Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/d17665-68b4-496b-9d9a-c5e1722a0c68/1/j31CCyNDzZHsI_UImoNC6J1tkWU.mft
File: j31CCyNDzZHsI_UImoNC6J1tkWU.mft (raw, json)
Hash identifier: Wv3XKtj2E0GY06tX0pJqba+sA5bvT56Bjt7YNdJBp+4=
Subject key identifier: 7D:1C:BA:8A:5F:95:64:44:F5:B6:64:A2:BE:AA:29:BF:50:AC:AF:6A
Authority key identifier: 8F:7D:42:0B:23:43:CD:91:EC:23:F5:08:9A:83:42:E8:9D:6D:91:65
Certificate issuer: /CN=8f7d420b2343cd91ec23f5089a8342e89d6d9165
Certificate serial: 019A71B91113FD0C2125E0FD6920253AAC94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j31CCyNDzZHsI_UImoNC6J1tkWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/d17665-68b4-496b-9d9a-c5e1722a0c68/1/j31CCyNDzZHsI_UImoNC6J1tkWU.mft
Manifest number: 1085
Signing time: Tue 11 Nov 2025 07:02:25 +0000
Manifest this update: Tue 11 Nov 2025 07:02:25 +0000
Manifest next update: Wed 12 Nov 2025 07:02:25 +0000
Files and hashes: 1: j31CCyNDzZHsI_UImoNC6J1tkWU.crl (hash: A9dhqrvSvEDtIA2IP4Yzfzsn9VMnjne8pAZH+D48TBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/d17665-68b4-496b-9d9a-c5e1722a0c68/1/j31CCyNDzZHsI_UImoNC6J1tkWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/d17665-68b4-496b-9d9a-c5e1722a0c68/1/j31CCyNDzZHsI_UImoNC6J1tkWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/j31CCyNDzZHsI_UImoNC6J1tkWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:11:13:fd:0c:21:25:e0:fd:69:20:25:3a:ac:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f7d420b2343cd91ec23f5089a8342e89d6d9165
Validity
Not Before: Nov 11 07:02:25 2025 GMT
Not After : Nov 12 07:02:25 2025 GMT
Subject: CN=7d1cba8a5f956444f5b664a2beaa29bf50acaf6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:85:77:ec:ef:a8:40:36:f8:82:94:e3:d7:d3:
3d:34:57:51:0f:a6:9a:81:85:10:4f:7d:78:c1:f0:
09:b8:a3:29:15:4d:f8:e3:fc:02:6c:4f:be:7c:58:
ea:c7:8a:60:39:f9:a1:db:d8:ea:77:8e:92:3f:e4:
51:3d:f2:8d:8a:6e:14:d2:42:69:92:0d:d3:ce:66:
91:80:9f:92:ab:be:62:98:d9:6b:b2:9c:87:ad:bc:
7f:46:76:b5:a9:e5:1d:24:1d:bc:99:c6:ae:ef:7d:
4a:00:84:d9:6a:e6:c9:2e:84:9a:70:ee:92:c9:92:
f0:34:db:e2:7a:58:eb:93:00:93:d4:f3:b7:74:7e:
ef:6a:7e:ac:db:b3:5d:d1:bd:c8:2d:60:ce:c6:93:
aa:d6:f8:89:ba:67:a2:2a:1c:d6:81:f1:e2:ae:8c:
91:37:b5:13:04:db:ec:fb:ad:2e:eb:7d:9f:68:5b:
f6:9e:f9:c1:f2:7f:73:74:c1:00:8c:79:53:6b:f6:
0c:61:82:d8:04:49:34:f4:3b:e0:8b:19:63:f9:30:
48:2c:ce:da:b4:e0:65:bd:93:2c:8e:a3:61:2c:82:
6c:dd:74:9f:5a:cb:63:9f:75:88:0d:50:61:ce:3d:
cc:3b:c8:dd:f0:51:ab:49:4c:b2:6e:d3:07:e3:25:
9f:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:1C:BA:8A:5F:95:64:44:F5:B6:64:A2:BE:AA:29:BF:50:AC:AF:6A
X509v3 Authority Key Identifier:
keyid:8F:7D:42:0B:23:43:CD:91:EC:23:F5:08:9A:83:42:E8:9D:6D:91:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j31CCyNDzZHsI_UImoNC6J1tkWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/d17665-68b4-496b-9d9a-c5e1722a0c68/1/j31CCyNDzZHsI_UImoNC6J1tkWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/d17665-68b4-496b-9d9a-c5e1722a0c68/1/j31CCyNDzZHsI_UImoNC6J1tkWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:c6:12:66:ec:6a:e5:a7:84:4c:b4:f5:f5:ad:fd:59:ce:15:
cd:bf:3e:2b:e2:4d:15:cc:79:37:99:a3:80:77:fc:ae:8d:4f:
8f:f0:59:bb:3b:b3:5c:5c:98:24:07:47:06:ba:63:9d:a0:92:
e5:e5:77:9e:aa:34:ab:3b:18:30:48:21:04:65:58:c3:93:e1:
7f:f6:3a:af:b0:e2:59:d9:ea:b3:1f:5e:71:90:03:fc:8b:bf:
b3:82:74:e7:6a:a3:e3:5a:19:16:94:b5:d7:f4:c3:b1:54:c2:
0f:f6:25:86:ce:bc:85:3a:fe:e1:76:b1:7b:cf:19:ea:20:12:
e3:e4:5b:15:dd:d0:e0:11:b4:75:be:44:82:ce:1f:6e:cc:d4:
3b:99:41:80:58:fb:f4:78:fe:65:b8:d7:46:8a:3a:ce:92:81:
3c:2d:ef:ba:78:c5:ac:5c:5a:82:d8:59:13:c6:a4:f9:5b:6f:
26:68:e6:00:f7:63:7a:4e:8a:5f:57:b2:ba:08:a8:eb:0e:2c:
10:43:ec:b7:65:17:cd:8d:a9:bd:b5:32:10:f3:60:58:26:07:
73:e5:d7:d1:36:a3:10:0f:75:5a:6b:72:65:4f:20:55:f3:34:
ed:14:a3:61:88:a7:ee:8c:dd:31:dc:b9:5c:d0:4d:e3:ea:42:
c4:61:7a:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuRET/QwhJeD9aSAlOqyUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmN2Q0MjBiMjM0M2NkOTFlYzIzZjUwODlhODM0MmU4OWQ2
ZDkxNjUwHhcNMjUxMTExMDcwMjI1WhcNMjUxMTEyMDcwMjI1WjAzMTEwLwYDVQQD
Eyg3ZDFjYmE4YTVmOTU2NDQ0ZjViNjY0YTJiZWFhMjliZjUwYWNhZjZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqoV37O+oQDb4gpTj19M9NFdRD6aa
gYUQT314wfAJuKMpFU344/wCbE++fFjqx4pgOfmh29jqd46SP+RRPfKNim4U0kJp
kg3TzmaRgJ+Sq75imNlrspyHrbx/Rna1qeUdJB28mcau731KAITZaubJLoSacO6S
yZLwNNvieljrkwCT1PO3dH7van6s27Nd0b3ILWDOxpOq1viJumeiKhzWgfHiroyR
N7UTBNvs+60u632faFv2nvnB8n9zdMEAjHlTa/YMYYLYBEk09Dvgixlj+TBILM7a
tOBlvZMsjqNhLIJs3XSfWstjn3WIDVBhzj3MO8jd8FGrSUyybtMH4yWfiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH0cuopflWRE9bZkor6qKb9QrK9qMB8GA1UdIwQY
MBaAFI99QgsjQ82R7CP1CJqDQuidbZFlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvajMxQ0N5TkR6WkhzSV9VSW1vTkM2SjF0a1dVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS9kMTc2NjUtNjhiNC00OTZiLTlkOWEt
YzVlMTcyMmEwYzY4LzEvajMxQ0N5TkR6WkhzSV9VSW1vTkM2SjF0a1dVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS9kMTc2NjUtNjhiNC00OTZiLTlkOWEtYzVlMTcyMmEwYzY4
LzEvajMxQ0N5TkR6WkhzSV9VSW1vTkM2SjF0a1dVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEcYSZuxq
5aeETLT19a39Wc4Vzb8+K+JNFcx5N5mjgHf8ro1Pj/BZuzuzXFyYJAdHBrpjnaCS
5eV3nqo0qzsYMEghBGVYw5Phf/Y6r7DiWdnqsx9ecZAD/Iu/s4J052qj41oZFpS1
1/TDsVTCD/Ylhs68hTr+4Xaxe88Z6iAS4+RbFd3Q4BG0db5Egs4fbszUO5lBgFj7
9Hj+ZbjXRoo6zpKBPC3vunjFrFxagthZE8ak+VtvJmjmAPdjek6KX1eyugio6w4s
EEPst2UXzY2pvbUyEPNgWCYHc+XX0TajEA91WmtyZU8gVfM07RSjYYin7ozdMdy5
XNBN4+pCxGF64Q==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:21 2025 by rpki-client