Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/d63f8e-4b1a-48bf-87eb-29fa47b68093/1/C0U7QQ01hqYjepUe7zsD9MRBGPA.mft
File: C0U7QQ01hqYjepUe7zsD9MRBGPA.mft (raw, json)
Hash identifier: 0D78bWTKn27Yycr7NIbO8ig0JxUd9QR0/2DfEC/WOy0=
Subject key identifier: F4:B1:1B:3E:F3:D4:A0:AD:AE:87:FB:EE:9B:28:65:B2:46:EF:2F:6E
Authority key identifier: 0B:45:3B:41:0D:35:86:A6:23:7A:95:1E:EF:3B:03:F4:C4:41:18:F0
Certificate issuer: /CN=0b453b410d3586a6237a951eef3b03f4c44118f0
Certificate serial: 019A4EBD3C849A9361B41EB37EFB30C25CD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C0U7QQ01hqYjepUe7zsD9MRBGPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/d63f8e-4b1a-48bf-87eb-29fa47b68093/1/C0U7QQ01hqYjepUe7zsD9MRBGPA.mft
Manifest number: 0A52
Signing time: Tue 04 Nov 2025 12:00:15 +0000
Manifest this update: Tue 04 Nov 2025 12:00:15 +0000
Manifest next update: Wed 05 Nov 2025 12:00:15 +0000
Files and hashes: 1: 9h0IDYCPr58Ccxg81AcMZ_13oWo.roa (hash: l+FTuWjUD+EZ0mXchVkunlX52jPEdy8UaVQG+ZcxDvM=)
2: C0U7QQ01hqYjepUe7zsD9MRBGPA.crl (hash: 208AYv43ANG1GTggZ+PrB78lWe41b0oURQ+cYX0YMkw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/d63f8e-4b1a-48bf-87eb-29fa47b68093/1/C0U7QQ01hqYjepUe7zsD9MRBGPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/d63f8e-4b1a-48bf-87eb-29fa47b68093/1/C0U7QQ01hqYjepUe7zsD9MRBGPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/C0U7QQ01hqYjepUe7zsD9MRBGPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:bd:3c:84:9a:93:61:b4:1e:b3:7e:fb:30:c2:5c:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b453b410d3586a6237a951eef3b03f4c44118f0
Validity
Not Before: Nov 4 12:00:15 2025 GMT
Not After : Nov 5 12:00:15 2025 GMT
Subject: CN=f4b11b3ef3d4a0adae87fbee9b2865b246ef2f6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:97:15:25:9e:9b:0b:2e:76:ce:84:0d:bd:3b:
4e:6e:f1:14:c2:1f:a3:49:c3:9d:9e:d6:56:01:7a:
bc:f7:b0:37:b1:56:9f:11:e5:33:24:4a:ae:e4:85:
8a:86:1a:e2:1f:29:48:95:14:93:00:8e:ad:d6:fc:
23:98:99:fd:f8:1a:08:21:a4:76:b0:a4:57:15:cc:
b6:4e:9e:e1:e6:f0:87:e6:dc:c6:6d:87:6f:7a:f2:
f7:85:72:38:b9:02:81:4b:fe:3b:b2:19:55:e7:ff:
ef:8c:a5:33:bf:8d:d0:b9:55:3e:cd:23:6e:44:dc:
73:ef:dc:9b:48:4b:43:7b:c1:f7:c5:ab:7a:29:bb:
69:16:86:06:55:3f:4a:6c:78:04:d6:f2:0b:26:6a:
c6:43:21:39:c5:74:c5:2e:8b:bf:49:e4:40:47:23:
ff:66:dd:ff:64:f8:24:3d:4f:d5:64:b0:2e:5d:10:
93:ed:f8:87:28:74:07:4f:e6:1c:1d:0f:36:82:c1:
25:14:f1:41:1f:5f:0a:76:35:03:51:eb:6c:d4:ed:
64:36:6f:91:3b:39:15:38:be:b4:e4:b6:a0:92:1c:
87:87:90:5b:91:88:3d:0a:7f:cf:be:51:0b:4b:20:
04:a8:2c:30:30:8d:85:db:66:ba:38:ca:ec:19:ec:
45:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:B1:1B:3E:F3:D4:A0:AD:AE:87:FB:EE:9B:28:65:B2:46:EF:2F:6E
X509v3 Authority Key Identifier:
keyid:0B:45:3B:41:0D:35:86:A6:23:7A:95:1E:EF:3B:03:F4:C4:41:18:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C0U7QQ01hqYjepUe7zsD9MRBGPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/d63f8e-4b1a-48bf-87eb-29fa47b68093/1/C0U7QQ01hqYjepUe7zsD9MRBGPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/d63f8e-4b1a-48bf-87eb-29fa47b68093/1/C0U7QQ01hqYjepUe7zsD9MRBGPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:c9:20:18:90:27:eb:bd:50:be:28:3a:0d:b5:5d:49:66:6d:
93:3f:28:59:58:cb:b1:cf:92:b4:ae:d7:66:ef:72:4d:ab:83:
93:bf:7a:3f:b3:40:0d:56:79:85:2d:a6:fc:d0:04:80:b0:d6:
c8:46:af:3a:db:f4:28:3c:e2:37:8d:58:dd:a1:8d:e7:1d:d6:
37:1f:ca:67:3a:77:b0:5c:cc:f2:bf:39:35:d6:af:15:84:49:
57:3c:7c:68:45:f9:7a:3c:e5:d3:eb:1c:52:93:e6:9d:50:7e:
8c:29:ee:46:ee:88:c4:87:fb:89:e2:6f:f5:e7:c8:ee:8b:8c:
6b:e4:a8:b5:2c:5e:e9:20:55:d9:4d:fb:14:39:67:50:5c:95:
da:14:9f:97:a0:90:eb:2a:08:65:9f:88:73:c0:23:ef:bf:7e:
d6:2a:a0:09:e8:d1:7d:ce:3d:0d:ea:87:1e:a3:15:a6:01:94:
f7:ff:eb:07:70:6a:e6:0c:c3:15:0a:c8:69:bd:ff:12:28:d5:
91:c1:a5:bf:a7:75:82:cb:1e:17:e7:7a:44:12:58:b7:39:02:
7f:73:dc:c6:23:6a:3b:f1:48:f7:81:cf:5f:b2:db:57:99:37:
d5:f9:11:2b:c5:fd:1c:e5:16:3d:61:c7:f7:8d:55:34:56:25:
2c:28:15:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOvTyEmpNhtB6zfvswwlzUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiNDUzYjQxMGQzNTg2YTYyMzdhOTUxZWVmM2IwM2Y0YzQ0
MTE4ZjAwHhcNMjUxMTA0MTIwMDE1WhcNMjUxMTA1MTIwMDE1WjAzMTEwLwYDVQQD
EyhmNGIxMWIzZWYzZDRhMGFkYWU4N2ZiZWU5YjI4NjViMjQ2ZWYyZjZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZcVJZ6bCy52zoQNvTtObvEUwh+j
ScOdntZWAXq897A3sVafEeUzJEqu5IWKhhriHylIlRSTAI6t1vwjmJn9+BoIIaR2
sKRXFcy2Tp7h5vCH5tzGbYdvevL3hXI4uQKBS/47shlV5//vjKUzv43QuVU+zSNu
RNxz79ybSEtDe8H3xat6KbtpFoYGVT9KbHgE1vILJmrGQyE5xXTFLou/SeRARyP/
Zt3/ZPgkPU/VZLAuXRCT7fiHKHQHT+YcHQ82gsElFPFBH18KdjUDUets1O1kNm+R
OzkVOL605LagkhyHh5BbkYg9Cn/PvlELSyAEqCwwMI2F22a6OMrsGexFuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPSxGz7z1KCtrof77psoZbJG7y9uMB8GA1UdIwQY
MBaAFAtFO0ENNYamI3qVHu87A/TEQRjwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzBVN1FRMDFocVlqZXBVZTd6c0Q5TVJCR1BBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9kNjNmOGUtNGIxYS00OGJmLTg3ZWIt
MjlmYTQ3YjY4MDkzLzEvQzBVN1FRMDFocVlqZXBVZTd6c0Q5TVJCR1BBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9kNjNmOGUtNGIxYS00OGJmLTg3ZWItMjlmYTQ3YjY4MDkz
LzEvQzBVN1FRMDFocVlqZXBVZTd6c0Q5TVJCR1BBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk8kgGJAn
671Qvig6DbVdSWZtkz8oWVjLsc+StK7XZu9yTauDk796P7NADVZ5hS2m/NAEgLDW
yEavOtv0KDziN41Y3aGN5x3WNx/KZzp3sFzM8r85NdavFYRJVzx8aEX5ejzl0+sc
UpPmnVB+jCnuRu6IxIf7ieJv9efI7ouMa+SotSxe6SBV2U37FDlnUFyV2hSfl6CQ
6yoIZZ+Ic8Aj779+1iqgCejRfc49DeqHHqMVpgGU9//rB3Bq5gzDFQrIab3/EijV
kcGlv6d1gsseF+d6RBJYtzkCf3PcxiNqO/FI94HPX7LbV5k31fkRK8X9HOUWPWHH
941VNFYlLCgVnw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:57:17 2025 by rpki-client