Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/861937-99fe-4b48-99b2-dd907b774f22/1/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.mft
File: d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.mft (raw, json)
Hash identifier: 1pG3dxG9rq2Tn/nCjlFCcJLA1EdddmZwhF8hWtrvI+8=
Subject key identifier: 98:DA:EE:AE:A5:E4:14:05:BC:BA:D2:02:34:14:C2:31:15:3B:30:A0
Authority key identifier: 77:65:64:FC:20:6C:4B:C5:DB:58:F7:EF:BB:B1:E8:F8:84:99:E2:33
Certificate issuer: /CN=776564fc206c4bc5db58f7efbbb1e8f88499e233
Certificate serial: 019A4EF5276FC43D2E72CDBF06C2A0C3F065
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/861937-99fe-4b48-99b2-dd907b774f22/1/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.mft
Manifest number: 1710
Signing time: Tue 04 Nov 2025 13:01:20 +0000
Manifest this update: Tue 04 Nov 2025 13:01:20 +0000
Manifest next update: Wed 05 Nov 2025 13:01:20 +0000
Files and hashes: 1: TsaeWiaMsP1j_z_xMCDhi5soRx0.roa (hash: cFv4JeYxc6KlGhF0oX6eBMNahY8RJkA5Wg3CLEjEyhU=)
2: d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.crl (hash: +ni5oiBAFvrx8hG29/FEnsYwhMmVNwi2m6LKBpUZ5uc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/861937-99fe-4b48-99b2-dd907b774f22/1/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/861937-99fe-4b48-99b2-dd907b774f22/1/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.mft
rsync://rpki.ripe.net/repository/DEFAULT/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:27:6f:c4:3d:2e:72:cd:bf:06:c2:a0:c3:f0:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=776564fc206c4bc5db58f7efbbb1e8f88499e233
Validity
Not Before: Nov 4 13:01:20 2025 GMT
Not After : Nov 5 13:01:20 2025 GMT
Subject: CN=98daeeaea5e41405bcbad2023414c231153b30a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:8b:82:2b:d7:28:fb:05:ea:77:ff:77:3c:81:
a4:83:e5:82:d9:26:b5:cb:49:88:d0:b4:f6:1a:6c:
d8:06:e8:f4:4b:53:7a:6c:2e:b8:e2:46:21:d0:9e:
99:ae:eb:f2:12:20:c5:6b:05:0f:b9:48:c8:47:5c:
18:5d:b4:3b:bd:35:14:9d:18:28:ef:33:f5:9b:df:
45:6a:01:dc:4c:d2:94:81:2a:ee:a7:be:ee:5a:cf:
ed:fd:d8:fb:20:04:44:14:bd:a6:03:d7:21:d7:e9:
5d:51:2f:ec:5f:02:19:20:56:28:87:4f:e5:75:45:
a3:6b:c2:3c:93:51:10:1c:0b:a6:de:f4:34:bc:28:
31:a4:b6:72:c3:6d:87:c8:01:db:a4:06:ce:41:c9:
e3:94:ff:f7:4f:d1:63:06:86:9f:cb:5c:a7:d5:13:
1d:26:b6:1c:d0:23:d8:f2:0a:74:38:34:92:6f:a3:
5d:e2:c7:40:b1:5d:04:bf:e2:1e:a2:d2:15:c8:ca:
d7:cc:9e:e8:3f:95:7c:f3:ff:1e:9f:cd:28:ca:75:
90:df:78:f2:c9:4a:3d:61:11:7b:78:99:84:3f:27:
6e:a9:78:c0:1a:f8:ea:9b:47:3e:60:68:d3:c3:5b:
a2:91:57:a1:50:bd:11:8c:3b:c0:96:6a:eb:b9:6f:
64:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:DA:EE:AE:A5:E4:14:05:BC:BA:D2:02:34:14:C2:31:15:3B:30:A0
X509v3 Authority Key Identifier:
