Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/6252f9-6787-406a-b91f-9cfa2c7d816e/1/l1MMqzuuW1Kfq-uZeb1oX3sr2rM.mft
File: l1MMqzuuW1Kfq-uZeb1oX3sr2rM.mft (raw, json)
Hash identifier: jqKtaeElQFPvEivCiHO6ijWMTVgxmvALbxr/eATmDQA=
Subject key identifier: 30:68:C9:3C:44:3E:36:3E:2F:32:10:F0:9F:1C:CC:C8:A4:78:D6:24
Authority key identifier: 97:53:0C:AB:3B:AE:5B:52:9F:AB:EB:99:79:BD:68:5F:7B:2B:DA:B3
Certificate issuer: /CN=97530cab3bae5b529fabeb9979bd685f7b2bdab3
Certificate serial: 019A526389E01D47F71B73687542F9BDE2A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l1MMqzuuW1Kfq-uZeb1oX3sr2rM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/6252f9-6787-406a-b91f-9cfa2c7d816e/1/l1MMqzuuW1Kfq-uZeb1oX3sr2rM.mft
Manifest number: 065C
Signing time: Wed 05 Nov 2025 05:00:46 +0000
Manifest this update: Wed 05 Nov 2025 05:00:46 +0000
Manifest next update: Thu 06 Nov 2025 05:00:46 +0000
Files and hashes: 1: 5ODJwRdnQa13oezz5TNTCEyKtws.roa (hash: zQdrgcuE5ymqxo+lmUXMohaBUr8MekfjfO1peWkuPsk=)
2: 8PEWFaitqsUZ6z1cmHuAHUZb0BQ.roa (hash: eQE9VX3LaUVY9e8uyeXfzxRtJvjbxOh0QvDdkJtI1qM=)
3: l1MMqzuuW1Kfq-uZeb1oX3sr2rM.crl (hash: UxP/GUkAFrceabfjxFYJkr58KEleOjpfN0OwqTK2S38=)
4: ookYOsl62US6mMi6GMg2HcD_y2A.roa (hash: NEIgALewSP5rnsPbfbCrZ+39OwZPrksdjPilVku316k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/6252f9-6787-406a-b91f-9cfa2c7d816e/1/l1MMqzuuW1Kfq-uZeb1oX3sr2rM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/6252f9-6787-406a-b91f-9cfa2c7d816e/1/l1MMqzuuW1Kfq-uZeb1oX3sr2rM.mft
rsync://rpki.ripe.net/repository/DEFAULT/l1MMqzuuW1Kfq-uZeb1oX3sr2rM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:63:89:e0:1d:47:f7:1b:73:68:75:42:f9:bd:e2:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97530cab3bae5b529fabeb9979bd685f7b2bdab3
Validity
Not Before: Nov 5 05:00:46 2025 GMT
Not After : Nov 6 05:00:46 2025 GMT
Subject: CN=3068c93c443e363e2f3210f09f1cccc8a478d624
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:00:5c:66:e8:26:ab:3b:80:b8:cf:31:84:be:
68:7b:18:c1:bd:73:aa:54:ae:73:0f:97:39:db:04:
e1:5e:6c:01:03:24:c2:fe:8e:81:10:8f:ff:f7:17:
6a:a2:ee:e4:ff:25:e3:e8:db:ba:fd:b8:95:6d:a8:
b5:17:6d:dd:8b:2f:ae:fb:f1:3f:06:7f:3d:e5:28:
13:b1:0f:46:5f:14:6a:33:4c:b7:64:a2:7b:00:62:
de:ef:6b:e9:d8:d3:91:e4:dc:8f:3c:e0:07:d2:28:
50:36:c5:84:16:01:15:c8:e5:79:e0:55:7a:f4:32:
cb:45:de:9b:05:4c:0f:23:d3:eb:ce:f7:65:2b:60:
22:f3:5e:ad:20:7a:49:df:a3:d4:d2:bf:9a:c1:13:
5d:48:1c:af:7a:29:8c:c5:b2:9e:4f:35:93:f4:a7:
da:b5:32:11:d2:f8:3a:2e:96:cd:8b:04:61:90:c5:
c1:8e:25:22:03:ad:36:16:07:f8:5c:45:fa:a3:8e:
cc:95:72:0a:c1:a7:04:05:06:09:e8:98:87:25:ff:
6a:f9:9a:df:fe:41:49:5a:82:dd:22:b8:ec:dd:d8:
09:40:1f:57:e1:a5:da:39:b0:c5:df:c8:7d:1a:f3:
4a:5c:f3:28:6e:ff:cc:b8:22:0f:b7:9d:23:3e:c8:
d9:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:68:C9:3C:44:3E:36:3E:2F:32:10:F0:9F:1C:CC:C8:A4:78:D6:24
X509v3 Authority Key Identifier:
