Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/6e272d-add1-41ec-954b-220bc43cd246/1/aJwdYcDzPDCwC1yoChXR0lVsB0M.mft
File: aJwdYcDzPDCwC1yoChXR0lVsB0M.mft (raw, json)
Hash identifier: 7lXJSCv4pvFsyiu7VpguagqrozoqM6aurPJyqpKU3xA=
Subject key identifier: 7F:EF:7F:A4:0E:AD:38:49:90:6C:08:F3:24:1D:9E:06:F6:65:C7:0F
Authority key identifier: 68:9C:1D:61:C0:F3:3C:30:B0:0B:5C:A8:0A:15:D1:D2:55:6C:07:43
Certificate issuer: /CN=689c1d61c0f33c30b00b5ca80a15d1d2556c0743
Certificate serial: 019A88AD1D7ED0C0B6C2280F69793C37F3D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aJwdYcDzPDCwC1yoChXR0lVsB0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/6e272d-add1-41ec-954b-220bc43cd246/1/aJwdYcDzPDCwC1yoChXR0lVsB0M.mft
Manifest number: 08
Signing time: Sat 15 Nov 2025 18:00:37 +0000
Manifest this update: Sat 15 Nov 2025 18:00:37 +0000
Manifest next update: Sun 16 Nov 2025 18:00:37 +0000
Files and hashes: 1: aJwdYcDzPDCwC1yoChXR0lVsB0M.crl (hash: CBgxCxRk5HjKRSeFiBVISG0sP8k4AjC6Ap2K+8q5mwY=)
2: rVfDbsZrGJpjUZeNznbeAo8CFJY.roa (hash: F3KrQHQkHhqUHzLoNM3e3utebm2/Ci8CxuSs7+7DOWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/6e272d-add1-41ec-954b-220bc43cd246/1/aJwdYcDzPDCwC1yoChXR0lVsB0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/6e272d-add1-41ec-954b-220bc43cd246/1/aJwdYcDzPDCwC1yoChXR0lVsB0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/aJwdYcDzPDCwC1yoChXR0lVsB0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Nov 2025 18:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:88:ad:1d:7e:d0:c0:b6:c2:28:0f:69:79:3c:37:f3:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=689c1d61c0f33c30b00b5ca80a15d1d2556c0743
Validity
Not Before: Nov 15 18:00:37 2025 GMT
Not After : Nov 16 18:00:37 2025 GMT
Subject: CN=7fef7fa40ead3849906c08f3241d9e06f665c70f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:2f:77:4b:e7:44:97:8e:f4:56:55:54:07:fc:
d4:7d:4d:34:f3:68:8f:ac:24:5e:7e:eb:d5:d0:66:
8e:04:f7:5f:c4:84:27:4f:a7:93:8f:8d:c3:4a:f0:
05:5b:5a:b9:66:bf:56:fd:35:92:a0:d6:56:35:9f:
47:83:33:86:84:43:20:e0:6c:93:19:3e:43:0e:82:
47:4d:d8:02:63:f1:19:56:d2:40:bb:36:99:73:18:
5e:95:c3:fb:14:aa:2b:14:44:af:81:0e:48:54:ff:
50:a5:a9:32:9a:1c:13:9f:9f:e9:40:02:a8:10:25:
07:21:ff:ed:d5:88:09:ae:0d:36:16:a2:2f:a5:e4:
d6:0e:0b:20:41:aa:fa:0e:d7:e3:a7:8b:ba:5c:b2:
ae:be:b8:8b:e4:18:22:38:17:ae:7f:00:8f:00:4c:
df:ac:ce:bc:a2:ec:c4:6f:f4:c1:c2:b4:4f:56:6d:
4a:7b:ad:9b:fd:ff:30:87:4d:6b:e8:0c:2a:cc:fd:
ef:0b:d4:d3:36:35:17:c6:18:8e:01:5b:3c:cc:5d:
d1:59:d7:99:26:9c:7f:f3:1e:f3:76:4b:46:21:b6:
05:aa:b2:31:dd:62:b0:f3:15:8a:20:ad:52:b8:27:
04:38:ca:8a:5e:b4:58:44:54:fb:05:36:b5:00:18:
b6:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:EF:7F:A4:0E:AD:38:49:90:6C:08:F3:24:1D:9E:06:F6:65:C7:0F
X509v3 Authority Key Identifier:
