Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/b5d809-2db0-4fbf-8a0d-9d3167831934/1/8FCiDjDskV3tHfIAVa9rXyZnLqk.mft
File: 8FCiDjDskV3tHfIAVa9rXyZnLqk.mft (raw, json)
Hash identifier: ol26PWeXxtbBwdtnNO/pYkI+ttXT9xTQvA44emoy5+o=
Subject key identifier: B7:9F:BE:2A:DB:DF:87:C3:C8:19:C0:D4:DA:E4:FF:2C:31:FA:FB:FE
Authority key identifier: F0:50:A2:0E:30:EC:91:5D:ED:1D:F2:00:55:AF:6B:5F:26:67:2E:A9
Certificate issuer: /CN=f050a20e30ec915ded1df20055af6b5f26672ea9
Certificate serial: 019A4F98E648318739DA2BE33C2B9AFFB37B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8FCiDjDskV3tHfIAVa9rXyZnLqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/b5d809-2db0-4fbf-8a0d-9d3167831934/1/8FCiDjDskV3tHfIAVa9rXyZnLqk.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 16:00:11 +0000
Manifest this update: Tue 04 Nov 2025 16:00:11 +0000
Manifest next update: Wed 05 Nov 2025 16:00:11 +0000
Files and hashes: 1: 8FCiDjDskV3tHfIAVa9rXyZnLqk.crl (hash: RSJf09iajI9EKmPbymRdjHwwEbKoAzEgo2wQXXKLYRw=)
2: DYi7F6e5pGT8BUg7LPKGmN6_EDw.roa (hash: i4XKBDV9uWZ8rdo9xvJHenErvD+Z3AjDvUvgRz1NJaY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/b5d809-2db0-4fbf-8a0d-9d3167831934/1/8FCiDjDskV3tHfIAVa9rXyZnLqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/b5d809-2db0-4fbf-8a0d-9d3167831934/1/8FCiDjDskV3tHfIAVa9rXyZnLqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/8FCiDjDskV3tHfIAVa9rXyZnLqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:98:e6:48:31:87:39:da:2b:e3:3c:2b:9a:ff:b3:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f050a20e30ec915ded1df20055af6b5f26672ea9
Validity
Not Before: Nov 4 16:00:11 2025 GMT
Not After : Nov 5 16:00:11 2025 GMT
Subject: CN=b79fbe2adbdf87c3c819c0d4dae4ff2c31fafbfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:36:b8:d8:d9:97:37:e9:b5:c7:09:94:e1:8b:
40:c3:d2:c2:b2:6d:1b:87:7c:a7:46:9e:a6:c5:51:
4b:36:3d:3a:77:2c:72:40:0a:48:73:d5:5a:85:1c:
c2:66:15:48:eb:c1:fc:e1:41:a1:5a:ac:ef:b3:8f:
8b:06:fa:92:14:e9:9e:e6:89:ff:89:ff:29:76:17:
23:ad:62:05:3d:1a:23:67:57:95:96:cb:dd:98:6c:
12:0d:b1:aa:fb:13:d0:a6:62:ff:22:b9:1b:01:6b:
81:77:b5:39:4a:13:01:fc:5d:cb:73:45:80:12:10:
20:a0:80:e1:fd:0a:3a:76:c5:54:35:8b:47:ae:64:
8c:46:db:e3:2d:52:7c:3c:ca:09:88:4e:f5:57:6d:
96:25:d6:54:88:d3:45:af:79:3c:c5:49:dc:00:04:
b6:aa:22:24:a4:27:7b:48:3a:fe:3b:f4:b6:2e:1b:
bd:4e:d0:cb:f1:6a:de:ce:3d:68:4a:a4:f2:d0:ba:
81:eb:41:56:dc:50:06:24:39:6f:56:51:bb:7e:63:
f4:22:60:a9:5e:3d:12:76:4c:fa:73:cd:0e:32:79:
2e:86:e7:3b:8a:f6:e1:b1:9b:bf:10:bb:dc:c6:a5:
aa:93:4c:12:00:db:15:0c:b9:6e:f5:22:d4:2f:2b:
63:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:9F:BE:2A:DB:DF:87:C3:C8:19:C0:D4:DA:E4:FF:2C:31:FA:FB:FE
X509v3 Authority Key Identifier:
keyid:F0:50:A2:0E:30:EC:91:5D:ED:1D:F2:00:55:AF:6B:5F:26:67:2E:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8FCiDjDskV3tHfIAVa9rXyZnLqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/b5d809-2db0-4fbf-8a0d-9d3167831934/1/8FCiDjDskV3tHfIAVa9rXyZnLqk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/b5d809-2db0-4fbf-8a0d-9d3167831934/1/8FCiDjDskV3tHfIAVa9rXyZnLqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:35:d7:c0:29:6e:81:36:af:c8:b2:07:83:6c:65:86:69:ad:
41:76:b8:6f:13:02:dc:26:16:ab:bd:de:72:cc:ea:26:8f:02:
b1:18:57:9a:64:27:15:c9:88:c4:15:aa:be:05:75:c5:32:44:
f5:23:1d:a7:5c:db:fa:f3:d2:bd:0f:27:ca:6e:f2:75:89:a8:
5e:9e:f7:e1:3d:f9:e5:37:1f:8c:af:04:fc:6c:da:9e:43:11:
b5:85:1b:55:b7:68:3b:d4:b0:6c:b2:2c:4a:e6:0a:ca:d7:33:
7f:c5:85:16:43:88:a2:d1:84:74:0a:f0:f8:2e:fd:b7:a1:e5:
d9:a3:33:b5:41:93:99:71:33:7d:0b:50:07:b2:14:f2:30:3f:
05:34:fe:fd:af:88:76:30:86:7c:f2:4b:f3:bf:5d:fe:f8:a0:
b9:57:3d:9b:b7:ab:99:a1:52:6b:c9:64:17:6c:6f:aa:df:ac:
f0:7b:77:30:21:27:8f:50:45:75:b2:12:ed:9e:21:14:d1:4e:
1b:60:ce:92:9a:e5:2b:a4:33:be:b8:1a:a3:f9:b8:fd:3f:ff:
c4:8c:c3:a0:05:41:21:3f:86:5c:cf:e8:58:ed:7b:dc:02:98:
72:08:0f:e6:2d:83:fa:f5:ee:d6:33:fc:a5:6b:4b:78:ae:88:
c3:e9:79:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPmOZIMYc52ivjPCua/7N7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwNTBhMjBlMzBlYzkxNWRlZDFkZjIwMDU1YWY2YjVmMjY2
NzJlYTkwHhcNMjUxMTA0MTYwMDExWhcNMjUxMTA1MTYwMDExWjAzMTEwLwYDVQQD
EyhiNzlmYmUyYWRiZGY4N2MzYzgxOWMwZDRkYWU0ZmYyYzMxZmFmYmZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuja42NmXN+m1xwmU4YtAw9LCsm0b
h3ynRp6mxVFLNj06dyxyQApIc9VahRzCZhVI68H84UGhWqzvs4+LBvqSFOme5on/
if8pdhcjrWIFPRojZ1eVlsvdmGwSDbGq+xPQpmL/IrkbAWuBd7U5ShMB/F3Lc0WA
EhAgoIDh/Qo6dsVUNYtHrmSMRtvjLVJ8PMoJiE71V22WJdZUiNNFr3k8xUncAAS2
qiIkpCd7SDr+O/S2Lhu9TtDL8Wrezj1oSqTy0LqB60FW3FAGJDlvVlG7fmP0ImCp
Xj0Sdkz6c80OMnkuhuc7ivbhsZu/ELvcxqWqk0wSANsVDLlu9SLULytjGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLefvirb34fDyBnA1Nrk/ywx+vv+MB8GA1UdIwQY
MBaAFPBQog4w7JFd7R3yAFWva18mZy6pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEZDaURqRHNrVjN0SGZJQVZhOXJYeVpuTHFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9iNWQ4MDktMmRiMC00ZmJmLThhMGQt
OWQzMTY3ODMxOTM0LzEvOEZDaURqRHNrVjN0SGZJQVZhOXJYeVpuTHFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS9iNWQ4MDktMmRiMC00ZmJmLThhMGQtOWQzMTY3ODMxOTM0
LzEvOEZDaURqRHNrVjN0SGZJQVZhOXJYeVpuTHFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlDXXwClu
gTavyLIHg2xlhmmtQXa4bxMC3CYWq73ecszqJo8CsRhXmmQnFcmIxBWqvgV1xTJE
9SMdp1zb+vPSvQ8nym7ydYmoXp734T355TcfjK8E/GzankMRtYUbVbdoO9SwbLIs
SuYKytczf8WFFkOIotGEdArw+C79t6Hl2aMztUGTmXEzfQtQB7IU8jA/BTT+/a+I
djCGfPJL879d/viguVc9m7ermaFSa8lkF2xvqt+s8Ht3MCEnj1BFdbIS7Z4hFNFO
G2DOkprlK6Qzvrgao/m4/T//xIzDoAVBIT+GXM/oWO173AKYcggP5i2D+vXu1jP8
pWtLeK6Iw+l55g==
-----END CERTIFICATE-----
Generated at Tue Nov 4 17:54:46 2025 by rpki-client