Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/71897e-5f6f-449d-b82c-a25ef4420a2a/1/t8VYxCxDrVlAbqRGye7-1CpJHuw.mft
File: t8VYxCxDrVlAbqRGye7-1CpJHuw.mft (raw, json)
Hash identifier: OctV+tFI/m7jg62BGSV5C4a/OrbaZtuAH5KxAyrG70E=
Subject key identifier: 86:5B:8D:66:30:9C:16:4C:65:0D:48:6A:03:3D:C5:84:21:1D:DC:9F
Authority key identifier: B7:C5:58:C4:2C:43:AD:59:40:6E:A4:46:C9:EE:FE:D4:2A:49:1E:EC
Certificate issuer: /CN=b7c558c42c43ad59406ea446c9eefed42a491eec
Certificate serial: 019A4E4F9C1CAA8D20DA32B63E081852B819
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t8VYxCxDrVlAbqRGye7-1CpJHuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/71897e-5f6f-449d-b82c-a25ef4420a2a/1/t8VYxCxDrVlAbqRGye7-1CpJHuw.mft
Manifest number: 0DB9
Signing time: Tue 04 Nov 2025 10:00:31 +0000
Manifest this update: Tue 04 Nov 2025 10:00:31 +0000
Manifest next update: Wed 05 Nov 2025 10:00:31 +0000
Files and hashes: 1: 9Vm6E83e5XfSlTSJaJsgPOsbxg8.roa (hash: VGm9skjMPVUUg6edMcPusOOmF7cXf1kchI2oKrFFOoI=)
2: t8VYxCxDrVlAbqRGye7-1CpJHuw.crl (hash: frGY2mzYsB51AuJ5fpnYovFK0XtNxWdCl0F82etxVS0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/71897e-5f6f-449d-b82c-a25ef4420a2a/1/t8VYxCxDrVlAbqRGye7-1CpJHuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/71897e-5f6f-449d-b82c-a25ef4420a2a/1/t8VYxCxDrVlAbqRGye7-1CpJHuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/t8VYxCxDrVlAbqRGye7-1CpJHuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:9c:1c:aa:8d:20:da:32:b6:3e:08:18:52:b8:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7c558c42c43ad59406ea446c9eefed42a491eec
Validity
Not Before: Nov 4 10:00:31 2025 GMT
Not After : Nov 5 10:00:31 2025 GMT
Subject: CN=865b8d66309c164c650d486a033dc584211ddc9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:46:12:c9:06:65:8d:9e:6b:2d:9a:53:2d:af:
b2:9e:dc:b2:71:06:a6:c8:fa:ae:e9:b8:51:be:13:
6e:db:5e:d8:79:e9:57:74:d1:f3:fd:3b:fc:99:94:
f8:95:29:1a:cf:08:2a:9f:c4:2c:fb:07:d3:12:44:
3b:f5:9b:59:e6:48:ef:76:24:2c:6c:92:d1:42:2b:
2f:ed:37:ce:c6:e4:c2:4b:c1:ba:de:f1:99:c1:ed:
52:f2:3c:22:e0:f5:3c:b2:d1:d5:ef:81:ef:4a:38:
61:e8:cb:6a:dc:79:52:51:39:56:32:06:ad:87:2a:
44:1d:2b:c9:2c:9a:07:3c:20:99:0a:72:73:94:66:
f8:fe:f3:1b:fd:85:fc:a8:a3:07:77:96:d3:5e:95:
f4:7b:fb:59:9a:1a:48:39:ab:a2:32:93:65:6a:5d:
d9:00:c9:d3:d1:ec:81:83:9c:b2:e3:d7:38:47:2a:
6c:84:42:7e:d9:97:bf:79:c6:c0:a5:f0:52:c5:63:
0e:39:8e:19:2b:a0:62:38:a2:1c:aa:e6:43:da:cc:
5d:22:8f:11:54:eb:89:f6:90:68:12:30:03:27:19:
95:98:d4:b1:83:2f:9f:0d:74:4b:93:85:17:f1:6c:
4a:1e:dc:dd:9b:8d:40:f5:27:36:b8:df:eb:d7:43:
9a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:5B:8D:66:30:9C:16:4C:65:0D:48:6A:03:3D:C5:84:21:1D:DC:9F
X509v3 Authority Key Identifier:
keyid:B7:C5:58:C4:2C:43:AD:59:40:6E:A4:46:C9:EE:FE:D4:2A:49:1E:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t8VYxCxDrVlAbqRGye7-1CpJHuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/71897e-5f6f-449d-b82c-a25ef4420a2a/1/t8VYxCxDrVlAbqRGye7-1CpJHuw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/71897e-5f6f-449d-b82c-a25ef4420a2a/1/t8VYxCxDrVlAbqRGye7-1CpJHuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:20:7c:ce:93:d3:1b:e0:79:4c:1c:e2:d8:79:f6:f8:a2:ef:
5a:46:4a:ed:6c:87:f3:21:a4:e6:3e:4d:ac:85:88:f1:62:f3:
83:71:06:f2:df:80:21:2c:66:57:00:46:63:29:f9:90:ac:59:
20:1d:f0:79:c7:89:a6:8e:e4:80:8f:93:11:69:67:60:8f:a1:
83:5b:b5:dc:80:53:69:89:47:2c:8d:4a:54:78:ba:49:f1:e6:
52:e6:be:18:87:d2:b0:f2:4e:ac:d7:6c:79:55:db:1b:7e:ea:
1e:af:19:a2:9b:02:81:2a:e6:96:34:d7:a3:6c:24:10:23:2f:
e1:52:db:d4:3c:b6:46:78:12:a8:c3:f3:0b:a1:20:ab:a8:b3:
e0:cd:b4:9f:33:c6:78:47:fb:9d:bb:52:84:01:82:ff:df:01:
4e:67:5d:b2:cb:00:b0:09:3a:af:c5:8d:02:0e:22:bc:82:4f:
b8:b1:b6:00:8e:be:76:29:fd:0d:7e:e8:3d:94:a2:20:16:9e:
11:df:39:45:e8:c6:11:64:a9:6a:c2:9b:b2:3d:b7:fd:5c:93:
7c:31:af:80:af:6c:3d:a7:14:85:42:c6:6f:97:1c:69:dc:f7:
ad:79:df:e8:f0:ce:bc:90:59:c3:a0:2b:4e:fd:02:0b:0c:73:
e2:cb:36:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOT5wcqo0g2jK2PggYUrgZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3YzU1OGM0MmM0M2FkNTk0MDZlYTQ0NmM5ZWVmZWQ0MmE0
OTFlZWMwHhcNMjUxMTA0MTAwMDMxWhcNMjUxMTA1MTAwMDMxWjAzMTEwLwYDVQQD
Eyg4NjViOGQ2NjMwOWMxNjRjNjUwZDQ4NmEwMzNkYzU4NDIxMWRkYzlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAykYSyQZljZ5rLZpTLa+yntyycQam
yPqu6bhRvhNu217YeelXdNHz/Tv8mZT4lSkazwgqn8Qs+wfTEkQ79ZtZ5kjvdiQs
bJLRQisv7TfOxuTCS8G63vGZwe1S8jwi4PU8stHV74HvSjhh6Mtq3HlSUTlWMgat
hypEHSvJLJoHPCCZCnJzlGb4/vMb/YX8qKMHd5bTXpX0e/tZmhpIOauiMpNlal3Z
AMnT0eyBg5yy49c4RypshEJ+2Ze/ecbApfBSxWMOOY4ZK6BiOKIcquZD2sxdIo8R
VOuJ9pBoEjADJxmVmNSxgy+fDXRLk4UX8WxKHtzdm41A9Sc2uN/r10OasQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIZbjWYwnBZMZQ1IagM9xYQhHdyfMB8GA1UdIwQY
MBaAFLfFWMQsQ61ZQG6kRsnu/tQqSR7sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDhWWXhDeERyVmxBYnFSR3llNy0xQ3BKSHV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi83MTg5N2UtNWY2Zi00NDlkLWI4MmMt
YTI1ZWY0NDIwYTJhLzEvdDhWWXhDeERyVmxBYnFSR3llNy0xQ3BKSHV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi83MTg5N2UtNWY2Zi00NDlkLWI4MmMtYTI1ZWY0NDIwYTJh
LzEvdDhWWXhDeERyVmxBYnFSR3llNy0xQ3BKSHV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGSB8zpPT
G+B5TBzi2Hn2+KLvWkZK7WyH8yGk5j5NrIWI8WLzg3EG8t+AISxmVwBGYyn5kKxZ
IB3weceJpo7kgI+TEWlnYI+hg1u13IBTaYlHLI1KVHi6SfHmUua+GIfSsPJOrNds
eVXbG37qHq8ZopsCgSrmljTXo2wkECMv4VLb1Dy2RngSqMPzC6Egq6iz4M20nzPG
eEf7nbtShAGC/98BTmddsssAsAk6r8WNAg4ivIJPuLG2AI6+din9DX7oPZSiIBae
Ed85RejGEWSpasKbsj23/VyTfDGvgK9sPacUhULGb5ccadz3rXnf6PDOvJBZw6Ar
Tv0CCwxz4ss21A==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:33:47 2025 by rpki-client