Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/d9cc8d-95ac-4848-b097-9d63b0476e24/1/cS_xHdDGbOZ_4PHXScCQnvNBjSk.mft
File: cS_xHdDGbOZ_4PHXScCQnvNBjSk.mft (raw, json)
Hash identifier: KD5U7+3YHOut1N+5wi2/V2if768jGHH60lev9VO7i6k=
Subject key identifier: 6F:00:92:7C:E8:2D:41:30:E4:15:38:AD:ED:13:F8:51:A7:8E:04:C3
Authority key identifier: 71:2F:F1:1D:D0:C6:6C:E6:7F:E0:F1:D7:49:C0:90:9E:F3:41:8D:29
Certificate issuer: /CN=712ff11dd0c66ce67fe0f1d749c0909ef3418d29
Certificate serial: 019A5007162933D495D80A82AF878F9C9CAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cS_xHdDGbOZ_4PHXScCQnvNBjSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/d9cc8d-95ac-4848-b097-9d63b0476e24/1/cS_xHdDGbOZ_4PHXScCQnvNBjSk.mft
Manifest number: 0B28
Signing time: Tue 04 Nov 2025 18:00:32 +0000
Manifest this update: Tue 04 Nov 2025 18:00:32 +0000
Manifest next update: Wed 05 Nov 2025 18:00:32 +0000
Files and hashes: 1: cS_xHdDGbOZ_4PHXScCQnvNBjSk.crl (hash: VGadYUPcl3d/CYh829B5vvsfJkdmXXCr3KB3KOsEKNM=)
2: rs9tHLr8zyXOfjLVtvASmrQRyII.roa (hash: TPmV5eCt75VU6HkVEIxwqSqz2UP53y06YcldQPwtkco=)
3: yrE5IOAO5wezku-a_RJR7TB3CkA.roa (hash: 7HAAXilZN5MLFA2Yt1+6x9clHUzDWGtePYkFTFw0/Hk=)
4: zX3z-Ivq7H5_KU4k1lIkOCnGhd0.roa (hash: 0LyNXWO0Wf/6GO5a+bSTGSO0K4OEPsxkW9pcYGNMQq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/d9cc8d-95ac-4848-b097-9d63b0476e24/1/cS_xHdDGbOZ_4PHXScCQnvNBjSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/d9cc8d-95ac-4848-b097-9d63b0476e24/1/cS_xHdDGbOZ_4PHXScCQnvNBjSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/cS_xHdDGbOZ_4PHXScCQnvNBjSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:07:16:29:33:d4:95:d8:0a:82:af:87:8f:9c:9c:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=712ff11dd0c66ce67fe0f1d749c0909ef3418d29
Validity
Not Before: Nov 4 18:00:32 2025 GMT
Not After : Nov 5 18:00:32 2025 GMT
Subject: CN=6f00927ce82d4130e41538aded13f851a78e04c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6d:a5:76:e7:7a:76:7e:41:cc:af:88:42:be:
57:09:e8:89:d9:ea:c4:a3:70:1e:db:7f:45:18:3f:
11:de:36:db:19:ed:71:0e:a5:cb:34:56:b7:18:79:
ac:ce:7c:0a:ea:81:b0:1f:5e:af:07:00:72:2a:a6:
58:9e:92:cc:40:60:33:4c:2e:c5:1f:42:12:19:42:
e8:20:dd:c5:49:29:2d:df:48:3a:73:1c:f5:12:55:
6a:8e:c8:cc:20:12:b1:b6:e9:20:d3:1e:9a:6c:d9:
ed:00:a0:06:cc:a9:22:f8:6e:25:ec:fd:f3:de:35:
ac:bf:f5:25:05:2a:aa:e5:9c:5e:df:ea:99:23:3a:
64:71:70:bf:f3:aa:b5:4e:fb:8a:24:db:1b:ce:8c:
11:52:28:8d:e4:0f:db:d1:50:1c:5b:de:b6:c2:c4:
f4:db:56:d6:a1:3a:6f:59:67:f4:de:19:f3:c2:34:
80:60:1a:3a:95:5b:a6:5b:fa:a8:fa:94:0d:be:e0:
1c:84:4d:aa:ab:20:96:56:f5:08:8f:ad:a4:6e:1b:
74:5b:7f:8a:65:33:f9:16:de:64:aa:d3:8e:d7:ec:
42:0e:45:55:95:09:51:4d:0d:b0:b3:9a:67:3b:34:
b9:65:db:b7:69:f1:4e:6f:89:91:d6:40:19:a3:f8:
e7:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:00:92:7C:E8:2D:41:30:E4:15:38:AD:ED:13:F8:51:A7:8E:04:C3
X509v3 Authority Key Identifier:
keyid:71:2F:F1:1D:D0:C6:6C:E6:7F:E0:F1:D7:49:C0:90:9E:F3:41:8D:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cS_xHdDGbOZ_4PHXScCQnvNBjSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/d9cc8d-95ac-4848-b097-9d63b0476e24/1/cS_xHdDGbOZ_4PHXScCQnvNBjSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/d9cc8d-95ac-4848-b097-9d63b0476e24/1/cS_xHdDGbOZ_4PHXScCQnvNBjSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:e4:a6:de:28:06:ac:19:bc:88:be:92:6f:3a:56:2c:7e:4c:
18:41:02:e0:28:8f:61:66:eb:c3:36:4a:65:26:34:78:6f:3e:
4b:4b:fa:61:de:19:0a:59:f7:bd:88:52:cc:22:b5:05:ef:e3:
e2:aa:d7:fe:b8:81:ab:8d:3b:8c:48:99:f6:5d:cb:f6:37:dc:
de:08:25:c5:6e:d0:d9:bb:d8:01:92:c9:be:d1:96:e2:e2:26:
72:7c:18:c0:c3:2d:6e:8b:36:17:94:8a:82:1a:f7:4d:84:87:
77:c7:fe:f9:0e:f7:8f:45:b2:1f:72:33:74:76:16:07:e2:a8:
10:03:44:44:12:e7:26:a3:6c:b9:6d:61:6f:7c:5b:89:86:32:
34:b1:04:ec:be:89:1b:09:02:31:23:93:1f:3e:f4:90:6b:09:
fa:a0:ef:8b:d2:e7:88:e8:82:99:f3:e3:3f:d5:34:e3:d2:91:
a5:bd:8a:54:19:92:d5:47:16:88:09:a0:fa:36:8e:1b:c4:b7:
59:65:e6:0a:a2:a0:76:fb:ca:35:d9:1a:83:59:e4:46:43:6e:
cf:e3:64:50:d1:cc:81:4c:fe:33:c0:d9:ea:50:f9:aa:8d:5c:
ab:1a:e4:16:73:40:e3:4d:05:88:5c:84:36:b4:25:3c:82:c6:
70:49:2f:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQBxYpM9SV2AqCr4ePnJyrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxMmZmMTFkZDBjNjZjZTY3ZmUwZjFkNzQ5YzA5MDllZjM0
MThkMjkwHhcNMjUxMTA0MTgwMDMyWhcNMjUxMTA1MTgwMDMyWjAzMTEwLwYDVQQD
Eyg2ZjAwOTI3Y2U4MmQ0MTMwZTQxNTM4YWRlZDEzZjg1MWE3OGUwNGMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt22ldud6dn5BzK+IQr5XCeiJ2erE
o3Ae239FGD8R3jbbGe1xDqXLNFa3GHmsznwK6oGwH16vBwByKqZYnpLMQGAzTC7F
H0ISGULoIN3FSSkt30g6cxz1ElVqjsjMIBKxtukg0x6abNntAKAGzKki+G4l7P3z
3jWsv/UlBSqq5Zxe3+qZIzpkcXC/86q1TvuKJNsbzowRUiiN5A/b0VAcW962wsT0
21bWoTpvWWf03hnzwjSAYBo6lVumW/qo+pQNvuAchE2qqyCWVvUIj62kbht0W3+K
ZTP5Ft5kqtOO1+xCDkVVlQlRTQ2ws5pnOzS5Zdu3afFOb4mR1kAZo/jn0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG8AknzoLUEw5BU4re0T+FGnjgTDMB8GA1UdIwQY
MBaAFHEv8R3Qxmzmf+Dx10nAkJ7zQY0pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1NfeEhkREdiT1pfNFBIWFNjQ1Fudk5CalNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9kOWNjOGQtOTVhYy00ODQ4LWIwOTct
OWQ2M2IwNDc2ZTI0LzEvY1NfeEhkREdiT1pfNFBIWFNjQ1Fudk5CalNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC9kOWNjOGQtOTVhYy00ODQ4LWIwOTctOWQ2M2IwNDc2ZTI0
LzEvY1NfeEhkREdiT1pfNFBIWFNjQ1Fudk5CalNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkOSm3igG
rBm8iL6SbzpWLH5MGEEC4CiPYWbrwzZKZSY0eG8+S0v6Yd4ZCln3vYhSzCK1Be/j
4qrX/riBq407jEiZ9l3L9jfc3gglxW7Q2bvYAZLJvtGW4uImcnwYwMMtbos2F5SK
ghr3TYSHd8f++Q73j0WyH3IzdHYWB+KoEANERBLnJqNsuW1hb3xbiYYyNLEE7L6J
GwkCMSOTHz70kGsJ+qDvi9LniOiCmfPjP9U049KRpb2KVBmS1UcWiAmg+jaOG8S3
WWXmCqKgdvvKNdkag1nkRkNuz+NkUNHMgUz+M8DZ6lD5qo1cqxrkFnNA400FiFyE
NrQlPILGcEkvUQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 23:30:55 2025 by rpki-client