Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/1373a0-8c3d-4283-a5ce-822ea43dc18d/1/2783kJzhe6U62QqGMjd6XZOHQ-U.mft
File: 2783kJzhe6U62QqGMjd6XZOHQ-U.mft (raw, json)
Hash identifier: u0/EBuHuKF9RUVII0Zp0NUNoWrd6i/mQL3setMJYRiU=
Subject key identifier: 18:43:0C:35:BD:C2:BC:7F:CE:3D:4F:AB:F2:0B:95:99:96:08:6B:62
Authority key identifier: DB:BF:37:90:9C:E1:7B:A5:3A:D9:0A:86:32:37:7A:5D:93:87:43:E5
Certificate issuer: /CN=dbbf37909ce17ba53ad90a8632377a5d938743e5
Certificate serial: 019A4E86A9605DA3B5B34000C48024E02ABE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2783kJzhe6U62QqGMjd6XZOHQ-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/1373a0-8c3d-4283-a5ce-822ea43dc18d/1/2783kJzhe6U62QqGMjd6XZOHQ-U.mft
Manifest number: 0CD0
Signing time: Tue 04 Nov 2025 11:00:39 +0000
Manifest this update: Tue 04 Nov 2025 11:00:39 +0000
Manifest next update: Wed 05 Nov 2025 11:00:39 +0000
Files and hashes: 1: 2783kJzhe6U62QqGMjd6XZOHQ-U.crl (hash: 7xH+ZJGTVnuDIJGMf3DaU01TuvDrGT5DpYLu2Hit+ho=)
2: 49OmEENKn2pggkZrla5_tvJAS5g.roa (hash: y2VOplSKaFK6l6b//Hy/89Z9on3Nk836w0LqiWTCSxQ=)
3: 98r0bNxXEDMvZ7j6PltFu8qJeJg.roa (hash: EU18mwS21+icltyLGLTMkrjH38LD7S0gNFf/o4/z9BM=)
4: lZqh98v1p7SMdnTevU2ohDFVTYU.roa (hash: O0iB20pJ4bqjR3GQawrzp1OwygFy4onsg0mr0/s03uQ=)
5: xOL_ByJQJZQBMqDAvRuOKjD76Yk.roa (hash: oV4k7YTonHST8wxb9nEmyy0EnbuDv3hYSGZBk73gZvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/1373a0-8c3d-4283-a5ce-822ea43dc18d/1/2783kJzhe6U62QqGMjd6XZOHQ-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/1373a0-8c3d-4283-a5ce-822ea43dc18d/1/2783kJzhe6U62QqGMjd6XZOHQ-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/2783kJzhe6U62QqGMjd6XZOHQ-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:a9:60:5d:a3:b5:b3:40:00:c4:80:24:e0:2a:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbbf37909ce17ba53ad90a8632377a5d938743e5
Validity
Not Before: Nov 4 11:00:39 2025 GMT
Not After : Nov 5 11:00:39 2025 GMT
Subject: CN=18430c35bdc2bc7fce3d4fabf20b959996086b62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:41:01:5c:74:49:4c:77:04:41:79:ad:b9:6f:
87:42:a2:11:ff:fa:cf:ea:fe:09:bc:d4:25:c1:d1:
f7:97:6b:1e:a6:87:3b:73:9e:2d:2b:a7:9a:6c:af:
39:f9:17:ba:28:82:b4:78:68:98:8c:43:37:5a:c3:
99:14:cc:b3:da:bc:86:84:65:e7:dc:f5:3a:ae:99:
3e:99:5c:56:b6:c9:c5:08:6e:fe:f5:ca:22:af:a2:
3a:c4:74:28:f3:6a:d9:43:17:03:15:c2:e9:d9:10:
ef:fc:bc:f8:35:20:7f:50:ae:cb:92:9a:9f:b3:d5:
21:65:b5:68:7e:8d:0b:44:27:ae:62:04:9b:f6:6e:
ca:68:d4:3e:5b:1a:45:f4:e2:fe:d2:c6:0e:77:dc:
17:65:9b:d7:f6:19:69:a3:35:29:04:40:e2:f8:9e:
98:a8:9f:eb:61:89:d7:b2:59:7c:e6:c5:51:cf:ff:
fc:e7:2f:da:09:28:6c:7c:73:1e:19:76:f3:fb:1f:
5c:61:fa:a8:ee:6e:43:a5:ce:8c:0f:eb:6d:99:68:
d7:20:8f:af:97:28:1e:ff:76:97:ba:05:4b:72:a5:
b4:d8:dc:69:da:72:5d:45:e1:85:43:15:28:cd:de:
8c:21:8c:fd:53:eb:c2:f2:f0:cb:c1:05:f7:10:0b:
ea:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:43:0C:35:BD:C2:BC:7F:CE:3D:4F:AB:F2:0B:95:99:96:08:6B:62
