Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/ed634b-39f7-4b9c-86e4-1e9238cf028c/1/rSzfJ9neZesk5c_J0xDkyKAwFGA.mft
File: rSzfJ9neZesk5c_J0xDkyKAwFGA.mft (raw, json)
Hash identifier: YalI/f/nvB7ty4F2T8EoEephMKrKHjd+ecjTE1Lb4oE=
Subject key identifier: 22:17:2E:9A:24:DC:DC:6E:A2:EC:68:D3:50:11:8E:23:52:67:1C:37
Authority key identifier: AD:2C:DF:27:D9:DE:65:EB:24:E5:CF:C9:D3:10:E4:C8:A0:30:14:60
Certificate issuer: /CN=ad2cdf27d9de65eb24e5cfc9d310e4c8a0301460
Certificate serial: 019A5006EE2DC6A58DB131E1FC01F17DCF3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rSzfJ9neZesk5c_J0xDkyKAwFGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/ed634b-39f7-4b9c-86e4-1e9238cf028c/1/rSzfJ9neZesk5c_J0xDkyKAwFGA.mft
Manifest number: 0D16
Signing time: Tue 04 Nov 2025 18:00:22 +0000
Manifest this update: Tue 04 Nov 2025 18:00:22 +0000
Manifest next update: Wed 05 Nov 2025 18:00:22 +0000
Files and hashes: 1: Zp_o_Avy64dimsDN37AJZ_vsvNw.roa (hash: w725AD9grVqnjs1N3X5smX0OnVgWb9b37Wpm1j4UCoQ=)
2: rSzfJ9neZesk5c_J0xDkyKAwFGA.crl (hash: ZD2tgTd9HSGDPFHJIAzkoeecwcSmzudL5aOfvBCVG8k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/ed634b-39f7-4b9c-86e4-1e9238cf028c/1/rSzfJ9neZesk5c_J0xDkyKAwFGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/ed634b-39f7-4b9c-86e4-1e9238cf028c/1/rSzfJ9neZesk5c_J0xDkyKAwFGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rSzfJ9neZesk5c_J0xDkyKAwFGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:06:ee:2d:c6:a5:8d:b1:31:e1:fc:01:f1:7d:cf:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad2cdf27d9de65eb24e5cfc9d310e4c8a0301460
Validity
Not Before: Nov 4 18:00:22 2025 GMT
Not After : Nov 5 18:00:22 2025 GMT
Subject: CN=22172e9a24dcdc6ea2ec68d350118e2352671c37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f4:1b:e5:7e:f9:15:b0:6c:45:17:26:d4:e2:
00:1d:2e:75:f9:07:11:e8:6a:7e:5b:b9:30:90:82:
54:e8:a5:75:00:26:41:b4:dc:81:80:c4:7d:ab:8b:
bd:62:8a:17:fb:7f:39:2f:64:22:90:d1:b8:39:68:
0f:9f:45:2c:07:c1:bb:da:47:ef:c8:4c:42:13:d3:
c8:bd:24:2a:4d:eb:53:d1:11:6a:ae:34:8b:46:e1:
62:2d:e6:00:ec:35:e6:a9:b5:2c:61:18:ee:02:19:
41:41:37:3e:51:8e:a6:3c:37:e2:58:31:fc:5f:2b:
ad:15:78:89:59:6e:14:ca:8d:1d:15:8f:dd:67:c3:
0b:13:a8:79:80:9c:2f:39:94:6a:97:f2:3a:59:e7:
10:8a:b6:6a:01:ba:e1:c8:f7:68:bb:14:d4:c2:24:
76:83:66:c3:4c:1f:29:c9:b4:5e:4b:e0:2b:08:e6:
fd:ab:53:20:55:47:4b:7d:7e:27:d2:54:d7:c6:69:
f0:e5:6f:fe:cc:7f:a4:16:7f:e7:5c:2b:ae:53:99:
bc:05:03:f9:13:3c:6b:3d:54:dc:b7:3e:cc:50:cf:
e9:e3:ac:1e:a8:72:72:49:b6:80:bd:9d:03:66:a8:
7f:ca:2d:89:a5:eb:e3:d7:9b:ef:72:ca:1d:8a:8f:
b9:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:17:2E:9A:24:DC:DC:6E:A2:EC:68:D3:50:11:8E:23:52:67:1C:37
X509v3 Authority Key Identifier:
keyid:AD:2C:DF:27:D9:DE:65:EB:24:E5:CF:C9:D3:10:E4:C8:A0:30:14:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSzfJ9neZesk5c_J0xDkyKAwFGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/ed634b-39f7-4b9c-86e4-1e9238cf028c/1/rSzfJ9neZesk5c_J0xDkyKAwFGA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/ed634b-39f7-4b9c-86e4-1e9238cf028c/1/rSzfJ9neZesk5c_J0xDkyKAwFGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:eb:a3:62:d7:f3:33:90:04:e2:6f:bb:e1:d2:c1:0f:14:08:
1a:f5:ba:68:88:78:0c:52:9e:bc:ee:ab:b9:e8:e0:99:97:8d:
86:97:6a:38:3d:bc:71:b0:5d:45:7f:58:af:55:66:5f:93:3b:
98:f9:1c:60:8c:eb:0b:1f:2a:38:e8:a1:48:2e:65:a2:d7:ae:
3d:65:f2:27:01:41:67:da:17:a0:b4:ee:6b:0d:8b:e4:b5:f9:
e3:3f:5c:7c:89:5a:30:98:b3:98:ee:1f:bd:b0:80:b1:58:5d:
07:55:a4:a2:a2:d9:a6:1b:18:b9:3e:55:87:51:e4:48:c5:93:
0b:35:dd:10:20:8c:6d:0a:82:e0:91:c6:14:49:35:13:61:ea:
7c:16:95:19:f6:12:bf:54:3a:e3:df:1f:f1:99:87:9d:e8:a4:
01:9b:bd:e6:3f:ba:d1:00:7c:69:4b:b6:7f:c1:37:33:fb:c2:
18:84:dd:47:45:a2:e9:c4:59:af:b0:2c:9b:d3:6e:f6:ff:c4:
2f:dd:cf:d2:f2:01:e5:dd:ef:78:70:c8:40:98:0f:d4:b4:91:
ae:14:5b:82:fd:cd:d3:56:db:f9:f0:d1:bf:97:8a:21:d7:83:
da:01:27:66:fa:11:94:e3:6e:58:d8:e0:57:86:c8:60:a7:2b:
b2:14:be:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQBu4txqWNsTHh/AHxfc8+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkMmNkZjI3ZDlkZTY1ZWIyNGU1Y2ZjOWQzMTBlNGM4YTAz
MDE0NjAwHhcNMjUxMTA0MTgwMDIyWhcNMjUxMTA1MTgwMDIyWjAzMTEwLwYDVQQD
EygyMjE3MmU5YTI0ZGNkYzZlYTJlYzY4ZDM1MDExOGUyMzUyNjcxYzM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkvQb5X75FbBsRRcm1OIAHS51+QcR
6Gp+W7kwkIJU6KV1ACZBtNyBgMR9q4u9YooX+385L2QikNG4OWgPn0UsB8G72kfv
yExCE9PIvSQqTetT0RFqrjSLRuFiLeYA7DXmqbUsYRjuAhlBQTc+UY6mPDfiWDH8
XyutFXiJWW4Uyo0dFY/dZ8MLE6h5gJwvOZRql/I6WecQirZqAbrhyPdouxTUwiR2
g2bDTB8pybReS+ArCOb9q1MgVUdLfX4n0lTXxmnw5W/+zH+kFn/nXCuuU5m8BQP5
EzxrPVTctz7MUM/p46weqHJySbaAvZ0DZqh/yi2Jpevj15vvcsodio+5YwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCIXLpok3Nxuouxo01ARjiNSZxw3MB8GA1UdIwQY
MBaAFK0s3yfZ3mXrJOXPydMQ5MigMBRgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclN6Zko5bmVaZXNrNWNfSjB4RGt5S0F3RkdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS9lZDYzNGItMzlmNy00YjljLTg2ZTQt
MWU5MjM4Y2YwMjhjLzEvclN6Zko5bmVaZXNrNWNfSjB4RGt5S0F3RkdBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS9lZDYzNGItMzlmNy00YjljLTg2ZTQtMWU5MjM4Y2YwMjhj
LzEvclN6Zko5bmVaZXNrNWNfSjB4RGt5S0F3RkdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANeujYtfz
M5AE4m+74dLBDxQIGvW6aIh4DFKevO6ruejgmZeNhpdqOD28cbBdRX9Yr1VmX5M7
mPkcYIzrCx8qOOihSC5loteuPWXyJwFBZ9oXoLTuaw2L5LX54z9cfIlaMJizmO4f
vbCAsVhdB1WkoqLZphsYuT5Vh1HkSMWTCzXdECCMbQqC4JHGFEk1E2HqfBaVGfYS
v1Q6498f8ZmHneikAZu95j+60QB8aUu2f8E3M/vCGITdR0Wi6cRZr7Asm9Nu9v/E
L93P0vIB5d3veHDIQJgP1LSRrhRbgv3N01bb+fDRv5eKIdeD2gEnZvoRlONuWNjg
V4bIYKcrshS+mQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 20:16:18 2025 by rpki-client