Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/bd7820-5c1c-4884-9ab8-c5ab97dba898/1/k680jsWk5l4MsTeCGuahOe1_rAA.mft
File: k680jsWk5l4MsTeCGuahOe1_rAA.mft (raw, json)
Hash identifier: 1GkzxAinyBT0Cy12wpjEx24tpdmQoDEsR+rSASvuvOc=
Subject key identifier: 68:C3:B5:1F:90:87:BE:AA:19:4C:0A:3F:F1:7D:2C:DA:00:3C:D6:29
Authority key identifier: 93:AF:34:8E:C5:A4:E6:5E:0C:B1:37:82:1A:E6:A1:39:ED:7F:AC:00
Certificate issuer: /CN=93af348ec5a4e65e0cb137821ae6a139ed7fac00
Certificate serial: 019A503DDBFFBBAFA423BBAC03B1A16B5A42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k680jsWk5l4MsTeCGuahOe1_rAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/bd7820-5c1c-4884-9ab8-c5ab97dba898/1/k680jsWk5l4MsTeCGuahOe1_rAA.mft
Manifest number: 169E
Signing time: Tue 04 Nov 2025 19:00:22 +0000
Manifest this update: Tue 04 Nov 2025 19:00:22 +0000
Manifest next update: Wed 05 Nov 2025 19:00:22 +0000
Files and hashes: 1: gKy-M4ArOB2uxqprqRJ6fbGyEC8.roa (hash: MC8Gw1INJPJBRmJZki75GCuCmqozYCvUY/UxQ+rSFh0=)
2: k680jsWk5l4MsTeCGuahOe1_rAA.crl (hash: k+a7GZkNXBhErb2OYT/1QlTjnoapN32/zCV/WdGA5Ao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/bd7820-5c1c-4884-9ab8-c5ab97dba898/1/k680jsWk5l4MsTeCGuahOe1_rAA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/bd7820-5c1c-4884-9ab8-c5ab97dba898/1/k680jsWk5l4MsTeCGuahOe1_rAA.mft
rsync://rpki.ripe.net/repository/DEFAULT/k680jsWk5l4MsTeCGuahOe1_rAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3d:db:ff:bb:af:a4:23:bb:ac:03:b1:a1:6b:5a:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93af348ec5a4e65e0cb137821ae6a139ed7fac00
Validity
Not Before: Nov 4 19:00:22 2025 GMT
Not After : Nov 5 19:00:22 2025 GMT
Subject: CN=68c3b51f9087beaa194c0a3ff17d2cda003cd629
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ed:9f:70:15:d1:93:f4:c3:da:fc:b7:bf:6a:
d7:2f:45:d4:95:37:f7:86:a5:6c:30:e4:59:1e:20:
98:0a:a9:4a:1c:c1:62:fd:08:3c:4d:c0:24:d7:ba:
e5:68:9f:04:1d:45:94:36:e8:b2:b3:58:ab:5f:0d:
01:61:19:80:f7:df:b6:75:8a:e2:00:e7:bb:f4:fd:
be:bc:90:f0:88:98:47:48:07:6b:81:b4:39:92:c3:
33:5d:61:4c:70:28:c7:91:49:3f:59:1e:1e:2e:ea:
cd:ce:0c:8f:ec:8d:91:8c:0c:1c:d5:d4:b6:bb:66:
a2:e1:ae:1f:eb:f2:db:48:a9:48:88:9d:8b:2e:50:
33:5b:a7:be:d3:00:52:e7:3d:fa:31:a4:8e:a3:5d:
99:6a:93:ea:9a:c6:bf:a6:28:9a:89:5e:01:08:bd:
62:f5:cd:0a:f1:a1:2d:aa:11:b5:50:2b:b6:e2:3f:
73:35:f6:ac:3c:fb:8f:93:2e:e4:98:b6:4a:a3:01:
37:91:db:eb:f2:21:35:af:04:48:d9:b8:8b:e9:4b:
3c:cf:0c:87:cd:a4:6a:28:cf:2c:bc:b8:d4:dc:d5:
23:ad:ee:b2:6b:4d:4c:e2:b5:bf:09:43:a7:b6:0c:
5e:7a:a4:51:63:a5:16:12:79:aa:89:57:60:bf:bd:
01:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:C3:B5:1F:90:87:BE:AA:19:4C:0A:3F:F1:7D:2C:DA:00:3C:D6:29
X509v3 Authority Key Identifier:
