Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/5f757b-4f22-43db-9da9-2496116e415d/1/k8QjPQuo54YYoJpyVh3M0GSYyE4.mft
File: k8QjPQuo54YYoJpyVh3M0GSYyE4.mft (raw, json)
Hash identifier: w53SIi6cIXGzZH5I+552XKmbxrCVi+ePsqy71K1JvTM=
Subject key identifier: 13:58:DF:C1:60:5B:A1:A2:E6:43:E5:09:47:2E:EA:7F:77:30:97:D9
Authority key identifier: 93:C4:23:3D:0B:A8:E7:86:18:A0:9A:72:56:1D:CC:D0:64:98:C8:4E
Certificate issuer: /CN=93c4233d0ba8e78618a09a72561dccd06498c84e
Certificate serial: 019A50E355DC68C4E53D330C2B4BCE547947
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k8QjPQuo54YYoJpyVh3M0GSYyE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/5f757b-4f22-43db-9da9-2496116e415d/1/k8QjPQuo54YYoJpyVh3M0GSYyE4.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 22:01:06 +0000
Manifest this update: Tue 04 Nov 2025 22:01:06 +0000
Manifest next update: Wed 05 Nov 2025 22:01:06 +0000
Files and hashes: 1: k8QjPQuo54YYoJpyVh3M0GSYyE4.crl (hash: N2WG0hWUsQAVgB+5iCKlhStQgx7pWXLNWKtWjmXsd4Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/5f757b-4f22-43db-9da9-2496116e415d/1/k8QjPQuo54YYoJpyVh3M0GSYyE4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/5f757b-4f22-43db-9da9-2496116e415d/1/k8QjPQuo54YYoJpyVh3M0GSYyE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/k8QjPQuo54YYoJpyVh3M0GSYyE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:55:dc:68:c4:e5:3d:33:0c:2b:4b:ce:54:79:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93c4233d0ba8e78618a09a72561dccd06498c84e
Validity
Not Before: Nov 4 22:01:06 2025 GMT
Not After : Nov 5 22:01:06 2025 GMT
Subject: CN=1358dfc1605ba1a2e643e509472eea7f773097d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:a6:4b:aa:d7:93:68:98:5a:34:62:b5:e3:92:
7e:d7:64:c1:a9:9a:02:77:d8:5c:3f:5e:56:9c:f1:
6c:51:8b:e6:db:4b:7f:4f:73:06:e2:68:e8:67:0b:
f6:84:09:4d:fd:33:f0:f3:17:21:8f:04:6e:58:e3:
e7:93:87:d7:d5:be:c6:b9:7b:4d:a6:ec:4e:06:38:
1e:67:54:9f:32:4e:e0:ff:d3:d2:ed:1e:2c:ea:52:
72:3a:a2:6a:f8:ab:fa:e5:a9:c7:08:51:bf:71:65:
f3:66:cc:34:f2:41:a6:47:10:b2:0d:f9:76:df:f1:
e7:a7:59:9e:8c:63:63:63:f8:03:9a:2b:54:03:91:
f2:75:1a:fc:91:13:62:da:8f:7a:e5:26:4c:7c:8c:
6b:37:92:e9:28:12:c4:5f:87:76:f7:68:5f:cb:ef:
e7:9e:d8:92:03:92:e9:e8:2f:c1:b1:e9:a8:e8:33:
d8:20:12:b6:eb:ed:4a:14:c5:ce:95:ee:fa:94:fc:
a7:74:fd:46:db:0e:14:6e:e0:ad:5a:20:c0:ac:b6:
65:43:0c:6b:5c:d2:59:6c:f9:b6:05:fc:f6:48:6e:
0a:f2:af:ca:9f:98:97:00:83:1b:4a:72:f4:d5:e6:
95:c3:bc:e4:68:47:02:d6:d7:4e:68:06:eb:cc:e2:
ca:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:58:DF:C1:60:5B:A1:A2:E6:43:E5:09:47:2E:EA:7F:77:30:97:D9
X509v3 Authority Key Identifier:
keyid:93:C4:23:3D:0B:A8:E7:86:18:A0:9A:72:56:1D:CC:D0:64:98:C8:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k8QjPQuo54YYoJpyVh3M0GSYyE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/5f757b-4f22-43db-9da9-2496116e415d/1/k8QjPQuo54YYoJpyVh3M0GSYyE4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/5f757b-4f22-43db-9da9-2496116e415d/1/k8QjPQuo54YYoJpyVh3M0GSYyE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:e6:72:b6:b9:17:19:13:ea:63:29:33:b0:0b:ef:cc:df:e4:
1f:63:f3:57:6f:43:90:6b:ac:aa:a8:db:bb:83:97:f1:d2:b1:
33:47:0e:d5:7e:d3:19:72:13:a4:92:40:15:57:29:3e:b4:57:
e2:d3:8b:f1:9e:94:6b:e4:5f:9c:71:b4:b3:d8:a2:b7:2c:bd:
73:05:6d:12:82:28:27:f4:5f:da:c8:6b:5c:b1:73:8d:a0:dd:
e1:d4:3d:4c:5a:f0:00:4f:7d:46:0e:bd:a8:e1:bc:a1:d5:f2:
ce:48:3a:9c:7e:e6:6e:05:11:7f:71:58:60:79:5d:a1:44:b3:
36:af:20:9a:bc:3e:88:5b:9e:c5:16:b4:79:01:4f:13:b6:94:
89:bb:d9:ce:37:a0:00:32:e5:7b:c3:c1:15:62:09:35:3d:68:
a2:db:31:8b:8c:bb:1f:a8:84:cf:81:6e:dc:cc:fc:a0:30:1d:
3a:50:09:bf:e0:84:bb:84:04:05:67:ae:43:57:e6:68:57:01:
a5:9b:2f:04:5f:32:c1:94:9c:71:ee:8b:bb:a4:87:da:ca:49:
e3:32:aa:99:bd:cb:c6:b7:33:16:a2:fd:34:e4:06:d1:e5:a6:
be:cb:5d:25:c3:6a:13:f7:33:e3:fc:ca:5e:65:68:4f:30:1f:
23:8d:6b:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQ41XcaMTlPTMMK0vOVHlHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzYzQyMzNkMGJhOGU3ODYxOGEwOWE3MjU2MWRjY2QwNjQ5
OGM4NGUwHhcNMjUxMTA0MjIwMTA2WhcNMjUxMTA1MjIwMTA2WjAzMTEwLwYDVQQD
EygxMzU4ZGZjMTYwNWJhMWEyZTY0M2U1MDk0NzJlZWE3Zjc3MzA5N2Q5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjaZLqteTaJhaNGK145J+12TBqZoC
d9hcP15WnPFsUYvm20t/T3MG4mjoZwv2hAlN/TPw8xchjwRuWOPnk4fX1b7GuXtN
puxOBjgeZ1SfMk7g/9PS7R4s6lJyOqJq+Kv65anHCFG/cWXzZsw08kGmRxCyDfl2
3/Hnp1mejGNjY/gDmitUA5HydRr8kRNi2o965SZMfIxrN5LpKBLEX4d292hfy+/n
ntiSA5Lp6C/Bsemo6DPYIBK26+1KFMXOle76lPyndP1G2w4UbuCtWiDArLZlQwxr
XNJZbPm2Bfz2SG4K8q/Kn5iXAIMbSnL01eaVw7zkaEcC1tdOaAbrzOLKIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBNY38FgW6Gi5kPlCUcu6n93MJfZMB8GA1UdIwQY
MBaAFJPEIz0LqOeGGKCaclYdzNBkmMhOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazhRalBRdW81NFlZb0pweVZoM00wR1NZeUU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi81Zjc1N2ItNGYyMi00M2RiLTlkYTkt
MjQ5NjExNmU0MTVkLzEvazhRalBRdW81NFlZb0pweVZoM00wR1NZeUU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi81Zjc1N2ItNGYyMi00M2RiLTlkYTktMjQ5NjExNmU0MTVk
LzEvazhRalBRdW81NFlZb0pweVZoM00wR1NZeUU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAReZytrkX
GRPqYykzsAvvzN/kH2PzV29DkGusqqjbu4OX8dKxM0cO1X7TGXITpJJAFVcpPrRX
4tOL8Z6Ua+RfnHG0s9iityy9cwVtEoIoJ/Rf2shrXLFzjaDd4dQ9TFrwAE99Rg69
qOG8odXyzkg6nH7mbgURf3FYYHldoUSzNq8gmrw+iFuexRa0eQFPE7aUibvZzjeg
ADLle8PBFWIJNT1ootsxi4y7H6iEz4Fu3Mz8oDAdOlAJv+CEu4QEBWeuQ1fmaFcB
pZsvBF8ywZScce6Lu6SH2spJ4zKqmb3LxrczFqL9NOQG0eWmvstdJcNqE/cz4/zK
XmVoTzAfI41rNw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 23:53:47 2025 by rpki-client