Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.mft
File: MzIOLzxa2t8VOgdYvGALbqFPTu0.mft (raw, json)
Hash identifier: m2pD5djFZKoM2ot3igsECi7rL3exOAM3NyP+5olvCE0=
Subject key identifier: 4A:4A:40:61:4F:E2:8F:B5:D3:FC:3F:84:7B:4F:A1:9C:F1:A7:C0:3F
Authority key identifier: 33:32:0E:2F:3C:5A:DA:DF:15:3A:07:58:BC:60:0B:6E:A1:4F:4E:ED
Certificate issuer: /CN=33320e2f3c5adadf153a0758bc600b6ea14f4eed
Certificate serial: 019A526332B1043C137DE194C30A1B027C5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MzIOLzxa2t8VOgdYvGALbqFPTu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.mft
Manifest number: 170F
Signing time: Wed 05 Nov 2025 05:00:23 +0000
Manifest this update: Wed 05 Nov 2025 05:00:23 +0000
Manifest next update: Thu 06 Nov 2025 05:00:23 +0000
Files and hashes: 1: AvN828iiRV3-eQ2nvQTTlCpY0ts.roa (hash: AwFnD9flCXRJg5DrdW5vdLxIK1uSbmEP3XgEVnfdU14=)
2: FQUs67egorGqDEk7kbjYvrfoO_s.roa (hash: JDbs+c69xkht9mxZidbikteQkaoI44/OAWxvpFrO2Bk=)
3: MzIOLzxa2t8VOgdYvGALbqFPTu0.crl (hash: Zee5WXu8UfPVupTx0ijGy51mMEqz4O1VQVdfZyc5Uvo=)
4: i7kir30T-x2Qz6fkdJRMDQPIadY.roa (hash: YG8gHBLUzQIrRJ7lENe/ITyj1BXcOdJeuTbpC4dPomc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.mft
rsync://rpki.ripe.net/repository/DEFAULT/MzIOLzxa2t8VOgdYvGALbqFPTu0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:63:32:b1:04:3c:13:7d:e1:94:c3:0a:1b:02:7c:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33320e2f3c5adadf153a0758bc600b6ea14f4eed
Validity
Not Before: Nov 5 05:00:23 2025 GMT
Not After : Nov 6 05:00:23 2025 GMT
Subject: CN=4a4a40614fe28fb5d3fc3f847b4fa19cf1a7c03f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d2:a7:26:0f:f3:40:1a:5f:e2:85:3b:a3:53:
03:65:36:85:2a:b2:a2:78:0c:50:b2:38:94:07:27:
46:0f:0f:79:8b:b4:4c:d7:21:ef:4e:7e:37:a4:8b:
41:98:e5:eb:56:b1:5e:07:e0:8d:8b:57:28:ff:d3:
74:b2:b4:eb:8d:79:c4:0c:01:39:d7:b7:47:0e:b3:
bd:68:a7:fc:76:0a:56:7d:8b:42:ef:f5:4c:20:bb:
53:75:ed:d4:1c:14:43:d4:af:96:d0:bc:15:9a:f9:
68:e4:46:f2:44:25:98:0f:af:b7:8e:43:e8:27:e5:
5f:e4:f7:f0:65:7d:37:ce:41:5e:ff:a4:fa:47:c1:
83:72:7d:f1:1e:4c:66:62:e8:02:86:a8:3f:53:77:
2d:00:d5:71:ad:0f:76:dd:58:99:d3:56:f0:0d:f5:
e3:d5:e9:54:e2:4e:b6:64:3d:51:d5:f2:0c:dc:1c:
1e:8b:7b:bb:9b:32:58:a2:a4:65:81:cb:93:46:2e:
0f:af:54:12:13:0e:77:7f:98:fa:4e:5a:49:15:74:
ed:eb:91:62:90:74:82:dd:ba:69:e6:73:28:d3:a1:
4f:b2:58:0d:6b:4e:10:7a:8f:43:ab:55:58:99:1c:
06:ab:e7:b4:e0:31:de:d6:2c:d2:c6:33:0f:fc:43:
b8:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:4A:40:61:4F:E2:8F:B5:D3:FC:3F:84:7B:4F:A1:9C:F1:A7:C0:3F
X509v3 Authority Key Identifier:
keyid:33:32:0E:2F:3C:5A:DA:DF:15:3A:07:58:BC:60:0B:6E:A1:4F:4E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzIOLzxa2t8VOgdYvGALbqFPTu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:4e:4c:14:68:93:ab:06:fd:f1:a4:f9:f5:3d:18:c5:54:9b:
92:ac:7d:c4:d3:a0:00:7f:83:f7:49:85:99:a3:e7:b7:88:e3:
f8:c0:21:0e:42:d8:41:96:0b:39:e5:6f:5c:f0:89:14:f2:c8:
79:45:c3:41:ab:80:9e:dd:a9:44:b8:dc:d3:48:1a:97:34:9e:
28:ac:0d:fe:09:65:f2:11:38:95:f1:0d:6e:d1:2b:98:23:26:
e5:91:bc:77:10:d0:fe:69:3c:f9:6e:19:6a:59:50:9a:fb:32:
f5:73:f9:4f:1e:f8:c2:3b:73:00:72:c5:77:70:ad:a6:76:6f:
88:c7:d2:ab:be:00:b8:96:32:c0:c2:0a:22:61:6c:e1:ff:49:
3d:6a:af:dc:d4:8c:ad:90:49:31:e0:9f:04:cb:cf:d4:5e:d3:
7d:af:cf:2f:10:b9:88:a9:09:b8:b8:92:6d:09:4b:d3:50:d4:
66:cf:80:93:75:19:cb:3a:8f:72:74:99:1c:d4:7b:5b:dd:47:
70:fb:06:95:fe:79:c1:f3:a2:c6:1a:37:08:5c:a3:f0:c0:14:
35:b9:e4:25:7b:1e:76:dc:5f:0b:0a:2c:ec:b1:52:ad:a0:33:
fe:87:5a:2c:3f:e9:5f:b3:5d:2b:f5:30:06:36:86:e8:1e:42:
cb:3e:18:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpSYzKxBDwTfeGUwwobAnxdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzMzIwZTJmM2M1YWRhZGYxNTNhMDc1OGJjNjAwYjZlYTE0
ZjRlZWQwHhcNMjUxMTA1MDUwMDIzWhcNMjUxMTA2MDUwMDIzWjAzMTEwLwYDVQQD
Eyg0YTRhNDA2MTRmZTI4ZmI1ZDNmYzNmODQ3YjRmYTE5Y2YxYTdjMDNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn9KnJg/zQBpf4oU7o1MDZTaFKrKi
eAxQsjiUBydGDw95i7RM1yHvTn43pItBmOXrVrFeB+CNi1co/9N0srTrjXnEDAE5
17dHDrO9aKf8dgpWfYtC7/VMILtTde3UHBRD1K+W0LwVmvlo5EbyRCWYD6+3jkPo
J+Vf5PfwZX03zkFe/6T6R8GDcn3xHkxmYugChqg/U3ctANVxrQ923ViZ01bwDfXj
1elU4k62ZD1R1fIM3Bwei3u7mzJYoqRlgcuTRi4Pr1QSEw53f5j6TlpJFXTt65Fi
kHSC3bpp5nMo06FPslgNa04Qeo9Dq1VYmRwGq+e04DHe1izSxjMP/EO4cQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEpKQGFP4o+10/w/hHtPoZzxp8A/MB8GA1UdIwQY
MBaAFDMyDi88WtrfFToHWLxgC26hT07tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXpJT0x6eGEydDhWT2dkWXZHQUxicUZQVHUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8yNDQ5MDEtYWUyZC00NDE4LTlkOTMt
ZTE1NDRjNTdlMzhiLzEvTXpJT0x6eGEydDhWT2dkWXZHQUxicUZQVHUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8yNDQ5MDEtYWUyZC00NDE4LTlkOTMtZTE1NDRjNTdlMzhi
LzEvTXpJT0x6eGEydDhWT2dkWXZHQUxicUZQVHUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU05MFGiT
qwb98aT59T0YxVSbkqx9xNOgAH+D90mFmaPnt4jj+MAhDkLYQZYLOeVvXPCJFPLI
eUXDQauAnt2pRLjc00galzSeKKwN/gll8hE4lfENbtErmCMm5ZG8dxDQ/mk8+W4Z
allQmvsy9XP5Tx74wjtzAHLFd3CtpnZviMfSq74AuJYywMIKImFs4f9JPWqv3NSM
rZBJMeCfBMvP1F7Tfa/PLxC5iKkJuLiSbQlL01DUZs+Ak3UZyzqPcnSZHNR7W91H
cPsGlf55wfOixho3CFyj8MAUNbnkJXsedtxfCwos7LFSraAz/odaLD/pX7NdK/Uw
BjaG6B5Cyz4Ykg==
-----END CERTIFICATE-----
Generated at Wed Nov 5 11:11:53 2025 by rpki-client