Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/5d0b7d-db96-4387-93ec-8469cf659101/1/d8e0V_mvBCkkFCNzzgkPf6h2JX4.mft
File: d8e0V_mvBCkkFCNzzgkPf6h2JX4.mft (raw, json)
Hash identifier: M0l9aBE9QLl7sj1UQbaMp1SXj4k5PFkxeBS4LfUtC+s=
Subject key identifier: DA:D1:AF:1A:6E:30:54:73:8C:A1:A8:01:40:44:25:E1:A0:DA:4E:3C
Authority key identifier: 77:C7:B4:57:F9:AF:04:29:24:14:23:73:CE:09:0F:7F:A8:76:25:7E
Certificate issuer: /CN=77c7b457f9af042924142373ce090f7fa876257e
Certificate serial: 019A50E37699E1BE9F1FB48C10011216B995
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8e0V_mvBCkkFCNzzgkPf6h2JX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/5d0b7d-db96-4387-93ec-8469cf659101/1/d8e0V_mvBCkkFCNzzgkPf6h2JX4.mft
Manifest number: 0FCE
Signing time: Tue 04 Nov 2025 22:01:15 +0000
Manifest this update: Tue 04 Nov 2025 22:01:15 +0000
Manifest next update: Wed 05 Nov 2025 22:01:15 +0000
Files and hashes: 1: d8e0V_mvBCkkFCNzzgkPf6h2JX4.crl (hash: AijDNsm1y9aPq1rNZHcs8fdAHzsMibiPGKy6NeheI98=)
2: gLKpyPGbqCEdbx2uKWZ-HtuhLy0.roa (hash: f77sZOCl1dYzZqqQSp/e70T40ZHDdgkRvhdb7798S4A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/5d0b7d-db96-4387-93ec-8469cf659101/1/d8e0V_mvBCkkFCNzzgkPf6h2JX4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/5d0b7d-db96-4387-93ec-8469cf659101/1/d8e0V_mvBCkkFCNzzgkPf6h2JX4.mft
rsync://rpki.ripe.net/repository/DEFAULT/d8e0V_mvBCkkFCNzzgkPf6h2JX4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:76:99:e1:be:9f:1f:b4:8c:10:01:12:16:b9:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77c7b457f9af042924142373ce090f7fa876257e
Validity
Not Before: Nov 4 22:01:15 2025 GMT
Not After : Nov 5 22:01:15 2025 GMT
Subject: CN=dad1af1a6e3054738ca1a801404425e1a0da4e3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:cb:6c:73:cd:3d:97:bd:79:a8:0c:6f:ab:67:
45:21:09:2a:b3:7d:6e:23:d3:b5:18:17:84:30:53:
9a:5b:37:24:70:c8:15:86:15:a9:de:d7:1e:a0:e4:
aa:43:9c:ef:5b:98:1d:a6:0e:a1:3e:6d:e6:fc:18:
e6:83:c9:37:25:3c:7b:87:ed:57:20:64:c7:61:06:
f3:ad:56:cc:73:6c:41:37:e0:78:fe:17:30:24:b6:
15:8d:6e:8e:be:3a:db:2d:cd:52:73:63:a1:aa:2e:
1a:7d:b9:42:7b:a3:42:7e:6f:3a:83:d7:c8:3d:0e:
87:09:d2:00:9a:20:b1:af:98:3d:8c:65:9b:eb:41:
5a:69:92:3f:09:b2:4e:ca:99:ee:47:20:29:91:b5:
94:c6:89:bf:4f:ed:be:cd:78:21:ec:ac:69:a4:42:
2e:a1:08:ec:84:b6:05:2d:cf:51:37:61:97:4c:77:
d2:b3:50:0a:2c:48:c9:c5:bd:cf:a7:9b:6a:96:17:
22:ec:ea:8d:7b:f0:79:89:5a:2b:33:9e:f7:3f:7c:
c6:16:84:d1:c0:11:3a:92:76:3d:b3:0b:78:1b:ec:
3f:54:60:c3:29:89:14:27:16:79:e4:dd:6f:ff:2b:
46:01:32:a1:dc:60:9a:64:ed:91:24:df:59:29:57:
9a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:D1:AF:1A:6E:30:54:73:8C:A1:A8:01:40:44:25:E1:A0:DA:4E:3C
X509v3 Authority Key Identifier:
keyid:77:C7:B4:57:F9:AF:04:29:24:14:23:73:CE:09:0F:7F:A8:76:25:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8e0V_mvBCkkFCNzzgkPf6h2JX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5d0b7d-db96-4387-93ec-8469cf659101/1/d8e0V_mvBCkkFCNzzgkPf6h2JX4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5d0b7d-db96-4387-93ec-8469cf659101/1/d8e0V_mvBCkkFCNzzgkPf6h2JX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:b0:6c:c8:c3:e4:01:31:24:dd:78:00:c5:71:02:38:d5:74:
a5:b9:2d:bb:3b:2e:aa:4c:45:5f:51:a9:31:f1:e4:25:76:81:
09:c5:13:84:b0:b2:ac:eb:6a:45:44:6c:f9:f7:cf:92:a6:92:
f6:8d:a3:38:09:d2:29:b1:f0:b5:00:63:bb:d1:23:68:4d:af:
b3:13:c3:01:11:1e:bf:87:f8:5c:f9:60:bc:56:d2:fa:5d:b6:
02:3e:a3:02:55:e9:62:c6:4c:c6:57:8d:77:30:cd:21:4a:57:
88:29:66:63:da:8c:92:ba:19:0f:9b:d9:8d:47:16:8e:9d:61:
fc:b6:be:42:2a:56:d2:2e:37:a4:52:38:91:f4:fa:28:47:d2:
8b:c9:e8:67:56:b4:2a:7a:54:4f:22:00:59:cd:89:49:ab:6b:
b9:82:6d:89:e7:a0:ac:c0:59:26:43:b1:cb:b4:b8:80:96:86:
40:95:2a:94:57:6b:be:77:db:5c:79:24:66:05:9c:1a:65:fb:
0f:ae:33:a2:92:62:90:97:82:5d:7a:12:9c:d9:a8:fe:2a:6a:
0d:c7:45:72:62:b4:d9:b6:b1:8d:d1:f0:c5:31:e9:69:93:9a:
9b:88:e8:b4:4c:2c:f0:39:50:0e:ad:06:f9:56:a0:98:63:c6:
29:b9:99:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQ43aZ4b6fH7SMEAESFrmVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3YzdiNDU3ZjlhZjA0MjkyNDE0MjM3M2NlMDkwZjdmYTg3
NjI1N2UwHhcNMjUxMTA0MjIwMTE1WhcNMjUxMTA1MjIwMTE1WjAzMTEwLwYDVQQD
EyhkYWQxYWYxYTZlMzA1NDczOGNhMWE4MDE0MDQ0MjVlMWEwZGE0ZTNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAostsc809l715qAxvq2dFIQkqs31u
I9O1GBeEMFOaWzckcMgVhhWp3tceoOSqQ5zvW5gdpg6hPm3m/Bjmg8k3JTx7h+1X
IGTHYQbzrVbMc2xBN+B4/hcwJLYVjW6OvjrbLc1Sc2Ohqi4afblCe6NCfm86g9fI
PQ6HCdIAmiCxr5g9jGWb60FaaZI/CbJOypnuRyApkbWUxom/T+2+zXgh7KxppEIu
oQjshLYFLc9RN2GXTHfSs1AKLEjJxb3Pp5tqlhci7OqNe/B5iVorM573P3zGFoTR
wBE6knY9swt4G+w/VGDDKYkUJxZ55N1v/ytGATKh3GCaZO2RJN9ZKVeaVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNrRrxpuMFRzjKGoAUBEJeGg2k48MB8GA1UdIwQY
MBaAFHfHtFf5rwQpJBQjc84JD3+odiV+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDhlMFZfbXZCQ2trRkNOenpna1BmNmgySlg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS81ZDBiN2QtZGI5Ni00Mzg3LTkzZWMt
ODQ2OWNmNjU5MTAxLzEvZDhlMFZfbXZCQ2trRkNOenpna1BmNmgySlg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS81ZDBiN2QtZGI5Ni00Mzg3LTkzZWMtODQ2OWNmNjU5MTAx
LzEvZDhlMFZfbXZCQ2trRkNOenpna1BmNmgySlg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANbBsyMPk
ATEk3XgAxXECONV0pbktuzsuqkxFX1GpMfHkJXaBCcUThLCyrOtqRURs+ffPkqaS
9o2jOAnSKbHwtQBju9EjaE2vsxPDAREev4f4XPlgvFbS+l22Aj6jAlXpYsZMxleN
dzDNIUpXiClmY9qMkroZD5vZjUcWjp1h/La+QipW0i43pFI4kfT6KEfSi8noZ1a0
KnpUTyIAWc2JSatruYJtieegrMBZJkOxy7S4gJaGQJUqlFdrvnfbXHkkZgWcGmX7
D64zopJikJeCXXoSnNmo/ipqDcdFcmK02baxjdHwxTHpaZOam4jotEws8DlQDq0G
+VagmGPGKbmZHw==
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:44:26 2025 by rpki-client