Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/21bdbb-856f-41dd-aad9-066ddf32bfcc/1/0PFLigjLX4BX1IsD5T9Fi44f7tY.mft
File: 0PFLigjLX4BX1IsD5T9Fi44f7tY.mft (raw, json)
Hash identifier: RQY3YkGXQnQS9zSKxUe7/iFbjLSXvUv4N5lUBKSKS6M=
Subject key identifier: 76:74:5F:35:71:44:76:EC:1A:50:A4:A9:33:F6:57:8D:E8:08:ED:2A
Authority key identifier: D0:F1:4B:8A:08:CB:5F:80:57:D4:8B:03:E5:3F:45:8B:8E:1F:EE:D6
Certificate issuer: /CN=d0f14b8a08cb5f8057d48b03e53f458b8e1feed6
Certificate serial: 019A4D7398BD8D6519402CC3064BE2B40B5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0PFLigjLX4BX1IsD5T9Fi44f7tY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/21bdbb-856f-41dd-aad9-066ddf32bfcc/1/0PFLigjLX4BX1IsD5T9Fi44f7tY.mft
Manifest number: 035A
Signing time: Tue 04 Nov 2025 06:00:12 +0000
Manifest this update: Tue 04 Nov 2025 06:00:12 +0000
Manifest next update: Wed 05 Nov 2025 06:00:12 +0000
Files and hashes: 1: 0PFLigjLX4BX1IsD5T9Fi44f7tY.crl (hash: vi7II7mp2l3FIieyO1L8dVQtJr1R5SuiNePvGqkYrFc=)
2: 5XHmlHMatoj7HuqzW-xKZFCBoCk.roa (hash: 2LwcEFXQBzd4wv+NbYjPLMlRT/J2wftX73OmJ3FhceM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/21bdbb-856f-41dd-aad9-066ddf32bfcc/1/0PFLigjLX4BX1IsD5T9Fi44f7tY.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/21bdbb-856f-41dd-aad9-066ddf32bfcc/1/0PFLigjLX4BX1IsD5T9Fi44f7tY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0PFLigjLX4BX1IsD5T9Fi44f7tY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:98:bd:8d:65:19:40:2c:c3:06:4b:e2:b4:0b:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0f14b8a08cb5f8057d48b03e53f458b8e1feed6
Validity
Not Before: Nov 4 06:00:12 2025 GMT
Not After : Nov 5 06:00:12 2025 GMT
Subject: CN=76745f35714476ec1a50a4a933f6578de808ed2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:74:52:ac:f7:b3:fe:92:a9:7d:d8:3d:6d:69:
c3:61:9f:0f:65:b0:2b:e8:fa:15:74:ed:73:f4:10:
9b:90:f3:48:45:f3:43:97:48:c0:07:8b:ad:5f:1d:
e7:30:6a:6c:70:11:7f:68:3b:ca:46:1b:69:f0:35:
49:49:78:ab:0b:e8:fe:b1:c1:c3:9a:c5:d1:b4:44:
77:a7:55:9f:99:a9:6e:7e:c8:45:85:08:50:b3:c6:
3e:bd:96:bf:e8:25:8e:10:b6:4e:d9:41:fe:5d:7b:
ad:16:2d:19:84:c6:92:a9:6c:d5:35:71:70:d8:e6:
a8:18:48:ff:cf:cc:0b:9d:14:2c:52:00:65:5d:90:
d6:8a:5b:9d:a3:2e:df:26:4f:46:2a:c0:71:2f:28:
4f:f0:05:62:f1:62:3c:87:01:01:e2:bf:87:f6:39:
7e:ce:cb:53:2f:86:98:50:87:7e:62:64:1c:d6:dc:
bf:fc:7c:81:5b:47:13:00:14:3a:1e:33:11:1f:ff:
da:92:87:5c:89:4e:fd:ff:99:65:14:5d:c5:f0:d9:
8c:32:e8:c6:e8:b9:28:23:2c:10:e5:c4:93:e6:3e:
fb:57:d1:1c:55:a9:dc:fb:e7:bc:fe:75:89:2c:00:
1b:43:ca:3f:2f:1c:3b:8a:0e:ae:63:f3:87:88:45:
0e:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:74:5F:35:71:44:76:EC:1A:50:A4:A9:33:F6:57:8D:E8:08:ED:2A
X509v3 Authority Key Identifier:
keyid:D0:F1:4B:8A:08:CB:5F:80:57:D4:8B:03:E5:3F:45:8B:8E:1F:EE:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0PFLigjLX4BX1IsD5T9Fi44f7tY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/21bdbb-856f-41dd-aad9-066ddf32bfcc/1/0PFLigjLX4BX1IsD5T9Fi44f7tY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/21bdbb-856f-41dd-aad9-066ddf32bfcc/1/0PFLigjLX4BX1IsD5T9Fi44f7tY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:9b:6e:43:4f:a1:d0:31:36:5b:e5:af:fb:9f:c9:f4:6c:0f:
8c:7b:81:c8:1b:5e:37:27:65:d2:73:1f:3e:9f:d4:5b:86:01:
ea:10:33:6f:19:b6:dd:73:8a:59:06:4d:5d:d4:da:06:97:5a:
44:4c:c6:93:96:5f:7a:67:3a:72:e9:e8:2d:ea:e4:cf:d5:0c:
41:dc:16:15:a8:e7:5d:ec:6e:fd:99:de:6d:8e:e7:6b:f9:e3:
f5:6d:97:86:02:ef:7e:6b:1a:de:ef:91:b1:2a:f5:90:61:ed:
fa:fe:0f:35:05:2e:e0:56:75:c1:75:53:33:0b:6a:7a:a3:cc:
16:e9:9b:60:f6:a0:38:88:24:c0:10:eb:cf:0a:e7:69:39:e4:
65:30:d5:0d:59:64:42:d8:45:2c:06:11:2a:d6:c2:0b:a5:e8:
7a:57:f6:98:dd:4f:ea:52:d5:a3:dd:bf:52:39:15:2f:96:a1:
f8:5c:44:cc:03:ef:18:66:26:bf:32:f9:29:ae:15:cb:5c:75:
09:a5:46:4c:60:30:5e:8f:e7:d7:6a:60:87:9c:e7:76:08:ea:
13:5f:bc:99:e6:91:38:f1:08:8b:4a:60:75:55:6e:a3:76:44:
1e:c1:a0:93:92:ae:9d:3c:0e:66:21:5e:94:31:c9:89:5c:ab:
aa:6d:af:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNc5i9jWUZQCzDBkvitAtdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwZjE0YjhhMDhjYjVmODA1N2Q0OGIwM2U1M2Y0NThiOGUx
ZmVlZDYwHhcNMjUxMTA0MDYwMDEyWhcNMjUxMTA1MDYwMDEyWjAzMTEwLwYDVQQD
Eyg3Njc0NWYzNTcxNDQ3NmVjMWE1MGE0YTkzM2Y2NTc4ZGU4MDhlZDJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvnRSrPez/pKpfdg9bWnDYZ8PZbAr
6PoVdO1z9BCbkPNIRfNDl0jAB4utXx3nMGpscBF/aDvKRhtp8DVJSXirC+j+scHD
msXRtER3p1WfmalufshFhQhQs8Y+vZa/6CWOELZO2UH+XXutFi0ZhMaSqWzVNXFw
2OaoGEj/z8wLnRQsUgBlXZDWiludoy7fJk9GKsBxLyhP8AVi8WI8hwEB4r+H9jl+
zstTL4aYUId+YmQc1ty//HyBW0cTABQ6HjMRH//akodciU79/5llFF3F8NmMMujG
6LkoIywQ5cST5j77V9EcVanc++e8/nWJLAAbQ8o/Lxw7ig6uY/OHiEUOxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHZ0XzVxRHbsGlCkqTP2V43oCO0qMB8GA1UdIwQY
MBaAFNDxS4oIy1+AV9SLA+U/RYuOH+7WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFBGTGlnakxYNEJYMUlzRDVUOUZpNDRmN3RZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8yMWJkYmItODU2Zi00MWRkLWFhZDkt
MDY2ZGRmMzJiZmNjLzEvMFBGTGlnakxYNEJYMUlzRDVUOUZpNDRmN3RZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC8yMWJkYmItODU2Zi00MWRkLWFhZDktMDY2ZGRmMzJiZmNj
LzEvMFBGTGlnakxYNEJYMUlzRDVUOUZpNDRmN3RZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhZtuQ0+h
0DE2W+Wv+5/J9GwPjHuByBteNydl0nMfPp/UW4YB6hAzbxm23XOKWQZNXdTaBpda
REzGk5Zfemc6cunoLerkz9UMQdwWFajnXexu/ZnebY7na/nj9W2XhgLvfmsa3u+R
sSr1kGHt+v4PNQUu4FZ1wXVTMwtqeqPMFumbYPagOIgkwBDrzwrnaTnkZTDVDVlk
QthFLAYRKtbCC6Xoelf2mN1P6lLVo92/UjkVL5ah+FxEzAPvGGYmvzL5Ka4Vy1x1
CaVGTGAwXo/n12pgh5zndgjqE1+8meaROPEIi0pgdVVuo3ZEHsGgk5KunTwOZiFe
lDHJiVyrqm2vbg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:49:07 2025 by rpki-client