Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/cfcde0-9aa3-4c2d-b8f7-928d91791907/1/wQHFvAkVovfLFlsLfXEyEvpXMy0.mft
File: wQHFvAkVovfLFlsLfXEyEvpXMy0.mft (raw, json)
Hash identifier: EO/N3XnKagA51rftMwZ/1cMNfw4b7FPWgubWqsdCrXw=
Subject key identifier: 98:7E:90:25:DB:A2:59:1F:7B:78:51:C5:FB:8A:61:61:34:93:D6:F8
Authority key identifier: C1:01:C5:BC:09:15:A2:F7:CB:16:5B:0B:7D:71:32:12:FA:57:33:2D
Certificate issuer: /CN=c101c5bc0915a2f7cb165b0b7d713212fa57332d
Certificate serial: 019A52D13BA3FDC6BB3D8D2514CD704F681A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQHFvAkVovfLFlsLfXEyEvpXMy0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/cfcde0-9aa3-4c2d-b8f7-928d91791907/1/wQHFvAkVovfLFlsLfXEyEvpXMy0.mft
Manifest number: 1710
Signing time: Wed 05 Nov 2025 07:00:35 +0000
Manifest this update: Wed 05 Nov 2025 07:00:35 +0000
Manifest next update: Thu 06 Nov 2025 07:00:35 +0000
Files and hashes: 1: 9rnqD1RU0JdMjSu8BzguZaGfvTA.roa (hash: GMQdSU1ONVtRLJ/ahFPu6uQVjVVqJu2bd95QqZUAXII=)
2: wQHFvAkVovfLFlsLfXEyEvpXMy0.crl (hash: 1+EzDSGO7kYZSv8N4Bqkqa1PitdrSbOPOSEuwriYDfM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/cfcde0-9aa3-4c2d-b8f7-928d91791907/1/wQHFvAkVovfLFlsLfXEyEvpXMy0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/cfcde0-9aa3-4c2d-b8f7-928d91791907/1/wQHFvAkVovfLFlsLfXEyEvpXMy0.mft
rsync://rpki.ripe.net/repository/DEFAULT/wQHFvAkVovfLFlsLfXEyEvpXMy0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d1:3b:a3:fd:c6:bb:3d:8d:25:14:cd:70:4f:68:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c101c5bc0915a2f7cb165b0b7d713212fa57332d
Validity
Not Before: Nov 5 07:00:35 2025 GMT
Not After : Nov 6 07:00:35 2025 GMT
Subject: CN=987e9025dba2591f7b7851c5fb8a61613493d6f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:58:00:12:02:a1:2e:ed:ea:c0:56:84:f3:14:
7e:92:4f:5c:f2:b6:97:24:b0:94:25:b0:2b:3e:c1:
3c:17:4f:6e:95:72:4c:3f:f0:da:1e:87:b7:29:5a:
fc:e9:c0:3f:c6:48:9a:56:7c:6c:d0:90:d7:31:9c:
bb:63:24:92:ad:2c:eb:55:f5:d4:79:53:07:52:80:
3f:bb:0f:a1:2f:6e:a5:09:3f:df:b8:9d:c8:8c:ca:
52:e2:a6:96:f4:e2:f5:55:a8:71:16:be:70:80:a4:
2c:3a:45:df:b4:8d:d8:9e:18:c7:8d:16:2d:4f:e6:
32:2b:4d:47:44:50:4b:c0:97:81:4b:ff:92:d7:b1:
f7:82:75:ca:91:da:a8:15:a9:9c:d0:aa:0e:23:d4:
d2:32:71:e9:84:89:a3:b2:79:a5:06:a3:b9:0b:35:
5f:e9:65:61:1e:64:22:c7:2a:d6:fc:5d:97:8d:0e:
eb:ea:86:4c:11:ab:38:a8:a4:00:be:26:d9:d4:7b:
a4:93:36:83:76:02:ef:36:06:35:bb:24:4d:04:c2:
24:2a:d1:1e:3e:ec:2b:b8:ba:74:76:70:55:57:44:
d1:04:67:96:52:26:31:c9:f7:e2:80:d6:aa:a4:db:
e8:72:bc:14:c6:ca:b0:c2:bf:cb:29:09:08:be:e1:
4e:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:7E:90:25:DB:A2:59:1F:7B:78:51:C5:FB:8A:61:61:34:93:D6:F8
X509v3 Authority Key Identifier:
keyid:C1:01:C5:BC:09:15:A2:F7:CB:16:5B:0B:7D:71:32:12:FA:57:33:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQHFvAkVovfLFlsLfXEyEvpXMy0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/cfcde0-9aa3-4c2d-b8f7-928d91791907/1/wQHFvAkVovfLFlsLfXEyEvpXMy0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/cfcde0-9aa3-4c2d-b8f7-928d91791907/1/wQHFvAkVovfLFlsLfXEyEvpXMy0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:cc:23:87:ef:08:be:68:8f:ee:13:81:7a:bb:b4:51:da:1b:
73:5a:10:95:52:80:98:27:f4:ea:60:3c:3d:02:bc:0b:ef:8c:
ff:ba:9d:d6:14:70:82:e8:fe:a2:28:8a:16:8d:5c:15:59:94:
cc:65:9c:d7:a5:2c:9d:22:32:94:fa:91:93:08:61:06:55:71:
d0:ab:bc:a6:15:cd:c4:af:dc:58:34:c0:86:86:f1:22:3b:86:
7f:2b:ec:e6:e6:2c:57:27:b0:c7:73:75:ea:9b:de:a9:a7:b1:
e5:f7:86:ff:da:be:a1:6b:d7:ec:03:ea:83:95:26:69:a8:ca:
7c:da:73:51:73:8c:2f:f4:e5:ee:4f:6f:47:29:c0:78:08:b5:
05:87:d6:2d:40:d7:2e:e1:07:2f:40:a4:68:ca:57:2d:35:2e:
27:1a:46:05:bb:5d:03:61:79:e5:51:b5:6e:47:88:7d:f1:df:
a9:5b:75:27:94:4e:8e:89:a9:6d:ca:a8:d7:a9:eb:3a:73:0d:
93:d1:b6:ee:25:5a:ae:4f:a1:56:fd:e4:c1:e7:b6:14:bd:e5:
9e:ca:2c:b1:a1:d4:85:10:1b:ed:0d:0f:8a:e7:f9:c8:67:a3:
de:59:bf:09:d5:da:e3:13:0b:d3:d7:ba:fe:2c:53:37:45:f2:
cd:64:6e:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpS0Tuj/ca7PY0lFM1wT2gaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxMDFjNWJjMDkxNWEyZjdjYjE2NWIwYjdkNzEzMjEyZmE1
NzMzMmQwHhcNMjUxMTA1MDcwMDM1WhcNMjUxMTA2MDcwMDM1WjAzMTEwLwYDVQQD
Eyg5ODdlOTAyNWRiYTI1OTFmN2I3ODUxYzVmYjhhNjE2MTM0OTNkNmY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVgAEgKhLu3qwFaE8xR+kk9c8raX
JLCUJbArPsE8F09ulXJMP/DaHoe3KVr86cA/xkiaVnxs0JDXMZy7YySSrSzrVfXU
eVMHUoA/uw+hL26lCT/fuJ3IjMpS4qaW9OL1VahxFr5wgKQsOkXftI3YnhjHjRYt
T+YyK01HRFBLwJeBS/+S17H3gnXKkdqoFamc0KoOI9TSMnHphImjsnmlBqO5CzVf
6WVhHmQixyrW/F2XjQ7r6oZMEas4qKQAvibZ1HukkzaDdgLvNgY1uyRNBMIkKtEe
PuwruLp0dnBVV0TRBGeWUiYxyffigNaqpNvocrwUxsqwwr/LKQkIvuFOIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJh+kCXbolkfe3hRxfuKYWE0k9b4MB8GA1UdIwQY
MBaAFMEBxbwJFaL3yxZbC31xMhL6VzMtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1FIRnZBa1ZvdmZMRmxzTGZYRXlFdnBYTXkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9jZmNkZTAtOWFhMy00YzJkLWI4Zjct
OTI4ZDkxNzkxOTA3LzEvd1FIRnZBa1ZvdmZMRmxzTGZYRXlFdnBYTXkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy9jZmNkZTAtOWFhMy00YzJkLWI4ZjctOTI4ZDkxNzkxOTA3
LzEvd1FIRnZBa1ZvdmZMRmxzTGZYRXlFdnBYTXkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQswjh+8I
vmiP7hOBeru0Udobc1oQlVKAmCf06mA8PQK8C++M/7qd1hRwguj+oiiKFo1cFVmU
zGWc16UsnSIylPqRkwhhBlVx0Ku8phXNxK/cWDTAhobxIjuGfyvs5uYsVyewx3N1
6pveqaex5feG/9q+oWvX7APqg5UmaajKfNpzUXOML/Tl7k9vRynAeAi1BYfWLUDX
LuEHL0CkaMpXLTUuJxpGBbtdA2F55VG1bkeIffHfqVt1J5ROjompbcqo16nrOnMN
k9G27iVark+hVv3kwee2FL3lnsossaHUhRAb7Q0Piuf5yGej3lm/CdXa4xML09e6
/ixTN0XyzWRulA==
-----END CERTIFICATE-----
Generated at Wed Nov 5 13:01:35 2025 by rpki-client