keyid:68:9C:1D:61:C0:F3:3C:30:B0:0B:5C:A8:0A:15:D1:D2:55:6C:07:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aJwdYcDzPDCwC1yoChXR0lVsB0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6e272d-add1-41ec-954b-220bc43cd246/1/aJwdYcDzPDCwC1yoChXR0lVsB0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6e272d-add1-41ec-954b-220bc43cd246/1/aJwdYcDzPDCwC1yoChXR0lVsB0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:54:e1:71:1c:ea:33:ee:6e:2c:31:f7:e7:7c:09:fe:17:f1:
51:80:a7:e2:b4:4e:f6:5e:17:47:c1:2c:92:cd:73:15:b4:fa:
de:5f:38:77:e8:d1:d7:53:d3:9c:d1:b1:46:6e:c1:29:6a:b3:
46:f9:d0:73:a0:1e:f3:95:4d:ec:5d:49:75:96:d3:a9:53:ed:
0f:7b:ac:8f:eb:98:6c:59:f1:0a:3a:7d:91:f9:30:fb:2a:a8:
e0:bd:e7:e2:35:58:55:39:15:85:e4:3d:42:27:20:14:59:88:
57:10:9c:5a:64:2e:64:ee:18:b7:d8:59:fb:79:d2:37:fa:0c:
f6:86:8c:2b:46:2e:87:16:6d:22:90:d2:72:55:a9:0c:38:f3:
09:bd:02:99:4b:5b:e1:9e:2f:f5:d4:01:d2:31:e3:f7:53:4b:
a6:2d:31:26:f7:67:e9:92:27:46:e6:ae:91:04:86:e5:3f:bc:
9f:61:c2:9a:7f:8d:32:1d:75:40:97:fd:07:fb:bf:33:0a:d9:
f9:62:88:c9:18:72:78:eb:ef:af:ae:05:41:7f:ff:e8:a4:7e:
71:f8:41:de:58:ff:4c:dd:00:9b:b7:1c:18:8c:88:a5:3a:76:
4f:e1:e3:4b:3c:99:d5:32:5a:37:6d:94:4b:db:5f:53:00:25:
e6:93:fc:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZqIrR1+0MC2wigPaXk8N/PZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4OWMxZDYxYzBmMzNjMzBiMDBiNWNhODBhMTVkMWQyNTU2
YzA3NDMwHhcNMjUxMTE1MTgwMDM3WhcNMjUxMTE2MTgwMDM3WjAzMTEwLwYDVQQD
Eyg3ZmVmN2ZhNDBlYWQzODQ5OTA2YzA4ZjMyNDFkOWUwNmY2NjVjNzBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAji93S+dEl470VlVUB/zUfU0082iP
rCRefuvV0GaOBPdfxIQnT6eTj43DSvAFW1q5Zr9W/TWSoNZWNZ9HgzOGhEMg4GyT
GT5DDoJHTdgCY/EZVtJAuzaZcxhelcP7FKorFESvgQ5IVP9QpakymhwTn5/pQAKo
ECUHIf/t1YgJrg02FqIvpeTWDgsgQar6Dtfjp4u6XLKuvriL5BgiOBeufwCPAEzf
rM68ouzEb/TBwrRPVm1Ke62b/f8wh01r6AwqzP3vC9TTNjUXxhiOAVs8zF3RWdeZ
Jpx/8x7zdktGIbYFqrIx3WKw8xWKIK1SuCcEOMqKXrRYRFT7BTa1ABi2yQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH/vf6QOrThJkGwI8yQdngb2ZccPMB8GA1UdIwQY
MBaAFGicHWHA8zwwsAtcqAoV0dJVbAdDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUp3ZFljRHpQREN3QzF5b0NoWFIwbFZzQjBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS82ZTI3MmQtYWRkMS00MWVjLTk1NGIt
MjIwYmM0M2NkMjQ2LzEvYUp3ZFljRHpQREN3QzF5b0NoWFIwbFZzQjBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS82ZTI3MmQtYWRkMS00MWVjLTk1NGItMjIwYmM0M2NkMjQ2
LzEvYUp3ZFljRHpQREN3QzF5b0NoWFIwbFZzQjBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl1ThcRzq
M+5uLDH353wJ/hfxUYCn4rRO9l4XR8Esks1zFbT63l84d+jR11PTnNGxRm7BKWqz
RvnQc6Ae85VN7F1JdZbTqVPtD3usj+uYbFnxCjp9kfkw+yqo4L3n4jVYVTkVheQ9
QicgFFmIVxCcWmQuZO4Yt9hZ+3nSN/oM9oaMK0YuhxZtIpDSclWpDDjzCb0CmUtb
4Z4v9dQB0jHj91NLpi0xJvdn6ZInRuaukQSG5T+8n2HCmn+NMh11QJf9B/u/MwrZ
+WKIyRhyeOvvr64FQX//6KR+cfhB3lj/TN0Am7ccGIyIpTp2T+HjSzyZ1TJaN22U
S9tfUwAl5pP8AQ==
-----END CERTIFICATE-----
Generated at Sun Nov 16 03:48:13 2025 by rpki-client