Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.mft
File: 14pJFNlgCbaCLRaKDtU-k206Qfg.mft (raw, json)
Hash identifier: FdNlpTj4ILqZGoqm1nPvxrvesdf048WG/+7Y5JhxwX8=
Subject key identifier: 1B:6D:1E:6D:83:66:C3:FE:67:E3:09:A6:1D:02:3B:69:DC:C1:EA:52
Authority key identifier: D7:8A:49:14:D9:60:09:B6:82:2D:16:8A:0E:D5:3E:93:6D:3A:41:F8
Certificate issuer: /CN=d78a4914d96009b6822d168a0ed53e936d3a41f8
Certificate serial: 019A54F645ABF3A7F15779277123629A77DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/14pJFNlgCbaCLRaKDtU-k206Qfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.mft
Manifest number: 1713
Signing time: Wed 05 Nov 2025 17:00:17 +0000
Manifest this update: Wed 05 Nov 2025 17:00:17 +0000
Manifest next update: Thu 06 Nov 2025 17:00:17 +0000
Files and hashes: 1: 14pJFNlgCbaCLRaKDtU-k206Qfg.crl (hash: 3z+iBaIa8056JannLY01YcwJ1ITDmMyIZkowID+S4zY=)
2: 4nvw-vuKd4xbAsLFpMpHNcTWnXs.roa (hash: RzWsKcP3ZrmE9DFmaSid+Il5QAh34zpxbDO2n3tduPk=)
3: JVknch6YZZVKoQtj5e3RXowAaKo.roa (hash: 0evMSGPWXwkbSZxIuzVj+D6VQiAtq0P8zjXnrm8+ExM=)
4: TPdcZLcH_YATAX6AnH-DrKOIyW4.roa (hash: 7Q4klUwlKvLOmsqK9in2FaKGpBVinFLluA+jbJEiVAQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.mft
rsync://rpki.ripe.net/repository/DEFAULT/14pJFNlgCbaCLRaKDtU-k206Qfg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:f6:45:ab:f3:a7:f1:57:79:27:71:23:62:9a:77:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d78a4914d96009b6822d168a0ed53e936d3a41f8
Validity
Not Before: Nov 5 17:00:17 2025 GMT
Not After : Nov 6 17:00:17 2025 GMT
Subject: CN=1b6d1e6d8366c3fe67e309a61d023b69dcc1ea52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:2c:2b:0d:c6:33:12:d3:90:21:48:ca:09:41:
84:35:77:fc:52:7e:a0:be:48:2c:a3:a3:ed:1b:b8:
2d:18:56:3b:7c:90:a2:ee:fc:54:0c:24:19:c3:30:
b7:86:2a:02:0f:e7:58:e8:90:79:72:8a:b2:1f:a2:
67:c1:fc:c8:c7:67:d2:50:fc:76:c7:34:5a:2b:d0:
a7:0e:bd:5a:e5:d4:0b:e6:2d:ea:fa:1c:9b:ab:11:
fa:46:b3:f9:4d:5f:a3:a7:4b:78:67:9e:86:34:0b:
de:80:cd:ff:bf:22:58:92:c8:93:02:00:20:2f:35:
de:7c:99:f6:93:da:0f:36:4a:16:5e:83:fd:ab:27:
a0:26:df:b0:9d:bc:cf:4a:66:d4:6c:fc:3e:ba:2f:
01:fe:5a:d5:05:28:89:24:58:ba:b1:c4:20:3a:d1:
16:9c:16:fb:60:68:e9:4f:f2:67:c5:d5:78:cd:42:
70:11:df:a3:ab:5b:04:3d:fa:1c:42:37:8e:3d:fd:
e4:4a:7c:06:8a:66:c0:0b:71:ef:e8:8f:76:f9:14:
89:7c:0e:45:e9:4b:aa:ed:18:2b:60:82:ae:3b:33:
cf:79:cf:1d:9f:9a:e8:c8:c7:a6:3d:7e:0a:0f:31:
b6:62:5b:22:97:42:bc:c4:bb:ae:aa:1b:29:96:14:
7b:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:6D:1E:6D:83:66:C3:FE:67:E3:09:A6:1D:02:3B:69:DC:C1:EA:52
X509v3 Authority Key Identifier:
keyid:D7:8A:49:14:D9:60:09:B6:82:2D:16:8A:0E:D5:3E:93:6D:3A:41:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/14pJFNlgCbaCLRaKDtU-k206Qfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:c9:af:0b:31:b3:c7:c8:b0:01:b3:48:cf:a3:1a:84:3c:e2:
33:44:ce:85:8b:af:8e:8c:ba:4b:23:7d:4d:f5:83:1b:d4:91:
33:75:e2:01:d9:82:23:44:d8:96:4d:a3:05:be:ff:b1:35:f3:
03:01:e9:d6:52:f3:c5:07:35:63:7a:22:0a:e0:65:6f:83:df:
6f:da:fc:eb:f5:80:2f:b3:96:48:53:3c:96:67:4e:ec:f1:68:
b7:fb:dd:b2:0c:35:95:b1:3a:9a:2a:47:59:41:21:11:c0:de:
8e:cf:4f:17:aa:56:1d:fc:25:2a:9b:6b:9c:08:a4:f3:8c:c5:
30:f3:e8:25:ca:81:6f:db:53:a9:93:bf:d0:bf:26:a8:a7:cf:
38:8b:28:97:60:4e:60:67:17:71:f1:d3:36:6e:49:20:39:02:
50:ff:b0:bc:dc:8c:e7:57:ec:eb:05:4c:87:28:77:d2:a7:e2:
f4:9b:fb:ce:b2:27:f3:d8:bb:ee:61:53:38:e4:66:d5:5e:88:
99:63:3a:2e:db:b2:b7:4a:cc:26:9d:92:89:89:cc:f3:51:ba:
2e:6d:a4:9d:18:16:9f:4a:82:65:79:29:64:69:99:a0:ba:1f:
bf:3e:d2:9c:ea:aa:39:1a:39:5b:a1:57:0e:69:f1:18:b3:17:
35:f9:ec:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpU9kWr86fxV3kncSNimnffMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3OGE0OTE0ZDk2MDA5YjY4MjJkMTY4YTBlZDUzZTkzNmQz
YTQxZjgwHhcNMjUxMTA1MTcwMDE3WhcNMjUxMTA2MTcwMDE3WjAzMTEwLwYDVQQD
EygxYjZkMWU2ZDgzNjZjM2ZlNjdlMzA5YTYxZDAyM2I2OWRjYzFlYTUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyywrDcYzEtOQIUjKCUGENXf8Un6g
vkgso6PtG7gtGFY7fJCi7vxUDCQZwzC3hioCD+dY6JB5coqyH6JnwfzIx2fSUPx2
xzRaK9CnDr1a5dQL5i3q+hybqxH6RrP5TV+jp0t4Z56GNAvegM3/vyJYksiTAgAg
LzXefJn2k9oPNkoWXoP9qyegJt+wnbzPSmbUbPw+ui8B/lrVBSiJJFi6scQgOtEW
nBb7YGjpT/JnxdV4zUJwEd+jq1sEPfocQjeOPf3kSnwGimbAC3Hv6I92+RSJfA5F
6Uuq7RgrYIKuOzPPec8dn5royMemPX4KDzG2Ylsil0K8xLuuqhsplhR71wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBttHm2DZsP+Z+MJph0CO2ncwepSMB8GA1UdIwQY
MBaAFNeKSRTZYAm2gi0Wig7VPpNtOkH4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTRwSkZObGdDYmFDTFJhS0R0VS1rMjA2UWZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi83Y2Y0M2QtOGM4NS00ODE3LWJkNzUt
MjMwZmRhNjZhYmNiLzEvMTRwSkZObGdDYmFDTFJhS0R0VS1rMjA2UWZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi83Y2Y0M2QtOGM4NS00ODE3LWJkNzUtMjMwZmRhNjZhYmNi
LzEvMTRwSkZObGdDYmFDTFJhS0R0VS1rMjA2UWZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgMmvCzGz
x8iwAbNIz6MahDziM0TOhYuvjoy6SyN9TfWDG9SRM3XiAdmCI0TYlk2jBb7/sTXz
AwHp1lLzxQc1Y3oiCuBlb4Pfb9r86/WAL7OWSFM8lmdO7PFot/vdsgw1lbE6mipH
WUEhEcDejs9PF6pWHfwlKptrnAik84zFMPPoJcqBb9tTqZO/0L8mqKfPOIsol2BO
YGcXcfHTNm5JIDkCUP+wvNyM51fs6wVMhyh30qfi9Jv7zrIn89i77mFTOORm1V6I
mWM6Ltuyt0rMJp2SiYnM81G6Lm2knRgWn0qCZXkpZGmZoLofvz7SnOqqORo5W6FX
DmnxGLMXNfns1A==
-----END CERTIFICATE-----
Generated at Wed Nov 5 20:54:24 2025 by rpki-client