Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/712f03-afe9-4f65-acec-67cfe3067b2a/1/j4aF263_sB3czmxNgql_M8BA7S0.mft
File: j4aF263_sB3czmxNgql_M8BA7S0.mft (raw, json)
Hash identifier: Ekw09Yzpz8CRb077QPEQePR9Xvb4/j+9u6b7CiQK7k0=
Subject key identifier: 76:01:96:C8:68:80:CB:CD:3A:F9:0F:FC:25:40:A2:F9:FC:43:93:23
Authority key identifier: 8F:86:85:DB:AD:FF:B0:1D:DC:CE:6C:4D:82:A9:7F:33:C0:40:ED:2D
Certificate issuer: /CN=8f8685dbadffb01ddcce6c4d82a97f33c040ed2d
Certificate serial: 019A71B7D67BC108ABD2872E99BA029EBA94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j4aF263_sB3czmxNgql_M8BA7S0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/712f03-afe9-4f65-acec-67cfe3067b2a/1/j4aF263_sB3czmxNgql_M8BA7S0.mft
Manifest number: 171C
Signing time: Tue 11 Nov 2025 07:01:04 +0000
Manifest this update: Tue 11 Nov 2025 07:01:04 +0000
Manifest next update: Wed 12 Nov 2025 07:01:04 +0000
Files and hashes: 1: CnLBnKO7kUWDOtI_wZowil8ZDY0.roa (hash: +ZLQWoCpBdEd1GfrIrkM6Ixuxre1nfZzdo3/CXXl60U=)
2: j4aF263_sB3czmxNgql_M8BA7S0.crl (hash: /4OKPwmdOFkN9tlXQbX4yi+lTNRmm7hw4tl3L+gNOLs=)
3: sUWUQ7xVOWG88c1zTJfQJSXfUGM.roa (hash: VIZMGPKQd062ThwggTDHc4EOlVHSYbX0SY8qNlvlezs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/712f03-afe9-4f65-acec-67cfe3067b2a/1/j4aF263_sB3czmxNgql_M8BA7S0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/712f03-afe9-4f65-acec-67cfe3067b2a/1/j4aF263_sB3czmxNgql_M8BA7S0.mft
rsync://rpki.ripe.net/repository/DEFAULT/j4aF263_sB3czmxNgql_M8BA7S0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:d6:7b:c1:08:ab:d2:87:2e:99:ba:02:9e:ba:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f8685dbadffb01ddcce6c4d82a97f33c040ed2d
Validity
Not Before: Nov 11 07:01:04 2025 GMT
Not After : Nov 12 07:01:04 2025 GMT
Subject: CN=760196c86880cbcd3af90ffc2540a2f9fc439323
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:2b:cd:8c:2d:e9:4b:73:5c:2a:6f:81:e0:65:
3c:05:a0:6d:16:bc:a0:5f:7c:ca:a9:c0:0d:77:ae:
f4:0f:58:60:02:30:fc:8f:7e:25:1e:2b:26:9d:ea:
18:6a:62:53:7a:38:ba:71:20:b3:2c:95:8b:fb:09:
8f:92:fc:8b:79:58:c4:44:8d:9a:08:3d:25:36:c7:
42:7a:b9:8a:49:eb:82:cc:a2:3d:f1:63:84:94:51:
ee:fb:48:d0:09:c5:ec:95:22:01:d1:58:38:84:f9:
45:a8:73:01:d1:3d:b2:5b:5c:12:79:9e:3a:7b:28:
2d:a0:ed:a3:e7:c6:dd:f2:06:7c:80:3a:c8:8d:90:
a9:45:ac:d0:ed:89:fb:fb:69:ce:3f:23:e6:1d:c5:
41:ad:b8:1d:55:02:14:4b:a3:ae:16:83:34:a0:75:
21:26:d7:27:a6:5d:5b:c4:16:a9:a9:c0:27:5e:40:
38:5e:37:16:b1:76:7f:25:ff:8d:5f:93:fb:af:b4:
0a:95:46:f1:49:33:7d:69:58:a9:2a:97:82:9a:01:
cb:7a:7e:03:6c:7a:05:d6:07:24:9f:5d:b5:f6:47:
48:c7:ba:16:87:29:a1:71:3f:af:6c:54:c0:94:ad:
e5:b3:5e:be:00:75:33:c7:d7:4b:24:df:69:e0:29:
31:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:01:96:C8:68:80:CB:CD:3A:F9:0F:FC:25:40:A2:F9:FC:43:93:23
X509v3 Authority Key Identifier:
keyid:8F:86:85:DB:AD:FF:B0:1D:DC:CE:6C:4D:82:A9:7F:33:C0:40:ED:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j4aF263_sB3czmxNgql_M8BA7S0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/712f03-afe9-4f65-acec-67cfe3067b2a/1/j4aF263_sB3czmxNgql_M8BA7S0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/712f03-afe9-4f65-acec-67cfe3067b2a/1/j4aF263_sB3czmxNgql_M8BA7S0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:b8:25:c4:b1:4e:b7:6e:c7:08:ef:88:6e:37:4c:68:11:80:
a8:ad:84:10:6f:27:8b:87:c3:74:4a:7e:d3:88:f3:4c:44:36:
b7:5a:2c:92:c7:5c:e8:8e:63:d0:07:6f:c6:94:7e:57:ca:e7:
7a:fb:8e:81:e0:4e:ee:6d:ee:e9:e1:a2:7c:9b:75:19:99:b9:
cf:58:a7:69:55:89:fe:23:e1:e4:42:78:9f:6d:3d:b2:80:41:
f4:31:11:14:66:2f:ac:b8:2a:55:3b:fe:50:0c:34:8c:4a:cc:
f9:c0:01:98:e0:06:ca:a9:b4:87:0f:b2:36:29:a5:75:2c:31:
a6:73:42:af:32:59:65:45:5c:dd:ae:56:0e:33:a7:cb:37:58:
cf:a7:c4:ac:d2:75:05:bf:e9:0f:1f:41:02:66:e2:68:d0:28:
d0:e6:61:04:fa:3a:8b:4e:3a:69:19:49:9c:05:92:9d:bc:67:
52:e8:e3:eb:75:6e:a6:a7:c9:7a:3d:78:d6:46:97:b4:1b:89:
87:73:ce:24:ea:7b:84:8b:e0:d4:72:11:5b:05:f1:09:99:8d:
52:82:cb:d7:a3:78:15:0e:2e:19:ff:49:e9:e6:b2:bc:90:03:
2e:08:bd:44:95:f1:cc:4f:75:7b:ec:90:6f:7e:8e:d3:84:52:
f4:c1:c9:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxt9Z7wQir0ocumboCnrqUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmODY4NWRiYWRmZmIwMWRkY2NlNmM0ZDgyYTk3ZjMzYzA0
MGVkMmQwHhcNMjUxMTExMDcwMTA0WhcNMjUxMTEyMDcwMTA0WjAzMTEwLwYDVQQD
Eyg3NjAxOTZjODY4ODBjYmNkM2FmOTBmZmMyNTQwYTJmOWZjNDM5MzIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzSvNjC3pS3NcKm+B4GU8BaBtFryg
X3zKqcANd670D1hgAjD8j34lHismneoYamJTeji6cSCzLJWL+wmPkvyLeVjERI2a
CD0lNsdCermKSeuCzKI98WOElFHu+0jQCcXslSIB0Vg4hPlFqHMB0T2yW1wSeZ46
eygtoO2j58bd8gZ8gDrIjZCpRazQ7Yn7+2nOPyPmHcVBrbgdVQIUS6OuFoM0oHUh
Jtcnpl1bxBapqcAnXkA4XjcWsXZ/Jf+NX5P7r7QKlUbxSTN9aVipKpeCmgHLen4D
bHoF1gckn1219kdIx7oWhymhcT+vbFTAlK3ls16+AHUzx9dLJN9p4Ckx5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHYBlshogMvNOvkP/CVAovn8Q5MjMB8GA1UdIwQY
MBaAFI+Ghdut/7Ad3M5sTYKpfzPAQO0tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvajRhRjI2M19zQjNjem14TmdxbF9NOEJBN1MwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS83MTJmMDMtYWZlOS00ZjY1LWFjZWMt
NjdjZmUzMDY3YjJhLzEvajRhRjI2M19zQjNjem14TmdxbF9NOEJBN1MwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS83MTJmMDMtYWZlOS00ZjY1LWFjZWMtNjdjZmUzMDY3YjJh
LzEvajRhRjI2M19zQjNjem14TmdxbF9NOEJBN1MwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoLglxLFO
t27HCO+IbjdMaBGAqK2EEG8ni4fDdEp+04jzTEQ2t1osksdc6I5j0AdvxpR+V8rn
evuOgeBO7m3u6eGifJt1GZm5z1inaVWJ/iPh5EJ4n209soBB9DERFGYvrLgqVTv+
UAw0jErM+cABmOAGyqm0hw+yNimldSwxpnNCrzJZZUVc3a5WDjOnyzdYz6fErNJ1
Bb/pDx9BAmbiaNAo0OZhBPo6i046aRlJnAWSnbxnUujj63VupqfJej141kaXtBuJ
h3POJOp7hIvg1HIRWwXxCZmNUoLL16N4FQ4uGf9J6eayvJADLgi9RJXxzE91e+yQ
b36O04RS9MHJ1g==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:43:20 2025 by rpki-client