Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.mft
File: 8ByJl6NUvH1OWmCp9CQ4oYL6mYo.mft (raw, json)
Hash identifier: CUM67NmrxdpJn/wkA47H/DUidV/f21JKg55UMBphWR8=
Subject key identifier: 84:D5:5C:9C:3B:34:21:68:C8:9A:0C:94:CE:F2:62:6C:E4:7B:2F:1F
Authority key identifier: F0:1C:89:97:A3:54:BC:7D:4E:5A:60:A9:F4:24:38:A1:82:FA:99:8A
Certificate issuer: /CN=f01c8997a354bc7d4e5a60a9f42438a182fa998a
Certificate serial: 0199FBEB97E9C3C07B38800F25A987632FE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 10:02:25 +0000
Manifest this update: Sun 19 Oct 2025 10:02:25 +0000
Manifest next update: Mon 20 Oct 2025 10:02:25 +0000
Files and hashes: 1: 8ByJl6NUvH1OWmCp9CQ4oYL6mYo.crl (hash: 7h/rqK2Yq4EzCasUBdomJ58IpDEgRD0/f1E82tJjlkw=)
2: WVDdYi47m-6hf2_QV0K2CVkP7zw.roa (hash: 9WCgzOj2n+hDIFLmZXxef2ObXsI93yW31Mx8FRKIiM8=)
3: _nQyzxD5tzJPLFHKcoFX_hH-tT8.roa (hash: K943OWLrTeetJ5gY0wxowSl9TJP/OQ1YX347sbUwBP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:97:e9:c3:c0:7b:38:80:0f:25:a9:87:63:2f:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f01c8997a354bc7d4e5a60a9f42438a182fa998a
Validity
Not Before: Oct 19 10:02:25 2025 GMT
Not After : Oct 20 10:02:25 2025 GMT
Subject: CN=84d55c9c3b342168c89a0c94cef2626ce47b2f1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c1:78:c9:35:71:6f:13:7b:64:81:1e:e8:49:
74:f6:a0:31:ef:83:57:9d:44:67:be:81:0a:9a:39:
5e:da:e5:51:7a:f8:59:77:1e:fc:08:2a:b2:e6:ad:
fd:39:96:21:44:97:00:f1:f6:1c:74:16:81:9b:a3:
c0:11:f4:1e:62:55:e4:76:4a:be:79:8a:85:40:25:
98:57:30:73:75:15:c6:ed:38:4c:ef:84:96:ef:2d:
7a:bf:5c:5c:d6:27:79:f0:36:ba:4b:f3:fd:fc:b5:
cb:a4:60:83:63:aa:36:26:67:05:33:1b:04:00:7a:
05:0f:80:28:43:44:3a:fe:c6:f3:66:1f:30:f4:3a:
e3:9b:7d:1a:e0:1f:f9:fb:14:7c:fa:bd:f5:20:b1:
7c:9d:df:66:9a:7d:4f:32:be:ff:17:2d:fd:03:eb:
0e:ce:fb:99:bd:e9:a0:73:9f:76:b9:f9:73:52:d2:
46:5b:fe:24:93:75:ab:f8:7b:7d:79:4f:ee:b6:b1:
c2:f8:35:d3:81:7c:2f:18:8e:ed:55:92:d2:c8:f6:
fe:08:cc:91:ed:aa:28:bf:8c:91:cf:dc:f5:aa:aa:
98:b5:3f:2d:1d:e2:0d:76:5c:58:b0:52:62:4b:e9:
f1:4c:fd:cf:5b:39:85:ff:7d:38:90:be:5c:9f:74:
5c:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:D5:5C:9C:3B:34:21:68:C8:9A:0C:94:CE:F2:62:6C:E4:7B:2F:1F
X509v3 Authority Key Identifier:
keyid:F0:1C:89:97:A3:54:BC:7D:4E:5A:60:A9:F4:24:38:A1:82:FA:99:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:5c:73:b8:06:92:0e:fc:89:79:30:c7:ab:d7:f1:50:b5:60:
43:10:34:aa:a4:e8:61:1b:80:93:c3:49:0b:79:2e:3c:d0:f7:
99:53:b6:bd:ad:97:bf:e2:2e:87:bf:93:e9:47:b4:f2:49:77:
5f:51:ff:a0:4b:5d:c6:3b:2c:c3:82:c5:6b:c5:dd:00:7c:99:
0a:7a:e0:81:4b:b0:fa:30:38:7e:eb:9d:d6:89:62:25:36:eb:
f6:5d:26:14:0f:32:1d:e1:37:20:b0:f4:87:93:91:be:60:b4:
15:9a:e4:ad:48:1f:c7:00:b3:58:69:d3:50:e0:b7:81:f0:f5:
fa:e3:b1:1f:8f:05:c2:25:a4:20:3f:ad:3b:3c:86:0f:fd:a5:
d3:f7:05:f8:08:de:8b:83:87:2b:b3:17:0d:fa:7d:b9:1d:4f:
b3:ca:2e:9d:69:31:45:76:08:e0:94:a7:3e:b6:89:54:38:fa:
10:4f:d4:81:4d:d6:0a:a7:6d:af:ea:f5:bd:d9:d6:a9:37:b1:
e6:f0:d5:99:b0:e1:e6:1f:39:1e:0a:45:9c:9d:71:24:e8:3e:
83:26:3c:98:21:1f:0c:0c:7b:db:c8:ab:f8:bf:88:e0:06:5a:
66:cb:35:04:29:ae:06:9e:44:01:53:c5:55:49:33:64:59:16:
fa:82:7f:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn765fpw8B7OIAPJamHYy/oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwMWM4OTk3YTM1NGJjN2Q0ZTVhNjBhOWY0MjQzOGExODJm
YTk5OGEwHhcNMjUxMDE5MTAwMjI1WhcNMjUxMDIwMTAwMjI1WjAzMTEwLwYDVQQD
Eyg4NGQ1NWM5YzNiMzQyMTY4Yzg5YTBjOTRjZWYyNjI2Y2U0N2IyZjFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArcF4yTVxbxN7ZIEe6El09qAx74NX
nURnvoEKmjle2uVRevhZdx78CCqy5q39OZYhRJcA8fYcdBaBm6PAEfQeYlXkdkq+
eYqFQCWYVzBzdRXG7ThM74SW7y16v1xc1id58Da6S/P9/LXLpGCDY6o2JmcFMxsE
AHoFD4AoQ0Q6/sbzZh8w9Drjm30a4B/5+xR8+r31ILF8nd9mmn1PMr7/Fy39A+sO
zvuZvemgc592uflzUtJGW/4kk3Wr+Ht9eU/utrHC+DXTgXwvGI7tVZLSyPb+CMyR
7aoov4yRz9z1qqqYtT8tHeINdlxYsFJiS+nxTP3PWzmF/304kL5cn3RcLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFITVXJw7NCFoyJoMlM7yYmzkey8fMB8GA1UdIwQY
MBaAFPAciZejVLx9TlpgqfQkOKGC+pmKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEJ5Smw2TlV2SDFPV21DcDlDUTRvWUw2bVlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9mYWE5NWYtM2IzMi00MWZlLWFiZTMt
YzI3YzRhNjEwYmQzLzEvOEJ5Smw2TlV2SDFPV21DcDlDUTRvWUw2bVlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi9mYWE5NWYtM2IzMi00MWZlLWFiZTMtYzI3YzRhNjEwYmQz
LzEvOEJ5Smw2TlV2SDFPV21DcDlDUTRvWUw2bVlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASlxzuAaS
DvyJeTDHq9fxULVgQxA0qqToYRuAk8NJC3kuPND3mVO2va2Xv+Iuh7+T6Ue08kl3
X1H/oEtdxjssw4LFa8XdAHyZCnrggUuw+jA4fuud1oliJTbr9l0mFA8yHeE3ILD0
h5ORvmC0FZrkrUgfxwCzWGnTUOC3gfD1+uOxH48FwiWkID+tOzyGD/2l0/cF+Aje
i4OHK7MXDfp9uR1Ps8ounWkxRXYI4JSnPraJVDj6EE/UgU3WCqdtr+r1vdnWqTex
5vDVmbDh5h85HgpFnJ1xJOg+gyY8mCEfDAx728ir+L+I4AZaZss1BCmuBp5EAVPF
VUkzZFkW+oJ/3Q==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:02:28 2025 by rpki-client