Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/_x9hW5GDn1HtOltTdTsnsCx22pU.mft
File: _x9hW5GDn1HtOltTdTsnsCx22pU.mft (raw, json)
Hash identifier: 0rg6/L+63JMeRVpzXsk7C1o//uQm+g57a3sRthvrVh4=
Subject key identifier: 3D:64:33:F1:85:96:7F:11:BC:52:B5:AF:71:CA:A0:E7:0C:28:C7:77
Authority key identifier: FF:1F:61:5B:91:83:9F:51:ED:3A:5B:53:75:3B:27:B0:2C:76:DA:95
Certificate issuer: /CN=ff1f615b91839f51ed3a5b53753b27b02c76da95
Certificate serial: 019A50AB802AAE71CBFC61D41A1D22CDD4BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_x9hW5GDn1HtOltTdTsnsCx22pU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/_x9hW5GDn1HtOltTdTsnsCx22pU.mft
Manifest number: 1711
Signing time: Tue 04 Nov 2025 21:00:07 +0000
Manifest this update: Tue 04 Nov 2025 21:00:07 +0000
Manifest next update: Wed 05 Nov 2025 21:00:07 +0000
Files and hashes: 1: 7a7WUL8xvDPo2P-5omM4jYtGU5Y.roa (hash: UostfHkB3oR0Iku8D5pESC2eAmHKknmIvGYXu5RiVk8=)
2: E72VdoRs1WH4lPVFyfKcgtxOU8Q.roa (hash: LmX4spgkKMlRcTCE+F8dcGQpsB1FUNFcfYjRwXtYks0=)
3: _x9hW5GDn1HtOltTdTsnsCx22pU.crl (hash: W75dxVmjroHHehGbFDn1/jJu3xRxFyB7N/qspx+5hqU=)
4: utXzgzMJjaIrp5ghklXHQNuDj0w.roa (hash: Y9s+msDVsT/czxYxM2UzwdwxQOsm8/16ui4R//h8OS4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/_x9hW5GDn1HtOltTdTsnsCx22pU.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/_x9hW5GDn1HtOltTdTsnsCx22pU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_x9hW5GDn1HtOltTdTsnsCx22pU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 21:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:ab:80:2a:ae:71:cb:fc:61:d4:1a:1d:22:cd:d4:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff1f615b91839f51ed3a5b53753b27b02c76da95
Validity
Not Before: Nov 4 21:00:07 2025 GMT
Not After : Nov 5 21:00:07 2025 GMT
Subject: CN=3d6433f185967f11bc52b5af71caa0e70c28c777
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:1d:e3:4a:1f:86:b8:c6:ba:2c:be:34:12:87:
96:87:90:60:6d:0c:b0:fe:68:9f:e0:98:e0:e6:4b:
b7:67:0b:7c:b8:35:43:23:cd:b3:de:a6:39:f4:e5:
68:a6:11:43:da:2e:25:4e:be:4a:1a:9b:09:bd:24:
1f:a3:4b:9b:fb:f6:8f:d0:40:34:08:eb:49:63:11:
de:42:06:be:45:78:c1:55:35:ea:6d:b1:a8:a1:a1:
08:6c:0c:cd:7b:0d:da:23:d2:8a:30:10:2b:29:ba:
a1:80:51:64:e7:f4:82:00:9d:1f:31:23:83:a4:c2:
9c:1e:1a:1b:27:e3:e1:6f:d3:20:2e:c4:31:55:12:
5f:f1:40:5f:5c:3e:48:5c:21:e0:ed:09:b8:9a:a7:
83:c9:3e:6b:c8:e5:b3:c4:e4:2d:2e:15:4f:c7:8e:
60:38:d1:bd:ed:08:7b:69:16:be:4e:b6:bb:58:ec:
e5:eb:2d:33:1c:1d:72:74:f1:9f:c2:c8:46:c6:4d:
4e:34:00:08:2d:87:be:5a:c8:b9:9d:32:67:75:2c:
57:20:f4:66:0c:5c:d8:df:0f:47:77:d0:16:0b:d5:
b4:68:1d:90:e0:66:af:7b:aa:72:65:ec:76:af:f0:
a7:2e:c3:46:27:c9:5d:59:31:2e:32:72:54:9a:84:
f6:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:64:33:F1:85:96:7F:11:BC:52:B5:AF:71:CA:A0:E7:0C:28:C7:77
X509v3 Authority Key Identifier:
