Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/6ce53c-7670-47a7-81ae-54c0ae6176d4/1/d8jZS9834PkAzWqMQizbFNl860Y.mft
File: d8jZS9834PkAzWqMQizbFNl860Y.mft (raw, json)
Hash identifier: 51XGh+VcGb+lSg6+VtuDraldyILVEYTxDyegK/aEMr4=
Subject key identifier: 55:A3:A5:1F:ED:D3:DA:80:BD:98:9C:73:55:0E:F8:79:EE:26:52:BE
Authority key identifier: 77:C8:D9:4B:DF:37:E0:F9:00:CD:6A:8C:42:2C:DB:14:D9:7C:EB:46
Certificate issuer: /CN=77c8d94bdf37e0f900cd6a8c422cdb14d97ceb46
Certificate serial: 019A53080DAFAE2E44B25E977068F99EC350
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8jZS9834PkAzWqMQizbFNl860Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce53c-7670-47a7-81ae-54c0ae6176d4/1/d8jZS9834PkAzWqMQizbFNl860Y.mft
Manifest number: 0295
Signing time: Wed 05 Nov 2025 08:00:27 +0000
Manifest this update: Wed 05 Nov 2025 08:00:27 +0000
Manifest next update: Thu 06 Nov 2025 08:00:27 +0000
Files and hashes: 1: 2IggjZcKQnsJ27bFYIHqEpYv-GQ.roa (hash: QiDI9ap52s0p2XMZDDr7ZxsLONOENyLmIWJ6ECFI2k0=)
2: d8jZS9834PkAzWqMQizbFNl860Y.crl (hash: dvXRmITU9u2gsXYpb1pCXnsaYNobJQpxhIa+O6uRlkk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce53c-7670-47a7-81ae-54c0ae6176d4/1/d8jZS9834PkAzWqMQizbFNl860Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce53c-7670-47a7-81ae-54c0ae6176d4/1/d8jZS9834PkAzWqMQizbFNl860Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/d8jZS9834PkAzWqMQizbFNl860Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:08:0d:af:ae:2e:44:b2:5e:97:70:68:f9:9e:c3:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77c8d94bdf37e0f900cd6a8c422cdb14d97ceb46
Validity
Not Before: Nov 5 08:00:27 2025 GMT
Not After : Nov 6 08:00:27 2025 GMT
Subject: CN=55a3a51fedd3da80bd989c73550ef879ee2652be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:9f:dc:94:58:80:b7:d0:33:15:1f:bc:b6:0b:
15:53:8a:6f:a9:a6:c5:3f:f0:5a:4e:5d:7e:6f:73:
53:93:b8:29:56:58:4e:ba:87:b4:0d:af:1a:ab:7e:
7e:21:4d:0b:4c:fa:e8:34:30:34:5f:f4:3f:12:1a:
56:d0:ba:fd:1c:0e:fc:c8:cd:82:cb:94:d1:ad:f7:
b2:f5:85:2d:ce:e2:3c:e8:c1:89:d3:dc:97:2a:ab:
e1:38:9e:cc:7f:b1:a0:9e:28:86:f4:34:69:d9:fb:
e4:58:c7:ea:b7:72:cd:b0:41:f9:10:3c:b1:5c:24:
2d:b9:89:95:bb:d0:8f:07:e6:03:51:cc:d9:cf:ac:
59:77:56:7a:bd:9e:35:f5:89:1c:ae:2a:03:e1:cd:
ff:f6:2d:6a:f8:16:a1:af:eb:97:3d:fc:08:b4:98:
94:f6:da:42:16:99:40:4e:bb:ed:31:6e:8c:e9:92:
9d:a7:d8:9b:67:ba:29:6f:94:cf:43:88:c0:46:5d:
ad:d2:0f:8c:87:3d:35:f7:d5:74:61:20:3f:74:c5:
26:7e:14:42:36:14:e1:5c:f3:28:1c:36:45:b3:4a:
ec:57:3d:9f:db:c5:bf:25:56:bf:93:e3:5c:03:67:
f2:4a:d0:cd:00:3f:86:9e:18:dd:6e:08:12:23:ec:
30:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:A3:A5:1F:ED:D3:DA:80:BD:98:9C:73:55:0E:F8:79:EE:26:52:BE
X509v3 Authority Key Identifier:
keyid:77:C8:D9:4B:DF:37:E0:F9:00:CD:6A:8C:42:2C:DB:14:D9:7C:EB:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8jZS9834PkAzWqMQizbFNl860Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce53c-7670-47a7-81ae-54c0ae6176d4/1/d8jZS9834PkAzWqMQizbFNl860Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce53c-7670-47a7-81ae-54c0ae6176d4/1/d8jZS9834PkAzWqMQizbFNl860Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:86:cc:1b:91:48:5e:e3:31:8b:3f:d1:dc:cf:27:d4:4d:cd:
49:3e:6a:8f:b4:61:db:aa:26:31:ed:c7:44:0f:5e:30:3e:9b:
1e:d4:1d:7e:88:35:28:c3:d6:88:f6:7e:6f:0f:37:36:5b:77:
6a:62:1f:b6:32:d8:d4:68:fc:92:8a:96:ee:ac:e3:65:28:f7:
04:c5:cc:4f:8f:c2:d2:6a:68:46:c1:9e:ce:64:c8:ea:d6:4d:
c9:34:fd:0d:c5:bc:9f:e9:a2:77:4b:46:97:c1:84:db:09:d2:
98:5a:57:77:73:b1:87:a0:a4:9c:7a:80:d6:ff:d4:26:00:0b:
1d:89:69:e0:5e:b9:1c:b8:fd:b1:c1:dd:bc:98:b0:0b:18:ed:
8b:5c:f1:90:3c:98:bc:0f:d0:9e:cb:d5:58:9e:68:46:5a:da:
7f:ee:d2:12:cf:57:45:2d:7d:1f:f7:9f:52:41:6c:66:42:4e:
d8:45:d9:f0:77:2b:55:d4:5c:04:02:34:de:3f:82:e7:b5:9f:
05:cc:74:10:c0:49:02:41:c7:f9:c1:56:96:d3:64:78:fd:32:
eb:0a:85:51:71:3b:68:7d:11:4b:93:ca:98:28:1b:05:2c:2c:
72:36:f8:6b:45:f7:47:a0:83:00:4f:fb:62:21:e1:5c:5c:1a:
cc:bd:ca:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpTCA2vri5Esl6XcGj5nsNQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3YzhkOTRiZGYzN2UwZjkwMGNkNmE4YzQyMmNkYjE0ZDk3
Y2ViNDYwHhcNMjUxMTA1MDgwMDI3WhcNMjUxMTA2MDgwMDI3WjAzMTEwLwYDVQQD
Eyg1NWEzYTUxZmVkZDNkYTgwYmQ5ODljNzM1NTBlZjg3OWVlMjY1MmJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJ/clFiAt9AzFR+8tgsVU4pvqabF
P/BaTl1+b3NTk7gpVlhOuoe0Da8aq35+IU0LTProNDA0X/Q/EhpW0Lr9HA78yM2C
y5TRrfey9YUtzuI86MGJ09yXKqvhOJ7Mf7GgniiG9DRp2fvkWMfqt3LNsEH5EDyx
XCQtuYmVu9CPB+YDUczZz6xZd1Z6vZ419YkcrioD4c3/9i1q+Bahr+uXPfwItJiU
9tpCFplATrvtMW6M6ZKdp9ibZ7opb5TPQ4jARl2t0g+Mhz0199V0YSA/dMUmfhRC
NhThXPMoHDZFs0rsVz2f28W/JVa/k+NcA2fyStDNAD+GnhjdbggSI+wwzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFWjpR/t09qAvZicc1UO+HnuJlK+MB8GA1UdIwQY
MBaAFHfI2UvfN+D5AM1qjEIs2xTZfOtGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDhqWlM5ODM0UGtBeldxTVFpemJGTmw4NjBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy82Y2U1M2MtNzY3MC00N2E3LTgxYWUt
NTRjMGFlNjE3NmQ0LzEvZDhqWlM5ODM0UGtBeldxTVFpemJGTmw4NjBZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy82Y2U1M2MtNzY3MC00N2E3LTgxYWUtNTRjMGFlNjE3NmQ0
LzEvZDhqWlM5ODM0UGtBeldxTVFpemJGTmw4NjBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa4bMG5FI
XuMxiz/R3M8n1E3NST5qj7Rh26omMe3HRA9eMD6bHtQdfog1KMPWiPZ+bw83Nlt3
amIftjLY1Gj8koqW7qzjZSj3BMXMT4/C0mpoRsGezmTI6tZNyTT9DcW8n+mid0tG
l8GE2wnSmFpXd3Oxh6CknHqA1v/UJgALHYlp4F65HLj9scHdvJiwCxjti1zxkDyY
vA/QnsvVWJ5oRlraf+7SEs9XRS19H/efUkFsZkJO2EXZ8HcrVdRcBAI03j+C57Wf
Bcx0EMBJAkHH+cFWltNkeP0y6wqFUXE7aH0RS5PKmCgbBSwscjb4a0X3R6CDAE/7
YiHhXFwazL3K/Q==
-----END CERTIFICATE-----
Generated at Wed Nov 5 11:31:41 2025 by rpki-client