Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/928593-7a0a-4312-86e2-f82d600dd4e2/1/8J3iYg0i-mnFTL68by9IUFbOL-U.mft
File: 8J3iYg0i-mnFTL68by9IUFbOL-U.mft (raw, json)
Hash identifier: hH3YFWv18RmMnmEO1/fKQFtM+FcPGRbBzSkoptPVnLw=
Subject key identifier: 71:0E:14:73:C1:E4:F9:A1:37:C4:93:E1:67:A1:83:AB:E1:AB:0D:7C
Authority key identifier: F0:9D:E2:62:0D:22:FA:69:C5:4C:BE:BC:6F:2F:48:50:56:CE:2F:E5
Certificate issuer: /CN=f09de2620d22fa69c54cbebc6f2f485056ce2fe5
Certificate serial: 019A71EEEC8CB49737B104333257C3C89E74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8J3iYg0i-mnFTL68by9IUFbOL-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/928593-7a0a-4312-86e2-f82d600dd4e2/1/8J3iYg0i-mnFTL68by9IUFbOL-U.mft
Manifest number: 03DE
Signing time: Tue 11 Nov 2025 08:01:14 +0000
Manifest this update: Tue 11 Nov 2025 08:01:14 +0000
Manifest next update: Wed 12 Nov 2025 08:01:14 +0000
Files and hashes: 1: 8J3iYg0i-mnFTL68by9IUFbOL-U.crl (hash: /OUe26n5ph40kWr4G/Yn+YX0Euzmv4fStoTLfKSFuEM=)
2: gtqtvDZxxq5MJdwetq5IVth42z0.roa (hash: DsoC8S+ekUdxd5VaMM9eODyiV+OQ6KDTcMckhDvQ+dw=)
3: vlbjkguhua3sXNAb4WL9C-kH7NI.roa (hash: W2Tg0b912XPXpVMo5wmJMbF6s29yN1E6dtpyPDGr82E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/928593-7a0a-4312-86e2-f82d600dd4e2/1/8J3iYg0i-mnFTL68by9IUFbOL-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/928593-7a0a-4312-86e2-f82d600dd4e2/1/8J3iYg0i-mnFTL68by9IUFbOL-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/8J3iYg0i-mnFTL68by9IUFbOL-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:ec:8c:b4:97:37:b1:04:33:32:57:c3:c8:9e:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f09de2620d22fa69c54cbebc6f2f485056ce2fe5
Validity
Not Before: Nov 11 08:01:14 2025 GMT
Not After : Nov 12 08:01:14 2025 GMT
Subject: CN=710e1473c1e4f9a137c493e167a183abe1ab0d7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:21:11:a7:c4:38:aa:0f:ec:a3:82:db:a9:77:
71:15:34:02:de:14:a5:77:fe:bf:b1:04:78:1a:34:
ba:97:29:c5:a7:cc:51:0e:31:0b:7a:33:2c:f3:c0:
46:00:9e:d3:6d:00:ca:80:d7:81:23:ec:01:48:af:
e0:66:14:8f:a4:e2:64:54:68:71:8c:d5:92:86:87:
e6:45:21:8c:22:f6:52:b1:fa:88:9f:d9:10:d1:91:
54:8a:3e:16:c7:aa:db:de:0f:95:bb:0e:5f:38:6c:
c1:3e:6a:ec:da:26:57:86:a3:67:3a:84:be:b5:e0:
13:f7:74:a1:cd:94:fa:3b:2b:e5:3b:8a:a2:93:61:
dc:f7:ac:6e:02:89:c0:90:1d:c6:07:8b:df:e2:d6:
3f:69:08:3e:56:ab:f8:bb:c0:e1:0d:fd:d5:23:e8:
9e:29:0f:21:bc:1c:e1:3f:73:8d:de:d6:f4:e3:11:
68:4b:96:12:7e:0b:6b:d4:21:d5:ce:93:0a:5b:c1:
f9:f9:c1:56:d6:8c:25:cf:3c:ab:1c:7a:dd:e6:2c:
16:ce:47:d3:07:10:51:04:ec:79:4a:0f:23:9f:62:
56:55:c3:7e:da:84:43:31:14:54:13:25:03:64:e5:
47:2d:36:b8:28:15:1f:5f:eb:9b:9e:ea:aa:41:2a:
3f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:0E:14:73:C1:E4:F9:A1:37:C4:93:E1:67:A1:83:AB:E1:AB:0D:7C
X509v3 Authority Key Identifier:
