Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.mft
File: dK68FUpWyDAly9hkGprDFctVHAY.mft (raw, json)
Hash identifier: KE7+1h4TaDuObpHqhKkLv6sajDT86xeOSLxHQQdlbmQ=
Subject key identifier: 5C:90:34:E0:84:89:34:1B:F6:D5:19:B5:32:94:A7:42:FD:54:AC:E6
Authority key identifier: 74:AE:BC:15:4A:56:C8:30:25:CB:D8:64:1A:9A:C3:15:CB:55:1C:06
Certificate issuer: /CN=74aebc154a56c83025cbd8641a9ac315cb551c06
Certificate serial: 019A503DF81ACA72915D8A389F1CC6AB1E0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dK68FUpWyDAly9hkGprDFctVHAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.mft
Manifest number: 1715
Signing time: Tue 04 Nov 2025 19:00:29 +0000
Manifest this update: Tue 04 Nov 2025 19:00:29 +0000
Manifest next update: Wed 05 Nov 2025 19:00:29 +0000
Files and hashes: 1: R0_MeNcCGsgFbXPPMSbNiNB6onw.roa (hash: jCCdHzd1f1vyFj3zrZb6H/YnXBVmEiivGeOlhoHJWc0=)
2: dK68FUpWyDAly9hkGprDFctVHAY.crl (hash: mB/NRWIy1u3aqKkUTSKlyQvcLgyIExstGQhXLQETTrw=)
3: xiLzP1pUVJ4HlLptpzl15fneHrg.roa (hash: Oybd2JrzjZp9Unasli0WI1/BduGFzHUQWKvicye2j54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dK68FUpWyDAly9hkGprDFctVHAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3d:f8:1a:ca:72:91:5d:8a:38:9f:1c:c6:ab:1e:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74aebc154a56c83025cbd8641a9ac315cb551c06
Validity
Not Before: Nov 4 19:00:29 2025 GMT
Not After : Nov 5 19:00:29 2025 GMT
Subject: CN=5c9034e08489341bf6d519b53294a742fd54ace6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ca:42:d6:63:98:26:02:15:61:a7:1b:ac:39:
3e:0b:74:e4:2b:9c:31:07:4c:d0:90:e3:76:10:8d:
4e:64:79:10:00:75:dd:d6:21:77:1f:cc:ac:34:00:
d3:88:f5:ff:87:ae:f7:1f:84:de:52:26:22:c1:86:
0f:33:f1:9d:90:3d:24:ae:a5:e3:f0:1e:eb:63:71:
62:61:a7:80:84:1c:63:bf:d7:ca:88:ef:5c:64:e0:
57:ed:2a:7f:6d:55:6d:be:bd:e2:82:ec:3a:75:cc:
5a:82:4d:7f:e2:23:86:51:bb:96:4b:95:aa:33:b6:
8f:35:ef:67:82:ca:94:14:02:ac:ee:99:28:9b:7f:
ec:4c:9f:ab:6c:f1:ec:77:cd:74:69:4a:8e:ad:f7:
0a:97:07:38:7f:fa:dd:44:ae:b3:a3:13:be:59:43:
dc:1d:6d:eb:2a:c5:06:29:ad:91:54:d8:1c:6e:74:
ba:fd:77:f9:2e:0c:f8:45:bd:db:48:ab:98:63:a7:
2e:47:16:4d:0c:83:72:22:3f:68:f0:a8:37:d0:c7:
ee:7f:a9:c3:cd:d6:81:00:4a:67:ed:ff:1c:4b:4d:
62:f6:c4:ab:78:64:82:bf:70:26:5c:2a:5f:4f:20:
f4:9a:ee:d5:ee:01:54:c1:9c:ad:0c:59:31:b2:d6:
43:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:90:34:E0:84:89:34:1B:F6:D5:19:B5:32:94:A7:42:FD:54:AC:E6
X509v3 Authority Key Identifier:
keyid:74:AE:BC:15:4A:56:C8:30:25:CB:D8:64:1A:9A:C3:15:CB:55:1C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dK68FUpWyDAly9hkGprDFctVHAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:a5:e4:39:3e:89:c7:79:97:3d:10:a3:3a:fd:13:f6:44:c4:
cf:4c:20:27:16:f6:6a:77:8b:23:9b:1e:66:b0:39:64:d0:f6:
13:cf:69:73:ac:53:52:9a:45:61:81:1d:5d:a2:ce:c4:6f:95:
03:45:3b:83:20:f2:6c:f7:b6:4e:6e:be:d8:9d:09:1c:30:8d:
54:9c:36:e4:fe:a8:56:aa:70:ee:6d:a6:d0:77:9c:e7:a0:a8:
4f:b2:b4:62:18:99:77:dd:1c:f3:cd:ce:1e:78:f5:97:89:80:
30:ac:76:cf:37:78:77:7b:5a:1d:3f:47:4d:dd:af:43:54:1a:
fc:16:4f:3f:a7:b6:2a:f0:52:db:6b:2c:06:ec:fd:f0:e9:c3:
5c:98:1e:d5:21:b2:16:e8:83:b9:7b:af:cf:93:ea:bb:d1:4f:
7e:4a:bb:24:8a:73:76:fc:ef:48:fa:59:a1:0e:37:69:cc:ed:
28:42:ad:d4:04:ca:d4:04:6b:96:34:90:15:6d:ea:41:89:7b:
4e:af:f6:24:aa:8b:ba:5b:92:ec:a1:61:4b:fa:4a:7a:0e:7c:
8c:8c:4f:c1:0c:ce:52:96:48:dc:82:16:60:cf:42:25:b7:73:
69:6a:90:39:65:92:50:d5:70:e4:aa:a4:a5:2d:f3:0a:cf:47:
73:1a:f3:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQPfgaynKRXYo4nxzGqx4KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0YWViYzE1NGE1NmM4MzAyNWNiZDg2NDFhOWFjMzE1Y2I1
NTFjMDYwHhcNMjUxMTA0MTkwMDI5WhcNMjUxMTA1MTkwMDI5WjAzMTEwLwYDVQQD
Eyg1YzkwMzRlMDg0ODkzNDFiZjZkNTE5YjUzMjk0YTc0MmZkNTRhY2U2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2cpC1mOYJgIVYacbrDk+C3TkK5wx
B0zQkON2EI1OZHkQAHXd1iF3H8ysNADTiPX/h673H4TeUiYiwYYPM/GdkD0krqXj
8B7rY3FiYaeAhBxjv9fKiO9cZOBX7Sp/bVVtvr3iguw6dcxagk1/4iOGUbuWS5Wq
M7aPNe9ngsqUFAKs7pkom3/sTJ+rbPHsd810aUqOrfcKlwc4f/rdRK6zoxO+WUPc
HW3rKsUGKa2RVNgcbnS6/Xf5Lgz4Rb3bSKuYY6cuRxZNDINyIj9o8Kg30Mfuf6nD
zdaBAEpn7f8cS01i9sSreGSCv3AmXCpfTyD0mu7V7gFUwZytDFkxstZDTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFyQNOCEiTQb9tUZtTKUp0L9VKzmMB8GA1UdIwQY
MBaAFHSuvBVKVsgwJcvYZBqawxXLVRwGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEs2OEZVcFd5REFseTloa0dwckRGY3RWSEFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy82ZGU3YTAtNDA3My00MjcyLWJmNDQt
MDdhMWQ2NTU0OGJhLzEvZEs2OEZVcFd5REFseTloa0dwckRGY3RWSEFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy82ZGU3YTAtNDA3My00MjcyLWJmNDQtMDdhMWQ2NTU0OGJh
LzEvZEs2OEZVcFd5REFseTloa0dwckRGY3RWSEFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASKXkOT6J
x3mXPRCjOv0T9kTEz0wgJxb2aneLI5seZrA5ZND2E89pc6xTUppFYYEdXaLOxG+V
A0U7gyDybPe2Tm6+2J0JHDCNVJw25P6oVqpw7m2m0Hec56CoT7K0YhiZd90c883O
Hnj1l4mAMKx2zzd4d3taHT9HTd2vQ1Qa/BZPP6e2KvBS22ssBuz98OnDXJge1SGy
FuiDuXuvz5Pqu9FPfkq7JIpzdvzvSPpZoQ43acztKEKt1ATK1ARrljSQFW3qQYl7
Tq/2JKqLuluS7KFhS/pKeg58jIxPwQzOUpZI3IIWYM9CJbdzaWqQOWWSUNVw5Kqk
pS3zCs9HcxrzrQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 20:26:04 2025 by rpki-client