Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/878a1c-a7a0-4fd1-98a0-33e44621db07/1/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.mft
File: sx8GcfOZ5NogpIvTJ8R6-kpB_8M.mft (raw, json)
Hash identifier: QAxmdZLK0x/G6kY0/1HaSu3Ya0lqWW9v+cVYc/jbdSA=
Subject key identifier: D5:BF:16:9A:36:26:AA:39:D1:E2:39:7D:4F:6E:E8:C9:8D:F3:EA:3E
Authority key identifier: B3:1F:06:71:F3:99:E4:DA:20:A4:8B:D3:27:C4:7A:FA:4A:41:FF:C3
Certificate issuer: /CN=b31f0671f399e4da20a48bd327c47afa4a41ffc3
Certificate serial: 019A2A44196BE52612D1693CF354CCBBA462
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/878a1c-a7a0-4fd1-98a0-33e44621db07/1/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.mft
Manifest number: 168D
Signing time: Tue 28 Oct 2025 10:01:37 +0000
Manifest this update: Tue 28 Oct 2025 10:01:37 +0000
Manifest next update: Wed 29 Oct 2025 10:01:37 +0000
Files and hashes: 1: 1-OIAlKZkamjD55UMqzWQx8P8ujA.roa (hash: 60FXDRY9jVOvfNl6JHlrniUKuc6zQEI45l9Gv0k62G4=)
2: sx8GcfOZ5NogpIvTJ8R6-kpB_8M.crl (hash: s+YdK1mZo+iZmsNHuEilkGvGztLoPq346UFRqZSeygo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/878a1c-a7a0-4fd1-98a0-33e44621db07/1/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/878a1c-a7a0-4fd1-98a0-33e44621db07/1/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 10:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2a:44:19:6b:e5:26:12:d1:69:3c:f3:54:cc:bb:a4:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b31f0671f399e4da20a48bd327c47afa4a41ffc3
Validity
Not Before: Oct 28 10:01:37 2025 GMT
Not After : Oct 29 10:01:37 2025 GMT
Subject: CN=d5bf169a3626aa39d1e2397d4f6ee8c98df3ea3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e6:ac:54:a2:45:16:bd:25:82:fe:1a:6a:3c:
40:a5:5d:ec:96:8e:6f:d7:e6:37:67:9d:1f:f4:b0:
b1:1a:e0:84:cf:a6:67:10:a8:28:3e:92:14:ee:22:
87:76:e7:ec:ed:1a:bb:7b:01:03:d0:ef:c9:ec:86:
3e:2f:bc:65:f8:3c:46:0b:eb:1c:2c:7e:f6:72:f0:
95:27:86:3f:e4:b4:59:30:da:b0:5d:84:7b:f1:e6:
3c:bb:2a:c9:9f:26:12:f6:44:c7:3b:85:71:d3:e6:
ab:0f:ac:94:2f:ad:08:8b:3f:79:cd:31:26:82:3c:
fe:a0:04:53:80:44:5f:e8:0f:a3:72:05:c1:a5:4a:
2a:73:06:48:b9:d2:5c:db:d5:5a:eb:d2:f9:28:57:
c5:93:f9:d4:e2:5a:41:b7:bb:ca:11:60:61:3e:53:
82:f1:36:17:72:78:84:68:8d:f1:84:9f:45:27:f2:
65:b1:8c:af:31:cb:9d:85:b0:34:6c:0f:df:bb:ea:
2c:53:f7:42:bf:0a:fb:76:7e:f4:3d:09:d0:89:cf:
cb:45:15:75:58:eb:15:e0:bd:64:fe:1c:d3:e3:48:
c0:01:ce:3a:9c:27:a0:1b:9c:26:f2:c9:a9:b4:24:
5e:9b:00:38:5e:67:2c:ac:0d:cc:f4:92:c9:6a:19:
ff:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:BF:16:9A:36:26:AA:39:D1:E2:39:7D:4F:6E:E8:C9:8D:F3:EA:3E
X509v3 Authority Key Identifier:
