Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/d3d257-6e4c-4d60-9c93-dfcae36a3ef8/1/0ccPHzPFgdt4oUm8htc5zcfOJqc.mft
File: 0ccPHzPFgdt4oUm8htc5zcfOJqc.mft (raw, json)
Hash identifier: VElcsgsyleOtvTIYIErMFQp/hLDBC66cVy+h1JDs37o=
Subject key identifier: D2:2E:56:03:0F:CD:79:E2:BE:3F:F9:3F:91:FA:D7:85:96:47:12:E9
Authority key identifier: D1:C7:0F:1F:33:C5:81:DB:78:A1:49:BC:86:D7:39:CD:C7:CE:26:A7
Certificate issuer: /CN=d1c70f1f33c581db78a149bc86d739cdc7ce26a7
Certificate serial: 019A4EF58602CF376F617164EC9E3F3A7105
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ccPHzPFgdt4oUm8htc5zcfOJqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/d3d257-6e4c-4d60-9c93-dfcae36a3ef8/1/0ccPHzPFgdt4oUm8htc5zcfOJqc.mft
Manifest number: 05A3
Signing time: Tue 04 Nov 2025 13:01:44 +0000
Manifest this update: Tue 04 Nov 2025 13:01:44 +0000
Manifest next update: Wed 05 Nov 2025 13:01:44 +0000
Files and hashes: 1: 00FQiMdjUQle4zFwKcr67i8rD5o.roa (hash: vAwK94aBbQ1WLXSLlow/JuiTreizX+JgqV5lHzwa2Js=)
2: 0ccPHzPFgdt4oUm8htc5zcfOJqc.crl (hash: wzPiTdGNHymJFTGxINGjJAiy4BVd5wINzRi9aNAFoT4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/d3d257-6e4c-4d60-9c93-dfcae36a3ef8/1/0ccPHzPFgdt4oUm8htc5zcfOJqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/d3d257-6e4c-4d60-9c93-dfcae36a3ef8/1/0ccPHzPFgdt4oUm8htc5zcfOJqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0ccPHzPFgdt4oUm8htc5zcfOJqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:86:02:cf:37:6f:61:71:64:ec:9e:3f:3a:71:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1c70f1f33c581db78a149bc86d739cdc7ce26a7
Validity
Not Before: Nov 4 13:01:44 2025 GMT
Not After : Nov 5 13:01:44 2025 GMT
Subject: CN=d22e56030fcd79e2be3ff93f91fad785964712e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:4d:a2:1a:b0:17:b1:a3:0d:70:61:21:d9:18:
ca:14:92:9e:1c:28:b5:19:95:b1:b0:f1:e1:28:45:
cb:f0:87:1c:3d:fb:53:13:01:34:9d:8d:6e:a0:d7:
34:9f:7a:01:6e:f8:44:87:8e:64:93:63:fd:52:55:
56:33:e9:44:c6:5f:0b:90:09:f1:5d:fd:61:48:a4:
fb:d1:34:c1:8b:47:59:49:b6:67:86:e3:16:fb:a9:
f6:7a:19:08:6a:f1:32:67:2e:31:81:2f:98:04:25:
48:ea:f1:1d:38:7d:41:bd:7b:c2:61:0a:f6:63:0b:
b9:9c:1b:64:4a:04:91:d4:e3:d0:83:13:32:ab:cf:
df:b8:99:d3:ab:fa:47:eb:b8:c3:ac:98:da:fb:cc:
2f:85:a1:b0:b1:70:c4:9f:84:9f:a7:43:87:6c:52:
06:8d:86:55:94:33:a1:32:d0:47:0c:39:15:04:3b:
f6:d2:8b:11:33:d0:c0:9c:4a:5a:15:12:f0:2e:ef:
58:41:a9:54:af:30:dd:b6:18:11:21:47:6c:e7:ca:
c5:a0:ab:ee:76:54:8e:43:fc:dd:de:6b:4f:d6:c8:
7d:6f:62:59:5f:e8:4a:52:0f:fa:eb:57:30:28:f9:
57:bb:42:c8:0c:c1:3b:fd:b6:88:35:36:cf:af:6c:
f2:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:2E:56:03:0F:CD:79:E2:BE:3F:F9:3F:91:FA:D7:85:96:47:12:E9
X509v3 Authority Key Identifier:
keyid:D1:C7:0F:1F:33:C5:81:DB:78:A1:49:BC:86:D7:39:CD:C7:CE:26:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ccPHzPFgdt4oUm8htc5zcfOJqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/d3d257-6e4c-4d60-9c93-dfcae36a3ef8/1/0ccPHzPFgdt4oUm8htc5zcfOJqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/d3d257-6e4c-4d60-9c93-dfcae36a3ef8/1/0ccPHzPFgdt4oUm8htc5zcfOJqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:7c:e9:e9:99:96:70:90:63:c7:dc:3f:d8:e1:29:32:9b:a1:
be:eb:9e:da:c4:ad:14:12:ce:16:ff:d0:85:f8:f6:67:f0:21:
06:e0:0c:53:75:f9:58:50:86:ca:34:71:8e:a9:05:02:a8:42:
ad:31:68:19:a8:28:5a:2f:34:fd:e9:84:17:cf:01:a9:7e:22:
97:99:37:d8:88:d2:11:2a:cb:35:d1:4b:73:09:4e:37:21:88:
f0:d7:d7:c5:05:53:15:a4:4f:6b:f0:8e:1e:9c:6b:77:6f:56:
7a:6f:c5:fb:7a:44:dd:6f:d5:5e:c5:21:d5:f1:d3:bc:69:ba:
44:1e:b3:a2:77:b5:19:76:6b:28:ae:eb:61:c3:de:7b:44:25:
7d:e9:6c:f6:fe:35:f9:9c:a1:e0:bb:03:f7:60:54:3a:42:d8:
b0:b4:fe:e1:1f:9f:93:4c:79:1e:3b:df:64:70:ab:75:65:da:
82:99:1f:21:88:08:38:a9:8c:a6:c8:9a:d2:4f:64:d3:07:e7:
41:b0:2d:87:9b:2e:4f:e7:91:83:7c:d0:c1:ff:d3:51:55:65:
aa:b3:ce:8a:29:e2:42:18:4a:2f:14:51:4a:20:0b:7e:a8:fd:
7d:bd:4e:47:db:da:ca:db:9d:d2:2a:eb:48:d5:7b:ee:e3:1d:
45:74:73:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9YYCzzdvYXFk7J4/OnEFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxYzcwZjFmMzNjNTgxZGI3OGExNDliYzg2ZDczOWNkYzdj
ZTI2YTcwHhcNMjUxMTA0MTMwMTQ0WhcNMjUxMTA1MTMwMTQ0WjAzMTEwLwYDVQQD
EyhkMjJlNTYwMzBmY2Q3OWUyYmUzZmY5M2Y5MWZhZDc4NTk2NDcxMmU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApU2iGrAXsaMNcGEh2RjKFJKeHCi1
GZWxsPHhKEXL8IccPftTEwE0nY1uoNc0n3oBbvhEh45kk2P9UlVWM+lExl8LkAnx
Xf1hSKT70TTBi0dZSbZnhuMW+6n2ehkIavEyZy4xgS+YBCVI6vEdOH1BvXvCYQr2
Ywu5nBtkSgSR1OPQgxMyq8/fuJnTq/pH67jDrJja+8wvhaGwsXDEn4Sfp0OHbFIG
jYZVlDOhMtBHDDkVBDv20osRM9DAnEpaFRLwLu9YQalUrzDdthgRIUds58rFoKvu
dlSOQ/zd3mtP1sh9b2JZX+hKUg/661cwKPlXu0LIDME7/baINTbPr2zyHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNIuVgMPzXnivj/5P5H614WWRxLpMB8GA1UdIwQY
MBaAFNHHDx8zxYHbeKFJvIbXOc3HzianMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGNjUEh6UEZnZHQ0b1VtOGh0YzV6Y2ZPSnFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9kM2QyNTctNmU0Yy00ZDYwLTljOTMt
ZGZjYWUzNmEzZWY4LzEvMGNjUEh6UEZnZHQ0b1VtOGh0YzV6Y2ZPSnFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS9kM2QyNTctNmU0Yy00ZDYwLTljOTMtZGZjYWUzNmEzZWY4
LzEvMGNjUEh6UEZnZHQ0b1VtOGh0YzV6Y2ZPSnFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbXzp6ZmW
cJBjx9w/2OEpMpuhvuue2sStFBLOFv/Qhfj2Z/AhBuAMU3X5WFCGyjRxjqkFAqhC
rTFoGagoWi80/emEF88BqX4il5k32IjSESrLNdFLcwlONyGI8NfXxQVTFaRPa/CO
Hpxrd29Wem/F+3pE3W/VXsUh1fHTvGm6RB6zone1GXZrKK7rYcPee0Qlfels9v41
+Zyh4LsD92BUOkLYsLT+4R+fk0x5HjvfZHCrdWXagpkfIYgIOKmMpsia0k9k0wfn
QbAth5suT+eRg3zQwf/TUVVlqrPOiiniQhhKLxRRSiALfqj9fb1OR9vaytud0irr
SNV77uMdRXRzhw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:14:59 2025 by rpki-client