Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/5b60e5-8237-4628-946b-2229cd83f3e5/1/_Z99xQlavbRF0YmFfTEBqK7info.mft
File: _Z99xQlavbRF0YmFfTEBqK7info.mft (raw, json)
Hash identifier: tYtpVDWGyTLNYIAb6KCoXRWWSsi9QEXzj9ydlGPxslE=
Subject key identifier: A3:8B:77:46:57:E6:1E:9D:89:98:0B:A0:D4:5E:35:DB:8D:4F:8E:38
Authority key identifier: FD:9F:7D:C5:09:5A:BD:B4:45:D1:89:85:7D:31:01:A8:AE:E2:9D:FA
Certificate issuer: /CN=fd9f7dc5095abdb445d189857d3101a8aee29dfa
Certificate serial: 019A4EF547B172673A3C1DD23131A7780C32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Z99xQlavbRF0YmFfTEBqK7info.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/5b60e5-8237-4628-946b-2229cd83f3e5/1/_Z99xQlavbRF0YmFfTEBqK7info.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 13:01:28 +0000
Manifest this update: Tue 04 Nov 2025 13:01:28 +0000
Manifest next update: Wed 05 Nov 2025 13:01:28 +0000
Files and hashes: 1: _Z99xQlavbRF0YmFfTEBqK7info.crl (hash: u0Xy2bI7yasj9ZckQZfVRz1Kym4tiXVEt18pjkqUd1Y=)
2: hb6ryi0zlarGbicwA660cAdO1uU.roa (hash: npI6mlOfecW2btMEPci2EHiqJhnGF4s0rXnIs0wQ4wY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/5b60e5-8237-4628-946b-2229cd83f3e5/1/_Z99xQlavbRF0YmFfTEBqK7info.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/5b60e5-8237-4628-946b-2229cd83f3e5/1/_Z99xQlavbRF0YmFfTEBqK7info.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Z99xQlavbRF0YmFfTEBqK7info.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:47:b1:72:67:3a:3c:1d:d2:31:31:a7:78:0c:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd9f7dc5095abdb445d189857d3101a8aee29dfa
Validity
Not Before: Nov 4 13:01:28 2025 GMT
Not After : Nov 5 13:01:28 2025 GMT
Subject: CN=a38b774657e61e9d89980ba0d45e35db8d4f8e38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d9:7d:7a:c4:95:ee:bf:f2:9e:c6:4e:7d:41:
01:54:4d:79:0f:fd:3c:ee:00:2f:8a:bc:fa:76:56:
9e:28:45:00:e4:9d:15:63:d3:47:c1:a2:df:0c:48:
a2:33:32:cb:06:bb:ea:cf:2d:87:69:66:d4:50:8b:
86:3c:5e:73:ef:fc:4a:4e:ee:5e:bc:c0:fd:df:00:
6a:19:d7:52:27:bf:92:75:17:ee:49:69:2a:91:5f:
5d:2a:98:bd:0c:13:77:f3:1c:f2:d2:61:90:d6:2c:
58:fa:59:4c:c5:d5:e7:5b:18:86:0b:dc:4b:30:c3:
74:4c:a2:2c:33:50:81:cf:43:69:e7:57:3f:56:d9:
cb:6a:49:dd:40:48:16:a2:99:19:47:59:11:29:bc:
86:29:0a:d9:0d:fd:33:76:01:af:79:f1:b2:eb:f6:
19:fb:32:bb:4f:66:43:c4:83:fe:2b:43:b9:7d:a5:
e6:4f:de:2c:e4:ba:8c:6e:e4:9b:09:9d:2a:bb:09:
23:69:70:d6:24:5a:14:02:6a:26:c0:57:1e:8c:56:
be:63:38:d9:22:40:a9:1c:c6:24:97:40:65:35:83:
77:f3:ce:9f:d7:13:7c:c4:d0:60:a2:a9:95:86:a7:
1f:42:21:41:3d:68:c7:e6:27:f7:33:98:bb:fe:62:
59:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:8B:77:46:57:E6:1E:9D:89:98:0B:A0:D4:5E:35:DB:8D:4F:8E:38
X509v3 Authority Key Identifier:
keyid:FD:9F:7D:C5:09:5A:BD:B4:45:D1:89:85:7D:31:01:A8:AE:E2:9D:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Z99xQlavbRF0YmFfTEBqK7info.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/5b60e5-8237-4628-946b-2229cd83f3e5/1/_Z99xQlavbRF0YmFfTEBqK7info.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/5b60e5-8237-4628-946b-2229cd83f3e5/1/_Z99xQlavbRF0YmFfTEBqK7info.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:ea:06:30:5d:06:b7:47:c5:d0:96:3d:62:89:f2:fc:7e:de:
54:ff:de:ea:c3:88:e6:53:b9:28:02:81:89:12:84:8e:1c:06:
f4:7e:bf:7f:c3:62:83:82:69:f4:ad:f5:79:d9:66:18:5d:44:
99:3e:f4:5e:04:9c:45:7b:b9:b8:ba:77:30:02:02:08:b1:1f:
a6:e7:95:fb:6e:54:b6:77:14:c1:e9:af:da:c8:71:7f:8e:54:
ff:e6:eb:20:63:48:50:ea:a4:2d:39:02:2e:0c:0e:6c:c4:34:
73:a1:30:16:7b:4c:9d:6d:cd:5a:4a:3a:76:71:c2:d8:90:51:
07:f9:60:b4:fb:d6:d8:5a:29:18:3f:f0:8e:dc:0b:33:ce:96:
2d:5c:75:2d:58:8b:39:78:9c:24:02:06:d9:8c:bb:42:be:bc:
57:3b:d4:a9:f3:3a:70:a6:10:fc:9c:19:e3:31:50:69:95:4b:
48:90:ae:42:81:79:08:bc:3d:2d:19:75:59:6d:ba:2d:b0:0f:
9e:53:65:94:cb:d7:93:89:51:ef:79:96:fa:5b:71:f6:0f:5d:
2f:77:9f:6c:5a:e8:1c:3a:2c:0b:11:4a:97:bf:a1:3c:65:e1:
d9:cc:bd:05:f1:83:27:97:5c:a4:d3:ed:7e:e5:1a:5c:3d:21:
b1:82:47:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9Uexcmc6PB3SMTGneAwyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkOWY3ZGM1MDk1YWJkYjQ0NWQxODk4NTdkMzEwMWE4YWVl
MjlkZmEwHhcNMjUxMTA0MTMwMTI4WhcNMjUxMTA1MTMwMTI4WjAzMTEwLwYDVQQD
EyhhMzhiNzc0NjU3ZTYxZTlkODk5ODBiYTBkNDVlMzVkYjhkNGY4ZTM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAytl9esSV7r/ynsZOfUEBVE15D/08
7gAvirz6dlaeKEUA5J0VY9NHwaLfDEiiMzLLBrvqzy2HaWbUUIuGPF5z7/xKTu5e
vMD93wBqGddSJ7+SdRfuSWkqkV9dKpi9DBN38xzy0mGQ1ixY+llMxdXnWxiGC9xL
MMN0TKIsM1CBz0Np51c/VtnLakndQEgWopkZR1kRKbyGKQrZDf0zdgGvefGy6/YZ
+zK7T2ZDxIP+K0O5faXmT94s5LqMbuSbCZ0quwkjaXDWJFoUAmomwFcejFa+YzjZ
IkCpHMYkl0BlNYN3886f1xN8xNBgoqmVhqcfQiFBPWjH5if3M5i7/mJZRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKOLd0ZX5h6diZgLoNReNduNT444MB8GA1UdIwQY
MBaAFP2ffcUJWr20RdGJhX0xAaiu4p36MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX1o5OXhRbGF2YlJGMFltRmZURUJxSzdpbmZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC81YjYwZTUtODIzNy00NjI4LTk0NmIt
MjIyOWNkODNmM2U1LzEvX1o5OXhRbGF2YlJGMFltRmZURUJxSzdpbmZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC81YjYwZTUtODIzNy00NjI4LTk0NmItMjIyOWNkODNmM2U1
LzEvX1o5OXhRbGF2YlJGMFltRmZURUJxSzdpbmZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU+oGMF0G
t0fF0JY9Yony/H7eVP/e6sOI5lO5KAKBiRKEjhwG9H6/f8Nig4Jp9K31edlmGF1E
mT70XgScRXu5uLp3MAICCLEfpueV+25UtncUwemv2shxf45U/+brIGNIUOqkLTkC
LgwObMQ0c6EwFntMnW3NWko6dnHC2JBRB/lgtPvW2FopGD/wjtwLM86WLVx1LViL
OXicJAIG2Yy7Qr68VzvUqfM6cKYQ/JwZ4zFQaZVLSJCuQoF5CLw9LRl1WW26LbAP
nlNllMvXk4lR73mW+ltx9g9dL3efbFroHDosCxFKl7+hPGXh2cy9BfGDJ5dcpNPt
fuUaXD0hsYJHxQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 20:29:27 2025 by rpki-client