Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/44ee8d-2ae8-4844-a935-d24c2ce23ab7/1/j8HWvjunicXa61l6E13l7Myrj5U.mft
File: j8HWvjunicXa61l6E13l7Myrj5U.mft (raw, json)
Hash identifier: 9Dt8kzm2mmtfaKXbh/5VWxPBZ4tM4IaoyYobWo1y65Q=
Subject key identifier: C8:F5:6A:93:9B:DB:D7:BF:71:84:A0:E0:5B:69:17:45:9A:75:5C:BC
Authority key identifier: 8F:C1:D6:BE:3B:A7:89:C5:DA:EB:59:7A:13:5D:E5:EC:CC:AB:8F:95
Certificate issuer: /CN=8fc1d6be3ba789c5daeb597a135de5ecccab8f95
Certificate serial: 019A725CAF3FF7E73277AB6F33E9EEDC303F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j8HWvjunicXa61l6E13l7Myrj5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/44ee8d-2ae8-4844-a935-d24c2ce23ab7/1/j8HWvjunicXa61l6E13l7Myrj5U.mft
Manifest number: 160F
Signing time: Tue 11 Nov 2025 10:01:07 +0000
Manifest this update: Tue 11 Nov 2025 10:01:07 +0000
Manifest next update: Wed 12 Nov 2025 10:01:07 +0000
Files and hashes: 1: j8HWvjunicXa61l6E13l7Myrj5U.crl (hash: yswRY9eOjiZNeKOaHNJGshQ1gUACUjz63OjBLacXyaQ=)
2: ns9Iu925uNPqm9SyfjZghoXo_D0.roa (hash: 5KxIGOmUfDj5TmcmXox7HeyHg9DfY+4gQjDvtCkMxCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/44ee8d-2ae8-4844-a935-d24c2ce23ab7/1/j8HWvjunicXa61l6E13l7Myrj5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/44ee8d-2ae8-4844-a935-d24c2ce23ab7/1/j8HWvjunicXa61l6E13l7Myrj5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/j8HWvjunicXa61l6E13l7Myrj5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:af:3f:f7:e7:32:77:ab:6f:33:e9:ee:dc:30:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fc1d6be3ba789c5daeb597a135de5ecccab8f95
Validity
Not Before: Nov 11 10:01:07 2025 GMT
Not After : Nov 12 10:01:07 2025 GMT
Subject: CN=c8f56a939bdbd7bf7184a0e05b6917459a755cbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f2:1f:6e:e3:f1:33:2f:fe:f9:ec:33:80:af:
db:69:50:74:be:64:23:06:c7:9b:5c:72:1e:10:1e:
ae:72:f9:46:35:76:fa:20:66:88:3c:aa:3f:ea:29:
1d:cd:ca:2f:ea:ba:5a:15:15:ab:72:98:50:02:26:
9b:6c:30:93:ce:08:47:cf:61:56:f1:71:07:47:ec:
ff:ca:7e:a6:cb:c6:78:d4:82:a2:d8:ab:b0:c9:2c:
7d:00:fc:b2:00:61:74:b9:b8:1e:06:a4:e9:f7:28:
c2:7d:5c:52:18:b2:7e:7d:13:15:55:45:26:95:4b:
87:2b:ba:5f:d8:b1:1d:0d:3b:0e:da:8a:1c:a4:88:
d2:33:13:b2:70:cf:c5:f3:68:1a:be:b7:fc:68:88:
da:9f:71:84:74:bb:60:27:c5:d0:54:90:4a:86:c3:
a2:8e:38:24:c6:51:99:91:53:05:0f:7a:40:b4:c6:
93:a7:6a:f7:4e:d2:94:ed:20:30:5b:91:a0:8d:fb:
23:3a:b6:95:0b:3f:df:6c:0d:e3:8c:a0:bc:8e:75:
6e:9d:47:27:9a:30:47:46:f3:f1:a4:04:cc:84:8f:
42:a7:ef:8f:4e:b9:bc:d0:a7:ef:06:83:cd:01:39:
73:4d:bc:1d:f3:c8:89:7a:60:34:da:f2:59:6d:2c:
de:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:F5:6A:93:9B:DB:D7:BF:71:84:A0:E0:5B:69:17:45:9A:75:5C:BC
X509v3 Authority Key Identifier:
