Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.mft
File: py0XjI5T9SExwftkdDyWDPiX_Qw.mft (raw, json)
Hash identifier: HhGXh1zF5HAG+kryhRJZJYzYo3sWDr0fhRbiyZdaq54=
Subject key identifier: 66:AC:1D:A2:57:84:8A:DE:A7:D9:1E:97:12:FA:C5:63:AE:31:15:F2
Authority key identifier: A7:2D:17:8C:8E:53:F5:21:31:C1:FB:64:74:3C:96:0C:F8:97:FD:0C
Certificate issuer: /CN=a72d178c8e53f52131c1fb64743c960cf897fd0c
Certificate serial: 019A4F99648B89F200DC6BF6F749665FD6D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/py0XjI5T9SExwftkdDyWDPiX_Qw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.mft
Manifest number: 1438
Signing time: Tue 04 Nov 2025 16:00:44 +0000
Manifest this update: Tue 04 Nov 2025 16:00:44 +0000
Manifest next update: Wed 05 Nov 2025 16:00:44 +0000
Files and hashes: 1: JNAtdBMSX5VhwApOgTuAEW816wE.roa (hash: /ZrZUMi4cKx5uDajSWU/yOuRSvJFXt9XoQWTgblnDdM=)
2: Kk_Nqx-T7Pv-J68aF1UpAxcFsyI.roa (hash: SIEfBbEbGt2Z3RQ6DVZe/KIGqB2xRs2VDt+6m/NBCj4=)
3: py0XjI5T9SExwftkdDyWDPiX_Qw.crl (hash: Zyfts5/UFLrUNgRBB5cWJcpmUtmi68LE4MqKgsO3Mok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.mft
rsync://rpki.ripe.net/repository/DEFAULT/py0XjI5T9SExwftkdDyWDPiX_Qw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:64:8b:89:f2:00:dc:6b:f6:f7:49:66:5f:d6:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a72d178c8e53f52131c1fb64743c960cf897fd0c
Validity
Not Before: Nov 4 16:00:44 2025 GMT
Not After : Nov 5 16:00:44 2025 GMT
Subject: CN=66ac1da257848adea7d91e9712fac563ae3115f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4d:ab:5c:59:8b:08:7f:43:31:ff:0e:2c:f2:
6b:dd:5d:a4:84:50:7a:38:72:22:54:0d:a7:f6:b0:
3c:b1:c7:00:7e:d5:d6:ff:4a:9b:c7:c1:ef:f1:93:
5f:01:a6:8a:14:d0:89:25:7a:d0:ff:77:df:1b:d5:
ae:70:cb:0f:6a:7d:af:df:ed:ec:24:3b:e5:20:95:
8f:e8:6c:4c:13:99:80:8a:93:ff:0d:df:51:6a:70:
8e:56:19:c2:ae:70:d4:4c:fa:41:8b:f5:47:bd:38:
44:d0:12:92:5b:64:98:11:c8:70:f5:7b:79:a0:c0:
9e:d3:b4:0c:31:25:a4:7f:d9:88:6f:d4:89:52:ae:
a8:c8:0f:6d:b7:1f:31:a0:33:3e:13:9c:3e:e6:b2:
4a:30:a1:88:72:de:1d:9f:87:6a:3e:e2:e7:92:2e:
b4:67:15:af:6c:a2:4d:33:86:f9:44:4d:18:d8:1e:
98:41:30:e5:5d:2a:dc:68:8f:57:3a:06:e7:7e:33:
03:8e:03:0d:8c:41:dd:aa:7e:27:f8:0f:37:ed:08:
88:f5:d0:a3:74:c8:53:3d:1b:00:e0:26:44:41:e2:
e1:1d:ec:9a:87:82:b3:77:cb:6a:7c:0a:96:35:40:
00:55:d0:18:f2:de:c9:20:37:02:4a:32:71:aa:87:
39:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:AC:1D:A2:57:84:8A:DE:A7:D9:1E:97:12:FA:C5:63:AE:31:15:F2
X509v3 Authority Key Identifier:
keyid:A7:2D:17:8C:8E:53:F5:21:31:C1:FB:64:74:3C:96:0C:F8:97:FD:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/py0XjI5T9SExwftkdDyWDPiX_Qw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:2f:1c:81:5d:c5:5a:4f:79:97:80:ff:ee:b5:83:44:1b:73:
56:cc:66:c3:f6:20:ea:08:e7:be:27:4e:fa:41:31:a6:2c:a6:
f3:c9:7e:08:65:cd:7f:5f:72:1e:37:6d:29:ab:71:26:96:41:
63:de:11:08:0c:1f:d4:dd:ce:db:41:0b:b7:ea:90:76:94:e0:
8d:69:ea:72:c7:42:96:d7:a6:1b:24:0c:29:32:fb:f9:42:2e:
2a:43:73:5e:24:b9:ca:b9:37:8c:45:0a:92:5f:5f:57:bb:e6:
e0:f2:9d:eb:fa:5a:a6:2f:e0:26:f3:52:2a:cb:3c:a5:78:5a:
95:a9:1c:3c:0f:d9:6f:92:37:2b:ca:29:6b:43:4b:25:06:e6:
bb:29:cf:0c:71:51:05:00:aa:4f:c3:d1:7f:f7:92:d2:ce:70:
76:65:e5:3a:b4:80:bd:bc:29:35:61:a5:eb:36:19:e1:e8:b7:
da:fa:51:52:c0:ce:8c:ab:33:54:54:57:a6:5c:2f:cb:90:67:
f6:0e:6f:ed:97:99:6c:2e:65:bb:63:95:36:d0:aa:99:94:a5:
fa:83:f2:cf:9c:0b:7c:eb:a8:14:18:c4:03:f6:65:0e:c5:3e:
87:cd:14:24:e9:4a:ac:e9:cd:16:91:1a:6b:5e:ea:e1:19:ec:
f1:26:42:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPmWSLifIA3Gv290lmX9bZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3MmQxNzhjOGU1M2Y1MjEzMWMxZmI2NDc0M2M5NjBjZjg5
N2ZkMGMwHhcNMjUxMTA0MTYwMDQ0WhcNMjUxMTA1MTYwMDQ0WjAzMTEwLwYDVQQD
Eyg2NmFjMWRhMjU3ODQ4YWRlYTdkOTFlOTcxMmZhYzU2M2FlMzExNWYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsk2rXFmLCH9DMf8OLPJr3V2khFB6
OHIiVA2n9rA8sccAftXW/0qbx8Hv8ZNfAaaKFNCJJXrQ/3ffG9WucMsPan2v3+3s
JDvlIJWP6GxME5mAipP/Dd9RanCOVhnCrnDUTPpBi/VHvThE0BKSW2SYEchw9Xt5
oMCe07QMMSWkf9mIb9SJUq6oyA9ttx8xoDM+E5w+5rJKMKGIct4dn4dqPuLnki60
ZxWvbKJNM4b5RE0Y2B6YQTDlXSrcaI9XOgbnfjMDjgMNjEHdqn4n+A837QiI9dCj
dMhTPRsA4CZEQeLhHeyah4Kzd8tqfAqWNUAAVdAY8t7JIDcCSjJxqoc5bQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGasHaJXhIrep9kelxL6xWOuMRXyMB8GA1UdIwQY
MBaAFKctF4yOU/UhMcH7ZHQ8lgz4l/0MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcHkwWGpJNVQ5U0V4d2Z0a2REeVdEUGlYX1F3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC8xYjgxM2EtNWU4Ni00NWIwLTk5Y2Qt
MjhiOWQyNjFlY2IxLzEvcHkwWGpJNVQ5U0V4d2Z0a2REeVdEUGlYX1F3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC8xYjgxM2EtNWU4Ni00NWIwLTk5Y2QtMjhiOWQyNjFlY2Ix
LzEvcHkwWGpJNVQ5U0V4d2Z0a2REeVdEUGlYX1F3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhS8cgV3F
Wk95l4D/7rWDRBtzVsxmw/Yg6gjnvidO+kExpiym88l+CGXNf19yHjdtKatxJpZB
Y94RCAwf1N3O20ELt+qQdpTgjWnqcsdCltemGyQMKTL7+UIuKkNzXiS5yrk3jEUK
kl9fV7vm4PKd6/papi/gJvNSKss8pXhalakcPA/Zb5I3K8opa0NLJQbmuynPDHFR
BQCqT8PRf/eS0s5wdmXlOrSAvbwpNWGl6zYZ4ei32vpRUsDOjKszVFRXplwvy5Bn
9g5v7ZeZbC5lu2OVNtCqmZSl+oPyz5wLfOuoFBjEA/ZlDsU+h80UJOlKrOnNFpEa
a17q4Rns8SZCeg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 23:53:28 2025 by rpki-client