keyid:F0:9D:E2:62:0D:22:FA:69:C5:4C:BE:BC:6F:2F:48:50:56:CE:2F:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8J3iYg0i-mnFTL68by9IUFbOL-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/928593-7a0a-4312-86e2-f82d600dd4e2/1/8J3iYg0i-mnFTL68by9IUFbOL-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/928593-7a0a-4312-86e2-f82d600dd4e2/1/8J3iYg0i-mnFTL68by9IUFbOL-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:49:2d:2b:54:87:3e:5a:a7:17:61:24:d6:d4:1d:71:d9:91:
ff:eb:f8:31:e3:e9:fe:6a:04:42:69:f3:de:f5:16:ed:40:53:
c6:25:32:57:05:15:11:c3:82:3e:a2:cb:a5:59:42:0f:6a:77:
1e:2d:8a:4c:a7:9e:2a:13:69:74:5c:f1:12:d0:31:53:d6:5c:
4e:1b:68:ff:d7:2a:59:7c:9f:75:8c:1f:4a:d7:74:80:67:fb:
fe:ef:1a:01:ba:41:3b:70:ad:ab:73:f5:8a:54:6e:db:28:6c:
9e:97:76:08:97:75:81:a4:36:ef:df:f9:f5:58:6b:9b:76:5b:
54:2f:ed:64:26:b2:a3:83:cf:c8:9b:27:ac:5b:83:58:5f:0c:
72:7c:48:73:dc:66:fa:1d:6b:63:da:1c:8e:b0:97:f5:d5:62:
0e:dd:62:7b:f8:70:d7:30:ec:18:f8:20:ff:5d:32:97:ce:f0:
03:4b:71:20:92:4a:02:35:25:a0:66:73:1c:1d:a7:90:6c:ef:
f2:92:2e:bf:64:a0:cb:51:9b:e4:46:d7:6a:04:94:6d:aa:e9:
5c:5a:9a:f7:64:15:60:04:ea:f0:40:05:12:e9:13:9d:d9:f7:
f4:7e:02:e6:f4:7c:5b:87:10:5f:f9:73:f4:fa:f4:79:bb:85:
1d:03:0c:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpx7uyMtJc3sQQzMlfDyJ50MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwOWRlMjYyMGQyMmZhNjljNTRjYmViYzZmMmY0ODUwNTZj
ZTJmZTUwHhcNMjUxMTExMDgwMTE0WhcNMjUxMTEyMDgwMTE0WjAzMTEwLwYDVQQD
Eyg3MTBlMTQ3M2MxZTRmOWExMzdjNDkzZTE2N2ExODNhYmUxYWIwZDdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqiERp8Q4qg/so4LbqXdxFTQC3hSl
d/6/sQR4GjS6lynFp8xRDjELejMs88BGAJ7TbQDKgNeBI+wBSK/gZhSPpOJkVGhx
jNWShofmRSGMIvZSsfqIn9kQ0ZFUij4Wx6rb3g+Vuw5fOGzBPmrs2iZXhqNnOoS+
teAT93ShzZT6OyvlO4qik2Hc96xuAonAkB3GB4vf4tY/aQg+Vqv4u8DhDf3VI+ie
KQ8hvBzhP3ON3tb04xFoS5YSfgtr1CHVzpMKW8H5+cFW1owlzzyrHHrd5iwWzkfT
BxBRBOx5Sg8jn2JWVcN+2oRDMRRUEyUDZOVHLTa4KBUfX+ubnuqqQSo/3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHEOFHPB5PmhN8ST4Wehg6vhqw18MB8GA1UdIwQY
MBaAFPCd4mINIvppxUy+vG8vSFBWzi/lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEozaVlnMGktbW5GVEw2OGJ5OUlVRmJPTC1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS85Mjg1OTMtN2EwYS00MzEyLTg2ZTIt
ZjgyZDYwMGRkNGUyLzEvOEozaVlnMGktbW5GVEw2OGJ5OUlVRmJPTC1VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS85Mjg1OTMtN2EwYS00MzEyLTg2ZTItZjgyZDYwMGRkNGUy
LzEvOEozaVlnMGktbW5GVEw2OGJ5OUlVRmJPTC1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR0ktK1SH
PlqnF2Ek1tQdcdmR/+v4MePp/moEQmnz3vUW7UBTxiUyVwUVEcOCPqLLpVlCD2p3
Hi2KTKeeKhNpdFzxEtAxU9ZcThto/9cqWXyfdYwfStd0gGf7/u8aAbpBO3Ctq3P1
ilRu2yhsnpd2CJd1gaQ279/59Vhrm3ZbVC/tZCayo4PPyJsnrFuDWF8McnxIc9xm
+h1rY9ocjrCX9dViDt1ie/hw1zDsGPgg/10yl87wA0txIJJKAjUloGZzHB2nkGzv
8pIuv2Sgy1Gb5EbXagSUbarpXFqa92QVYATq8EAFEukTndn39H4C5vR8W4cQX/lz
9Pr0ebuFHQMMcg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:08:05 2025 by rpki-client