keyid:8F:C1:D6:BE:3B:A7:89:C5:DA:EB:59:7A:13:5D:E5:EC:CC:AB:8F:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j8HWvjunicXa61l6E13l7Myrj5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/44ee8d-2ae8-4844-a935-d24c2ce23ab7/1/j8HWvjunicXa61l6E13l7Myrj5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/44ee8d-2ae8-4844-a935-d24c2ce23ab7/1/j8HWvjunicXa61l6E13l7Myrj5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:c8:5e:1d:45:d9:34:eb:cf:73:a1:57:7a:6c:70:f3:1b:f3:
b2:4e:94:37:0c:83:67:92:62:e5:c9:78:1a:f1:30:bb:10:bb:
29:92:89:2b:2f:47:11:54:7a:81:76:df:72:f7:7e:29:48:ca:
03:f9:03:41:da:5d:b7:76:4c:ca:66:f4:2a:38:14:0d:67:7c:
6d:d2:c1:de:ae:77:70:d5:49:d5:55:97:4f:1f:fa:67:0f:4c:
93:3c:94:ab:a8:7c:a1:18:c2:bf:63:34:96:44:81:cc:ac:86:
d7:0b:2d:8d:20:4c:7e:26:e4:54:53:e1:10:31:82:47:2f:7d:
b6:72:98:f8:01:85:ca:0e:e9:52:3b:7b:a0:ce:79:da:d6:45:
92:5c:31:e5:43:93:c9:79:77:b5:07:39:9b:fb:50:29:94:17:
ae:b3:df:01:93:4b:03:7c:50:09:29:da:93:ec:84:eb:fa:11:
46:cd:6d:13:a4:42:11:82:67:1c:2d:b2:33:17:df:55:7f:19:
d6:71:3d:e3:84:e2:f4:8b:ef:83:0c:83:d0:86:1e:90:6c:88:
11:2e:f0:1a:6e:cd:b5:73:ea:be:e1:a0:ff:fc:98:02:e1:5c:
01:87:3e:ae:f0:aa:a2:47:7e:12:ba:60:6e:cf:3c:9b:73:b3:
df:31:55:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyXK8/9+cyd6tvM+nu3DA/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmYzFkNmJlM2JhNzg5YzVkYWViNTk3YTEzNWRlNWVjY2Nh
YjhmOTUwHhcNMjUxMTExMTAwMTA3WhcNMjUxMTEyMTAwMTA3WjAzMTEwLwYDVQQD
EyhjOGY1NmE5MzliZGJkN2JmNzE4NGEwZTA1YjY5MTc0NTlhNzU1Y2JjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnvIfbuPxMy/++ewzgK/baVB0vmQj
BsebXHIeEB6ucvlGNXb6IGaIPKo/6ikdzcov6rpaFRWrcphQAiabbDCTzghHz2FW
8XEHR+z/yn6my8Z41IKi2KuwySx9APyyAGF0ubgeBqTp9yjCfVxSGLJ+fRMVVUUm
lUuHK7pf2LEdDTsO2oocpIjSMxOycM/F82gavrf8aIjan3GEdLtgJ8XQVJBKhsOi
jjgkxlGZkVMFD3pAtMaTp2r3TtKU7SAwW5GgjfsjOraVCz/fbA3jjKC8jnVunUcn
mjBHRvPxpATMhI9Cp++PTrm80KfvBoPNATlzTbwd88iJemA02vJZbSze4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMj1apOb29e/cYSg4FtpF0WadVy8MB8GA1UdIwQY
MBaAFI/B1r47p4nF2utZehNd5ezMq4+VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvajhIV3ZqdW5pY1hhNjFsNkUxM2w3TXlyajVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi80NGVlOGQtMmFlOC00ODQ0LWE5MzUt
ZDI0YzJjZTIzYWI3LzEvajhIV3ZqdW5pY1hhNjFsNkUxM2w3TXlyajVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi80NGVlOGQtMmFlOC00ODQ0LWE5MzUtZDI0YzJjZTIzYWI3
LzEvajhIV3ZqdW5pY1hhNjFsNkUxM2w3TXlyajVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANsheHUXZ
NOvPc6FXemxw8xvzsk6UNwyDZ5Ji5cl4GvEwuxC7KZKJKy9HEVR6gXbfcvd+KUjK
A/kDQdpdt3ZMymb0KjgUDWd8bdLB3q53cNVJ1VWXTx/6Zw9MkzyUq6h8oRjCv2M0
lkSBzKyG1wstjSBMfibkVFPhEDGCRy99tnKY+AGFyg7pUjt7oM552tZFklwx5UOT
yXl3tQc5m/tQKZQXrrPfAZNLA3xQCSnak+yE6/oRRs1tE6RCEYJnHC2yMxffVX8Z
1nE944Ti9IvvgwyD0IYekGyIES7wGm7NtXPqvuGg//yYAuFcAYc+rvCqokd+Erpg
bs88m3Oz3zFVgA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:21:59 2025 by rpki-client