Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/d7fd2c-95a9-4c09-9e47-827f9648c022/1/B9ZNrvM55v2uZE2xsgu_VOZ-XWY.mft
File: B9ZNrvM55v2uZE2xsgu_VOZ-XWY.mft (raw, json)
Hash identifier: atPQsx+7bkhHMVhiMO07XKLrjtBWRK4aZnmUZH9tIJE=
Subject key identifier: 77:99:81:DB:68:58:39:F2:EF:A0:75:7C:4C:B5:68:67:46:33:59:5D
Authority key identifier: 07:D6:4D:AE:F3:39:E6:FD:AE:64:4D:B1:B2:0B:BF:54:E6:7E:5D:66
Certificate issuer: /CN=07d64daef339e6fdae644db1b20bbf54e67e5d66
Certificate serial: 019A4EF5A33A983002F6F1BD6C44FAFA0550
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B9ZNrvM55v2uZE2xsgu_VOZ-XWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/d7fd2c-95a9-4c09-9e47-827f9648c022/1/B9ZNrvM55v2uZE2xsgu_VOZ-XWY.mft
Manifest number: 0DF0
Signing time: Tue 04 Nov 2025 13:01:52 +0000
Manifest this update: Tue 04 Nov 2025 13:01:52 +0000
Manifest next update: Wed 05 Nov 2025 13:01:52 +0000
Files and hashes: 1: B9ZNrvM55v2uZE2xsgu_VOZ-XWY.crl (hash: /9RzRmxaog8EpIf2l/nwaW43inCnnyx8EGc5H/yi0Oo=)
2: iP-SKYMlS2lzoYdf9k-IY95BiIU.roa (hash: y3r4nf2YS5R0GgEpIX4QQg5XE7ABIRh22yt4DkGX/UA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/d7fd2c-95a9-4c09-9e47-827f9648c022/1/B9ZNrvM55v2uZE2xsgu_VOZ-XWY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/d7fd2c-95a9-4c09-9e47-827f9648c022/1/B9ZNrvM55v2uZE2xsgu_VOZ-XWY.mft
rsync://rpki.ripe.net/repository/DEFAULT/B9ZNrvM55v2uZE2xsgu_VOZ-XWY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:a3:3a:98:30:02:f6:f1:bd:6c:44:fa:fa:05:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07d64daef339e6fdae644db1b20bbf54e67e5d66
Validity
Not Before: Nov 4 13:01:52 2025 GMT
Not After : Nov 5 13:01:52 2025 GMT
Subject: CN=779981db685839f2efa0757c4cb568674633595d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:8d:93:16:33:dd:cf:09:f8:65:5e:2a:6c:af:
71:be:ff:d0:de:dd:aa:94:58:c1:31:bf:ad:61:03:
cf:88:10:1c:43:cf:79:2c:38:ab:7e:00:4f:38:62:
a4:77:a0:48:43:b8:f1:e2:cc:4e:b2:88:ac:19:c7:
b5:e7:54:ae:bf:d0:02:52:11:c5:0e:b1:08:30:dc:
47:71:f2:ff:b6:94:68:7f:ea:43:b3:a0:e9:73:cb:
b5:f4:7d:67:6d:7e:a1:28:da:cc:47:10:92:21:19:
e3:f8:55:90:72:7b:1c:3c:4f:d6:af:24:5c:31:ef:
58:f0:84:75:1e:df:b8:e0:66:50:2b:dc:48:83:6b:
3f:47:01:ca:9e:d8:8c:61:fb:8e:88:a4:02:47:3a:
9d:ed:6b:7f:85:49:f6:98:04:d5:66:24:f0:cb:c7:
6f:8d:9b:a3:cd:c1:1b:63:e5:25:c2:c8:b4:45:9a:
fb:94:fd:4f:fb:cc:f8:49:da:51:9f:d4:99:08:0d:
c1:48:59:8d:05:18:50:70:7f:61:e2:af:b9:e2:7e:
22:d2:d1:df:de:de:29:77:76:29:16:34:12:09:d7:
6d:7b:f0:fc:51:f1:33:cb:0f:45:0e:ac:f8:a2:bf:
c4:2b:03:c5:9d:12:85:9a:aa:04:4e:aa:7f:92:8b:
de:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:99:81:DB:68:58:39:F2:EF:A0:75:7C:4C:B5:68:67:46:33:59:5D
X509v3 Authority Key Identifier:
keyid:07:D6:4D:AE:F3:39:E6:FD:AE:64:4D:B1:B2:0B:BF:54:E6:7E:5D:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9ZNrvM55v2uZE2xsgu_VOZ-XWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d7fd2c-95a9-4c09-9e47-827f9648c022/1/B9ZNrvM55v2uZE2xsgu_VOZ-XWY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d7fd2c-95a9-4c09-9e47-827f9648c022/1/B9ZNrvM55v2uZE2xsgu_VOZ-XWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:54:72:b0:89:9d:1e:ef:74:71:af:b7:88:f5:6b:2e:59:4c:
c8:bd:76:e3:40:21:84:96:fc:ed:6c:95:e7:d5:53:66:31:c8:
eb:e6:bf:28:48:b4:7d:0c:92:d7:d5:43:1f:1f:31:e4:00:0a:
56:c0:32:4f:85:63:43:76:aa:37:04:13:94:e9:3e:f5:e6:13:
0b:02:9a:56:17:18:50:13:b4:32:b4:48:2c:29:ed:a0:53:8b:
c8:32:47:40:31:a9:43:af:25:ba:a7:95:94:23:d7:d6:1e:66:
e2:82:3b:70:79:38:51:86:f4:d8:98:cc:69:cf:21:24:5e:52:
b0:93:f0:79:c4:58:61:82:a3:16:dc:a2:8b:00:3c:ec:17:cd:
7d:c5:10:d9:b4:4e:d5:f7:1f:8b:0e:ba:b9:da:f9:08:1b:ac:
6c:21:d0:3a:a6:84:20:d0:7d:44:20:2f:86:94:c6:72:c5:d3:
d2:ba:c7:ee:c1:8e:76:50:6d:51:4c:c2:cc:e3:40:78:37:fb:
57:c7:ea:9c:f0:4d:78:be:c3:d3:13:21:68:fd:c1:9d:a3:fe:
d6:d2:84:28:e2:83:18:e4:a7:23:d4:47:fc:29:75:44:79:05:
21:79:bb:fe:fe:14:bd:5f:c7:e2:20:81:f0:43:f4:0a:9f:f3:
8f:a4:56:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9aM6mDAC9vG9bET6+gVQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3ZDY0ZGFlZjMzOWU2ZmRhZTY0NGRiMWIyMGJiZjU0ZTY3
ZTVkNjYwHhcNMjUxMTA0MTMwMTUyWhcNMjUxMTA1MTMwMTUyWjAzMTEwLwYDVQQD
Eyg3Nzk5ODFkYjY4NTgzOWYyZWZhMDc1N2M0Y2I1Njg2NzQ2MzM1OTVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8o2TFjPdzwn4ZV4qbK9xvv/Q3t2q
lFjBMb+tYQPPiBAcQ895LDirfgBPOGKkd6BIQ7jx4sxOsoisGce151Suv9ACUhHF
DrEIMNxHcfL/tpRof+pDs6Dpc8u19H1nbX6hKNrMRxCSIRnj+FWQcnscPE/WryRc
Me9Y8IR1Ht+44GZQK9xIg2s/RwHKntiMYfuOiKQCRzqd7Wt/hUn2mATVZiTwy8dv
jZujzcEbY+Ulwsi0RZr7lP1P+8z4SdpRn9SZCA3BSFmNBRhQcH9h4q+54n4i0tHf
3t4pd3YpFjQSCddte/D8UfEzyw9FDqz4or/EKwPFnRKFmqoETqp/koveLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHeZgdtoWDny76B1fEy1aGdGM1ldMB8GA1UdIwQY
MBaAFAfWTa7zOeb9rmRNsbILv1Tmfl1mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjlaTnJ2TTU1djJ1WkUyeHNndV9WT1otWFdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9kN2ZkMmMtOTVhOS00YzA5LTllNDct
ODI3Zjk2NDhjMDIyLzEvQjlaTnJ2TTU1djJ1WkUyeHNndV9WT1otWFdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS9kN2ZkMmMtOTVhOS00YzA5LTllNDctODI3Zjk2NDhjMDIy
LzEvQjlaTnJ2TTU1djJ1WkUyeHNndV9WT1otWFdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF1RysImd
Hu90ca+3iPVrLllMyL1240AhhJb87WyV59VTZjHI6+a/KEi0fQyS19VDHx8x5AAK
VsAyT4VjQ3aqNwQTlOk+9eYTCwKaVhcYUBO0MrRILCntoFOLyDJHQDGpQ68luqeV
lCPX1h5m4oI7cHk4UYb02JjMac8hJF5SsJPwecRYYYKjFtyiiwA87BfNfcUQ2bRO
1fcfiw66udr5CBusbCHQOqaEINB9RCAvhpTGcsXT0rrH7sGOdlBtUUzCzONAeDf7
V8fqnPBNeL7D0xMhaP3BnaP+1tKEKOKDGOSnI9RH/Cl1RHkFIXm7/v4UvV/H4iCB
8EP0Cp/zj6RW3A==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:46:22 2025 by rpki-client