Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/770494-9f13-4a16-b2e2-d2c8a65aacfe/1/8j79S9kntM6jMSCiG09zFNy-oXk.mft
File: 8j79S9kntM6jMSCiG09zFNy-oXk.mft (raw, json)
Hash identifier: PSmx2XuzFWBMbvaDbrV+ap+Xmk0kQdh4J4NE4Skqo0g=
Subject key identifier: CC:21:BF:A4:53:EA:20:D7:F5:DB:B7:AD:29:20:9C:F6:92:3C:9D:5D
Authority key identifier: F2:3E:FD:4B:D9:27:B4:CE:A3:31:20:A2:1B:4F:73:14:DC:BE:A1:79
Certificate issuer: /CN=f23efd4bd927b4cea33120a21b4f7314dcbea179
Certificate serial: 0199FAD851EDC71C7BAEF8FC80854D213A59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8j79S9kntM6jMSCiG09zFNy-oXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/770494-9f13-4a16-b2e2-d2c8a65aacfe/1/8j79S9kntM6jMSCiG09zFNy-oXk.mft
Manifest number: 0E86
Signing time: Sun 19 Oct 2025 05:01:44 +0000
Manifest this update: Sun 19 Oct 2025 05:01:44 +0000
Manifest next update: Mon 20 Oct 2025 05:01:44 +0000
Files and hashes: 1: 8j79S9kntM6jMSCiG09zFNy-oXk.crl (hash: QdeSY+AVPGTbv+wIKm1kCiuh4ewWJq/JDk8oMTXVpDc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/770494-9f13-4a16-b2e2-d2c8a65aacfe/1/8j79S9kntM6jMSCiG09zFNy-oXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/770494-9f13-4a16-b2e2-d2c8a65aacfe/1/8j79S9kntM6jMSCiG09zFNy-oXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/8j79S9kntM6jMSCiG09zFNy-oXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d8:51:ed:c7:1c:7b:ae:f8:fc:80:85:4d:21:3a:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f23efd4bd927b4cea33120a21b4f7314dcbea179
Validity
Not Before: Oct 19 05:01:44 2025 GMT
Not After : Oct 20 05:01:44 2025 GMT
Subject: CN=cc21bfa453ea20d7f5dbb7ad29209cf6923c9d5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:52:9f:f4:c6:51:73:65:d1:9e:d8:18:6a:c8:
2b:e5:9c:f1:38:06:a5:ee:cb:41:8f:3d:b4:40:3f:
4b:be:6a:84:c5:60:fb:39:f2:7f:9b:38:ed:04:e2:
d8:56:0d:84:06:9f:71:b0:4f:00:aa:5d:61:e0:a3:
1b:81:3a:23:d1:a7:a6:86:fc:09:82:88:22:7d:54:
75:1d:3e:f5:84:4a:22:3f:1e:13:13:d2:6c:c8:de:
8b:31:df:94:6e:67:90:77:d7:cd:3f:38:55:02:da:
74:68:57:b6:82:0e:16:d3:22:34:8e:15:91:0f:64:
db:77:cf:e2:31:92:10:87:54:45:d7:9b:dd:12:ad:
c0:04:4b:23:b2:f0:bc:2f:56:74:46:73:65:10:d9:
a5:fc:44:c1:21:6f:98:8c:d4:c8:f3:42:67:ca:df:
1c:d1:9e:08:43:51:f2:cb:5a:e9:11:80:1f:c7:59:
65:82:ab:4d:80:3d:4d:ad:cf:e5:5e:a8:93:3f:60:
f7:14:4b:c0:5d:d5:65:78:09:01:d3:73:f5:a3:5d:
fe:aa:2a:fc:2c:84:55:d0:4f:0b:83:06:e7:94:35:
4f:70:69:af:37:e6:cb:94:24:31:31:0e:57:ec:6a:
60:41:00:57:0e:6f:e0:55:4b:c4:5e:7a:b9:b9:8d:
b6:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:21:BF:A4:53:EA:20:D7:F5:DB:B7:AD:29:20:9C:F6:92:3C:9D:5D
X509v3 Authority Key Identifier:
keyid:F2:3E:FD:4B:D9:27:B4:CE:A3:31:20:A2:1B:4F:73:14:DC:BE:A1:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8j79S9kntM6jMSCiG09zFNy-oXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/770494-9f13-4a16-b2e2-d2c8a65aacfe/1/8j79S9kntM6jMSCiG09zFNy-oXk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/770494-9f13-4a16-b2e2-d2c8a65aacfe/1/8j79S9kntM6jMSCiG09zFNy-oXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:b4:5e:dd:8e:98:d7:6f:8f:7e:d6:1e:58:db:18:63:84:38:
5f:1f:a9:56:d5:73:ee:ee:e7:56:6d:0e:98:23:1d:6f:71:45:
14:b6:2b:ec:c5:ef:d4:e5:19:71:5a:8d:bf:66:d3:a7:7b:33:
15:81:80:23:ed:63:31:7a:c4:9b:39:aa:ab:6c:58:77:39:e1:
37:c1:94:6d:b7:64:6b:17:70:35:df:9b:88:3a:ec:e9:9e:7e:
4e:01:de:e1:0e:ed:12:93:25:f0:bd:24:b5:35:60:1e:11:b7:
03:f5:77:b4:97:6b:08:6e:30:25:ce:7f:e6:fe:49:ba:85:92:
7d:f8:a5:81:82:a2:1c:14:bf:d2:1c:3a:98:8d:63:5e:72:9a:
b6:ac:c0:0f:40:1f:99:3d:0d:67:96:fc:2d:c4:43:d3:a5:6b:
f1:5d:6d:c1:8a:d7:2e:79:53:b6:7f:68:c8:62:5f:84:7c:78:
28:1f:0b:b7:35:8e:7e:73:f7:dd:86:d3:1c:aa:90:c0:55:7c:
6b:c8:ee:0c:26:ce:62:c3:a5:0a:60:9b:fb:91:ec:96:c4:09:
a5:8c:04:85:22:07:24:38:60:46:e9:92:c0:ce:eb:80:57:d9:
b7:1b:51:5a:be:f4:cf:0c:5f:37:85:41:b2:95:e0:f5:42:69:
3d:2b:eb:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn62FHtxxx7rvj8gIVNITpZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyM2VmZDRiZDkyN2I0Y2VhMzMxMjBhMjFiNGY3MzE0ZGNi
ZWExNzkwHhcNMjUxMDE5MDUwMTQ0WhcNMjUxMDIwMDUwMTQ0WjAzMTEwLwYDVQQD
EyhjYzIxYmZhNDUzZWEyMGQ3ZjVkYmI3YWQyOTIwOWNmNjkyM2M5ZDVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1FKf9MZRc2XRntgYasgr5ZzxOAal
7stBjz20QD9LvmqExWD7OfJ/mzjtBOLYVg2EBp9xsE8Aql1h4KMbgToj0aemhvwJ
gogifVR1HT71hEoiPx4TE9JsyN6LMd+UbmeQd9fNPzhVAtp0aFe2gg4W0yI0jhWR
D2Tbd8/iMZIQh1RF15vdEq3ABEsjsvC8L1Z0RnNlENml/ETBIW+YjNTI80Jnyt8c
0Z4IQ1Hyy1rpEYAfx1llgqtNgD1Nrc/lXqiTP2D3FEvAXdVleAkB03P1o13+qir8
LIRV0E8LgwbnlDVPcGmvN+bLlCQxMQ5X7GpgQQBXDm/gVUvEXnq5uY227QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMwhv6RT6iDX9du3rSkgnPaSPJ1dMB8GA1UdIwQY
MBaAFPI+/UvZJ7TOozEgohtPcxTcvqF5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGo3OVM5a250TTZqTVNDaUcwOXpGTnktb1hrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC83NzA0OTQtOWYxMy00YTE2LWIyZTIt
ZDJjOGE2NWFhY2ZlLzEvOGo3OVM5a250TTZqTVNDaUcwOXpGTnktb1hrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC83NzA0OTQtOWYxMy00YTE2LWIyZTItZDJjOGE2NWFhY2Zl
LzEvOGo3OVM5a250TTZqTVNDaUcwOXpGTnktb1hrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAerRe3Y6Y
12+PftYeWNsYY4Q4Xx+pVtVz7u7nVm0OmCMdb3FFFLYr7MXv1OUZcVqNv2bTp3sz
FYGAI+1jMXrEmzmqq2xYdznhN8GUbbdkaxdwNd+biDrs6Z5+TgHe4Q7tEpMl8L0k
tTVgHhG3A/V3tJdrCG4wJc5/5v5JuoWSffilgYKiHBS/0hw6mI1jXnKatqzAD0Af
mT0NZ5b8LcRD06Vr8V1twYrXLnlTtn9oyGJfhHx4KB8LtzWOfnP33YbTHKqQwFV8
a8juDCbOYsOlCmCb+5HslsQJpYwEhSIHJDhgRumSwM7rgFfZtxtRWr70zwxfN4VB
spXg9UJpPSvrDA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:07 2025 by rpki-client