Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/971dc5-14f3-4d95-b0bd-4847d393ab55/1/rOvzlsmt-U-E3JAWVuJVzm1QZgw.mft
File: rOvzlsmt-U-E3JAWVuJVzm1QZgw.mft (raw, json)
Hash identifier: 5GQOc9SUxAq5peFgDbgt+NzCUb75u7yeHP+zhPoyXyo=
Subject key identifier: CE:36:E2:24:50:B2:4B:E3:51:46:99:EA:9A:21:6F:7B:07:40:AB:03
Authority key identifier: AC:EB:F3:96:C9:AD:F9:4F:84:DC:90:16:56:E2:55:CE:6D:50:66:0C
Certificate issuer: /CN=acebf396c9adf94f84dc901656e255ce6d50660c
Certificate serial: 0199C78EABAE5C1C6E6D6C2191E5C06EDF06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rOvzlsmt-U-E3JAWVuJVzm1QZgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/971dc5-14f3-4d95-b0bd-4847d393ab55/1/rOvzlsmt-U-E3JAWVuJVzm1QZgw.mft
Manifest number: 033D
Signing time: Thu 09 Oct 2025 06:00:40 +0000
Manifest this update: Thu 09 Oct 2025 06:00:40 +0000
Manifest next update: Fri 10 Oct 2025 06:00:40 +0000
Files and hashes: 1: C4fkDspID27_2W7uJ0bDWTiMbsI.roa (hash: IPmvbCiP1dYquC+xxAe/aHEwDNf0L9S57sM644oyMl8=)
2: rOvzlsmt-U-E3JAWVuJVzm1QZgw.crl (hash: XiwS+g+EfDsg5StzxMDCX6Sr4ZQpYXWHPRazXMPTDBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/971dc5-14f3-4d95-b0bd-4847d393ab55/1/rOvzlsmt-U-E3JAWVuJVzm1QZgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/971dc5-14f3-4d95-b0bd-4847d393ab55/1/rOvzlsmt-U-E3JAWVuJVzm1QZgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/rOvzlsmt-U-E3JAWVuJVzm1QZgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 10 Oct 2025 06:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c7:8e:ab:ae:5c:1c:6e:6d:6c:21:91:e5:c0:6e:df:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acebf396c9adf94f84dc901656e255ce6d50660c
Validity
Not Before: Oct 9 06:00:40 2025 GMT
Not After : Oct 10 06:00:40 2025 GMT
Subject: CN=ce36e22450b24be3514699ea9a216f7b0740ab03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:0d:cd:10:6f:63:0a:93:cd:99:53:1b:9f:a7:
38:19:fe:ae:54:19:ee:8c:5f:1c:28:49:94:24:b5:
10:ff:96:51:85:ff:48:85:c4:46:04:f3:f9:8e:f4:
95:81:4f:18:d8:35:d1:91:4b:bb:97:ae:e1:c3:cb:
41:ce:bc:c9:30:a3:09:9f:7b:17:74:b8:af:e3:91:
03:99:48:4f:7d:2a:8e:d5:7b:fd:20:f1:85:bf:9b:
6e:be:28:7f:5d:da:ab:2d:be:48:c6:67:cb:f8:f3:
e6:1e:16:85:cd:7a:63:8f:0d:0c:94:b1:ce:90:c7:
16:ef:cd:8a:12:33:1e:33:3e:76:48:90:aa:b7:00:
f6:85:7a:fe:45:0f:6b:b1:3a:35:11:80:6a:b9:1c:
13:49:01:05:30:92:90:31:5f:e3:38:49:13:a2:a9:
c6:9b:61:2a:e8:fb:f0:b7:ab:f1:c1:ff:6a:e7:4f:
8e:02:24:7e:1b:1b:77:ec:5a:36:60:45:a2:ad:bd:
f1:8c:e6:90:98:c5:14:07:5a:53:d2:ad:4a:93:84:
56:61:e2:33:6b:d9:01:2e:d2:53:80:05:dc:c6:45:
6a:dd:6e:f9:c6:53:d5:1c:33:76:23:2c:57:ae:b4:
71:e2:aa:ab:0d:f1:51:f0:ae:76:04:3b:6b:14:00:
38:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:36:E2:24:50:B2:4B:E3:51:46:99:EA:9A:21:6F:7B:07:40:AB:03
X509v3 Authority Key Identifier:
keyid:AC:EB:F3:96:C9:AD:F9:4F:84:DC:90:16:56:E2:55:CE:6D:50:66:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rOvzlsmt-U-E3JAWVuJVzm1QZgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/971dc5-14f3-4d95-b0bd-4847d393ab55/1/rOvzlsmt-U-E3JAWVuJVzm1QZgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/971dc5-14f3-4d95-b0bd-4847d393ab55/1/rOvzlsmt-U-E3JAWVuJVzm1QZgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:85:db:32:7d:99:b8:4e:b6:e3:c9:af:e8:85:53:30:58:b5:
27:bd:f0:29:90:b3:d0:e5:91:d2:5b:3b:9c:f8:62:b3:a2:c1:
e3:9b:38:c2:5c:a2:3f:aa:9d:75:4b:ce:5c:25:c2:69:ca:bf:
99:58:28:91:61:96:b1:2f:0b:85:cb:3c:4d:48:56:3a:f3:3e:
30:7d:38:9a:a1:2d:f1:de:58:44:69:26:da:4d:cb:25:e8:be:
5f:5e:0d:bc:ef:fb:fd:b8:56:a8:a2:0f:26:ca:c2:25:33:ce:
47:64:34:75:c6:e7:61:f1:8d:b9:12:17:d0:ed:de:76:fa:d7:
51:6f:49:88:57:b0:c1:f2:b2:b3:df:30:79:5d:4c:5d:10:da:
bf:c9:5d:c5:17:f0:78:13:79:5c:8c:7b:fc:93:c8:50:81:9b:
21:46:a6:cc:a0:ad:87:a0:b7:89:b8:2b:ff:77:a9:2a:a5:94:
16:55:58:3f:62:86:ff:ad:84:22:cf:b5:45:c7:ae:61:5f:61:
8b:9f:7f:7a:27:d3:39:f9:6d:4f:64:25:ef:58:fa:95:cc:00:
df:d6:e4:b3:8f:d2:7f:2c:6f:69:00:df:cf:42:e5:28:26:31:
7e:b8:41:3f:7e:11:f1:73:8a:92:ec:72:91:fb:cf:b0:17:95:
e0:fa:16:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZnHjquuXBxubWwhkeXAbt8GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjZWJmMzk2YzlhZGY5NGY4NGRjOTAxNjU2ZTI1NWNlNmQ1
MDY2MGMwHhcNMjUxMDA5MDYwMDQwWhcNMjUxMDEwMDYwMDQwWjAzMTEwLwYDVQQD
EyhjZTM2ZTIyNDUwYjI0YmUzNTE0Njk5ZWE5YTIxNmY3YjA3NDBhYjAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8A3NEG9jCpPNmVMbn6c4Gf6uVBnu
jF8cKEmUJLUQ/5ZRhf9IhcRGBPP5jvSVgU8Y2DXRkUu7l67hw8tBzrzJMKMJn3sX
dLiv45EDmUhPfSqO1Xv9IPGFv5tuvih/XdqrLb5IxmfL+PPmHhaFzXpjjw0MlLHO
kMcW782KEjMeMz52SJCqtwD2hXr+RQ9rsTo1EYBquRwTSQEFMJKQMV/jOEkToqnG
m2Eq6Pvwt6vxwf9q50+OAiR+Gxt37Fo2YEWirb3xjOaQmMUUB1pT0q1Kk4RWYeIz
a9kBLtJTgAXcxkVq3W75xlPVHDN2IyxXrrRx4qqrDfFR8K52BDtrFAA4WwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM424iRQskvjUUaZ6pohb3sHQKsDMB8GA1UdIwQY
MBaAFKzr85bJrflPhNyQFlbiVc5tUGYMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvck92emxzbXQtVS1FM0pBV1Z1SlZ6bTFRWmd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS85NzFkYzUtMTRmMy00ZDk1LWIwYmQt
NDg0N2QzOTNhYjU1LzEvck92emxzbXQtVS1FM0pBV1Z1SlZ6bTFRWmd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS85NzFkYzUtMTRmMy00ZDk1LWIwYmQtNDg0N2QzOTNhYjU1
LzEvck92emxzbXQtVS1FM0pBV1Z1SlZ6bTFRWmd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ4XbMn2Z
uE6248mv6IVTMFi1J73wKZCz0OWR0ls7nPhis6LB45s4wlyiP6qddUvOXCXCacq/
mVgokWGWsS8Lhcs8TUhWOvM+MH04mqEt8d5YRGkm2k3LJei+X14NvO/7/bhWqKIP
JsrCJTPOR2Q0dcbnYfGNuRIX0O3edvrXUW9JiFewwfKys98weV1MXRDav8ldxRfw
eBN5XIx7/JPIUIGbIUamzKCth6C3ibgr/3epKqWUFlVYP2KG/62EIs+1RceuYV9h
i59/eifTOfltT2Ql71j6lcwA39bks4/SfyxvaQDfz0LlKCYxfrhBP34R8XOKkuxy
kfvPsBeV4PoWew==
-----END CERTIFICATE-----
Generated at Thu Oct 9 08:27:59 2025 by rpki-client