIJniDefx+LW+gXjrQA3LccPcJ3c0UW3rs6LBNuWccyVz+RsqqHbhOkVUdZs
XYO06UxGLM2EnO38QXo/re1tnSiFNgPZFIQghcNouWoe9QByHzz9DHO17UUUdFfL
SmH7viMHDdejYg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 10:50:57 2025 by rpki-client