Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/535bf7-59ac-45f1-bec5-41dd7f3ea7a4/1/RKqBMTnAax3PG_6DMrm4Aas-swI.mft
File: RKqBMTnAax3PG_6DMrm4Aas-swI.mft (raw, json)
Hash identifier: Oj2/l6KNt4pch2wsP3AGryTiOg9ndYd5rcCt/28AG9I=
Subject key identifier: 13:90:AB:ED:32:47:EC:B9:A1:F6:DC:A7:8C:DF:F0:B5:C4:02:DD:7E
Authority key identifier: 44:AA:81:31:39:C0:6B:1D:CF:1B:FE:83:32:B9:B8:01:AB:3E:B3:02
Certificate issuer: /CN=44aa813139c06b1dcf1bfe8332b9b801ab3eb302
Certificate serial: 019A4E18CD77CCA46253B6711478440EB754
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RKqBMTnAax3PG_6DMrm4Aas-swI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/535bf7-59ac-45f1-bec5-41dd7f3ea7a4/1/RKqBMTnAax3PG_6DMrm4Aas-swI.mft
Manifest number: 0724
Signing time: Tue 04 Nov 2025 09:00:39 +0000
Manifest this update: Tue 04 Nov 2025 09:00:39 +0000
Manifest next update: Wed 05 Nov 2025 09:00:39 +0000
Files and hashes: 1: RKqBMTnAax3PG_6DMrm4Aas-swI.crl (hash: w5F3kpi46GfGhWtV5uY4W1jW5oAX4fCoNoOwSyhvprc=)
2: dulLD0ENjA9tfgPr9DrSQJxWn5k.roa (hash: ecAhh1+SnR4Xv8G0G+2S5KTuId8TsIACx8G94ng9hIA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/535bf7-59ac-45f1-bec5-41dd7f3ea7a4/1/RKqBMTnAax3PG_6DMrm4Aas-swI.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/535bf7-59ac-45f1-bec5-41dd7f3ea7a4/1/RKqBMTnAax3PG_6DMrm4Aas-swI.mft
rsync://rpki.ripe.net/repository/DEFAULT/RKqBMTnAax3PG_6DMrm4Aas-swI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:cd:77:cc:a4:62:53:b6:71:14:78:44:0e:b7:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44aa813139c06b1dcf1bfe8332b9b801ab3eb302
Validity
Not Before: Nov 4 09:00:39 2025 GMT
Not After : Nov 5 09:00:39 2025 GMT
Subject: CN=1390abed3247ecb9a1f6dca78cdff0b5c402dd7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:be:af:b0:f9:bd:5e:6e:00:30:06:42:cb:bf:
b3:da:93:ff:8b:57:d4:3b:10:ff:2c:f1:ef:46:d3:
db:03:a7:02:bb:8f:67:2c:50:c6:1c:e7:2e:b1:91:
cd:81:5f:21:ab:5f:e1:b5:93:c1:18:e7:ff:06:40:
c8:2e:18:15:57:83:73:11:bb:f2:18:27:4e:07:d3:
04:bd:e5:1a:e5:75:b6:4c:aa:f8:64:ad:4b:3b:58:
bd:8d:36:cb:36:4e:cc:09:a0:48:f1:65:b1:ef:f2:
bc:e2:94:42:64:33:07:e4:4f:37:d7:c5:a3:dc:3c:
c6:8c:3d:95:c1:88:61:b8:33:91:d6:e9:00:64:a4:
1c:d5:3e:ec:9b:22:1e:9c:b5:51:55:f1:24:f3:a6:
3b:90:28:3f:4c:a5:e9:ba:5b:5d:97:cc:6f:e0:c1:
5c:4a:82:c3:82:fe:d5:2f:71:98:42:e6:8f:3b:ea:
6a:1a:1d:51:c2:16:fe:7d:61:bf:d4:fc:13:d1:47:
d6:5d:12:34:55:8c:ca:30:f2:16:69:41:95:d0:11:
43:91:bb:c9:97:56:36:83:a6:51:98:78:9e:10:f8:
ea:f3:db:a4:0b:07:a9:9e:83:9d:30:42:bc:a7:c1:
de:9f:3a:23:b0:1e:fd:0e:3a:59:f2:75:3d:b4:db:
13:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:90:AB:ED:32:47:EC:B9:A1:F6:DC:A7:8C:DF:F0:B5:C4:02:DD:7E
X509v3 Authority Key Identifier:
keyid:44:AA:81:31:39:C0:6B:1D:CF:1B:FE:83:32:B9:B8:01:AB:3E:B3:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RKqBMTnAax3PG_6DMrm4Aas-swI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/535bf7-59ac-45f1-bec5-41dd7f3ea7a4/1/RKqBMTnAax3PG_6DMrm4Aas-swI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/535bf7-59ac-45f1-bec5-41dd7f3ea7a4/1/RKqBMTnAax3PG_6DMrm4Aas-swI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:f1:c6:e2:87:07:7d:b0:53:9f:4e:f0:3c:b7:fa:56:f1:9d:
ad:41:57:9a:b4:a1:3d:70:87:b6:f0:6d:56:3e:22:e0:19:1d:
93:96:d6:e1:c0:b3:cc:50:c0:a3:c6:ee:14:17:ee:f0:19:51:
93:c1:48:9a:03:83:ae:26:a6:f9:d6:8f:b3:f2:37:eb:1b:50:
bd:f3:ca:0c:e0:41:e5:df:a2:14:c1:a2:88:fd:2e:34:e7:16:
ba:67:8d:46:6f:ea:a6:41:18:b4:b5:7d:b3:8c:21:03:9f:48:
07:a7:82:f5:c9:c0:3f:2d:69:34:0f:f2:82:d6:de:ad:b0:44:
be:61:c5:5d:2f:16:48:b5:d3:05:b9:a1:c4:d2:b1:cc:46:0c:
24:d8:26:da:c3:b8:c3:eb:7f:99:cd:3d:f5:b2:72:fa:64:db:
c5:dd:6a:f6:d8:95:f6:c9:8a:5b:0e:f6:63:ba:83:24:b3:02:
5b:42:b0:b9:68:4d:6d:26:b5:b5:ce:86:c9:7f:01:47:94:bd:
a6:ee:fa:f2:71:3b:db:6c:9e:40:b4:fd:74:76:12:9b:3a:7c:
2e:ef:b0:ce:cb:ec:1f:4a:eb:76:05:a9:34:61:ac:68:a5:1c:
7c:31:40:4d:21:5b:f0:92:df:ad:0e:91:21:bd:3b:b1:a6:66:
05:fc:09:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOGM13zKRiU7ZxFHhEDrdUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0YWE4MTMxMzljMDZiMWRjZjFiZmU4MzMyYjliODAxYWIz
ZWIzMDIwHhcNMjUxMTA0MDkwMDM5WhcNMjUxMTA1MDkwMDM5WjAzMTEwLwYDVQQD
EygxMzkwYWJlZDMyNDdlY2I5YTFmNmRjYTc4Y2RmZjBiNWM0MDJkZDdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAur6vsPm9Xm4AMAZCy7+z2pP/i1fU
OxD/LPHvRtPbA6cCu49nLFDGHOcusZHNgV8hq1/htZPBGOf/BkDILhgVV4NzEbvy
GCdOB9MEveUa5XW2TKr4ZK1LO1i9jTbLNk7MCaBI8WWx7/K84pRCZDMH5E8318Wj
3DzGjD2VwYhhuDOR1ukAZKQc1T7smyIenLVRVfEk86Y7kCg/TKXpultdl8xv4MFc
SoLDgv7VL3GYQuaPO+pqGh1Rwhb+fWG/1PwT0UfWXRI0VYzKMPIWaUGV0BFDkbvJ
l1Y2g6ZRmHieEPjq89ukCwepnoOdMEK8p8HenzojsB79DjpZ8nU9tNsTrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBOQq+0yR+y5ofbcp4zf8LXEAt1+MB8GA1UdIwQY
MBaAFESqgTE5wGsdzxv+gzK5uAGrPrMCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUktxQk1UbkFheDNQR182RE1ybTRBYXMtc3dJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy81MzViZjctNTlhYy00NWYxLWJlYzUt
NDFkZDdmM2VhN2E0LzEvUktxQk1UbkFheDNQR182RE1ybTRBYXMtc3dJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy81MzViZjctNTlhYy00NWYxLWJlYzUtNDFkZDdmM2VhN2E0
LzEvUktxQk1UbkFheDNQR182RE1ybTRBYXMtc3dJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV/HG4ocH
fbBTn07wPLf6VvGdrUFXmrShPXCHtvBtVj4i4Bkdk5bW4cCzzFDAo8buFBfu8BlR
k8FImgODriam+daPs/I36xtQvfPKDOBB5d+iFMGiiP0uNOcWumeNRm/qpkEYtLV9
s4whA59IB6eC9cnAPy1pNA/ygtberbBEvmHFXS8WSLXTBbmhxNKxzEYMJNgm2sO4
w+t/mc099bJy+mTbxd1q9tiV9smKWw72Y7qDJLMCW0KwuWhNbSa1tc6GyX8BR5S9
pu768nE722yeQLT9dHYSmzp8Lu+wzsvsH0rrdgWpNGGsaKUcfDFATSFb8JLfrQ6R
Ib07saZmBfwJOA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 10:45:53 2025 by rpki-client