keyid:97:53:0C:AB:3B:AE:5B:52:9F:AB:EB:99:79:BD:68:5F:7B:2B:DA:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l1MMqzuuW1Kfq-uZeb1oX3sr2rM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/6252f9-6787-406a-b91f-9cfa2c7d816e/1/l1MMqzuuW1Kfq-uZeb1oX3sr2rM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/6252f9-6787-406a-b91f-9cfa2c7d816e/1/l1MMqzuuW1Kfq-uZeb1oX3sr2rM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:48:31:26:5c:f4:5c:ce:87:e4:70:56:3e:df:f0:15:48:ee:
df:9e:81:5f:88:08:c1:d5:c4:98:0b:6e:f1:cc:09:b9:fa:92:
e7:8c:02:75:fb:9d:ee:25:aa:67:94:1d:5f:92:9b:44:dd:6a:
1c:81:4c:ed:bc:da:97:36:0b:c2:64:35:68:29:1d:e4:f8:d0:
8d:00:77:56:e6:93:b4:b1:d1:27:fc:ec:62:fb:5f:c6:ba:1e:
60:80:70:94:ae:29:41:0d:00:f6:32:0b:95:86:2c:9a:d0:09:
ad:3d:65:b9:67:cb:9c:10:90:b1:7d:85:c3:a4:57:bb:1d:25:
a8:f1:72:ce:61:f7:6d:e0:2e:0d:88:26:75:be:5d:fb:92:17:
61:03:88:5c:a9:a7:6e:eb:9a:fe:88:7f:09:1b:55:58:29:c8:
36:30:bd:de:a6:3a:4f:cd:02:3a:14:5a:01:11:fc:34:f3:9d:
2f:54:71:be:80:50:c0:5f:98:71:a7:34:29:cd:bf:e2:1e:80:
23:f7:ab:c9:51:6b:fe:23:71:6f:27:da:40:47:31:cc:46:5f:
18:29:e3:3f:f0:bf:c5:a2:e5:0d:52:fd:b5:be:f7:2c:c7:0d:
dd:55:03:0d:2d:53:ba:2e:cc:23:0e:3d:ed:79:4e:13:15:ad:
12:e2:5a:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpSY4ngHUf3G3NodUL5veKlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3NTMwY2FiM2JhZTViNTI5ZmFiZWI5OTc5YmQ2ODVmN2Iy
YmRhYjMwHhcNMjUxMTA1MDUwMDQ2WhcNMjUxMTA2MDUwMDQ2WjAzMTEwLwYDVQQD
EygzMDY4YzkzYzQ0M2UzNjNlMmYzMjEwZjA5ZjFjY2NjOGE0NzhkNjI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmwBcZugmqzuAuM8xhL5oexjBvXOq
VK5zD5c52wThXmwBAyTC/o6BEI//9xdqou7k/yXj6Nu6/biVbai1F23diy+u+/E/
Bn895SgTsQ9GXxRqM0y3ZKJ7AGLe72vp2NOR5NyPPOAH0ihQNsWEFgEVyOV54FV6
9DLLRd6bBUwPI9PrzvdlK2Ai816tIHpJ36PU0r+awRNdSByveimMxbKeTzWT9Kfa
tTIR0vg6LpbNiwRhkMXBjiUiA602Fgf4XEX6o47MlXIKwacEBQYJ6JiHJf9q+Zrf
/kFJWoLdIrjs3dgJQB9X4aXaObDF38h9GvNKXPMobv/MuCIPt50jPsjZ7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDBoyTxEPjY+LzIQ8J8czMikeNYkMB8GA1UdIwQY
MBaAFJdTDKs7rltSn6vrmXm9aF97K9qzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDFNTXF6dXVXMUtmcS11WmViMW9YM3NyMnJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS82MjUyZjktNjc4Ny00MDZhLWI5MWYt
OWNmYTJjN2Q4MTZlLzEvbDFNTXF6dXVXMUtmcS11WmViMW9YM3NyMnJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS82MjUyZjktNjc4Ny00MDZhLWI5MWYtOWNmYTJjN2Q4MTZl
LzEvbDFNTXF6dXVXMUtmcS11WmViMW9YM3NyMnJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbkgxJlz0
XM6H5HBWPt/wFUju356BX4gIwdXEmAtu8cwJufqS54wCdfud7iWqZ5QdX5KbRN1q
HIFM7bzalzYLwmQ1aCkd5PjQjQB3VuaTtLHRJ/zsYvtfxroeYIBwlK4pQQ0A9jIL
lYYsmtAJrT1luWfLnBCQsX2Fw6RXux0lqPFyzmH3beAuDYgmdb5d+5IXYQOIXKmn
buua/oh/CRtVWCnINjC93qY6T80COhRaARH8NPOdL1RxvoBQwF+Ycac0Kc2/4h6A
I/eryVFr/iNxbyfaQEcxzEZfGCnjP/C/xaLlDVL9tb73LMcN3VUDDS1Tui7MIw49
7XlOExWtEuJaTw==
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:03:45 2025 by rpki-client