Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/c95baf-01b8-479f-90bd-05a1d5cb8eeb/1/etB83meC_U_FaIV-hIRlW1AkhxA.mft
File: etB83meC_U_FaIV-hIRlW1AkhxA.mft (raw, json)
Hash identifier: QA3hLUybCCVgMZLBdL0sCVC4tv6P/zHxuG73ZarN3uw=
Subject key identifier: B3:73:75:10:49:2B:E8:63:2A:79:F4:99:2A:86:DE:94:D4:62:7E:35
Authority key identifier: 7A:D0:7C:DE:67:82:FD:4F:C5:68:85:7E:84:84:65:5B:50:24:87:10
Certificate issuer: /CN=7ad07cde6782fd4fc568857e8484655b50248710
Certificate serial: 019A50E2C21BBB95F14BBB075C7B8851EE4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/etB83meC_U_FaIV-hIRlW1AkhxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/c95baf-01b8-479f-90bd-05a1d5cb8eeb/1/etB83meC_U_FaIV-hIRlW1AkhxA.mft
Manifest number: 0522
Signing time: Tue 04 Nov 2025 22:00:29 +0000
Manifest this update: Tue 04 Nov 2025 22:00:29 +0000
Manifest next update: Wed 05 Nov 2025 22:00:29 +0000
Files and hashes: 1: 7Mt7cRBkGNK5rwDG55TbMVEwg-I.roa (hash: Ezyc6rp9QXhSptaXi5ro4QW/Qjk9pSK7ba82HZyPR48=)
2: etB83meC_U_FaIV-hIRlW1AkhxA.crl (hash: KVzbfKWLi77GlSOd5mI41qP0601ElI/R+47cE77gIZ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/c95baf-01b8-479f-90bd-05a1d5cb8eeb/1/etB83meC_U_FaIV-hIRlW1AkhxA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/c95baf-01b8-479f-90bd-05a1d5cb8eeb/1/etB83meC_U_FaIV-hIRlW1AkhxA.mft
rsync://rpki.ripe.net/repository/DEFAULT/etB83meC_U_FaIV-hIRlW1AkhxA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e2:c2:1b:bb:95:f1:4b:bb:07:5c:7b:88:51:ee:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ad07cde6782fd4fc568857e8484655b50248710
Validity
Not Before: Nov 4 22:00:29 2025 GMT
Not After : Nov 5 22:00:29 2025 GMT
Subject: CN=b3737510492be8632a79f4992a86de94d4627e35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:09:21:6d:e4:31:ae:55:3f:e4:78:90:e0:45:
ed:b5:70:d3:ad:8a:93:60:9f:f1:7f:82:4e:40:ac:
2f:e2:ea:f7:40:8e:dc:5b:fc:99:df:cf:3f:8f:de:
24:b0:a3:a4:6a:fe:89:b3:10:50:09:df:b8:d6:c1:
db:df:77:f5:6d:4d:da:2c:0e:af:c6:8b:b5:b3:0e:
ee:e2:2e:29:5d:61:ae:f1:c9:8a:98:a4:da:0f:c0:
4e:44:b7:44:95:76:99:2e:b7:85:f1:fc:41:ce:f8:
cc:b0:01:49:09:d7:22:9b:14:90:13:fb:e7:13:42:
9e:08:cc:9e:bd:ad:5e:17:5a:55:df:06:1c:7e:09:
35:6c:e1:ea:0b:6b:53:40:77:fc:ef:d9:a8:7e:11:
64:d1:e9:33:0c:ef:8a:5f:1e:ab:17:bc:bf:ca:aa:
71:a6:c5:ab:ae:68:81:89:a2:c0:12:e3:1f:d2:69:
71:2c:50:7d:b3:f5:5a:6e:1a:7a:03:48:5b:18:dd:
93:3c:50:e3:15:01:19:ff:66:3e:6d:30:73:80:54:
76:3b:57:e1:b6:f8:f5:aa:91:db:90:2c:2a:2b:b6:
bd:c6:9c:fb:a7:d8:5e:7a:d1:4f:c0:bf:b9:73:6a:
35:f5:04:dc:46:a0:af:8d:32:0d:11:a7:25:5c:29:
4d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:73:75:10:49:2B:E8:63:2A:79:F4:99:2A:86:DE:94:D4:62:7E:35
X509v3 Authority Key Identifier:
keyid:7A:D0:7C:DE:67:82:FD:4F:C5:68:85:7E:84:84:65:5B:50:24:87:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/etB83meC_U_FaIV-hIRlW1AkhxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c95baf-01b8-479f-90bd-05a1d5cb8eeb/1/etB83meC_U_FaIV-hIRlW1AkhxA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c95baf-01b8-479f-90bd-05a1d5cb8eeb/1/etB83meC_U_FaIV-hIRlW1AkhxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:8c:95:52:f7:c6:92:d1:ef:79:f8:b8:b9:b4:55:eb:30:d6:
a1:d0:a0:67:72:dc:1a:49:f2:b1:80:3d:00:27:8a:f0:04:17:
4c:3f:16:c7:ce:26:cf:de:85:e2:b8:7c:cf:bc:ee:19:83:26:
4c:b5:22:9f:c5:c0:e9:e0:d3:a6:15:87:4e:95:d4:24:b1:4b:
30:e6:6f:1a:c2:da:91:50:04:fe:22:e4:2f:ec:f5:bf:ff:8c:
8c:b2:92:12:53:da:04:9c:0b:eb:70:d4:12:bb:87:7e:e8:7d:
16:96:f5:cc:18:fe:34:88:4d:0e:86:9d:ab:2e:d2:3e:a9:a6:
b4:4d:93:d6:f2:4a:a8:97:48:b8:1e:c8:93:2a:1e:93:dc:ce:
a4:93:d0:03:cd:06:25:34:99:26:93:22:32:ec:97:1f:ad:b8:
fe:3c:33:d9:d9:0c:a3:da:2c:f9:a2:c3:60:1b:67:06:41:cf:
3b:1f:56:1c:05:09:88:78:24:13:98:a5:1f:f2:85:3e:3f:d0:
b4:36:88:2a:6a:10:05:7b:3f:e0:4b:7f:72:7d:3b:7f:f6:3a:
5e:f0:07:92:c6:d7:49:e3:56:75:ad:f8:45:5e:d5:5b:1b:0a:
c9:b3:0e:a9:9c:8d:bf:45:8b:b8:ac:de:bc:ee:a1:dc:65:05:
d5:fd:35:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQ4sIbu5XxS7sHXHuIUe5KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhZDA3Y2RlNjc4MmZkNGZjNTY4ODU3ZTg0ODQ2NTViNTAy
NDg3MTAwHhcNMjUxMTA0MjIwMDI5WhcNMjUxMTA1MjIwMDI5WjAzMTEwLwYDVQQD
EyhiMzczNzUxMDQ5MmJlODYzMmE3OWY0OTkyYTg2ZGU5NGQ0NjI3ZTM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQkhbeQxrlU/5HiQ4EXttXDTrYqT
YJ/xf4JOQKwv4ur3QI7cW/yZ388/j94ksKOkav6JsxBQCd+41sHb33f1bU3aLA6v
xou1sw7u4i4pXWGu8cmKmKTaD8BORLdElXaZLreF8fxBzvjMsAFJCdcimxSQE/vn
E0KeCMyeva1eF1pV3wYcfgk1bOHqC2tTQHf879mofhFk0ekzDO+KXx6rF7y/yqpx
psWrrmiBiaLAEuMf0mlxLFB9s/Vabhp6A0hbGN2TPFDjFQEZ/2Y+bTBzgFR2O1fh
tvj1qpHbkCwqK7a9xpz7p9heetFPwL+5c2o19QTcRqCvjTINEaclXClNBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLNzdRBJK+hjKnn0mSqG3pTUYn41MB8GA1UdIwQY
MBaAFHrQfN5ngv1PxWiFfoSEZVtQJIcQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXRCODNtZUNfVV9GYUlWLWhJUmxXMUFraHhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9jOTViYWYtMDFiOC00NzlmLTkwYmQt
MDVhMWQ1Y2I4ZWViLzEvZXRCODNtZUNfVV9GYUlWLWhJUmxXMUFraHhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS9jOTViYWYtMDFiOC00NzlmLTkwYmQtMDVhMWQ1Y2I4ZWVi
LzEvZXRCODNtZUNfVV9GYUlWLWhJUmxXMUFraHhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuoyVUvfG
ktHvefi4ubRV6zDWodCgZ3LcGknysYA9ACeK8AQXTD8Wx84mz96F4rh8z7zuGYMm
TLUin8XA6eDTphWHTpXUJLFLMOZvGsLakVAE/iLkL+z1v/+MjLKSElPaBJwL63DU
EruHfuh9Fpb1zBj+NIhNDoadqy7SPqmmtE2T1vJKqJdIuB7Ikyoek9zOpJPQA80G
JTSZJpMiMuyXH624/jwz2dkMo9os+aLDYBtnBkHPOx9WHAUJiHgkE5ilH/KFPj/Q
tDaIKmoQBXs/4Et/cn07f/Y6XvAHksbXSeNWda34RV7VWxsKybMOqZyNv0WLuKze
vO6h3GUF1f01iw==
-----END CERTIFICATE-----
Generated at Wed Nov 5 01:18:21 2025 by rpki-client