Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.mft
File: mFS9ioY6MYlcxsuSLzAIs_CKra4.mft (raw, json)
Hash identifier: e5uw9cokVFju4FKqxCQ8WxZPdvTq8vC0ltTqqwurthM=
Subject key identifier: EE:3A:02:EB:8B:77:0A:EC:C8:F8:48:EA:BD:BE:77:22:90:40:81:9F
Authority key identifier: 98:54:BD:8A:86:3A:31:89:5C:C6:CB:92:2F:30:08:B3:F0:8A:AD:AE
Certificate issuer: /CN=9854bd8a863a31895cc6cb922f3008b3f08aadae
Certificate serial: 019A51512529E8CF0C83E742802F5013117C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mFS9ioY6MYlcxsuSLzAIs_CKra4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.mft
Manifest number: 16A0
Signing time: Wed 05 Nov 2025 00:01:03 +0000
Manifest this update: Wed 05 Nov 2025 00:01:03 +0000
Manifest next update: Thu 06 Nov 2025 00:01:03 +0000
Files and hashes: 1: eehHZCCtBF4ofvtvmkP_R--u6i0.roa (hash: Qv+/+I4mInj8ZQpbVci07W/0Cj+7zt+KBmz4hdMjJLU=)
2: mFS9ioY6MYlcxsuSLzAIs_CKra4.crl (hash: 9q9NRW/3KPMvQqSIvblegXY5PEL5D/9HqEPQktuzrcQ=)
3: wV8X6d9n1udO8_7qelBMs7zayK8.roa (hash: XNyzV/UvtP9ucrS5ao0e9xxzI7L3zFMzQVzB5P+BXHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.mft
rsync://rpki.ripe.net/repository/DEFAULT/mFS9ioY6MYlcxsuSLzAIs_CKra4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 00:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:51:25:29:e8:cf:0c:83:e7:42:80:2f:50:13:11:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9854bd8a863a31895cc6cb922f3008b3f08aadae
Validity
Not Before: Nov 5 00:01:03 2025 GMT
Not After : Nov 6 00:01:03 2025 GMT
Subject: CN=ee3a02eb8b770aecc8f848eabdbe77229040819f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:29:4a:29:c4:3a:8b:b6:4a:c6:cb:e4:56:6a:
11:16:cf:77:95:0a:8f:b4:17:25:f6:45:b1:04:6b:
31:8f:45:17:e8:8f:06:a3:0b:97:90:8b:2c:c6:8e:
6d:cd:de:f9:b5:c0:f4:ba:3a:67:91:f4:51:46:9c:
8d:b0:2a:bb:80:27:94:1e:5a:16:cf:b4:e8:e6:79:
ff:1b:b1:93:d5:0b:26:c5:d7:7c:6e:6d:e5:8c:0d:
48:13:2e:97:de:8f:16:dc:e6:4f:41:ef:dc:58:bc:
ee:b0:3f:a1:e6:54:52:8f:59:11:58:e2:d5:0e:00:
15:ce:7f:38:fb:b9:41:2c:7c:53:7b:18:d3:f5:a5:
f6:56:c1:cd:cb:ba:38:43:29:7e:a6:17:c7:dc:ba:
0c:e5:98:05:12:32:9d:7d:48:28:85:00:c1:94:c2:
b7:0b:36:1c:ba:8c:80:3a:93:78:1a:e9:dd:ed:c5:
60:f0:da:e2:ad:89:c9:23:f2:35:f7:f7:6c:61:d8:
eb:7c:82:45:b0:14:71:6f:19:30:8a:d8:0d:76:23:
dc:1b:bc:b8:83:7a:aa:18:29:55:2a:1b:69:c9:b6:
63:60:5e:13:2f:fa:70:96:42:09:c0:e6:cf:66:96:
cb:d7:60:a1:dc:fc:6d:58:d3:92:aa:25:85:66:fb:
ae:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:3A:02:EB:8B:77:0A:EC:C8:F8:48:EA:BD:BE:77:22:90:40:81:9F
X509v3 Authority Key Identifier:
keyid:98:54:BD:8A:86:3A:31:89:5C:C6:CB:92:2F:30:08:B3:F0:8A:AD:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mFS9ioY6MYlcxsuSLzAIs_CKra4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:72:ae:c6:0b:06:46:f0:d6:de:57:43:63:96:7b:92:03:cd:
a8:c3:33:99:a7:0c:ad:8b:74:0d:c1:e1:2f:a3:38:b8:b0:03:
d4:54:61:18:6a:df:5d:d8:47:51:8c:b4:34:e4:bf:ed:52:43:
f6:ea:e4:43:45:58:98:2a:24:db:70:fb:1e:f9:61:eb:8b:ac:
d2:9a:ab:73:17:f0:36:af:02:1a:fb:9e:fd:da:ae:05:7b:f6:
db:93:3d:92:d3:7f:2b:7a:c7:e9:b6:4c:b0:76:4a:76:e8:63:
2b:0b:6a:fe:ef:91:1f:44:94:76:b0:26:e3:79:6e:2f:c4:81:
53:5f:d6:b3:0e:e7:70:49:18:30:cb:90:54:22:22:17:65:30:
f7:a1:77:16:f0:7e:09:69:d2:e0:de:d5:5b:05:4b:c9:ed:df:
61:94:59:e6:4a:8b:fc:c9:74:11:c7:77:69:38:6e:83:be:46:
bd:51:6f:82:79:e6:d6:a8:93:6d:18:84:15:7e:a8:8f:dd:c8:
fa:ba:26:39:f8:8c:cc:bc:6f:ec:f1:bf:14:1f:a6:87:29:c7:
28:7c:b0:99:90:f1:b2:b7:b2:d4:0e:93:e6:cc:bf:73:78:83:
ce:ce:d6:06:c2:b3:83:22:b7:02:30:15:4e:c0:be:81:cf:7a:
0e:f3:03:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpRUSUp6M8Mg+dCgC9QExF8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4NTRiZDhhODYzYTMxODk1Y2M2Y2I5MjJmMzAwOGIzZjA4
YWFkYWUwHhcNMjUxMTA1MDAwMTAzWhcNMjUxMTA2MDAwMTAzWjAzMTEwLwYDVQQD
EyhlZTNhMDJlYjhiNzcwYWVjYzhmODQ4ZWFiZGJlNzcyMjkwNDA4MTlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArylKKcQ6i7ZKxsvkVmoRFs93lQqP
tBcl9kWxBGsxj0UX6I8GowuXkIssxo5tzd75tcD0ujpnkfRRRpyNsCq7gCeUHloW
z7To5nn/G7GT1Qsmxdd8bm3ljA1IEy6X3o8W3OZPQe/cWLzusD+h5lRSj1kRWOLV
DgAVzn84+7lBLHxTexjT9aX2VsHNy7o4Qyl+phfH3LoM5ZgFEjKdfUgohQDBlMK3
CzYcuoyAOpN4Gund7cVg8NrirYnJI/I19/dsYdjrfIJFsBRxbxkwitgNdiPcG7y4
g3qqGClVKhtpybZjYF4TL/pwlkIJwObPZpbL12Ch3PxtWNOSqiWFZvuu9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO46AuuLdwrsyPhI6r2+dyKQQIGfMB8GA1UdIwQY
MBaAFJhUvYqGOjGJXMbLki8wCLPwiq2uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUZTOWlvWTZNWWxjeHN1U0x6QUlzX0NLcmE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC8yZWQxMGMtMDRiMC00ODY2LTliODIt
YzUyMmI3NGRkY2ZkLzEvbUZTOWlvWTZNWWxjeHN1U0x6QUlzX0NLcmE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC8yZWQxMGMtMDRiMC00ODY2LTliODItYzUyMmI3NGRkY2Zk
LzEvbUZTOWlvWTZNWWxjeHN1U0x6QUlzX0NLcmE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK3KuxgsG
RvDW3ldDY5Z7kgPNqMMzmacMrYt0DcHhL6M4uLAD1FRhGGrfXdhHUYy0NOS/7VJD
9urkQ0VYmCok23D7Hvlh64us0pqrcxfwNq8CGvue/dquBXv225M9ktN/K3rH6bZM
sHZKduhjKwtq/u+RH0SUdrAm43luL8SBU1/Wsw7ncEkYMMuQVCIiF2Uw96F3FvB+
CWnS4N7VWwVLye3fYZRZ5kqL/Ml0Ecd3aThug75GvVFvgnnm1qiTbRiEFX6oj93I
+romOfiMzLxv7PG/FB+mhynHKHywmZDxsrey1A6T5sy/c3iDzs7WBsKzgyK3AjAV
TsC+gc96DvMDhg==
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:36:05 2025 by rpki-client