Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/43d301-f81a-492e-922c-c971dc713b1f/1/mPArXPtBclCOBze_Jc1dIqAdxFo.mft
File: mPArXPtBclCOBze_Jc1dIqAdxFo.mft (raw, json)
Hash identifier: 98O1cCb2bGVSF0Y5/1uiaBWJEDM54QdRnXOM5KvInq8=
Subject key identifier: 25:F4:7F:9E:17:DF:4F:AC:36:EE:C7:F5:A5:3B:FD:93:8C:67:DE:C2
Authority key identifier: 98:F0:2B:5C:FB:41:72:50:8E:07:37:BF:25:CD:5D:22:A0:1D:C4:5A
Certificate issuer: /CN=98f02b5cfb4172508e0737bf25cd5d22a01dc45a
Certificate serial: 019A4EF5A2BD9A2273FE3D5CCF4F35A4394A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mPArXPtBclCOBze_Jc1dIqAdxFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/43d301-f81a-492e-922c-c971dc713b1f/1/mPArXPtBclCOBze_Jc1dIqAdxFo.mft
Manifest number: 083D
Signing time: Tue 04 Nov 2025 13:01:52 +0000
Manifest this update: Tue 04 Nov 2025 13:01:52 +0000
Manifest next update: Wed 05 Nov 2025 13:01:52 +0000
Files and hashes: 1: Keu4ORQGNbpvqRyHyCkLTUO_lOA.roa (hash: 8AaJ0cxF0N1CmP6IwiLLt/ItfrvG5f97UQsDx1F7lhM=)
2: mPArXPtBclCOBze_Jc1dIqAdxFo.crl (hash: ktzFrbe3nBwclogN2ytHQ024xGlA+VUmrhfZ/4CEIFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/43d301-f81a-492e-922c-c971dc713b1f/1/mPArXPtBclCOBze_Jc1dIqAdxFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/43d301-f81a-492e-922c-c971dc713b1f/1/mPArXPtBclCOBze_Jc1dIqAdxFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/mPArXPtBclCOBze_Jc1dIqAdxFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:a2:bd:9a:22:73:fe:3d:5c:cf:4f:35:a4:39:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98f02b5cfb4172508e0737bf25cd5d22a01dc45a
Validity
Not Before: Nov 4 13:01:52 2025 GMT
Not After : Nov 5 13:01:52 2025 GMT
Subject: CN=25f47f9e17df4fac36eec7f5a53bfd938c67dec2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:2e:c9:17:19:81:0c:5a:c9:78:aa:13:07:f8:
68:c8:eb:61:1f:40:cc:6c:ad:8c:af:14:c6:a7:7d:
ad:93:df:0f:ed:7a:1c:0d:59:76:d7:be:27:55:b9:
6c:6a:4f:8d:7f:84:04:ce:14:eb:95:d5:96:39:5f:
72:cd:95:4e:8b:50:eb:56:33:27:1a:9f:7d:d4:1e:
92:11:f5:67:f0:45:ff:2d:4b:99:47:45:0a:a3:6d:
a8:b2:06:5d:50:4b:cc:18:c8:52:6e:97:74:86:91:
46:72:1e:92:ab:97:69:27:f1:30:97:d8:46:b2:45:
a7:c0:b9:43:ff:a4:57:52:63:14:7f:7a:91:8f:9b:
47:34:82:d1:e9:aa:f8:61:cb:67:84:5f:29:24:82:
9b:f7:6a:77:f9:b6:56:1e:28:5f:3d:ef:88:68:ca:
3f:d7:b3:ed:b1:73:97:79:7c:ff:f1:98:dc:5a:ac:
8d:30:e2:8c:4c:da:23:a0:57:f7:da:25:fb:a2:8c:
59:15:51:91:5c:be:8b:9d:4d:72:95:5e:a0:5a:57:
57:6a:98:eb:7c:a6:e3:bf:a7:ee:1d:12:95:07:78:
f9:2e:86:3d:b6:b7:83:a2:52:2d:02:b7:88:4b:89:
55:42:35:32:c7:45:e0:d4:67:8b:64:25:aa:34:b1:
46:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:F4:7F:9E:17:DF:4F:AC:36:EE:C7:F5:A5:3B:FD:93:8C:67:DE:C2
X509v3 Authority Key Identifier:
keyid:98:F0:2B:5C:FB:41:72:50:8E:07:37:BF:25:CD:5D:22:A0:1D:C4:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mPArXPtBclCOBze_Jc1dIqAdxFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/43d301-f81a-492e-922c-c971dc713b1f/1/mPArXPtBclCOBze_Jc1dIqAdxFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/43d301-f81a-492e-922c-c971dc713b1f/1/mPArXPtBclCOBze_Jc1dIqAdxFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:44:12:bb:d5:b9:0a:90:c9:f3:df:38:66:9a:97:5b:de:c6:
c6:4c:4a:be:d7:e7:8d:f4:5e:d1:1f:b3:dc:a4:05:b9:21:a4:
d7:3a:b2:79:9d:a4:dc:9f:7c:0f:26:1a:12:22:d7:29:57:80:
5c:7f:2a:4a:03:02:56:af:bb:e3:e4:68:a6:b5:da:ee:de:f4:
73:ce:30:d0:ff:dd:f8:19:09:1d:2c:c6:09:2d:52:da:74:f7:
8d:85:76:3b:f0:dc:b3:36:ae:cd:69:81:d5:96:8a:ca:67:bc:
e3:b1:3f:c8:c1:77:40:40:c2:20:a1:92:ad:37:bc:2c:5c:11:
47:5a:a5:be:bb:97:05:25:43:95:99:97:9f:cd:bb:eb:ae:98:
49:b0:db:11:52:97:1d:4b:3f:ff:c7:ca:e8:d8:f4:19:f1:ab:
39:06:b5:c6:bd:5e:f0:9e:f5:31:dd:c8:44:3b:dd:7c:ef:ab:
22:e0:cb:50:37:fb:fe:a0:da:9f:39:eb:dd:b2:e3:7f:62:6d:
b7:29:d4:c3:39:5c:71:7e:a1:3d:9f:f9:d5:c1:5b:d0:6a:09:
93:fe:1f:64:e7:c0:a7:99:66:7a:ee:5f:6f:56:1f:b3:f6:28:
98:e9:46:c2:cf:86:60:76:09:11:27:c8:7d:ab:f8:ff:10:b0:
08:96:ec:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9aK9miJz/j1cz081pDlKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4ZjAyYjVjZmI0MTcyNTA4ZTA3MzdiZjI1Y2Q1ZDIyYTAx
ZGM0NWEwHhcNMjUxMTA0MTMwMTUyWhcNMjUxMTA1MTMwMTUyWjAzMTEwLwYDVQQD
EygyNWY0N2Y5ZTE3ZGY0ZmFjMzZlZWM3ZjVhNTNiZmQ5MzhjNjdkZWMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAly7JFxmBDFrJeKoTB/hoyOthH0DM
bK2MrxTGp32tk98P7XocDVl2174nVblsak+Nf4QEzhTrldWWOV9yzZVOi1DrVjMn
Gp991B6SEfVn8EX/LUuZR0UKo22osgZdUEvMGMhSbpd0hpFGch6Sq5dpJ/Ewl9hG
skWnwLlD/6RXUmMUf3qRj5tHNILR6ar4YctnhF8pJIKb92p3+bZWHihfPe+IaMo/
17PtsXOXeXz/8ZjcWqyNMOKMTNojoFf32iX7ooxZFVGRXL6LnU1ylV6gWldXapjr
fKbjv6fuHRKVB3j5LoY9treDolItAreIS4lVQjUyx0Xg1GeLZCWqNLFGkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCX0f54X30+sNu7H9aU7/ZOMZ97CMB8GA1UdIwQY
MBaAFJjwK1z7QXJQjgc3vyXNXSKgHcRaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVBBclhQdEJjbENPQnplX0pjMWRJcUFkeEZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS80M2QzMDEtZjgxYS00OTJlLTkyMmMt
Yzk3MWRjNzEzYjFmLzEvbVBBclhQdEJjbENPQnplX0pjMWRJcUFkeEZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS80M2QzMDEtZjgxYS00OTJlLTkyMmMtYzk3MWRjNzEzYjFm
LzEvbVBBclhQdEJjbENPQnplX0pjMWRJcUFkeEZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvEQSu9W5
CpDJ8984ZpqXW97GxkxKvtfnjfRe0R+z3KQFuSGk1zqyeZ2k3J98DyYaEiLXKVeA
XH8qSgMCVq+74+RoprXa7t70c84w0P/d+BkJHSzGCS1S2nT3jYV2O/DcszauzWmB
1ZaKyme847E/yMF3QEDCIKGSrTe8LFwRR1qlvruXBSVDlZmXn827666YSbDbEVKX
HUs//8fK6Nj0GfGrOQa1xr1e8J71Md3IRDvdfO+rIuDLUDf7/qDanznr3bLjf2Jt
tynUwzlccX6hPZ/51cFb0GoJk/4fZOfAp5lmeu5fb1Yfs/YomOlGws+GYHYJESfI
fav4/xCwCJbsuw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 17:58:30 2025 by rpki-client