keyid:77:65:64:FC:20:6C:4B:C5:DB:58:F7:EF:BB:B1:E8:F8:84:99:E2:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/861937-99fe-4b48-99b2-dd907b774f22/1/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/861937-99fe-4b48-99b2-dd907b774f22/1/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:bd:bb:21:42:4d:fa:0a:ca:e6:76:77:f9:53:2e:01:d1:40:
18:b1:15:37:10:3c:38:78:2a:1b:c7:16:f6:1f:3b:d8:54:80:
09:a7:67:83:27:ad:8a:9b:99:c0:cf:a6:63:b5:e8:06:df:03:
61:1c:e2:37:10:24:03:56:4b:5a:e3:f7:c2:97:fe:da:fd:13:
0e:dd:59:dc:10:11:c4:a9:e2:6e:38:64:6a:3b:25:eb:e8:dc:
dd:09:aa:65:09:f3:79:94:de:8b:cf:00:1a:0d:04:4d:96:ff:
04:3d:ca:c0:65:14:65:6c:e6:35:40:ba:65:74:08:15:62:ea:
8b:b5:6c:57:00:7d:25:8d:5e:86:71:19:05:69:96:6e:5a:7e:
f4:46:fa:68:0f:44:d6:90:a5:26:7d:b6:72:aa:7a:a7:9d:23:
e5:59:b0:ff:4b:6e:b5:c1:a3:24:a2:7f:5f:cf:da:b7:98:c0:
7f:13:e1:62:1c:b2:e4:08:30:f4:9f:77:73:4b:26:b8:a9:23:
99:00:08:b6:0a:f8:55:c2:f6:72:f4:d8:36:d8:ef:bd:90:c7:
71:aa:fd:57:c7:a5:07:86:4f:c6:79:47:d7:7d:16:be:41:5e:
44:ff:fa:10:4c:fe:6d:6d:7c:e2:71:03:6e:2a:33:97:19:11:
63:ad:93:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9SdvxD0ucs2/BsKgw/BlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3NjU2NGZjMjA2YzRiYzVkYjU4ZjdlZmJiYjFlOGY4ODQ5
OWUyMzMwHhcNMjUxMTA0MTMwMTIwWhcNMjUxMTA1MTMwMTIwWjAzMTEwLwYDVQQD
Eyg5OGRhZWVhZWE1ZTQxNDA1YmNiYWQyMDIzNDE0YzIzMTE1M2IzMGEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIuCK9co+wXqd/93PIGkg+WC2Sa1
y0mI0LT2GmzYBuj0S1N6bC644kYh0J6ZruvyEiDFawUPuUjIR1wYXbQ7vTUUnRgo
7zP1m99FagHcTNKUgSrup77uWs/t/dj7IAREFL2mA9ch1+ldUS/sXwIZIFYoh0/l
dUWja8I8k1EQHAum3vQ0vCgxpLZyw22HyAHbpAbOQcnjlP/3T9FjBoafy1yn1RMd
JrYc0CPY8gp0ODSSb6Nd4sdAsV0Ev+IeotIVyMrXzJ7oP5V88/8en80oynWQ33jy
yUo9YRF7eJmEPyduqXjAGvjqm0c+YGjTw1uikVehUL0RjDvAlmrruW9klwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJja7q6l5BQFvLrSAjQUwjEVOzCgMB8GA1UdIwQY
MBaAFHdlZPwgbEvF21j377ux6PiEmeIzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDJWa19DQnNTOFhiV1BmdnU3SG8tSVNaNGpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi84NjE5MzctOTlmZS00YjQ4LTk5YjIt
ZGQ5MDdiNzc0ZjIyLzEvZDJWa19DQnNTOFhiV1BmdnU3SG8tSVNaNGpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi84NjE5MzctOTlmZS00YjQ4LTk5YjItZGQ5MDdiNzc0ZjIy
LzEvZDJWa19DQnNTOFhiV1BmdnU3SG8tSVNaNGpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjr27IUJN
+grK5nZ3+VMuAdFAGLEVNxA8OHgqG8cW9h872FSACadngyetipuZwM+mY7XoBt8D
YRziNxAkA1ZLWuP3wpf+2v0TDt1Z3BARxKnibjhkajsl6+jc3QmqZQnzeZTei88A
Gg0ETZb/BD3KwGUUZWzmNUC6ZXQIFWLqi7VsVwB9JY1ehnEZBWmWblp+9Eb6aA9E
1pClJn22cqp6p50j5Vmw/0tutcGjJKJ/X8/at5jAfxPhYhyy5Agw9J93c0smuKkj
mQAItgr4VcL2cvTYNtjvvZDHcar9V8elB4ZPxnlH130WvkFeRP/6EEz+bW184nED
biozlxkRY62TJw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 20:34:24 2025 by rpki-client