Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/dqNyt1TkkgjWRqp4WeNItHXlJtI.mft
File: dqNyt1TkkgjWRqp4WeNItHXlJtI.mft (raw, json)
Hash identifier: fco9GpBIf7+bdsxpnJv6gZGJEp3F+ZcahYiPQttSIN4=
Subject key identifier: 3A:D9:57:AF:BD:2F:57:C6:68:48:F6:BC:72:86:7D:47:43:87:79:AC
Authority key identifier: 76:A3:72:B7:54:E4:92:08:D6:46:AA:78:59:E3:48:B4:75:E5:26:D2
Certificate issuer: /CN=76a372b754e49208d646aa7859e348b475e526d2
Certificate serial: 019A4EF5D4A8E572C60390F2E96BE54E8360
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dqNyt1TkkgjWRqp4WeNItHXlJtI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/dqNyt1TkkgjWRqp4WeNItHXlJtI.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 13:02:04 +0000
Manifest this update: Tue 04 Nov 2025 13:02:04 +0000
Manifest next update: Wed 05 Nov 2025 13:02:04 +0000
Files and hashes: 1: dqNyt1TkkgjWRqp4WeNItHXlJtI.crl (hash: hQJ1Hwei0Rn2zt8t+H3aiqpclAEDmBooDUk43umKSvg=)
2: jNyaGdXh72CU4r0BXdX9NFKAwCI.roa (hash: KWU48qyL5wzO3wv8boVqiKFZ7+HfPReZF5Tc1JfbGeU=)
3: rU-a1L62W9yvQkesfV9xmSsuDH0.roa (hash: TGk/DUYw8VVmGx/evhfxGKscBfdKDMhClJqHTZwdFIQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/dqNyt1TkkgjWRqp4WeNItHXlJtI.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/dqNyt1TkkgjWRqp4WeNItHXlJtI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dqNyt1TkkgjWRqp4WeNItHXlJtI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:d4:a8:e5:72:c6:03:90:f2:e9:6b:e5:4e:83:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76a372b754e49208d646aa7859e348b475e526d2
Validity
Not Before: Nov 4 13:02:04 2025 GMT
Not After : Nov 5 13:02:04 2025 GMT
Subject: CN=3ad957afbd2f57c66848f6bc72867d47438779ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ff:75:5b:b6:b1:e8:a9:21:d8:15:47:89:a0:
3e:d4:e5:32:a6:9c:5c:5a:00:2c:c9:9a:2f:ca:02:
38:8f:1f:40:21:eb:ad:28:4f:a1:46:6a:79:d0:c2:
fb:78:0e:6e:0e:be:0b:0f:8b:78:2f:75:b6:e0:0a:
06:01:34:f9:70:07:e4:33:47:66:17:68:0f:31:7b:
2a:67:b5:2c:a7:eb:4f:ca:c9:f3:61:f9:6b:40:8f:
50:2d:5f:c7:38:5b:11:43:37:62:28:e9:34:3b:b0:
db:da:5a:a1:c5:75:ac:2c:86:ec:45:f0:df:f4:ec:
7c:e5:78:0f:ef:ed:b6:aa:b9:3b:73:21:51:1a:fd:
04:57:f0:84:fc:c2:80:56:af:13:93:55:56:1e:be:
50:3a:9b:00:0d:34:79:9c:2b:d7:c9:23:6b:98:94:
15:67:6f:62:64:63:02:49:1b:d1:4c:27:ef:c4:6b:
46:63:b1:7d:ad:33:4f:cc:f5:30:7f:ca:72:0a:66:
5d:b2:8d:43:e2:31:f5:fb:b9:63:aa:77:c1:de:6c:
d7:8b:86:d5:c4:f8:74:cc:26:5d:8d:bd:b3:2f:cd:
0c:59:74:95:72:c2:46:14:7e:2e:f1:ff:60:24:35:
4a:6d:c5:da:3e:33:4c:3b:15:10:7f:0c:fa:a7:1f:
e1:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:D9:57:AF:BD:2F:57:C6:68:48:F6:BC:72:86:7D:47:43:87:79:AC
X509v3 Authority Key Identifier:
keyid:76:A3:72:B7:54:E4:92:08:D6:46:AA:78:59:E3:48:B4:75:E5:26:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dqNyt1TkkgjWRqp4WeNItHXlJtI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/dqNyt1TkkgjWRqp4WeNItHXlJtI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/dqNyt1TkkgjWRqp4WeNItHXlJtI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:2c:85:1c:fa:05:db:94:21:d4:87:80:d6:ad:9b:82:81:f1:
40:13:1a:53:86:71:7d:50:8a:90:61:6a:41:ee:26:82:c4:ed:
cd:03:c9:0c:34:cc:b7:1c:1e:ca:91:d9:6d:8d:96:4b:3d:56:
b2:0b:8d:81:5c:6e:1f:69:77:fe:4e:f4:68:80:15:d0:a6:c2:
f4:a4:14:89:71:45:9b:13:2e:60:74:89:a5:bb:d7:d6:1c:0b:
55:c4:60:93:11:ea:1f:03:ed:d9:38:83:4f:a4:74:f6:a8:9c:
53:5c:c5:cb:38:db:09:f6:8b:15:70:bb:16:07:6f:dc:bf:8a:
bc:f0:85:00:2f:65:4e:ed:70:c4:81:93:2e:f2:f2:1c:1c:fc:
28:12:6a:6d:34:8f:c5:fe:8e:95:74:1c:43:8d:65:ad:d9:4c:
2f:18:21:9f:2a:7d:7e:94:6d:66:b4:5e:2c:a4:ca:c8:11:a3:
91:0b:1e:05:12:e3:bf:e6:39:fe:b0:a0:4d:56:76:f7:2f:81:
b9:11:02:0a:da:19:be:65:5d:4b:f4:71:bb:02:ed:8e:59:e1:
4c:f2:24:2d:f7:22:90:44:0f:4c:4d:aa:20:e6:7d:d5:bf:ae:
d8:77:2e:68:eb:e6:21:eb:82:48:e7:67:04:8a:e3:5a:a4:a8:
b0:04:d4:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9dSo5XLGA5Dy6WvlToNgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2YTM3MmI3NTRlNDkyMDhkNjQ2YWE3ODU5ZTM0OGI0NzVl
NTI2ZDIwHhcNMjUxMTA0MTMwMjA0WhcNMjUxMTA1MTMwMjA0WjAzMTEwLwYDVQQD
EygzYWQ5NTdhZmJkMmY1N2M2Njg0OGY2YmM3Mjg2N2Q0NzQzODc3OWFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/91W7ax6Kkh2BVHiaA+1OUyppxc
WgAsyZovygI4jx9AIeutKE+hRmp50ML7eA5uDr4LD4t4L3W24AoGATT5cAfkM0dm
F2gPMXsqZ7Usp+tPysnzYflrQI9QLV/HOFsRQzdiKOk0O7Db2lqhxXWsLIbsRfDf
9Ox85XgP7+22qrk7cyFRGv0EV/CE/MKAVq8Tk1VWHr5QOpsADTR5nCvXySNrmJQV
Z29iZGMCSRvRTCfvxGtGY7F9rTNPzPUwf8pyCmZdso1D4jH1+7ljqnfB3mzXi4bV
xPh0zCZdjb2zL80MWXSVcsJGFH4u8f9gJDVKbcXaPjNMOxUQfwz6px/hQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDrZV6+9L1fGaEj2vHKGfUdDh3msMB8GA1UdIwQY
MBaAFHajcrdU5JII1kaqeFnjSLR15SbSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHFOeXQxVGtrZ2pXUnFwNFdlTkl0SFhsSnRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8yMzVmZWMtYWZjOS00ZDJmLThiNTkt
YTk5ZWE5MWNiNWI5LzEvZHFOeXQxVGtrZ2pXUnFwNFdlTkl0SFhsSnRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC8yMzVmZWMtYWZjOS00ZDJmLThiNTktYTk5ZWE5MWNiNWI5
LzEvZHFOeXQxVGtrZ2pXUnFwNFdlTkl0SFhsSnRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnCyFHPoF
25Qh1IeA1q2bgoHxQBMaU4ZxfVCKkGFqQe4mgsTtzQPJDDTMtxweypHZbY2WSz1W
sguNgVxuH2l3/k70aIAV0KbC9KQUiXFFmxMuYHSJpbvX1hwLVcRgkxHqHwPt2TiD
T6R09qicU1zFyzjbCfaLFXC7Fgdv3L+KvPCFAC9lTu1wxIGTLvLyHBz8KBJqbTSP
xf6OlXQcQ41lrdlMLxghnyp9fpRtZrReLKTKyBGjkQseBRLjv+Y5/rCgTVZ29y+B
uRECCtoZvmVdS/RxuwLtjlnhTPIkLfcikEQPTE2qIOZ91b+u2HcuaOvmIeuCSOdn
BIrjWqSosATUYQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 15:17:45 2025 by rpki-client