X509v3 Authority Key Identifier:
keyid:DB:BF:37:90:9C:E1:7B:A5:3A:D9:0A:86:32:37:7A:5D:93:87:43:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2783kJzhe6U62QqGMjd6XZOHQ-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/1373a0-8c3d-4283-a5ce-822ea43dc18d/1/2783kJzhe6U62QqGMjd6XZOHQ-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/1373a0-8c3d-4283-a5ce-822ea43dc18d/1/2783kJzhe6U62QqGMjd6XZOHQ-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:bc:59:63:ce:ef:a6:a6:97:b3:d8:a4:7d:76:f0:3b:2e:36:
e8:07:66:e6:85:af:8c:b6:51:17:b8:17:d8:64:3a:13:82:ea:
4f:9c:21:02:0b:66:e6:52:58:b2:07:93:b5:fa:46:41:aa:7a:
c0:45:10:ae:28:e3:8e:60:d1:c1:f0:9a:26:8f:a7:6b:e4:10:
a6:78:61:09:5a:6e:9a:a2:df:3f:a1:7e:a3:99:b6:96:62:d6:
dd:88:e0:7b:27:e0:19:07:7f:30:57:a2:bc:3a:ff:cb:36:f0:
c3:b9:dd:02:81:ba:61:c7:95:45:3c:ba:65:70:85:04:fd:37:
7d:22:6b:b6:a1:09:b5:47:c1:0a:b6:1c:ad:04:89:1d:a8:c3:
80:f8:15:89:98:15:fc:07:a6:91:a0:7b:d3:74:43:e0:be:24:
ce:0b:43:5e:58:70:87:bd:c5:ed:a6:3f:c4:08:3f:0a:81:c4:
a0:47:2e:4c:db:e8:27:e7:2e:72:63:f0:8f:e8:18:e4:66:6e:
6d:d6:45:0f:2f:e1:40:f8:b0:5f:c9:16:35:b4:32:f6:44:5a:
03:ad:ff:ee:46:00:9f:c0:15:1b:26:9e:77:3e:dd:2d:17:a7:
64:9b:64:1a:8a:5e:24:15:87:71:bd:88:cf:0e:14:9a:95:f1:
11:c3:e3:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOhqlgXaO1s0AAxIAk4Cq+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiYmYzNzkwOWNlMTdiYTUzYWQ5MGE4NjMyMzc3YTVkOTM4
NzQzZTUwHhcNMjUxMTA0MTEwMDM5WhcNMjUxMTA1MTEwMDM5WjAzMTEwLwYDVQQD
EygxODQzMGMzNWJkYzJiYzdmY2UzZDRmYWJmMjBiOTU5OTk2MDg2YjYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwkEBXHRJTHcEQXmtuW+HQqIR//rP
6v4JvNQlwdH3l2sepoc7c54tK6eabK85+Re6KIK0eGiYjEM3WsOZFMyz2ryGhGXn
3PU6rpk+mVxWtsnFCG7+9coir6I6xHQo82rZQxcDFcLp2RDv/Lz4NSB/UK7Lkpqf
s9UhZbVofo0LRCeuYgSb9m7KaNQ+WxpF9OL+0sYOd9wXZZvX9hlpozUpBEDi+J6Y
qJ/rYYnXsll85sVRz//85y/aCShsfHMeGXbz+x9cYfqo7m5Dpc6MD+ttmWjXII+v
lyge/3aXugVLcqW02Nxp2nJdReGFQxUozd6MIYz9U+vC8vDLwQX3EAvqxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBhDDDW9wrx/zj1Pq/ILlZmWCGtiMB8GA1UdIwQY
MBaAFNu/N5Cc4XulOtkKhjI3el2Th0PlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjc4M2tKemhlNlU2MlFxR01qZDZYWk9IUS1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC8xMzczYTAtOGMzZC00MjgzLWE1Y2Ut
ODIyZWE0M2RjMThkLzEvMjc4M2tKemhlNlU2MlFxR01qZDZYWk9IUS1VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC8xMzczYTAtOGMzZC00MjgzLWE1Y2UtODIyZWE0M2RjMThk
LzEvMjc4M2tKemhlNlU2MlFxR01qZDZYWk9IUS1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbrxZY87v
pqaXs9ikfXbwOy426Adm5oWvjLZRF7gX2GQ6E4LqT5whAgtm5lJYsgeTtfpGQap6
wEUQrijjjmDRwfCaJo+na+QQpnhhCVpumqLfP6F+o5m2lmLW3YjgeyfgGQd/MFei
vDr/yzbww7ndAoG6YceVRTy6ZXCFBP03fSJrtqEJtUfBCrYcrQSJHajDgPgViZgV
/AemkaB703RD4L4kzgtDXlhwh73F7aY/xAg/CoHEoEcuTNvoJ+cucmPwj+gY5GZu
bdZFDy/hQPiwX8kWNbQy9kRaA63/7kYAn8AVGyaedz7dLRenZJtkGopeJBWHcb2I
zw4UmpXxEcPjHA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:09:39 2025 by rpki-client