keyid:FF:1F:61:5B:91:83:9F:51:ED:3A:5B:53:75:3B:27:B0:2C:76:DA:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_x9hW5GDn1HtOltTdTsnsCx22pU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/_x9hW5GDn1HtOltTdTsnsCx22pU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/_x9hW5GDn1HtOltTdTsnsCx22pU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:7b:e6:24:b5:5c:cc:ca:0a:e5:ea:6f:42:ca:ef:77:e7:fb:
d0:9e:30:98:02:26:fd:ff:69:9f:b3:21:d8:b2:76:dc:f4:56:
53:3b:ac:60:f3:52:12:19:b4:be:83:9e:db:92:de:77:39:4f:
6d:1a:87:31:52:95:1e:d0:47:1a:56:c1:2d:ca:37:be:a4:f6:
21:55:aa:71:89:f9:fd:95:f3:6b:32:20:fe:58:cd:1a:e6:1f:
32:15:39:d9:ee:85:fa:47:a8:83:d3:56:dd:07:8a:9a:55:3f:
07:43:3e:d3:18:bd:09:68:22:7d:8b:2c:50:a2:03:4a:cd:a5:
01:3c:5a:37:97:db:fb:64:e2:a2:0f:91:3d:60:f4:32:84:7a:
13:6e:da:91:96:ef:08:b4:7c:bb:fb:fa:ea:4e:c4:45:9b:ba:
72:50:5f:1a:87:2c:3e:67:bf:b7:ae:7b:fe:ea:02:1b:e6:a7:
e4:a3:39:8b:65:32:e2:49:bd:3e:d3:1f:de:44:d4:8f:ff:94:
99:c4:8a:99:7c:df:d9:51:65:0d:c0:ac:93:dd:92:eb:9d:fd:
0a:8a:06:3a:3d:67:c1:b0:fc:74:34:6c:88:1c:c8:55:f2:04:
95:fc:5a:0c:e1:f2:e6:6f:d4:4d:32:ae:5a:7d:43:9c:be:73:
da:56:e2:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQq4AqrnHL/GHUGh0izdS9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmMWY2MTViOTE4MzlmNTFlZDNhNWI1Mzc1M2IyN2IwMmM3
NmRhOTUwHhcNMjUxMTA0MjEwMDA3WhcNMjUxMTA1MjEwMDA3WjAzMTEwLwYDVQQD
EygzZDY0MzNmMTg1OTY3ZjExYmM1MmI1YWY3MWNhYTBlNzBjMjhjNzc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhR3jSh+GuMa6LL40EoeWh5BgbQyw
/mif4Jjg5ku3Zwt8uDVDI82z3qY59OVophFD2i4lTr5KGpsJvSQfo0ub+/aP0EA0
COtJYxHeQga+RXjBVTXqbbGooaEIbAzNew3aI9KKMBArKbqhgFFk5/SCAJ0fMSOD
pMKcHhobJ+Phb9MgLsQxVRJf8UBfXD5IXCHg7Qm4mqeDyT5ryOWzxOQtLhVPx45g
ONG97Qh7aRa+Tra7WOzl6y0zHB1ydPGfwshGxk1ONAAILYe+Wsi5nTJndSxXIPRm
DFzY3w9Hd9AWC9W0aB2Q4Gave6pyZex2r/CnLsNGJ8ldWTEuMnJUmoT2aQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD1kM/GFln8RvFK1r3HKoOcMKMd3MB8GA1UdIwQY
MBaAFP8fYVuRg59R7TpbU3U7J7AsdtqVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3g5aFc1R0RuMUh0T2x0VGRUc25zQ3gyMnBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9iNDE2YTUtZWU0Zi00Y2M3LWIwYzQt
NzQ3NWY3MGRmOWZhLzEvX3g5aFc1R0RuMUh0T2x0VGRUc25zQ3gyMnBVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS9iNDE2YTUtZWU0Zi00Y2M3LWIwYzQtNzQ3NWY3MGRmOWZh
LzEvX3g5aFc1R0RuMUh0T2x0VGRUc25zQ3gyMnBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmnvmJLVc
zMoK5epvQsrvd+f70J4wmAIm/f9pn7Mh2LJ23PRWUzusYPNSEhm0voOe25LedzlP
bRqHMVKVHtBHGlbBLco3vqT2IVWqcYn5/ZXzazIg/ljNGuYfMhU52e6F+keog9NW
3QeKmlU/B0M+0xi9CWgifYssUKIDSs2lATxaN5fb+2Tiog+RPWD0MoR6E27akZbv
CLR8u/v66k7ERZu6clBfGocsPme/t657/uoCG+an5KM5i2Uy4km9PtMf3kTUj/+U
mcSKmXzf2VFlDcCsk92S6539CooGOj1nwbD8dDRsiBzIVfIElfxaDOHy5m/UTTKu
Wn1DnL5z2lbiiQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 06:25:17 2025 by rpki-client