keyid:93:AF:34:8E:C5:A4:E6:5E:0C:B1:37:82:1A:E6:A1:39:ED:7F:AC:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k680jsWk5l4MsTeCGuahOe1_rAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/bd7820-5c1c-4884-9ab8-c5ab97dba898/1/k680jsWk5l4MsTeCGuahOe1_rAA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/bd7820-5c1c-4884-9ab8-c5ab97dba898/1/k680jsWk5l4MsTeCGuahOe1_rAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:cb:e5:cc:37:ee:e4:84:a2:5d:50:69:ae:69:b3:8c:c5:58:
34:df:ed:d0:1a:0a:fc:48:4e:39:96:a7:e5:cc:1b:fb:57:3b:
38:e0:c9:58:68:10:b7:3a:a9:b4:84:96:4d:a2:35:00:a7:bf:
5d:ff:49:3d:f5:8b:6a:d1:d4:f1:e0:24:7b:52:96:76:f2:a7:
7a:7e:f7:97:95:e5:df:29:84:a4:5c:a5:e4:f0:d9:bd:86:d2:
f5:2a:71:31:ec:30:85:11:4b:03:ee:98:16:21:4a:9b:ab:18:
15:37:fc:06:57:07:54:52:ea:ec:32:c4:f9:a4:48:67:24:a2:
58:0f:93:d3:1e:56:a0:e6:6b:94:be:02:68:df:ee:eb:65:e7:
0c:85:18:2e:68:58:a6:a4:b0:e2:3f:15:76:4d:f5:c7:fa:cf:
8f:ea:5c:f5:e3:79:27:6a:94:07:b0:ec:f6:e5:7e:bf:b6:53:
e0:48:ad:9b:83:f4:23:9d:50:88:93:b2:54:c8:5d:2d:5e:2c:
b3:e8:5c:8c:10:13:99:92:80:96:33:4c:8f:e1:71:ad:75:1c:
ae:3d:8d:b3:64:f7:dd:94:44:42:01:aa:fc:af:b2:12:e6:40:
f3:7d:50:3e:ab:bd:62:e8:17:1c:06:14:2a:29:23:de:37:e8:
91:ad:bf:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQPdv/u6+kI7usA7Gha1pCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzYWYzNDhlYzVhNGU2NWUwY2IxMzc4MjFhZTZhMTM5ZWQ3
ZmFjMDAwHhcNMjUxMTA0MTkwMDIyWhcNMjUxMTA1MTkwMDIyWjAzMTEwLwYDVQQD
Eyg2OGMzYjUxZjkwODdiZWFhMTk0YzBhM2ZmMTdkMmNkYTAwM2NkNjI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyO2fcBXRk/TD2vy3v2rXL0XUlTf3
hqVsMORZHiCYCqlKHMFi/Qg8TcAk17rlaJ8EHUWUNuiys1irXw0BYRmA99+2dYri
AOe79P2+vJDwiJhHSAdrgbQ5ksMzXWFMcCjHkUk/WR4eLurNzgyP7I2RjAwc1dS2
u2ai4a4f6/LbSKlIiJ2LLlAzW6e+0wBS5z36MaSOo12ZapPqmsa/piiaiV4BCL1i
9c0K8aEtqhG1UCu24j9zNfasPPuPky7kmLZKowE3kdvr8iE1rwRI2biL6Us8zwyH
zaRqKM8svLjU3NUjre6ya01M4rW/CUOntgxeeqRRY6UWEnmqiVdgv70BYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGjDtR+Qh76qGUwKP/F9LNoAPNYpMB8GA1UdIwQY
MBaAFJOvNI7FpOZeDLE3ghrmoTntf6wAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazY4MGpzV2s1bDRNc1RlQ0d1YWhPZTFfckFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9iZDc4MjAtNWMxYy00ODg0LTlhYjgt
YzVhYjk3ZGJhODk4LzEvazY4MGpzV2s1bDRNc1RlQ0d1YWhPZTFfckFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi9iZDc4MjAtNWMxYy00ODg0LTlhYjgtYzVhYjk3ZGJhODk4
LzEvazY4MGpzV2s1bDRNc1RlQ0d1YWhPZTFfckFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMsvlzDfu
5ISiXVBprmmzjMVYNN/t0BoK/EhOOZan5cwb+1c7OODJWGgQtzqptISWTaI1AKe/
Xf9JPfWLatHU8eAke1KWdvKnen73l5Xl3ymEpFyl5PDZvYbS9SpxMewwhRFLA+6Y
FiFKm6sYFTf8BlcHVFLq7DLE+aRIZySiWA+T0x5WoOZrlL4CaN/u62XnDIUYLmhY
pqSw4j8Vdk31x/rPj+pc9eN5J2qUB7Ds9uV+v7ZT4Eitm4P0I51QiJOyVMhdLV4s
s+hcjBATmZKAljNMj+FxrXUcrj2Ns2T33ZREQgGq/K+yEuZA831QPqu9YugXHAYU
Kikj3jfoka2/XQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 20:30:07 2025 by rpki-client