
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/dc573d-a3db-41f9-8c3f-867965eb50ca/1/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.mft
File: g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.mft (raw, json)
Hash identifier: Y+2zZP2aDeGMGHSAJxQILuRmdJzovcaiNDKhpqPoB6Y=
Subject key identifier: EC:84:E2:BF:F4:3D:EC:EB:46:23:14:89:25:3D:B4:7A:BB:A4:E6:71
Authority key identifier: 83:B5:B4:91:3C:C7:8E:40:80:3C:00:BE:C6:B1:A9:DC:48:FF:36:84
Certificate issuer: /CN=83b5b4913cc78e40803c00bec6b1a9dc48ff3684
Certificate serial: 019A51BE1666D2C77F8F95A225D6AC4168D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/dc573d-a3db-41f9-8c3f-867965eb50ca/1/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.mft
Manifest number: 0614
Signing time: Wed 05 Nov 2025 02:00:03 +0000
Manifest this update: Wed 05 Nov 2025 02:00:03 +0000
Manifest next update: Thu 06 Nov 2025 02:00:03 +0000
Files and hashes: 1: ey_HbPVH-fdSqz0HYztvUA0UE4I.roa (hash: upy8JLus6gUmjxLyY05s4dKH4rsD9BpLxwpFWnLAb38=)
2: g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.crl (hash: m56dqcyQQKQp5BESbaxmguAXHh99e+sYa06XcPhu6k0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/dc573d-a3db-41f9-8c3f-867965eb50ca/1/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/dc573d-a3db-41f9-8c3f-867965eb50ca/1/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:be:16:66:d2:c7:7f:8f:95:a2:25:d6:ac:41:68:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83b5b4913cc78e40803c00bec6b1a9dc48ff3684
Validity
Not Before: Nov 5 02:00:03 2025 GMT
Not After : Nov 6 02:00:03 2025 GMT
Subject: CN=ec84e2bff43deceb46231489253db47abba4e671
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:83:77:5f:06:16:17:a5:e7:e1:74:88:02:e0:
60:b9:de:8f:73:52:5c:07:06:4b:d6:12:16:61:fa:
91:a5:a4:7e:2b:80:c3:04:6a:70:3d:75:33:11:fb:
5b:a3:36:15:61:d7:ba:bc:cc:b5:74:7f:a3:c1:2e:
3f:49:1f:33:38:10:68:5d:69:ba:dc:92:2a:4d:d9:
23:0e:ed:b6:d6:42:ee:4c:f4:29:c5:da:9b:fe:57:
4d:aa:b6:66:60:a9:6f:a4:1f:f5:39:02:1c:20:e7:
61:58:8e:e2:3f:f8:f4:c8:c6:87:30:b3:76:87:9c:
17:f5:2e:e7:1e:29:51:4b:41:2d:c4:8f:ef:ea:e9:
95:30:69:cf:e4:bb:fb:ab:bc:4e:e5:83:84:f8:58:
f6:78:08:59:34:f4:20:e4:e7:f3:7d:35:00:42:38:
75:6d:00:b1:81:e1:45:d2:bd:59:ed:bf:9d:b4:ef:
c3:1e:66:f8:7b:35:eb:d5:e9:94:98:42:f7:1a:57:
fb:87:fe:d2:ef:69:ff:e1:ce:db:51:80:e4:09:f0:
0a:9b:bb:13:e4:31:88:95:61:7e:79:88:2b:d2:2f:
f1:5b:58:5b:1e:55:db:e3:70:c4:31:78:8c:b5:a8:
85:71:bc:4b:5b:8d:4c:34:7d:65:10:f6:cb:fa:ce:
58:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:84:E2:BF:F4:3D:EC:EB:46:23:14:89:25:3D:B4:7A:BB:A4:E6:71
X509v3 Authority Key Identifier:
keyid:83:B5:B4:91:3C:C7:8E:40:80:3C:00:BE:C6:B1:A9:DC:48:FF:36:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/dc573d-a3db-41f9-8c3f-867965eb50ca/1/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/dc573d-a3db-41f9-8c3f-867965eb50ca/1/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:fa:21:27:b1:9f:9f:d0:95:d6:f5:4a:cd:f2:84:26:3b:42:
2b:cf:0c:a4:37:ec:84:7b:cb:ab:52:08:04:09:9c:f7:d5:47:
e2:c2:2e:20:7e:42:74:ab:a3:bb:d4:3a:7d:65:55:9f:ec:2e:
69:fb:ab:4c:d1:2a:1d:e8:d1:8c:65:04:71:79:2d:81:4d:37:
fd:77:61:00:e7:f5:f0:1a:c5:a4:fa:1c:38:17:48:48:ad:e8:
30:ee:f3:6b:b6:07:80:ee:87:41:66:ca:7c:7c:53:f9:d3:be:
64:44:7e:81:98:4d:41:53:ad:4a:cf:fa:2b:f2:5f:91:cb:dd:
42:9a:fe:90:72:af:be:82:98:4e:d3:56:7b:5e:6e:3c:4e:a8:
75:84:5e:ff:5b:a9:ef:c8:32:84:b5:00:1c:a2:a5:c8:6e:66:
8d:fc:72:c5:c1:bf:af:74:7d:5a:22:e1:1c:bb:ee:28:5a:55:
e9:60:58:b1:66:5c:d8:be:a4:8c:e1:12:3d:3f:80:d8:f7:08:
7a:0b:44:3f:cc:d5:da:82:0c:a0:4c:02:99:10:7e:42:bb:9e:
a4:d4:b4:db:09:f3:c3:06:04:0b:8e:63:b0:51:ff:30:16:45:
83:f0:71:f5:81:3a:62:3b:01:13:7e:bd:db:27:db:55:1c:a4:
bc:82:b8:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpRvhZm0sd/j5WiJdasQWjSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzYjViNDkxM2NjNzhlNDA4MDNjMDBiZWM2YjFhOWRjNDhm
ZjM2ODQwHhcNMjUxMTA1MDIwMDAzWhcNMjUxMTA2MDIwMDAzWjAzMTEwLwYDVQQD
EyhlYzg0ZTJiZmY0M2RlY2ViNDYyMzE0ODkyNTNkYjQ3YWJiYTRlNjcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqIN3XwYWF6Xn4XSIAuBgud6Pc1Jc
BwZL1hIWYfqRpaR+K4DDBGpwPXUzEftbozYVYde6vMy1dH+jwS4/SR8zOBBoXWm6
3JIqTdkjDu221kLuTPQpxdqb/ldNqrZmYKlvpB/1OQIcIOdhWI7iP/j0yMaHMLN2
h5wX9S7nHilRS0EtxI/v6umVMGnP5Lv7q7xO5YOE+Fj2eAhZNPQg5OfzfTUAQjh1
bQCxgeFF0r1Z7b+dtO/DHmb4ezXr1emUmEL3Glf7h/7S72n/4c7bUYDkCfAKm7sT
5DGIlWF+eYgr0i/xW1hbHlXb43DEMXiMtaiFcbxLW41MNH1lEPbL+s5YDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOyE4r/0PezrRiMUiSU9tHq7pOZxMB8GA1UdIwQY
MBaAFIO1tJE8x45AgDwAvsaxqdxI/zaEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzdXMGtUekhqa0NBUEFDLXhyR3AzRWpfTm9RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS9kYzU3M2QtYTNkYi00MWY5LThjM2Yt
ODY3OTY1ZWI1MGNhLzEvZzdXMGtUekhqa0NBUEFDLXhyR3AzRWpfTm9RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS9kYzU3M2QtYTNkYi00MWY5LThjM2YtODY3OTY1ZWI1MGNh
LzEvZzdXMGtUekhqa0NBUEFDLXhyR3AzRWpfTm9RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACfohJ7Gf
n9CV1vVKzfKEJjtCK88MpDfshHvLq1IIBAmc99VH4sIuIH5CdKuju9Q6fWVVn+wu
afurTNEqHejRjGUEcXktgU03/XdhAOf18BrFpPocOBdISK3oMO7za7YHgO6HQWbK
fHxT+dO+ZER+gZhNQVOtSs/6K/JfkcvdQpr+kHKvvoKYTtNWe15uPE6odYRe/1up
78gyhLUAHKKlyG5mjfxyxcG/r3R9WiLhHLvuKFpV6WBYsWZc2L6kjOESPT+A2PcI
egtEP8zV2oIMoEwCmRB+QruepNS02wnzwwYEC45jsFH/MBZFg/Bx9YE6YjsBE369
2yfbVRykvIK4Aw==
-----END CERTIFICATE-----
Generated at Wed Nov 5 03:41:46 2025 by rpki-client