Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/ccc645-5323-4b20-b475-f37705361cf8/1/mM0-vWXtPZquB5oOJNcTLZpxqrg.mft
File: mM0-vWXtPZquB5oOJNcTLZpxqrg.mft (raw, json)
Hash identifier: uO+Q/Y0P0rJ+OkQlMpO1HL/40L/ujICxCfYSD7OXhms=
Subject key identifier: 41:21:23:2A:33:D5:2B:D0:1C:C4:CB:02:DE:20:DD:E8:D7:60:A6:20
Authority key identifier: 98:CD:3E:BD:65:ED:3D:9A:AE:07:9A:0E:24:D7:13:2D:9A:71:AA:B8
Certificate issuer: /CN=98cd3ebd65ed3d9aae079a0e24d7132d9a71aab8
Certificate serial: 019A4F2B3DDE5049AB73DB60E49E67F2056B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mM0-vWXtPZquB5oOJNcTLZpxqrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/ccc645-5323-4b20-b475-f37705361cf8/1/mM0-vWXtPZquB5oOJNcTLZpxqrg.mft
Manifest number: 1710
Signing time: Tue 04 Nov 2025 14:00:25 +0000
Manifest this update: Tue 04 Nov 2025 14:00:25 +0000
Manifest next update: Wed 05 Nov 2025 14:00:25 +0000
Files and hashes: 1: fnq47xvFlP3s88cw-L8mb-lvd_E.roa (hash: vyrDQTrTr3KQdje/xN9zgyCGRoZbi8NoM/Vu35juLyc=)
2: mM0-vWXtPZquB5oOJNcTLZpxqrg.crl (hash: YAfQywF/mfd7DXIUEBgcGz4J6ypdPmRnec8DBcH8oC0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/ccc645-5323-4b20-b475-f37705361cf8/1/mM0-vWXtPZquB5oOJNcTLZpxqrg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/ccc645-5323-4b20-b475-f37705361cf8/1/mM0-vWXtPZquB5oOJNcTLZpxqrg.mft
rsync://rpki.ripe.net/repository/DEFAULT/mM0-vWXtPZquB5oOJNcTLZpxqrg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 14:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:3d:de:50:49:ab:73:db:60:e4:9e:67:f2:05:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98cd3ebd65ed3d9aae079a0e24d7132d9a71aab8
Validity
Not Before: Nov 4 14:00:25 2025 GMT
Not After : Nov 5 14:00:25 2025 GMT
Subject: CN=4121232a33d52bd01cc4cb02de20dde8d760a620
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:87:22:00:f2:eb:e6:0c:dc:3f:0a:70:db:45:
2c:84:2b:8b:8d:2e:f2:87:95:e1:4f:55:da:8a:fb:
fd:14:f8:58:49:94:25:9f:6a:f1:1d:76:ce:85:fc:
ed:25:44:3f:9a:26:dc:3e:b7:59:55:f9:3d:83:9f:
53:d1:9a:3e:e6:ad:46:3a:ed:98:09:00:7d:70:ea:
52:3d:40:7d:ae:50:43:20:1f:b3:5a:fa:52:ae:79:
2b:00:00:a1:34:50:d0:03:2d:5a:31:54:6d:ce:64:
76:05:98:9c:96:4c:e6:68:42:5c:d7:86:cf:e6:54:
d6:c8:78:96:42:55:f2:5a:dd:93:8b:40:49:67:d4:
6e:48:44:0d:31:bf:60:56:99:bb:5c:0a:4f:8a:26:
31:6b:6a:cb:3d:24:c5:c1:6e:32:e1:49:68:8e:3e:
38:f8:85:3f:79:7d:d6:3b:b7:8a:ef:4e:28:fe:de:
f7:c2:18:fa:b9:c0:70:6d:8d:1b:c7:35:a2:88:b8:
e4:a3:cc:64:d0:fd:2c:6c:5c:0c:6d:5b:fe:e7:2e:
fa:37:9a:78:cc:66:83:ce:27:0e:e8:67:2e:6d:70:
9d:eb:ac:da:a8:d3:98:fe:84:21:5f:b3:d6:1b:a0:
92:47:44:72:b3:d2:39:a8:58:59:1d:59:00:15:2e:
c8:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:21:23:2A:33:D5:2B:D0:1C:C4:CB:02:DE:20:DD:E8:D7:60:A6:20
X509v3 Authority Key Identifier:
keyid:98:CD:3E:BD:65:ED:3D:9A:AE:07:9A:0E:24:D7:13:2D:9A:71:AA:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mM0-vWXtPZquB5oOJNcTLZpxqrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/ccc645-5323-4b20-b475-f37705361cf8/1/mM0-vWXtPZquB5oOJNcTLZpxqrg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/ccc645-5323-4b20-b475-f37705361cf8/1/mM0-vWXtPZquB5oOJNcTLZpxqrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:33:f2:ec:81:68:31:64:36:06:1d:6b:d4:7a:d0:1a:28:5c:
60:5e:b9:05:03:4f:f1:19:c0:3e:e4:7f:8b:e0:e7:d1:80:c0:
7d:f4:4e:07:52:6c:0a:6b:2d:67:e0:4b:fa:0f:71:ae:2d:17:
d7:4e:60:34:13:ad:f4:f2:6e:f8:d9:8c:9c:e0:0b:7f:2c:35:
f9:42:fd:4c:67:e4:8e:8a:27:d0:ca:08:81:9e:db:1f:f8:bd:
db:0e:67:5e:a5:9b:8e:23:a2:30:fd:21:cf:ac:db:c8:2d:e5:
55:50:98:fe:0d:23:ea:56:1b:ba:00:36:08:20:5d:49:ae:0a:
8b:b1:ca:37:bb:1b:d7:d5:2a:1c:05:b0:0e:d7:07:b0:54:24:
cd:32:6b:2a:a2:de:32:d8:14:08:56:cf:43:0d:97:b3:f9:bd:
96:00:27:c2:6f:38:74:47:51:a8:ca:67:0f:03:c1:0a:a5:6a:
19:d5:e8:5e:6b:51:b0:cb:4c:7b:df:b5:66:04:cd:41:89:68:
33:74:e1:eb:cc:8e:12:79:e2:70:5d:df:52:29:90:4f:d5:66:
b4:ac:cb:9d:81:f0:6c:eb:66:64:bf:0c:83:5b:89:d3:75:e2:
45:6c:78:e3:cc:ba:2c:d3:ba:a5:1a:fc:d3:44:65:45:ad:e3:
05:9e:07:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPKz3eUEmrc9tg5J5n8gVrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4Y2QzZWJkNjVlZDNkOWFhZTA3OWEwZTI0ZDcxMzJkOWE3
MWFhYjgwHhcNMjUxMTA0MTQwMDI1WhcNMjUxMTA1MTQwMDI1WjAzMTEwLwYDVQQD
Eyg0MTIxMjMyYTMzZDUyYmQwMWNjNGNiMDJkZTIwZGRlOGQ3NjBhNjIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4ciAPLr5gzcPwpw20UshCuLjS7y
h5XhT1Xaivv9FPhYSZQln2rxHXbOhfztJUQ/mibcPrdZVfk9g59T0Zo+5q1GOu2Y
CQB9cOpSPUB9rlBDIB+zWvpSrnkrAAChNFDQAy1aMVRtzmR2BZiclkzmaEJc14bP
5lTWyHiWQlXyWt2Ti0BJZ9RuSEQNMb9gVpm7XApPiiYxa2rLPSTFwW4y4Ulojj44
+IU/eX3WO7eK704o/t73whj6ucBwbY0bxzWiiLjko8xk0P0sbFwMbVv+5y76N5p4
zGaDzicO6GcubXCd66zaqNOY/oQhX7PWG6CSR0Rys9I5qFhZHVkAFS7I1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEEhIyoz1SvQHMTLAt4g3ejXYKYgMB8GA1UdIwQY
MBaAFJjNPr1l7T2argeaDiTXEy2acaq4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbU0wLXZXWHRQWnF1QjVvT0pOY1RMWnB4cXJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS9jY2M2NDUtNTMyMy00YjIwLWI0NzUt
ZjM3NzA1MzYxY2Y4LzEvbU0wLXZXWHRQWnF1QjVvT0pOY1RMWnB4cXJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS9jY2M2NDUtNTMyMy00YjIwLWI0NzUtZjM3NzA1MzYxY2Y4
LzEvbU0wLXZXWHRQWnF1QjVvT0pOY1RMWnB4cXJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfjPy7IFo
MWQ2Bh1r1HrQGihcYF65BQNP8RnAPuR/i+Dn0YDAffROB1JsCmstZ+BL+g9xri0X
105gNBOt9PJu+NmMnOALfyw1+UL9TGfkjoon0MoIgZ7bH/i92w5nXqWbjiOiMP0h
z6zbyC3lVVCY/g0j6lYbugA2CCBdSa4Ki7HKN7sb19UqHAWwDtcHsFQkzTJrKqLe
MtgUCFbPQw2Xs/m9lgAnwm84dEdRqMpnDwPBCqVqGdXoXmtRsMtMe9+1ZgTNQYlo
M3Th68yOEnnicF3fUimQT9VmtKzLnYHwbOtmZL8Mg1uJ03XiRWx448y6LNO6pRr8
00RlRa3jBZ4HjQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 20:20:36 2025 by rpki-client