Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/aac010-5ef0-4844-b233-4457ebea5a45/1/77RcySOXjBokve6WzHs683OG0qg.mft
File: 77RcySOXjBokve6WzHs683OG0qg.mft (raw, json)
Hash identifier: jpzR7RSrR8+dc+crhYvC7Vqu2kiAIl7vSabSRY7zXYE=
Subject key identifier: C0:D3:59:DD:3D:0E:C2:B6:26:8B:DE:D4:51:CD:03:39:1C:74:1C:66
Authority key identifier: EF:B4:5C:C9:23:97:8C:1A:24:BD:EE:96:CC:7B:3A:F3:73:86:D2:A8
Certificate issuer: /CN=efb45cc923978c1a24bdee96cc7b3af37386d2a8
Certificate serial: 019A4D741976F55256F52A122DE3F960739F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/77RcySOXjBokve6WzHs683OG0qg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/aac010-5ef0-4844-b233-4457ebea5a45/1/77RcySOXjBokve6WzHs683OG0qg.mft
Manifest number: 0EAE
Signing time: Tue 04 Nov 2025 06:00:45 +0000
Manifest this update: Tue 04 Nov 2025 06:00:45 +0000
Manifest next update: Wed 05 Nov 2025 06:00:45 +0000
Files and hashes: 1: 77RcySOXjBokve6WzHs683OG0qg.crl (hash: ghS+uldh/4EMird5/dhVkYsAjwwaFA9Cym2y5wOGZ/0=)
2: ONW_HHb2ZjsySF4n5zNLufP_Ugo.roa (hash: Fs9suOzCDzlX3MVkt67omPbuhLWfHekY4xcrsMfgW7s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/aac010-5ef0-4844-b233-4457ebea5a45/1/77RcySOXjBokve6WzHs683OG0qg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/aac010-5ef0-4844-b233-4457ebea5a45/1/77RcySOXjBokve6WzHs683OG0qg.mft
rsync://rpki.ripe.net/repository/DEFAULT/77RcySOXjBokve6WzHs683OG0qg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:19:76:f5:52:56:f5:2a:12:2d:e3:f9:60:73:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efb45cc923978c1a24bdee96cc7b3af37386d2a8
Validity
Not Before: Nov 4 06:00:45 2025 GMT
Not After : Nov 5 06:00:45 2025 GMT
Subject: CN=c0d359dd3d0ec2b6268bded451cd03391c741c66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:44:7b:c3:63:9f:82:e9:71:da:47:0e:33:63:
e7:bf:f5:d0:41:fd:86:75:d4:ba:87:76:ad:68:7f:
12:65:30:43:53:4c:79:5a:85:3b:a6:47:bb:6e:d8:
2a:db:db:46:ce:4e:63:98:33:e4:66:65:7f:ba:de:
90:d6:e0:e8:3a:a0:f1:7c:52:54:22:e1:c4:f0:c1:
23:61:79:b9:7e:1b:1c:27:38:48:22:e4:4b:ab:75:
8a:b9:0f:21:a0:33:9b:18:82:ad:44:ed:fb:9a:3e:
e7:57:d7:02:da:5d:f6:01:a5:ec:2f:71:69:75:de:
dc:39:05:e0:a6:21:d8:f7:80:9f:10:be:f1:ac:a7:
3b:7a:0b:aa:e7:07:3d:56:53:98:c3:ec:70:bb:a1:
08:76:44:67:22:d4:00:55:4a:ad:59:fc:9d:8a:be:
a4:cb:8a:c5:be:0f:65:f5:44:25:bb:df:5c:f6:7b:
67:4b:ce:1d:80:c9:46:6e:02:0c:e8:b4:ff:57:ee:
a6:51:71:7b:2e:48:94:85:d5:0b:99:9e:65:f0:a7:
46:61:82:20:4e:e9:9e:af:55:af:55:00:f6:74:96:
9b:cc:88:1a:5e:d2:73:aa:45:74:e1:bd:bb:83:4a:
b4:73:45:51:80:61:89:28:f2:8b:2f:86:d8:46:69:
5c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:D3:59:DD:3D:0E:C2:B6:26:8B:DE:D4:51:CD:03:39:1C:74:1C:66
X509v3 Authority Key Identifier:
keyid:EF:B4:5C:C9:23:97:8C:1A:24:BD:EE:96:CC:7B:3A:F3:73:86:D2:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/77RcySOXjBokve6WzHs683OG0qg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/aac010-5ef0-4844-b233-4457ebea5a45/1/77RcySOXjBokve6WzHs683OG0qg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/aac010-5ef0-4844-b233-4457ebea5a45/1/77RcySOXjBokve6WzHs683OG0qg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:a6:6f:62:3b:db:99:ac:c4:fe:d3:f4:bc:e6:92:8e:a9:f1:
61:91:5e:33:c8:78:3a:3b:7d:b6:a9:89:ea:03:9b:5e:23:2c:
74:1c:5b:6b:21:73:0a:fe:ca:21:ab:4a:d1:03:d3:1a:30:bb:
cf:f1:3f:cd:02:f3:a0:d4:9d:ef:ed:ef:ab:cf:d6:44:7b:00:
e5:b4:ff:c3:66:7b:d9:36:93:18:af:73:05:39:4e:9e:7e:de:
d9:3e:19:97:1f:17:57:3c:5c:23:17:3f:ac:83:b6:09:71:63:
a9:9d:e0:71:be:3a:05:21:8c:67:d5:fc:7e:02:51:c0:3b:c4:
61:2b:be:80:cb:38:93:76:d5:d8:c0:60:39:19:c8:9b:40:59:
0f:9a:bc:49:f1:d2:fe:dd:9b:9f:59:6f:d6:c5:b2:42:37:21:
b7:d0:7f:e7:e4:30:ec:42:55:d0:6b:d8:2b:ed:2b:d5:0d:ab:
6d:b4:29:b7:85:b6:25:2a:bd:04:a8:da:48:94:8b:a5:d9:5e:
75:a5:d3:a3:0c:38:cf:bc:1e:99:b7:9c:a6:ef:09:bc:32:3d:
65:53:49:79:08:85:ed:61:e9:a5:6c:b9:49:10:51:99:33:7f:
48:1e:23:92:9c:19:20:10:c9:f6:0a:20:b7:fb:37:4f:a7:3e:
13:35:02:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNdBl29VJW9SoSLeP5YHOfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmYjQ1Y2M5MjM5NzhjMWEyNGJkZWU5NmNjN2IzYWYzNzM4
NmQyYTgwHhcNMjUxMTA0MDYwMDQ1WhcNMjUxMTA1MDYwMDQ1WjAzMTEwLwYDVQQD
EyhjMGQzNTlkZDNkMGVjMmI2MjY4YmRlZDQ1MWNkMDMzOTFjNzQxYzY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnER7w2Ofgulx2kcOM2Pnv/XQQf2G
ddS6h3ataH8SZTBDU0x5WoU7pke7btgq29tGzk5jmDPkZmV/ut6Q1uDoOqDxfFJU
IuHE8MEjYXm5fhscJzhIIuRLq3WKuQ8hoDObGIKtRO37mj7nV9cC2l32AaXsL3Fp
dd7cOQXgpiHY94CfEL7xrKc7eguq5wc9VlOYw+xwu6EIdkRnItQAVUqtWfydir6k
y4rFvg9l9UQlu99c9ntnS84dgMlGbgIM6LT/V+6mUXF7LkiUhdULmZ5l8KdGYYIg
Tumer1WvVQD2dJabzIgaXtJzqkV04b27g0q0c0VRgGGJKPKLL4bYRmlcnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMDTWd09DsK2Jove1FHNAzkcdBxmMB8GA1UdIwQY
MBaAFO+0XMkjl4waJL3ulsx7OvNzhtKoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzdSY3lTT1hqQm9rdmU2V3pIczY4M09HMHFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9hYWMwMTAtNWVmMC00ODQ0LWIyMzMt
NDQ1N2ViZWE1YTQ1LzEvNzdSY3lTT1hqQm9rdmU2V3pIczY4M09HMHFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC9hYWMwMTAtNWVmMC00ODQ0LWIyMzMtNDQ1N2ViZWE1YTQ1
LzEvNzdSY3lTT1hqQm9rdmU2V3pIczY4M09HMHFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiKZvYjvb
mazE/tP0vOaSjqnxYZFeM8h4Ojt9tqmJ6gObXiMsdBxbayFzCv7KIatK0QPTGjC7
z/E/zQLzoNSd7+3vq8/WRHsA5bT/w2Z72TaTGK9zBTlOnn7e2T4Zlx8XVzxcIxc/
rIO2CXFjqZ3gcb46BSGMZ9X8fgJRwDvEYSu+gMs4k3bV2MBgORnIm0BZD5q8SfHS
/t2bn1lv1sWyQjcht9B/5+Qw7EJV0GvYK+0r1Q2rbbQpt4W2JSq9BKjaSJSLpdle
daXToww4z7wembecpu8JvDI9ZVNJeQiF7WHppWy5SRBRmTN/SB4jkpwZIBDJ9gog
t/s3T6c+EzUCGA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:54:50 2025 by rpki-client