Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/04e64b-924c-48a0-89a4-a00944fd7d9d/1/U0Z21mkyx3oldhE2rJnrm3TYAaY.mft
File: U0Z21mkyx3oldhE2rJnrm3TYAaY.mft (raw, json)
Hash identifier: 2QSqixYd6iJqTBk7EhgvnRI5ewQ7POkyjxVoIhzDbRw=
Subject key identifier: 18:B6:BF:48:55:B3:00:D0:83:00:BB:02:AF:DB:A2:DA:33:BA:3E:A1
Authority key identifier: 53:46:76:D6:69:32:C7:7A:25:76:11:36:AC:99:EB:9B:74:D8:01:A6
Certificate issuer: /CN=534676d66932c77a25761136ac99eb9b74d801a6
Certificate serial: 019A4EF43FB360B1F9024A95852D70919209
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U0Z21mkyx3oldhE2rJnrm3TYAaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/04e64b-924c-48a0-89a4-a00944fd7d9d/1/U0Z21mkyx3oldhE2rJnrm3TYAaY.mft
Manifest number: 03DE
Signing time: Tue 04 Nov 2025 13:00:21 +0000
Manifest this update: Tue 04 Nov 2025 13:00:21 +0000
Manifest next update: Wed 05 Nov 2025 13:00:21 +0000
Files and hashes: 1: 2dOfhpir5Q5tClQufxJ63VN9ATs.roa (hash: MXA0vJK0httbWsLOJ5Lc4f/NDFMY7G+nyTtUUbrssPM=)
2: U0Z21mkyx3oldhE2rJnrm3TYAaY.crl (hash: bg5LlDvffQQLNh/OLSW+fb9e5PVEOsEWIGwDQNq6cLk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/04e64b-924c-48a0-89a4-a00944fd7d9d/1/U0Z21mkyx3oldhE2rJnrm3TYAaY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/04e64b-924c-48a0-89a4-a00944fd7d9d/1/U0Z21mkyx3oldhE2rJnrm3TYAaY.mft
rsync://rpki.ripe.net/repository/DEFAULT/U0Z21mkyx3oldhE2rJnrm3TYAaY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:3f:b3:60:b1:f9:02:4a:95:85:2d:70:91:92:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=534676d66932c77a25761136ac99eb9b74d801a6
Validity
Not Before: Nov 4 13:00:21 2025 GMT
Not After : Nov 5 13:00:21 2025 GMT
Subject: CN=18b6bf4855b300d08300bb02afdba2da33ba3ea1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:22:09:f9:86:c8:ba:20:fb:19:27:d9:58:58:
b5:48:bf:fe:c5:12:08:6f:71:72:f6:1a:c6:f6:9f:
e7:3b:20:f5:83:e2:2d:74:d5:1e:cd:05:2a:b4:d5:
b9:99:9f:80:3c:b8:e0:19:d0:20:b5:78:2c:1b:5b:
f1:4f:2a:10:f4:3a:04:64:a6:de:bc:d0:6c:66:1f:
74:7c:44:5d:6f:94:3c:c7:6a:d9:4e:23:2a:b8:89:
8a:8f:f5:d5:a7:09:e2:87:a5:81:59:50:7a:9c:6c:
f9:8b:f8:73:61:c5:94:5b:0c:c6:f5:51:16:1b:5d:
91:ef:6e:98:02:39:a4:65:19:73:bd:3e:20:06:28:
a2:7b:01:66:23:b9:f3:06:7b:14:f4:d2:27:48:16:
38:89:63:ff:56:34:8a:2a:71:7a:e2:af:f6:f2:59:
31:ed:cd:f3:78:11:95:25:d7:f5:6f:aa:82:a2:11:
8a:42:74:84:28:ff:95:8e:54:9d:a5:4f:9d:05:b0:
e0:73:ea:f2:16:ff:8d:2a:b6:2a:ca:97:ba:c2:e4:
70:c5:94:23:7c:a4:48:21:f0:02:9a:a6:c2:f7:64:
fe:9f:58:0e:62:aa:87:d9:8a:32:a4:65:66:24:ff:
d1:58:9f:02:ac:ff:bb:05:60:d2:30:e4:d6:9d:ed:
c3:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:B6:BF:48:55:B3:00:D0:83:00:BB:02:AF:DB:A2:DA:33:BA:3E:A1
X509v3 Authority Key Identifier:
keyid:53:46:76:D6:69:32:C7:7A:25:76:11:36:AC:99:EB:9B:74:D8:01:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U0Z21mkyx3oldhE2rJnrm3TYAaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/04e64b-924c-48a0-89a4-a00944fd7d9d/1/U0Z21mkyx3oldhE2rJnrm3TYAaY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/04e64b-924c-48a0-89a4-a00944fd7d9d/1/U0Z21mkyx3oldhE2rJnrm3TYAaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:7e:19:55:77:49:5d:0f:c2:83:37:0b:b2:05:74:c2:a9:04:
16:c0:e2:e3:27:3f:3d:da:e3:6a:48:36:3a:1b:9c:35:50:58:
94:cd:c7:36:b1:59:b4:5f:b8:9d:3e:a9:27:23:09:7a:7b:bb:
55:50:2e:e9:22:64:d3:f5:14:eb:f0:0e:ae:89:90:bd:49:b6:
3e:ee:6b:55:4f:a0:b9:20:ac:8c:3d:1b:2b:61:19:c6:4b:bc:
fd:51:fa:46:f2:be:e7:97:44:ae:6b:40:8f:19:01:56:f6:ac:
7a:df:ba:99:c2:49:3f:28:47:0a:40:29:48:03:7b:57:3a:3c:
00:cd:75:6c:88:7d:54:6b:bd:ce:79:c9:0a:b9:08:0a:53:56:
b1:88:54:40:18:a5:14:07:e0:46:e5:f0:7e:18:7e:c9:d3:bf:
10:7d:cb:12:ae:70:01:3e:5a:41:32:2b:11:5e:49:ac:62:b9:
5d:6a:d4:b3:a8:fe:0e:d3:91:af:57:7a:46:05:b6:57:97:62:
9f:a2:de:fa:a6:21:7f:ec:16:93:7b:1a:5c:6c:be:32:6c:b2:
4b:ab:e6:f3:1f:ff:04:96:05:24:f6:f6:50:a1:9f:b1:01:5a:
1c:a7:e9:aa:15:9b:2b:63:73:ba:8e:b0:5c:a2:ae:f8:b4:82:
19:6d:c6:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9D+zYLH5AkqVhS1wkZIJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzNDY3NmQ2NjkzMmM3N2EyNTc2MTEzNmFjOTllYjliNzRk
ODAxYTYwHhcNMjUxMTA0MTMwMDIxWhcNMjUxMTA1MTMwMDIxWjAzMTEwLwYDVQQD
EygxOGI2YmY0ODU1YjMwMGQwODMwMGJiMDJhZmRiYTJkYTMzYmEzZWExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAliIJ+YbIuiD7GSfZWFi1SL/+xRII
b3Fy9hrG9p/nOyD1g+ItdNUezQUqtNW5mZ+APLjgGdAgtXgsG1vxTyoQ9DoEZKbe
vNBsZh90fERdb5Q8x2rZTiMquImKj/XVpwnih6WBWVB6nGz5i/hzYcWUWwzG9VEW
G12R726YAjmkZRlzvT4gBiiiewFmI7nzBnsU9NInSBY4iWP/VjSKKnF64q/28lkx
7c3zeBGVJdf1b6qCohGKQnSEKP+VjlSdpU+dBbDgc+ryFv+NKrYqype6wuRwxZQj
fKRIIfACmqbC92T+n1gOYqqH2YoypGVmJP/RWJ8CrP+7BWDSMOTWne3DxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBi2v0hVswDQgwC7Aq/botozuj6hMB8GA1UdIwQY
MBaAFFNGdtZpMsd6JXYRNqyZ65t02AGmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTBaMjFta3l4M29sZGhFMnJKbnJtM1RZQWFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC8wNGU2NGItOTI0Yy00OGEwLTg5YTQt
YTAwOTQ0ZmQ3ZDlkLzEvVTBaMjFta3l4M29sZGhFMnJKbnJtM1RZQWFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC8wNGU2NGItOTI0Yy00OGEwLTg5YTQtYTAwOTQ0ZmQ3ZDlk
LzEvVTBaMjFta3l4M29sZGhFMnJKbnJtM1RZQWFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEn4ZVXdJ
XQ/CgzcLsgV0wqkEFsDi4yc/Pdrjakg2OhucNVBYlM3HNrFZtF+4nT6pJyMJenu7
VVAu6SJk0/UU6/AOromQvUm2Pu5rVU+guSCsjD0bK2EZxku8/VH6RvK+55dErmtA
jxkBVvaset+6mcJJPyhHCkApSAN7Vzo8AM11bIh9VGu9znnJCrkIClNWsYhUQBil
FAfgRuXwfhh+ydO/EH3LEq5wAT5aQTIrEV5JrGK5XWrUs6j+DtORr1d6RgW2V5di
n6Le+qYhf+wWk3saXGy+MmyyS6vm8x//BJYFJPb2UKGfsQFaHKfpqhWbK2Nzuo6w
XKKu+LSCGW3GGQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 15:13:58 2025 by rpki-client