Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/844bfe-ec18-417e-8f5a-5cc4ded9a7d2/1/d8Bx2YnlMJrDyzwLCNOsslIRErY.mft
File: d8Bx2YnlMJrDyzwLCNOsslIRErY.mft (raw, json)
Hash identifier: lPnlyqVnaegOsu6O7elW7KCO/rgUvkklrAxkgTg8mpI=
Subject key identifier: 95:8F:94:20:C9:52:36:0F:AE:00:29:57:5C:7E:E4:2C:84:B3:71:D7
Authority key identifier: 77:C0:71:D9:89:E5:30:9A:C3:CB:3C:0B:08:D3:AC:B2:52:11:12:B6
Certificate issuer: /CN=77c071d989e5309ac3cb3c0b08d3acb2521112b6
Certificate serial: 019A7293402111BF75AC0794E9E545157642
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8Bx2YnlMJrDyzwLCNOsslIRErY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/844bfe-ec18-417e-8f5a-5cc4ded9a7d2/1/d8Bx2YnlMJrDyzwLCNOsslIRErY.mft
Manifest number: 1346
Signing time: Tue 11 Nov 2025 11:00:43 +0000
Manifest this update: Tue 11 Nov 2025 11:00:43 +0000
Manifest next update: Wed 12 Nov 2025 11:00:43 +0000
Files and hashes: 1: Le5vpyY48HdbIpkDIdpXFhjYz0Q.roa (hash: Myyoy3T8AQaNeHj3CEH6lMEU7kAImPu/7Rglv2KrnL4=)
2: d8Bx2YnlMJrDyzwLCNOsslIRErY.crl (hash: nFQAjg0Pw4/FxN7nNGQx6L28F6Ci9JfPiAdwpPe8TCU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/844bfe-ec18-417e-8f5a-5cc4ded9a7d2/1/d8Bx2YnlMJrDyzwLCNOsslIRErY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/844bfe-ec18-417e-8f5a-5cc4ded9a7d2/1/d8Bx2YnlMJrDyzwLCNOsslIRErY.mft
rsync://rpki.ripe.net/repository/DEFAULT/d8Bx2YnlMJrDyzwLCNOsslIRErY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:40:21:11:bf:75:ac:07:94:e9:e5:45:15:76:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77c071d989e5309ac3cb3c0b08d3acb2521112b6
Validity
Not Before: Nov 11 11:00:43 2025 GMT
Not After : Nov 12 11:00:43 2025 GMT
Subject: CN=958f9420c952360fae0029575c7ee42c84b371d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c2:d0:cc:e6:56:da:aa:62:31:2c:5f:fa:38:
ac:4c:fc:97:4d:d1:81:0a:7d:9c:67:9e:4a:07:f3:
68:16:2f:9c:74:74:63:7e:02:da:38:8d:5c:3e:7d:
56:90:3b:51:38:b4:30:87:a9:86:f1:a9:f3:b5:55:
9f:6a:2a:2c:dd:cc:3f:6a:fb:62:8a:61:91:bc:24:
58:10:c1:fb:ec:36:27:d8:c0:3b:56:72:e1:a8:77:
3f:17:07:f5:20:ca:4c:d3:1e:e7:df:e9:65:10:d8:
bc:01:5e:e8:d4:f6:31:3c:c8:0c:bf:c5:f1:19:2f:
ba:a5:91:3b:de:0f:fe:74:15:81:1e:bd:fb:27:74:
cc:4f:0a:c1:72:4d:fd:76:e4:32:77:0b:e6:59:38:
32:1e:20:d4:bb:29:ca:21:e0:e2:3d:5f:b8:da:48:
b6:be:9e:ff:aa:8e:2f:f5:7d:8a:31:5d:0f:58:9f:
1c:ef:5a:04:2e:5e:58:3f:fc:58:17:87:a6:fc:c4:
be:fa:86:19:4d:dc:53:5b:c5:a6:0a:65:bd:80:45:
0f:d9:1c:99:82:f2:85:eb:04:83:47:a6:fb:7b:2e:
53:24:4a:fc:9b:fc:6c:1a:75:8e:0a:43:61:d9:87:
0e:ea:00:2b:1f:b3:d6:5e:0f:6f:8d:ba:6f:bc:db:
21:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:8F:94:20:C9:52:36:0F:AE:00:29:57:5C:7E:E4:2C:84:B3:71:D7
X509v3 Authority Key Identifier:
