Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/9c091b-f879-43f7-9020-f5b94959c9f7/1/0rERWbctQBXthntCt4Q4Hl2VWo8.mft
File: 0rERWbctQBXthntCt4Q4Hl2VWo8.mft (raw, json)
Hash identifier: TMOV4z6/k1q0uMB2QP8znwfAdgjg9rOoA2jHwIzWanQ=
Subject key identifier: FB:19:72:69:B2:89:34:96:22:71:37:A1:B8:54:84:CF:BA:43:2A:61
Authority key identifier: D2:B1:11:59:B7:2D:40:15:ED:86:7B:42:B7:84:38:1E:5D:95:5A:8F
Certificate issuer: /CN=d2b11159b72d4015ed867b42b784381e5d955a8f
Certificate serial: 019A51BE68B1B823D5BE6FF695058FCAA3A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0rERWbctQBXthntCt4Q4Hl2VWo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/9c091b-f879-43f7-9020-f5b94959c9f7/1/0rERWbctQBXthntCt4Q4Hl2VWo8.mft
Manifest number: 1711
Signing time: Wed 05 Nov 2025 02:00:24 +0000
Manifest this update: Wed 05 Nov 2025 02:00:24 +0000
Manifest next update: Thu 06 Nov 2025 02:00:24 +0000
Files and hashes: 1: 0rERWbctQBXthntCt4Q4Hl2VWo8.crl (hash: kZPgrX6N+Q1689bQ0VNUceqZrFDqDKt6Mnl8rHRnh6E=)
2: cl3GADBIa5-t9wHD_fNk8JDv5PM.roa (hash: H9R6zlOL/gViduYKRIYyM+avR4L6nr/tioY61On5qcw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/9c091b-f879-43f7-9020-f5b94959c9f7/1/0rERWbctQBXthntCt4Q4Hl2VWo8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/9c091b-f879-43f7-9020-f5b94959c9f7/1/0rERWbctQBXthntCt4Q4Hl2VWo8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0rERWbctQBXthntCt4Q4Hl2VWo8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:be:68:b1:b8:23:d5:be:6f:f6:95:05:8f:ca:a3:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2b11159b72d4015ed867b42b784381e5d955a8f
Validity
Not Before: Nov 5 02:00:24 2025 GMT
Not After : Nov 6 02:00:24 2025 GMT
Subject: CN=fb197269b2893496227137a1b85484cfba432a61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:9a:95:b6:78:a6:c4:5c:bd:0e:a8:02:9a:6d:
4e:23:8d:6a:eb:54:31:5c:6e:53:46:76:1b:0a:3e:
99:54:60:bf:d5:00:81:dd:cd:b2:75:52:e5:4d:d4:
61:47:b1:78:26:15:d9:49:60:aa:f4:50:68:b0:d1:
fa:8e:24:47:ee:c2:84:46:0f:ec:ed:db:fb:43:70:
08:ac:5a:a8:75:d2:a8:87:88:3e:cb:8f:17:8b:6f:
dc:ad:24:55:af:13:c7:05:fb:67:f1:ca:94:de:25:
84:47:fd:a3:ce:1f:62:bd:b1:fd:7a:85:bf:77:81:
5b:5b:67:d1:9c:3a:6d:90:64:08:a2:bf:1a:eb:0a:
fa:71:c4:20:aa:cb:32:c5:85:8a:09:36:f2:6a:2d:
8b:67:63:44:02:91:d3:69:1c:9d:e9:b5:95:04:dd:
2c:ed:9a:92:81:d7:2b:04:56:0a:a7:e0:ff:60:0b:
b9:f6:48:d6:21:84:02:16:33:12:64:fd:56:a8:8b:
41:b5:7f:4b:11:98:35:18:c1:23:2c:a6:0a:d3:0a:
dc:7b:75:dc:3d:ff:6a:0a:5e:b4:a5:01:44:3e:4b:
dd:23:37:3e:bb:d9:b0:17:7f:87:b1:2a:cb:bb:0b:
57:5b:cd:35:11:35:1e:68:f8:86:8a:96:ff:39:45:
25:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:19:72:69:B2:89:34:96:22:71:37:A1:B8:54:84:CF:BA:43:2A:61
X509v3 Authority Key Identifier:
keyid:D2:B1:11:59:B7:2D:40:15:ED:86:7B:42:B7:84:38:1E:5D:95:5A:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0rERWbctQBXthntCt4Q4Hl2VWo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9c091b-f879-43f7-9020-f5b94959c9f7/1/0rERWbctQBXthntCt4Q4Hl2VWo8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9c091b-f879-43f7-9020-f5b94959c9f7/1/0rERWbctQBXthntCt4Q4Hl2VWo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:64:c7:86:15:bd:8d:ae:1e:31:43:e1:bf:33:44:53:d2:bd:
51:58:32:31:a7:78:17:44:cb:a7:4f:a4:69:de:3f:d4:bf:98:
f8:d2:2a:31:d3:0b:63:8e:6c:f6:19:b7:71:7a:06:ec:37:5e:
d7:0a:e9:ec:3e:b8:0c:a2:56:9f:de:2b:4b:19:68:95:bf:17:
5b:09:08:a2:48:59:de:1c:26:67:15:d4:73:9a:92:34:8e:f2:
8b:a3:99:0d:f8:a2:42:80:9d:27:1f:7e:ed:0f:a6:d2:46:de:
76:67:d6:cd:2f:00:78:2f:31:7c:d6:5c:39:fb:7c:f6:24:98:
8f:3d:0d:83:23:65:77:81:5e:21:a8:fd:44:0a:dd:4f:3d:49:
81:dc:7a:0f:4e:94:2f:f0:2d:e5:7e:ec:52:cf:92:0b:28:b1:
32:7d:f8:3e:2d:d9:a6:f3:12:51:9f:00:c4:8e:1c:fe:03:22:
13:70:ef:e7:a5:3b:df:d8:d3:9e:7a:f1:b0:6c:25:0d:0b:6e:
e0:24:17:3b:f3:48:9f:98:e5:81:ae:09:16:07:09:92:5d:53:
b3:15:67:03:25:11:38:1e:80:4d:af:cc:bc:8e:29:7a:b1:0b:
36:12:2e:37:29:35:52:ab:87:31:9a:53:30:6a:a7:46:5f:29:
6a:ab:c5:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpRvmixuCPVvm/2lQWPyqOnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyYjExMTU5YjcyZDQwMTVlZDg2N2I0MmI3ODQzODFlNWQ5
NTVhOGYwHhcNMjUxMTA1MDIwMDI0WhcNMjUxMTA2MDIwMDI0WjAzMTEwLwYDVQQD
EyhmYjE5NzI2OWIyODkzNDk2MjI3MTM3YTFiODU0ODRjZmJhNDMyYTYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA55qVtnimxFy9DqgCmm1OI41q61Qx
XG5TRnYbCj6ZVGC/1QCB3c2ydVLlTdRhR7F4JhXZSWCq9FBosNH6jiRH7sKERg/s
7dv7Q3AIrFqoddKoh4g+y48Xi2/crSRVrxPHBftn8cqU3iWER/2jzh9ivbH9eoW/
d4FbW2fRnDptkGQIor8a6wr6ccQgqssyxYWKCTbyai2LZ2NEApHTaRyd6bWVBN0s
7ZqSgdcrBFYKp+D/YAu59kjWIYQCFjMSZP1WqItBtX9LEZg1GMEjLKYK0wrce3Xc
Pf9qCl60pQFEPkvdIzc+u9mwF3+HsSrLuwtXW801ETUeaPiGipb/OUUlCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPsZcmmyiTSWInE3obhUhM+6QyphMB8GA1UdIwQY
MBaAFNKxEVm3LUAV7YZ7QreEOB5dlVqPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHJFUldiY3RRQlh0aG50Q3Q0UTRIbDJWV284LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy85YzA5MWItZjg3OS00M2Y3LTkwMjAt
ZjViOTQ5NTljOWY3LzEvMHJFUldiY3RRQlh0aG50Q3Q0UTRIbDJWV284Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy85YzA5MWItZjg3OS00M2Y3LTkwMjAtZjViOTQ5NTljOWY3
LzEvMHJFUldiY3RRQlh0aG50Q3Q0UTRIbDJWV284LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXmTHhhW9
ja4eMUPhvzNEU9K9UVgyMad4F0TLp0+kad4/1L+Y+NIqMdMLY45s9hm3cXoG7Dde
1wrp7D64DKJWn94rSxlolb8XWwkIokhZ3hwmZxXUc5qSNI7yi6OZDfiiQoCdJx9+
7Q+m0kbedmfWzS8AeC8xfNZcOft89iSYjz0NgyNld4FeIaj9RArdTz1Jgdx6D06U
L/At5X7sUs+SCyixMn34Pi3ZpvMSUZ8AxI4c/gMiE3Dv56U739jTnnrxsGwlDQtu
4CQXO/NIn5jlga4JFgcJkl1TsxVnAyUROB6ATa/MvI4perELNhIuNyk1UquHMZpT
MGqnRl8paqvFzg==
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:54:46 2025 by rpki-client