Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/304a4f-2cc0-451a-b15f-cf99d5e257e9/1/1aqcEWV9iipUzmcoFLa9uXlhiDA.mft
File: 1aqcEWV9iipUzmcoFLa9uXlhiDA.mft (raw, json)
Hash identifier: nAncLOlgkQVZKAtoXkhs59Xjs2nR8m1Q55AwQlDGmtE=
Subject key identifier: 2E:2D:18:6C:14:0D:95:6E:A9:AC:EC:FF:78:77:4D:FE:A4:E4:99:19
Authority key identifier: D5:AA:9C:11:65:7D:8A:2A:54:CE:67:28:14:B6:BD:B9:79:61:88:30
Certificate issuer: /CN=d5aa9c11657d8a2a54ce672814b6bdb979618830
Certificate serial: 019A51BE88675232E2BA5B7C7A430E60CFD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1aqcEWV9iipUzmcoFLa9uXlhiDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/304a4f-2cc0-451a-b15f-cf99d5e257e9/1/1aqcEWV9iipUzmcoFLa9uXlhiDA.mft
Manifest number: 063A
Signing time: Wed 05 Nov 2025 02:00:32 +0000
Manifest this update: Wed 05 Nov 2025 02:00:32 +0000
Manifest next update: Thu 06 Nov 2025 02:00:32 +0000
Files and hashes: 1: 1aqcEWV9iipUzmcoFLa9uXlhiDA.crl (hash: QTmE9u3EZ36NSfagGVIRDU8iMtSclWdDa1n0tMc2Q38=)
2: H60TtWd0YinCrHFItkOy4Q09gMg.roa (hash: DyKdKi+xe67HQcM0pe0CES2i6G0OdRxtjONYY5E8R+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/304a4f-2cc0-451a-b15f-cf99d5e257e9/1/1aqcEWV9iipUzmcoFLa9uXlhiDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/304a4f-2cc0-451a-b15f-cf99d5e257e9/1/1aqcEWV9iipUzmcoFLa9uXlhiDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1aqcEWV9iipUzmcoFLa9uXlhiDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 02:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:be:88:67:52:32:e2:ba:5b:7c:7a:43:0e:60:cf:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5aa9c11657d8a2a54ce672814b6bdb979618830
Validity
Not Before: Nov 5 02:00:32 2025 GMT
Not After : Nov 6 02:00:32 2025 GMT
Subject: CN=2e2d186c140d956ea9acecff78774dfea4e49919
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:51:c9:15:3d:c1:2c:5d:ff:cb:27:60:d1:d9:
17:cb:8b:42:2c:41:b6:bf:fd:15:f0:c0:72:be:c1:
b4:32:e6:c4:ae:da:44:de:da:e1:bb:f7:c8:fe:44:
18:46:82:eb:5a:7b:80:2d:18:89:72:ce:a8:5f:03:
f2:5c:a9:a8:cc:42:e6:ea:6d:e4:78:4c:2d:cd:7e:
eb:79:49:42:5e:58:27:22:39:29:26:45:6d:d0:e9:
44:45:0e:87:b1:af:e8:53:0c:36:29:f0:28:a6:9e:
a5:b3:2a:83:80:70:ac:9a:69:6e:5a:63:b8:90:6e:
d3:cf:67:b2:ec:a7:d9:fb:9a:dc:0d:52:f1:c1:7c:
95:bf:77:a1:80:ce:0e:af:b7:5d:d0:c7:4c:b3:7d:
93:73:60:04:5b:b2:67:17:0c:eb:ab:2b:9b:ca:a7:
61:e0:8a:3d:43:d7:b4:0b:f5:80:ad:6f:b2:67:5f:
47:73:c9:dc:a3:15:50:a4:d5:c0:6a:23:b0:42:b2:
b5:8e:cd:30:9e:5c:3d:77:ad:06:49:a7:8b:f8:58:
a6:b4:ac:67:4e:ad:36:72:69:77:2c:6a:e0:c4:3f:
6e:98:32:86:67:94:cb:8e:4b:c4:ca:f0:0f:08:9e:
e0:c1:81:0c:45:67:e8:1d:13:96:69:01:57:b9:09:
af:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:2D:18:6C:14:0D:95:6E:A9:AC:EC:FF:78:77:4D:FE:A4:E4:99:19
X509v3 Authority Key Identifier:
keyid:D5:AA:9C:11:65:7D:8A:2A:54:CE:67:28:14:B6:BD:B9:79:61:88:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1aqcEWV9iipUzmcoFLa9uXlhiDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/304a4f-2cc0-451a-b15f-cf99d5e257e9/1/1aqcEWV9iipUzmcoFLa9uXlhiDA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/304a4f-2cc0-451a-b15f-cf99d5e257e9/1/1aqcEWV9iipUzmcoFLa9uXlhiDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:51:f9:dc:44:a0:1b:74:9f:33:74:43:d8:0b:cf:f4:2e:b4:
e4:4d:88:c8:23:0a:a1:63:cd:27:c6:cf:11:d7:3d:9b:b8:ca:
95:07:25:34:f2:99:4a:bf:f8:88:04:08:ae:78:f9:68:10:5c:
a9:65:9c:37:e9:6c:83:e6:0b:56:d9:f2:04:b5:44:d9:77:ac:
c2:e6:c7:54:d0:a8:2d:91:21:fe:dd:69:be:37:dd:48:e3:ab:
98:7b:02:e2:0f:c4:a1:1a:d5:82:96:5e:55:d6:08:99:f1:a0:
50:5a:91:47:a4:d3:68:2e:51:79:62:b1:49:0f:f7:35:ba:11:
d3:25:4e:bd:66:0c:a6:e6:71:f2:4b:9c:76:17:e9:5e:aa:42:
5f:e5:8e:87:fd:04:ce:12:d6:fb:10:0e:d4:68:df:6c:a5:bd:
fa:41:34:58:91:19:fd:63:27:d5:f2:34:d3:95:50:0a:80:15:
6d:5b:59:72:68:6f:dc:30:0c:7f:42:1d:01:bd:43:c4:a6:2f:
6d:9c:eb:19:12:eb:7c:7c:e1:85:27:31:83:dc:d0:fd:38:5f:
16:0d:fd:af:cf:ee:58:d6:0f:b9:fb:09:82:72:4e:3a:27:78:
f8:6f:b2:ad:64:f7:5b:90:05:dc:55:e5:0f:a2:4e:fb:af:a2:
bd:1f:c4:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpRvohnUjLiult8ekMOYM/UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1YWE5YzExNjU3ZDhhMmE1NGNlNjcyODE0YjZiZGI5Nzk2
MTg4MzAwHhcNMjUxMTA1MDIwMDMyWhcNMjUxMTA2MDIwMDMyWjAzMTEwLwYDVQQD
EygyZTJkMTg2YzE0MGQ5NTZlYTlhY2VjZmY3ODc3NGRmZWE0ZTQ5OTE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAglHJFT3BLF3/yydg0dkXy4tCLEG2
v/0V8MByvsG0MubErtpE3trhu/fI/kQYRoLrWnuALRiJcs6oXwPyXKmozELm6m3k
eEwtzX7reUlCXlgnIjkpJkVt0OlERQ6Hsa/oUww2KfAopp6lsyqDgHCsmmluWmO4
kG7Tz2ey7KfZ+5rcDVLxwXyVv3ehgM4Or7dd0MdMs32Tc2AEW7JnFwzrqyubyqdh
4Io9Q9e0C/WArW+yZ19Hc8ncoxVQpNXAaiOwQrK1js0wnlw9d60GSaeL+FimtKxn
Tq02cml3LGrgxD9umDKGZ5TLjkvEyvAPCJ7gwYEMRWfoHROWaQFXuQmvCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC4tGGwUDZVuqazs/3h3Tf6k5JkZMB8GA1UdIwQY
MBaAFNWqnBFlfYoqVM5nKBS2vbl5YYgwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWFxY0VXVjlpaXBVem1jb0ZMYTl1WGxoaURBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi8zMDRhNGYtMmNjMC00NTFhLWIxNWYt
Y2Y5OWQ1ZTI1N2U5LzEvMWFxY0VXVjlpaXBVem1jb0ZMYTl1WGxoaURBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi8zMDRhNGYtMmNjMC00NTFhLWIxNWYtY2Y5OWQ1ZTI1N2U5
LzEvMWFxY0VXVjlpaXBVem1jb0ZMYTl1WGxoaURBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABVH53ESg
G3SfM3RD2AvP9C605E2IyCMKoWPNJ8bPEdc9m7jKlQclNPKZSr/4iAQIrnj5aBBc
qWWcN+lsg+YLVtnyBLVE2XeswubHVNCoLZEh/t1pvjfdSOOrmHsC4g/EoRrVgpZe
VdYImfGgUFqRR6TTaC5ReWKxSQ/3NboR0yVOvWYMpuZx8kucdhfpXqpCX+WOh/0E
zhLW+xAO1GjfbKW9+kE0WJEZ/WMn1fI005VQCoAVbVtZcmhv3DAMf0IdAb1DxKYv
bZzrGRLrfHzhhScxg9zQ/ThfFg39r8/uWNYPufsJgnJOOid4+G+yrWT3W5AF3FXl
D6JO+6+ivR/Eng==
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:09:09 2025 by rpki-client