keyid:77:C0:71:D9:89:E5:30:9A:C3:CB:3C:0B:08:D3:AC:B2:52:11:12:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8Bx2YnlMJrDyzwLCNOsslIRErY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/844bfe-ec18-417e-8f5a-5cc4ded9a7d2/1/d8Bx2YnlMJrDyzwLCNOsslIRErY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/844bfe-ec18-417e-8f5a-5cc4ded9a7d2/1/d8Bx2YnlMJrDyzwLCNOsslIRErY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:4e:b5:37:cc:7a:53:00:1c:d1:de:11:06:ad:50:5d:16:37:
f1:4e:bf:a3:81:2d:69:f8:1d:cd:91:4b:54:75:08:8a:0d:a4:
26:b0:c7:2d:cb:7b:3d:86:2f:a7:5e:ae:e1:46:51:ed:a4:61:
ae:20:99:86:ca:8a:7c:4c:53:3b:aa:a5:4a:70:d9:18:77:39:
b1:98:c8:2b:40:c4:e1:8a:b4:10:0d:2d:67:e7:b9:ec:97:19:
54:cb:44:d5:52:81:18:16:48:24:2c:01:79:66:f1:0f:a0:c8:
f0:b7:bf:d3:03:79:6d:f3:4b:26:be:ce:6b:31:44:64:96:0e:
2a:45:d8:10:7a:27:25:89:fd:8d:05:ab:c7:86:b1:7a:da:17:
16:66:8b:ce:c7:36:2f:83:8a:36:e5:de:53:15:e6:8b:eb:70:
ae:72:06:e2:e0:00:9d:e4:4c:0a:be:56:89:13:c9:93:91:0a:
d8:17:39:b7:23:c1:fe:e2:25:8c:3f:77:db:5b:bd:98:9b:b0:
39:60:a8:71:da:3a:12:c9:ff:ce:10:ed:20:8b:e5:b9:68:bd:
a5:f7:22:f1:d9:46:4a:2a:89:0f:70:53:3c:76:9c:23:34:93:
e6:31:b2:d0:f3:85:19:1a:a3:f5:0d:c6:e3:e9:7a:cf:cc:60:
0e:98:2e:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyk0AhEb91rAeU6eVFFXZCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3YzA3MWQ5ODllNTMwOWFjM2NiM2MwYjA4ZDNhY2IyNTIx
MTEyYjYwHhcNMjUxMTExMTEwMDQzWhcNMjUxMTEyMTEwMDQzWjAzMTEwLwYDVQQD
Eyg5NThmOTQyMGM5NTIzNjBmYWUwMDI5NTc1YzdlZTQyYzg0YjM3MWQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8LQzOZW2qpiMSxf+jisTPyXTdGB
Cn2cZ55KB/NoFi+cdHRjfgLaOI1cPn1WkDtROLQwh6mG8anztVWfaios3cw/avti
imGRvCRYEMH77DYn2MA7VnLhqHc/Fwf1IMpM0x7n3+llENi8AV7o1PYxPMgMv8Xx
GS+6pZE73g/+dBWBHr37J3TMTwrBck39duQydwvmWTgyHiDUuynKIeDiPV+42ki2
vp7/qo4v9X2KMV0PWJ8c71oELl5YP/xYF4em/MS++oYZTdxTW8WmCmW9gEUP2RyZ
gvKF6wSDR6b7ey5TJEr8m/xsGnWOCkNh2YcO6gArH7PWXg9vjbpvvNshjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJWPlCDJUjYPrgApV1x+5CyEs3HXMB8GA1UdIwQY
MBaAFHfAcdmJ5TCaw8s8CwjTrLJSERK2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDhCeDJZbmxNSnJEeXp3TENOT3NzbElSRXJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi84NDRiZmUtZWMxOC00MTdlLThmNWEt
NWNjNGRlZDlhN2QyLzEvZDhCeDJZbmxNSnJEeXp3TENOT3NzbElSRXJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi84NDRiZmUtZWMxOC00MTdlLThmNWEtNWNjNGRlZDlhN2Qy
LzEvZDhCeDJZbmxNSnJEeXp3TENOT3NzbElSRXJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPU61N8x6
UwAc0d4RBq1QXRY38U6/o4EtafgdzZFLVHUIig2kJrDHLct7PYYvp16u4UZR7aRh
riCZhsqKfExTO6qlSnDZGHc5sZjIK0DE4Yq0EA0tZ+e57JcZVMtE1VKBGBZIJCwB
eWbxD6DI8Le/0wN5bfNLJr7OazFEZJYOKkXYEHonJYn9jQWrx4axetoXFmaLzsc2
L4OKNuXeUxXmi+twrnIG4uAAneRMCr5WiRPJk5EK2Bc5tyPB/uIljD9321u9mJuw
OWCocdo6Esn/zhDtIIvluWi9pfci8dlGSiqJD3BTPHacIzST5jGy0POFGRqj9Q3G
4+l6z8xgDpguXw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:50:24 2025 by rpki-client