Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/878c4d-d9e4-4488-b18c-b629bb4762f0/1/ijSno_66-8hACr4dwS8ixsHopb4.mft
File: ijSno_66-8hACr4dwS8ixsHopb4.mft (raw, json)
Hash identifier: vZJFruaac00501jz2MASrgnyV9t4MSiJOqZDLLNwK+o=
Subject key identifier: FD:45:BE:D5:EA:D6:7E:43:23:2D:A0:87:0D:E1:5C:D0:6A:DB:F4:01
Authority key identifier: 8A:34:A7:A3:FE:BA:FB:C8:40:0A:BE:1D:C1:2F:22:C6:C1:E8:A5:BE
Certificate issuer: /CN=8a34a7a3febafbc8400abe1dc12f22c6c1e8a5be
Certificate serial: 019A71B8388543A4D10D14A1C31684FE3F24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ijSno_66-8hACr4dwS8ixsHopb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/878c4d-d9e4-4488-b18c-b629bb4762f0/1/ijSno_66-8hACr4dwS8ixsHopb4.mft
Manifest number: 0791
Signing time: Tue 11 Nov 2025 07:01:29 +0000
Manifest this update: Tue 11 Nov 2025 07:01:29 +0000
Manifest next update: Wed 12 Nov 2025 07:01:29 +0000
Files and hashes: 1: ijSno_66-8hACr4dwS8ixsHopb4.crl (hash: PaO10+M81sOKcimiyaUghY0g6J27bUFSfUFtYLM56Gk=)
2: yGEgCYl8bZ9Zznwa_NCt-fjvfH0.roa (hash: tqsjDiQKQV8NCrndn0YK64CRZXV/LsyL/cUUrtUlQAs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/878c4d-d9e4-4488-b18c-b629bb4762f0/1/ijSno_66-8hACr4dwS8ixsHopb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/878c4d-d9e4-4488-b18c-b629bb4762f0/1/ijSno_66-8hACr4dwS8ixsHopb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ijSno_66-8hACr4dwS8ixsHopb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:38:85:43:a4:d1:0d:14:a1:c3:16:84:fe:3f:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a34a7a3febafbc8400abe1dc12f22c6c1e8a5be
Validity
Not Before: Nov 11 07:01:29 2025 GMT
Not After : Nov 12 07:01:29 2025 GMT
Subject: CN=fd45bed5ead67e43232da0870de15cd06adbf401
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c7:69:0d:49:ad:9a:c8:17:6e:ca:06:1b:18:
8b:b8:00:ae:ef:13:93:44:dd:58:cd:ea:63:c6:d7:
56:f9:77:6e:d9:a2:80:2b:43:26:76:ce:c5:41:2c:
69:be:3d:16:a7:b4:68:84:0c:fb:18:13:1d:bc:23:
40:76:9f:20:65:1b:df:a8:70:2d:78:0f:ad:40:cd:
70:97:e6:ac:6e:c1:ca:fb:a3:fa:99:3f:1c:77:98:
f9:2b:0d:4b:28:cb:ff:fb:37:50:7f:1b:aa:fa:ce:
f3:3a:16:7d:c4:f0:b4:79:3c:b5:e1:6d:27:a4:d2:
83:f6:c5:12:3d:d2:e7:7b:9a:d4:20:94:f1:d3:1e:
a7:37:30:6c:1b:1f:1f:74:e5:bb:24:90:e4:81:02:
f7:c9:64:7e:e6:59:24:29:89:b8:23:f0:6b:cb:d9:
b9:cd:1a:5f:ad:53:ac:26:92:53:bd:fe:ce:7f:a7:
5d:fc:2c:59:90:9f:83:8d:7f:7f:43:c1:fd:cd:e0:
34:06:af:59:df:75:52:e1:07:10:70:5a:c3:ec:13:
43:f2:7a:3a:7a:d9:3b:87:97:ec:41:87:4a:bb:b8:
2b:d8:89:19:e0:46:af:ce:3c:91:0a:69:d7:5d:f2:
68:0c:80:69:86:c7:99:14:49:3f:69:21:4f:b5:5d:
fe:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:45:BE:D5:EA:D6:7E:43:23:2D:A0:87:0D:E1:5C:D0:6A:DB:F4:01
X509v3 Authority Key Identifier:
keyid:8A:34:A7:A3:FE:BA:FB:C8:40:0A:BE:1D:C1:2F:22:C6:C1:E8:A5:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ijSno_66-8hACr4dwS8ixsHopb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/878c4d-d9e4-4488-b18c-b629bb4762f0/1/ijSno_66-8hACr4dwS8ixsHopb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/878c4d-d9e4-4488-b18c-b629bb4762f0/1/ijSno_66-8hACr4dwS8ixsHopb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:fa:2b:de:fd:9c:cd:d5:55:f4:e6:84:e9:3c:52:ee:9f:42:
9c:ba:ef:d6:28:da:56:d7:22:ce:d2:55:f8:2b:58:93:ae:c5:
fe:76:10:58:d3:2b:b5:e8:a0:0d:31:c1:a1:9b:8d:f6:df:a6:
2d:12:38:16:57:d4:fe:47:09:3f:b2:3d:0d:b5:d2:fe:a3:5a:
50:58:c7:53:49:44:0a:c5:e5:d5:2f:1f:37:91:92:23:79:1a:
3c:7c:a6:db:7f:76:80:96:16:24:ee:51:a6:d6:5c:11:65:e1:
43:f2:1e:9c:47:bb:1f:b9:0a:93:86:4e:4a:50:4d:b8:6d:b3:
5b:35:4f:49:86:19:f8:4c:e1:d5:b9:ac:b1:e9:a8:91:20:d9:
f8:58:0d:f1:72:64:de:32:35:16:b3:f3:11:b9:24:80:f6:4e:
4a:33:b1:8f:94:5d:c8:f8:64:57:2c:8b:a4:33:c7:a3:fd:76:
69:b2:f1:2b:c5:61:61:6a:89:89:d0:dd:46:d6:53:3c:d7:42:
60:c5:51:01:3f:c3:d8:fa:61:8c:d7:0e:2f:68:3d:49:a2:d2:
ec:58:e5:a5:2f:b9:fd:0d:94:43:65:31:29:cb:90:ef:73:2b:
ff:5c:1a:cf:b2:50:81:4d:a8:74:0e:f2:3c:c4:43:ee:75:79:
d3:e2:0c:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuDiFQ6TRDRShwxaE/j8kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhMzRhN2EzZmViYWZiYzg0MDBhYmUxZGMxMmYyMmM2YzFl
OGE1YmUwHhcNMjUxMTExMDcwMTI5WhcNMjUxMTEyMDcwMTI5WjAzMTEwLwYDVQQD
EyhmZDQ1YmVkNWVhZDY3ZTQzMjMyZGEwODcwZGUxNWNkMDZhZGJmNDAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8dpDUmtmsgXbsoGGxiLuACu7xOT
RN1YzepjxtdW+Xdu2aKAK0Mmds7FQSxpvj0Wp7RohAz7GBMdvCNAdp8gZRvfqHAt
eA+tQM1wl+asbsHK+6P6mT8cd5j5Kw1LKMv/+zdQfxuq+s7zOhZ9xPC0eTy14W0n
pNKD9sUSPdLne5rUIJTx0x6nNzBsGx8fdOW7JJDkgQL3yWR+5lkkKYm4I/Bry9m5
zRpfrVOsJpJTvf7Of6dd/CxZkJ+DjX9/Q8H9zeA0Bq9Z33VS4QcQcFrD7BND8no6
etk7h5fsQYdKu7gr2IkZ4EavzjyRCmnXXfJoDIBphseZFEk/aSFPtV3+8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP1FvtXq1n5DIy2ghw3hXNBq2/QBMB8GA1UdIwQY
MBaAFIo0p6P+uvvIQAq+HcEvIsbB6KW+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWpTbm9fNjYtOGhBQ3I0ZHdTOGl4c0hvcGI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy84NzhjNGQtZDllNC00NDg4LWIxOGMt
YjYyOWJiNDc2MmYwLzEvaWpTbm9fNjYtOGhBQ3I0ZHdTOGl4c0hvcGI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy84NzhjNGQtZDllNC00NDg4LWIxOGMtYjYyOWJiNDc2MmYw
LzEvaWpTbm9fNjYtOGhBQ3I0ZHdTOGl4c0hvcGI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoPor3v2c
zdVV9OaE6TxS7p9CnLrv1ijaVtciztJV+CtYk67F/nYQWNMrteigDTHBoZuN9t+m
LRI4FlfU/kcJP7I9DbXS/qNaUFjHU0lECsXl1S8fN5GSI3kaPHym2392gJYWJO5R
ptZcEWXhQ/IenEe7H7kKk4ZOSlBNuG2zWzVPSYYZ+Ezh1bmssemokSDZ+FgN8XJk
3jI1FrPzEbkkgPZOSjOxj5RdyPhkVyyLpDPHo/12abLxK8VhYWqJidDdRtZTPNdC
YMVRAT/D2PphjNcOL2g9SaLS7FjlpS+5/Q2UQ2UxKcuQ73Mr/1waz7JQgU2odA7y
PMRD7nV50+IMZA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:20:40 2025 by rpki-client