Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/601360-adb9-4cb5-86d9-2bb2377e5a1c/1/aNr9Y2BjamMndHoHCA9_Ll4yzoU.mft
File: aNr9Y2BjamMndHoHCA9_Ll4yzoU.mft (raw, json)
Hash identifier: RdUow2AJsxyIGD5ladKY6yGLYIaz5Fo6Fc9dFZSzUHU=
Subject key identifier: 09:82:B5:27:C2:9D:46:BE:4C:92:41:F7:A7:40:B4:A0:96:85:AA:B3
Authority key identifier: 68:DA:FD:63:60:63:6A:63:27:74:7A:07:08:0F:7F:2E:5E:32:CE:85
Certificate issuer: /CN=68dafd6360636a6327747a07080f7f2e5e32ce85
Certificate serial: 019A50E3AA445076FEF63EB728500CD0786E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aNr9Y2BjamMndHoHCA9_Ll4yzoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/601360-adb9-4cb5-86d9-2bb2377e5a1c/1/aNr9Y2BjamMndHoHCA9_Ll4yzoU.mft
Manifest number: 1710
Signing time: Tue 04 Nov 2025 22:01:28 +0000
Manifest this update: Tue 04 Nov 2025 22:01:28 +0000
Manifest next update: Wed 05 Nov 2025 22:01:28 +0000
Files and hashes: 1: 1-RRFLFYvpdDCB0gIWM3HeWx7I8g.roa (hash: pD8ORJEMQZjbq/pqQVUKzZDauGOud+2TyXVh5uPBOWk=)
2: aNr9Y2BjamMndHoHCA9_Ll4yzoU.crl (hash: BPLa4FzG4HJXEuPwZYWDUbCmCjwXWJQUJt/Rz9x97Uw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/601360-adb9-4cb5-86d9-2bb2377e5a1c/1/aNr9Y2BjamMndHoHCA9_Ll4yzoU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/601360-adb9-4cb5-86d9-2bb2377e5a1c/1/aNr9Y2BjamMndHoHCA9_Ll4yzoU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aNr9Y2BjamMndHoHCA9_Ll4yzoU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:aa:44:50:76:fe:f6:3e:b7:28:50:0c:d0:78:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68dafd6360636a6327747a07080f7f2e5e32ce85
Validity
Not Before: Nov 4 22:01:28 2025 GMT
Not After : Nov 5 22:01:28 2025 GMT
Subject: CN=0982b527c29d46be4c9241f7a740b4a09685aab3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:67:ea:9f:e9:fe:d7:36:39:86:57:98:e5:48:
8e:21:8c:74:17:f0:36:14:68:b3:05:b1:aa:70:c7:
4a:d1:47:82:ad:e5:37:41:8d:b6:8d:fc:a6:9e:56:
35:d0:6c:55:f5:f9:0b:db:71:e5:f3:85:89:d7:79:
07:ff:81:30:fe:79:f6:a4:24:a4:c0:32:61:7f:65:
e5:85:0e:25:6c:e0:68:2c:60:5a:ca:e5:79:fb:c1:
ec:fe:fe:da:68:b3:4a:ba:bd:2e:eb:ba:ec:21:15:
1e:b7:f2:ee:a4:26:e5:82:6f:8d:1b:80:ea:54:bb:
60:15:53:45:10:45:7f:b6:54:28:88:ed:a9:ca:fc:
74:90:2e:92:fa:74:1f:e1:2b:ac:83:4f:40:26:88:
3c:31:a5:ce:82:23:87:79:6f:08:00:f9:de:e9:e6:
a2:6b:04:64:14:c2:b7:e8:0d:7e:95:14:b6:e1:ee:
08:2c:fc:77:a8:2d:89:4a:2b:ad:05:5a:35:9b:39:
c4:9e:f5:b4:28:0d:e9:13:91:54:1e:41:3c:f7:75:
da:f8:cb:d8:6b:b9:b7:fc:84:b2:16:3f:d7:47:67:
00:55:d4:24:b9:43:47:c6:fd:b3:d9:48:d5:13:2f:
72:b1:21:16:c1:18:cf:6a:34:58:75:00:9a:54:71:
55:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:82:B5:27:C2:9D:46:BE:4C:92:41:F7:A7:40:B4:A0:96:85:AA:B3
X509v3 Authority Key Identifier:
keyid:68:DA:FD:63:60:63:6A:63:27:74:7A:07:08:0F:7F:2E:5E:32:CE:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNr9Y2BjamMndHoHCA9_Ll4yzoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/601360-adb9-4cb5-86d9-2bb2377e5a1c/1/aNr9Y2BjamMndHoHCA9_Ll4yzoU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/601360-adb9-4cb5-86d9-2bb2377e5a1c/1/aNr9Y2BjamMndHoHCA9_Ll4yzoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:f5:e5:cd:46:5f:43:d4:47:5e:8f:42:ea:48:16:83:11:f7:
64:f1:63:9d:cf:a3:f6:48:34:a4:fa:51:76:58:e8:97:8b:f3:
7b:cf:42:33:aa:c5:ad:56:1d:08:b9:52:b0:de:86:1e:7d:23:
9a:f5:f2:9f:95:37:26:ea:4e:96:4e:f9:30:e2:da:29:81:64:
ec:1c:b4:31:74:7b:17:35:d6:f6:b1:d4:04:65:da:f4:60:10:
ac:59:9f:95:f7:25:10:8c:57:0d:62:c9:ab:ec:f7:82:d8:b8:
8d:48:aa:00:f2:b4:00:23:c7:a0:e6:53:47:db:7b:35:af:2d:
53:fb:9c:9e:55:c9:cf:0a:38:cf:18:c9:38:25:48:b2:16:75:
86:96:d9:3b:33:c8:6b:cc:5a:7e:0f:d3:5c:55:60:e7:b6:7e:
67:f0:89:24:65:cf:95:ab:e4:9c:69:95:ca:15:0f:40:4d:d6:
03:3e:65:9d:6f:06:d4:4b:60:17:45:28:c7:41:0a:6a:2f:28:
35:b9:5a:f8:e9:b2:14:2e:56:0d:2c:da:86:bb:53:9a:3f:1d:
3d:63:4a:7c:b6:86:48:a1:28:d1:7d:76:56:5d:e6:f2:3c:b0:
39:8c:01:06:65:af:8c:15:cf:4d:1d:43:01:c9:ab:32:03:eb:
ec:2e:91:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQ46pEUHb+9j63KFAM0HhuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4ZGFmZDYzNjA2MzZhNjMyNzc0N2EwNzA4MGY3ZjJlNWUz
MmNlODUwHhcNMjUxMTA0MjIwMTI4WhcNMjUxMTA1MjIwMTI4WjAzMTEwLwYDVQQD
EygwOTgyYjUyN2MyOWQ0NmJlNGM5MjQxZjdhNzQwYjRhMDk2ODVhYWIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2mfqn+n+1zY5hleY5UiOIYx0F/A2
FGizBbGqcMdK0UeCreU3QY22jfymnlY10GxV9fkL23Hl84WJ13kH/4Ew/nn2pCSk
wDJhf2XlhQ4lbOBoLGBayuV5+8Hs/v7aaLNKur0u67rsIRUet/LupCblgm+NG4Dq
VLtgFVNFEEV/tlQoiO2pyvx0kC6S+nQf4Susg09AJog8MaXOgiOHeW8IAPne6eai
awRkFMK36A1+lRS24e4ILPx3qC2JSiutBVo1mznEnvW0KA3pE5FUHkE893Xa+MvY
a7m3/ISyFj/XR2cAVdQkuUNHxv2z2UjVEy9ysSEWwRjPajRYdQCaVHFV0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAmCtSfCnUa+TJJB96dAtKCWhaqzMB8GA1UdIwQY
MBaAFGja/WNgY2pjJ3R6BwgPfy5eMs6FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYU5yOVkyQmphbU1uZEhvSENBOV9MbDR5em9VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi82MDEzNjAtYWRiOS00Y2I1LTg2ZDkt
MmJiMjM3N2U1YTFjLzEvYU5yOVkyQmphbU1uZEhvSENBOV9MbDR5em9VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi82MDEzNjAtYWRiOS00Y2I1LTg2ZDktMmJiMjM3N2U1YTFj
LzEvYU5yOVkyQmphbU1uZEhvSENBOV9MbDR5em9VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALvXlzUZf
Q9RHXo9C6kgWgxH3ZPFjnc+j9kg0pPpRdljol4vze89CM6rFrVYdCLlSsN6GHn0j
mvXyn5U3JupOlk75MOLaKYFk7By0MXR7FzXW9rHUBGXa9GAQrFmflfclEIxXDWLJ
q+z3gti4jUiqAPK0ACPHoOZTR9t7Na8tU/ucnlXJzwo4zxjJOCVIshZ1hpbZOzPI
a8xafg/TXFVg57Z+Z/CJJGXPlavknGmVyhUPQE3WAz5lnW8G1EtgF0Uox0EKai8o
Nbla+OmyFC5WDSzahrtTmj8dPWNKfLaGSKEo0X12Vl3m8jywOYwBBmWvjBXPTR1D
AcmrMgPr7C6RLQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 03:33:49 2025 by rpki-client