keyid:B3:1F:06:71:F3:99:E4:DA:20:A4:8B:D3:27:C4:7A:FA:4A:41:FF:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/878a1c-a7a0-4fd1-98a0-33e44621db07/1/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/878a1c-a7a0-4fd1-98a0-33e44621db07/1/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:40:7e:ae:d7:a1:80:fa:13:27:3c:d2:8e:80:16:2d:2a:e1:
25:e3:65:d8:97:05:98:29:df:a4:8d:9f:e4:9b:f0:05:4c:d7:
35:66:a2:01:21:76:03:80:41:5d:4a:80:4f:d1:52:23:60:2e:
be:59:7e:23:5a:9d:ca:d0:f6:4b:18:6a:d6:17:ee:bb:cd:56:
31:4b:ca:ee:52:a0:20:77:86:e6:75:a7:1e:71:aa:06:dd:fd:
d7:d2:95:29:44:5b:a4:3b:52:c6:5a:f1:5f:a4:b4:d8:c0:3c:
b2:b1:64:f2:b4:96:93:da:e1:09:11:b0:3d:35:d9:13:4a:9b:
77:72:c7:a7:13:b3:80:05:58:fa:e0:e9:24:41:75:cb:e1:83:
8f:34:a8:79:3b:13:0e:0e:79:7d:51:a1:b5:9f:99:72:9e:9e:
06:fd:bc:fc:9e:72:b7:9e:ce:18:9e:c9:8f:c2:a8:65:e1:66:
25:f4:ef:42:2a:35:4e:22:31:bf:85:d2:45:38:21:02:0f:11:
48:34:ab:ab:6e:1d:f8:e5:97:64:e8:2c:77:2a:cc:d1:b7:3c:
4d:d9:29:4a:6c:d5:97:5f:02:48:ea:19:97:47:e2:11:fe:c9:
a4:8b:e6:ef:68:40:9a:4d:a6:6a:d5:5a:81:2f:34:60:fd:b3:
fe:0b:af:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoqRBlr5SYS0Wk881TMu6RiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzMWYwNjcxZjM5OWU0ZGEyMGE0OGJkMzI3YzQ3YWZhNGE0
MWZmYzMwHhcNMjUxMDI4MTAwMTM3WhcNMjUxMDI5MTAwMTM3WjAzMTEwLwYDVQQD
EyhkNWJmMTY5YTM2MjZhYTM5ZDFlMjM5N2Q0ZjZlZThjOThkZjNlYTNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+asVKJFFr0lgv4aajxApV3slo5v
1+Y3Z50f9LCxGuCEz6ZnEKgoPpIU7iKHdufs7Rq7ewED0O/J7IY+L7xl+DxGC+sc
LH72cvCVJ4Y/5LRZMNqwXYR78eY8uyrJnyYS9kTHO4Vx0+arD6yUL60Iiz95zTEm
gjz+oARTgERf6A+jcgXBpUoqcwZIudJc29Va69L5KFfFk/nU4lpBt7vKEWBhPlOC
8TYXcniEaI3xhJ9FJ/JlsYyvMcudhbA0bA/fu+osU/dCvwr7dn70PQnQic/LRRV1
WOsV4L1k/hzT40jAAc46nCegG5wm8smptCRemwA4XmcsrA3M9JLJahn/kwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNW/Fpo2Jqo50eI5fU9u6MmN8+o+MB8GA1UdIwQY
MBaAFLMfBnHzmeTaIKSL0yfEevpKQf/DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3g4R2NmT1o1Tm9ncEl2VEo4UjYta3BCXzhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC84NzhhMWMtYTdhMC00ZmQxLTk4YTAt
MzNlNDQ2MjFkYjA3LzEvc3g4R2NmT1o1Tm9ncEl2VEo4UjYta3BCXzhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC84NzhhMWMtYTdhMC00ZmQxLTk4YTAtMzNlNDQ2MjFkYjA3
LzEvc3g4R2NmT1o1Tm9ncEl2VEo4UjYta3BCXzhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbkB+rteh
gPoTJzzSjoAWLSrhJeNl2JcFmCnfpI2f5JvwBUzXNWaiASF2A4BBXUqAT9FSI2Au
vll+I1qdytD2Sxhq1hfuu81WMUvK7lKgIHeG5nWnHnGqBt3919KVKURbpDtSxlrx
X6S02MA8srFk8rSWk9rhCRGwPTXZE0qbd3LHpxOzgAVY+uDpJEF1y+GDjzSoeTsT
Dg55fVGhtZ+Zcp6eBv28/J5yt57OGJ7Jj8KoZeFmJfTvQio1TiIxv4XSRTghAg8R
SDSrq24d+OWXZOgsdyrM0bc8TdkpSmzVl18CSOoZl0fiEf7JpIvm72hAmk2matVa
gS80YP2z/guvAA==
-----END CERTIFICATE-----
Generated at Tue Oct 28 20:05:13 2025 by rpki-client