Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/712f03-afe9-4f65-acec-67cfe3067b2a/1/j4aF263_sB3czmxNgql_M8BA7S0.mft
File: j4aF263_sB3czmxNgql_M8BA7S0.mft (raw, json)
Hash identifier: qMMDP6BxdDfnr0xjM2agJEZazwTSOJel17Y+glV74jk=
Subject key identifier: 47:00:E7:52:B2:5E:18:23:87:09:13:AB:60:CF:83:F7:45:1E:3A:88
Authority key identifier: 8F:86:85:DB:AD:FF:B0:1D:DC:CE:6C:4D:82:A9:7F:33:C0:40:ED:2D
Certificate issuer: /CN=8f8685dbadffb01ddcce6c4d82a97f33c040ed2d
Certificate serial: 019A50E2A13A633FB91B28205D25C2A7A5D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j4aF263_sB3czmxNgql_M8BA7S0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/712f03-afe9-4f65-acec-67cfe3067b2a/1/j4aF263_sB3czmxNgql_M8BA7S0.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 22:00:20 +0000
Manifest this update: Tue 04 Nov 2025 22:00:20 +0000
Manifest next update: Wed 05 Nov 2025 22:00:20 +0000
Files and hashes: 1: CnLBnKO7kUWDOtI_wZowil8ZDY0.roa (hash: +ZLQWoCpBdEd1GfrIrkM6Ixuxre1nfZzdo3/CXXl60U=)
2: j4aF263_sB3czmxNgql_M8BA7S0.crl (hash: APAlZkNJBe6VLoIzlJlxK4fz9S+SN83mGy3PatT+w98=)
3: sUWUQ7xVOWG88c1zTJfQJSXfUGM.roa (hash: VIZMGPKQd062ThwggTDHc4EOlVHSYbX0SY8qNlvlezs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/712f03-afe9-4f65-acec-67cfe3067b2a/1/j4aF263_sB3czmxNgql_M8BA7S0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/712f03-afe9-4f65-acec-67cfe3067b2a/1/j4aF263_sB3czmxNgql_M8BA7S0.mft
rsync://rpki.ripe.net/repository/DEFAULT/j4aF263_sB3czmxNgql_M8BA7S0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e2:a1:3a:63:3f:b9:1b:28:20:5d:25:c2:a7:a5:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f8685dbadffb01ddcce6c4d82a97f33c040ed2d
Validity
Not Before: Nov 4 22:00:20 2025 GMT
Not After : Nov 5 22:00:20 2025 GMT
Subject: CN=4700e752b25e1823870913ab60cf83f7451e3a88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:85:60:2b:e3:7a:9b:90:16:85:30:6a:24:ae:
ec:b4:57:ac:cd:e5:52:64:c5:4f:09:c9:05:9a:00:
a1:fc:5d:17:52:e8:6d:39:7e:b7:ec:90:a4:2d:08:
5a:f1:0a:39:27:ae:9b:16:c5:05:c6:dd:87:70:db:
c1:25:03:4d:46:b0:e5:eb:3c:e1:e8:68:e9:55:5d:
5a:65:79:41:e0:8d:dc:20:56:ce:20:cf:e4:37:d1:
21:d3:aa:94:ec:2e:91:d4:11:9c:ed:e1:8c:7c:46:
8e:d3:ee:1f:c2:07:9d:e9:f0:63:3a:a9:2a:2a:a8:
a0:a1:c0:57:42:6f:aa:d4:45:0f:35:1d:31:66:6c:
1a:de:ba:0b:71:e8:d2:63:64:69:b5:8d:1b:1a:bc:
cc:44:79:87:cb:8e:e7:b9:0c:4c:d9:bd:5a:18:a3:
64:0d:ca:e4:06:a2:4b:e7:a0:9f:27:c2:92:1c:0c:
4d:2d:d2:29:ef:6c:6d:60:0b:26:b0:7f:ae:8a:3f:
d9:96:b6:65:25:18:d7:fc:54:87:40:f9:7c:5a:31:
f9:24:45:81:00:bc:85:d7:db:04:33:e4:76:ed:82:
6b:69:2b:37:57:75:4f:f8:aa:b6:af:35:70:fd:87:
40:38:5f:ce:8e:e7:ce:26:3a:5c:33:97:34:00:15:
a6:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:00:E7:52:B2:5E:18:23:87:09:13:AB:60:CF:83:F7:45:1E:3A:88
X509v3 Authority Key Identifier:
keyid:8F:86:85:DB:AD:FF:B0:1D:DC:CE:6C:4D:82:A9:7F:33:C0:40:ED:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j4aF263_sB3czmxNgql_M8BA7S0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/712f03-afe9-4f65-acec-67cfe3067b2a/1/j4aF263_sB3czmxNgql_M8BA7S0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/712f03-afe9-4f65-acec-67cfe3067b2a/1/j4aF263_sB3czmxNgql_M8BA7S0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:fe:e8:78:d3:83:48:28:86:44:85:23:f6:fc:3e:8d:0d:8c:
6e:ef:60:40:87:56:3f:ae:73:43:4b:86:73:49:83:c9:5d:f0:
9d:85:3a:8e:f9:e0:64:3d:f9:c4:39:aa:bd:e1:c0:ad:ff:2c:
b1:4e:10:a7:d5:e5:ba:64:14:44:dc:db:f4:9c:b8:40:8e:c6:
6f:69:57:cd:4c:38:07:aa:43:13:22:1e:88:06:fe:f5:a5:bd:
41:4c:60:03:52:36:17:c2:db:d4:ad:db:92:ce:25:37:37:5a:
02:33:d6:54:fe:f9:66:40:dd:be:a9:d0:39:ed:f1:ae:a6:02:
27:b2:d8:6b:88:79:0b:ec:31:61:2c:21:ee:72:93:12:f6:2f:
b4:97:9d:90:af:a2:a2:09:74:80:80:7f:48:6f:c3:74:d8:7b:
d6:53:47:73:cf:fb:00:46:99:ad:5f:5c:dc:e5:22:7e:25:a8:
bd:38:01:f8:f6:4b:ec:48:7d:c1:a3:b5:23:f0:3d:74:c8:38:
05:c8:ce:0c:f3:f3:9a:18:56:c5:f2:ca:de:0f:8a:08:38:33:
50:0d:e1:76:24:45:df:22:2b:e5:b5:87:53:af:43:ea:aa:2a:
1b:e5:e7:c9:5b:ba:b4:9b:0a:ef:4a:7a:cc:05:cc:62:ae:b7:
42:b0:4a:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQ4qE6Yz+5GyggXSXCp6XZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmODY4NWRiYWRmZmIwMWRkY2NlNmM0ZDgyYTk3ZjMzYzA0
MGVkMmQwHhcNMjUxMTA0MjIwMDIwWhcNMjUxMTA1MjIwMDIwWjAzMTEwLwYDVQQD
Eyg0NzAwZTc1MmIyNWUxODIzODcwOTEzYWI2MGNmODNmNzQ1MWUzYTg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5IVgK+N6m5AWhTBqJK7stFeszeVS
ZMVPCckFmgCh/F0XUuhtOX637JCkLQha8Qo5J66bFsUFxt2HcNvBJQNNRrDl6zzh
6GjpVV1aZXlB4I3cIFbOIM/kN9Eh06qU7C6R1BGc7eGMfEaO0+4fwged6fBjOqkq
KqigocBXQm+q1EUPNR0xZmwa3roLcejSY2RptY0bGrzMRHmHy47nuQxM2b1aGKNk
DcrkBqJL56CfJ8KSHAxNLdIp72xtYAsmsH+uij/ZlrZlJRjX/FSHQPl8WjH5JEWB
ALyF19sEM+R27YJraSs3V3VP+Kq2rzVw/YdAOF/OjufOJjpcM5c0ABWmwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEcA51KyXhgjhwkTq2DPg/dFHjqIMB8GA1UdIwQY
MBaAFI+Ghdut/7Ad3M5sTYKpfzPAQO0tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvajRhRjI2M19zQjNjem14TmdxbF9NOEJBN1MwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS83MTJmMDMtYWZlOS00ZjY1LWFjZWMt
NjdjZmUzMDY3YjJhLzEvajRhRjI2M19zQjNjem14TmdxbF9NOEJBN1MwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS83MTJmMDMtYWZlOS00ZjY1LWFjZWMtNjdjZmUzMDY3YjJh
LzEvajRhRjI2M19zQjNjem14TmdxbF9NOEJBN1MwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApf7oeNOD
SCiGRIUj9vw+jQ2Mbu9gQIdWP65zQ0uGc0mDyV3wnYU6jvngZD35xDmqveHArf8s
sU4Qp9XlumQURNzb9Jy4QI7Gb2lXzUw4B6pDEyIeiAb+9aW9QUxgA1I2F8Lb1K3b
ks4lNzdaAjPWVP75ZkDdvqnQOe3xrqYCJ7LYa4h5C+wxYSwh7nKTEvYvtJedkK+i
ogl0gIB/SG/DdNh71lNHc8/7AEaZrV9c3OUifiWovTgB+PZL7Eh9waO1I/A9dMg4
BcjODPPzmhhWxfLK3g+KCDgzUA3hdiRF3yIr5bWHU69D6qoqG+XnyVu6tJsK70p6
zAXMYq63QrBKvQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 00:41:57 2025 by rpki-client