Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/770494-9f13-4a16-b2e2-d2c8a65aacfe/1/8j79S9kntM6jMSCiG09zFNy-oXk.mft
File: 8j79S9kntM6jMSCiG09zFNy-oXk.mft (raw, json)
Hash identifier: fNxW1aLQxHS5D/fbSz96cEXogVNv+gcyMMj190o99ls=
Subject key identifier: 7A:8A:D0:5B:B3:7B:20:1E:15:2A:23:3A:3A:24:44:3E:2C:CB:FB:E2
Authority key identifier: F2:3E:FD:4B:D9:27:B4:CE:A3:31:20:A2:1B:4F:73:14:DC:BE:A1:79
Certificate issuer: /CN=f23efd4bd927b4cea33120a21b4f7314dcbea179
Certificate serial: 019A729406498A44EA9D30F75D9F918B35BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8j79S9kntM6jMSCiG09zFNy-oXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/770494-9f13-4a16-b2e2-d2c8a65aacfe/1/8j79S9kntM6jMSCiG09zFNy-oXk.mft
Manifest number: 0EC4
Signing time: Tue 11 Nov 2025 11:01:34 +0000
Manifest this update: Tue 11 Nov 2025 11:01:34 +0000
Manifest next update: Wed 12 Nov 2025 11:01:34 +0000
Files and hashes: 1: 8j79S9kntM6jMSCiG09zFNy-oXk.crl (hash: GCA1PXp7RDr7KDi03JzSsv81JfHpDcIrZeuGHYPCSu8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/770494-9f13-4a16-b2e2-d2c8a65aacfe/1/8j79S9kntM6jMSCiG09zFNy-oXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/770494-9f13-4a16-b2e2-d2c8a65aacfe/1/8j79S9kntM6jMSCiG09zFNy-oXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/8j79S9kntM6jMSCiG09zFNy-oXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:94:06:49:8a:44:ea:9d:30:f7:5d:9f:91:8b:35:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f23efd4bd927b4cea33120a21b4f7314dcbea179
Validity
Not Before: Nov 11 11:01:34 2025 GMT
Not After : Nov 12 11:01:34 2025 GMT
Subject: CN=7a8ad05bb37b201e152a233a3a24443e2ccbfbe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:6e:f1:96:5a:01:0e:f7:88:0f:d9:f9:67:9d:
e3:e0:4f:f0:84:43:ac:e0:34:31:c0:5f:1b:a2:77:
2a:6e:86:a7:9d:db:dd:ec:67:6d:bc:1c:a1:20:3c:
0b:d9:a0:44:ec:40:be:9f:6e:35:64:13:17:b2:63:
e1:84:3e:c6:7b:6f:43:b3:a3:0a:07:7e:04:18:0e:
c3:ac:8c:84:0b:7a:5c:be:3b:fb:a5:d3:cc:e0:f5:
f4:3b:3f:a9:6d:0d:26:14:63:75:66:20:02:c8:a2:
63:89:77:14:bd:26:52:b9:5f:49:56:2e:52:f3:42:
a8:8f:06:19:90:2d:30:22:94:ab:b5:41:63:e7:b2:
9e:97:95:29:25:c0:cb:0b:fd:ed:e8:d8:b8:ed:41:
af:9f:ce:70:76:90:f7:b5:34:84:57:21:f5:05:a7:
69:73:b4:03:fd:9b:fa:1c:90:b6:f1:5a:d7:a8:e9:
db:f7:55:a1:f6:f0:c8:6e:6c:00:fe:86:42:02:c2:
31:88:8c:cc:45:c3:b2:e7:cd:77:ef:94:fc:62:59:
79:5a:a3:50:33:09:b4:8d:f3:33:b0:0f:95:73:a5:
09:15:58:d4:3e:0a:29:2c:21:00:48:e8:16:03:18:
b2:73:3b:65:82:40:66:4c:4e:d5:a9:02:a6:8c:5f:
9b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:8A:D0:5B:B3:7B:20:1E:15:2A:23:3A:3A:24:44:3E:2C:CB:FB:E2
X509v3 Authority Key Identifier:
keyid:F2:3E:FD:4B:D9:27:B4:CE:A3:31:20:A2:1B:4F:73:14:DC:BE:A1:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8j79S9kntM6jMSCiG09zFNy-oXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/770494-9f13-4a16-b2e2-d2c8a65aacfe/1/8j79S9kntM6jMSCiG09zFNy-oXk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/770494-9f13-4a16-b2e2-d2c8a65aacfe/1/8j79S9kntM6jMSCiG09zFNy-oXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:73:5f:c1:1d:ff:0b:d1:7a:90:e1:b0:60:d5:00:6a:43:74:
e8:0b:0b:4a:85:ac:9b:1f:cb:17:5e:d4:d9:38:fc:cd:23:fb:
c0:17:af:0e:25:80:fd:ce:db:16:e9:64:e1:9a:ca:48:39:64:
5a:6e:08:75:36:44:18:81:d5:3a:aa:71:5f:d6:42:04:f1:40:
05:fd:fc:4a:57:f6:59:79:22:d3:54:30:fa:f8:fd:bc:f2:2f:
b3:64:99:df:ae:8f:0a:7b:77:85:96:e8:6e:4d:89:3b:66:8b:
53:65:81:fe:13:af:9b:9d:16:00:42:27:31:8d:2d:5d:33:a3:
95:ff:b3:be:d4:bd:3b:e3:cf:59:15:b6:5a:1e:c6:0a:2a:57:
64:d1:9d:ee:f6:c8:d2:ef:39:6d:ea:66:30:bf:c7:c2:d3:e2:
2a:8f:f7:be:39:ca:87:de:de:01:69:74:63:74:bd:87:72:19:
17:de:7b:c3:23:87:2c:f8:b4:13:94:0e:a8:30:aa:00:b3:02:
35:4c:63:f7:69:47:f6:40:a2:a7:7c:a8:2d:c0:4e:cd:6c:f9:
c9:7d:bb:7f:f3:6e:a4:2f:9a:a1:9f:80:cb:a0:04:9d:92:6d:
43:7a:3c:59:37:80:84:d0:03:2b:92:37:79:00:1f:fe:cb:87:
86:7f:29:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpylAZJikTqnTD3XZ+RizW9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyM2VmZDRiZDkyN2I0Y2VhMzMxMjBhMjFiNGY3MzE0ZGNi
ZWExNzkwHhcNMjUxMTExMTEwMTM0WhcNMjUxMTEyMTEwMTM0WjAzMTEwLwYDVQQD
Eyg3YThhZDA1YmIzN2IyMDFlMTUyYTIzM2EzYTI0NDQzZTJjY2JmYmUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzm7xlloBDveID9n5Z53j4E/whEOs
4DQxwF8boncqboanndvd7GdtvByhIDwL2aBE7EC+n241ZBMXsmPhhD7Ge29Ds6MK
B34EGA7DrIyEC3pcvjv7pdPM4PX0Oz+pbQ0mFGN1ZiACyKJjiXcUvSZSuV9JVi5S
80KojwYZkC0wIpSrtUFj57Kel5UpJcDLC/3t6Ni47UGvn85wdpD3tTSEVyH1Badp
c7QD/Zv6HJC28VrXqOnb91Wh9vDIbmwA/oZCAsIxiIzMRcOy581375T8Yll5WqNQ
Mwm0jfMzsA+Vc6UJFVjUPgopLCEASOgWAxiycztlgkBmTE7VqQKmjF+bBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHqK0FuzeyAeFSojOjokRD4sy/viMB8GA1UdIwQY
MBaAFPI+/UvZJ7TOozEgohtPcxTcvqF5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGo3OVM5a250TTZqTVNDaUcwOXpGTnktb1hrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC83NzA0OTQtOWYxMy00YTE2LWIyZTIt
ZDJjOGE2NWFhY2ZlLzEvOGo3OVM5a250TTZqTVNDaUcwOXpGTnktb1hrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC83NzA0OTQtOWYxMy00YTE2LWIyZTItZDJjOGE2NWFhY2Zl
LzEvOGo3OVM5a250TTZqTVNDaUcwOXpGTnktb1hrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPHNfwR3/
C9F6kOGwYNUAakN06AsLSoWsmx/LF17U2Tj8zSP7wBevDiWA/c7bFulk4ZrKSDlk
Wm4IdTZEGIHVOqpxX9ZCBPFABf38Slf2WXki01Qw+vj9vPIvs2SZ366PCnt3hZbo
bk2JO2aLU2WB/hOvm50WAEInMY0tXTOjlf+zvtS9O+PPWRW2Wh7GCipXZNGd7vbI
0u85bepmML/HwtPiKo/3vjnKh97eAWl0Y3S9h3IZF957wyOHLPi0E5QOqDCqALMC
NUxj92lH9kCip3yoLcBOzWz5yX27f/NupC+aoZ+Ay6AEnZJtQ3o8WTeAhNADK5I3
eQAf/suHhn8p3Q==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:08 2025 by rpki-client