
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/SVls7MId0CZ3pyfvN_BolUbqUJc.mft
File: SVls7MId0CZ3pyfvN_BolUbqUJc.mft (raw, json)
Hash identifier: uoQepmKoOUgwNUFLPnKTu0cxn4y+O/QjYwlpR288Zeo=
Subject key identifier: AA:79:66:55:6C:C7:0A:68:C6:27:3D:50:83:9F:61:FE:26:0A:61:4E
Authority key identifier: 49:59:6C:EC:C2:1D:D0:26:77:A7:27:EF:37:F0:68:95:46:EA:50:97
Certificate issuer: /CN=49596cecc21dd02677a727ef37f0689546ea5097
Certificate serial: 019A7149943BDFA2B4EBD9FBCF533261123B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SVls7MId0CZ3pyfvN_BolUbqUJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/SVls7MId0CZ3pyfvN_BolUbqUJc.mft
Manifest number: 172A
Signing time: Tue 11 Nov 2025 05:00:38 +0000
Manifest this update: Tue 11 Nov 2025 05:00:38 +0000
Manifest next update: Wed 12 Nov 2025 05:00:38 +0000
Files and hashes: 1: CgdiB-LvALW6eF8te_abb7XhHzw.roa (hash: FMmsOk3IFJDqEQcmSu8en9nadePYE7fdzLtSrsLGOLw=)
2: DheYS6kXlTHMFO59gGUyPsW4eds.roa (hash: n/9tk9beMA1XkkvC1xAFHfiOMzHgwQU8810EuXnnbI8=)
3: PBiMn82gChQHdPPkS-Oqs-Fnbh8.roa (hash: egCOLbWqDbWYCFc5/6lxhgVs+rP+45wHq+Te93L2gCw=)
4: SVls7MId0CZ3pyfvN_BolUbqUJc.crl (hash: HfwUH0ijnp+c2xnodCYGW9fjEi+fmoCE7iEoxGE+PsI=)
5: heiFtANLkWlLrNLuIvdxl9kb0CQ.roa (hash: TnGpURbkXAESJ2Gk47wlG4sEj84D3SKrlpwSgF/8yys=)
6: jj0FH0DBvDqihM_PehNtHmRi9os.roa (hash: YyltTND33n/AiLCX9ViD6/mj27hWtc2LPtOCmOwTReA=)
7: lH-qHFc7crMLSf4GUnVsxi7d5S0.roa (hash: mgWBS9e4WAOzI2AGy8eUIJvq5GzFNK7+k2P1TPWDi18=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/SVls7MId0CZ3pyfvN_BolUbqUJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/SVls7MId0CZ3pyfvN_BolUbqUJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SVls7MId0CZ3pyfvN_BolUbqUJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:94:3b:df:a2:b4:eb:d9:fb:cf:53:32:61:12:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49596cecc21dd02677a727ef37f0689546ea5097
Validity
Not Before: Nov 11 05:00:38 2025 GMT
Not After : Nov 12 05:00:38 2025 GMT
Subject: CN=aa7966556cc70a68c6273d50839f61fe260a614e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:cb:cb:41:88:b2:8c:b8:98:ca:bf:5f:e3:b9:
5e:10:9a:8a:3e:91:51:bd:8c:5e:bb:54:5c:cc:b8:
c2:0c:ea:48:31:cc:e6:69:cd:06:d1:8e:28:67:32:
ff:12:74:48:83:9d:65:73:0b:1b:f7:b2:e5:d6:16:
5e:e2:7c:32:e2:fa:ae:0d:ad:47:3d:0c:41:fb:e1:
f9:68:1c:33:de:dd:92:29:09:c1:4f:25:a0:d1:a0:
c0:04:9f:61:d0:ed:d1:4c:b7:d6:e8:8f:21:4f:9e:
c7:fc:0d:8f:1c:e4:76:34:96:d2:3a:27:e4:54:19:
08:ee:7d:17:60:b2:af:bc:0a:af:46:6c:eb:55:20:
57:65:b0:c1:12:7f:39:5b:fb:1c:bf:f8:df:dd:61:
c3:1d:92:f7:60:f7:d0:02:24:0c:7f:1c:9e:dc:6f:
0e:ae:a7:80:0e:ba:e8:84:13:3e:3a:b5:2f:1e:21:
c2:f6:09:38:05:0b:b3:26:34:75:29:83:14:67:f0:
f9:8b:e4:3f:2f:1e:99:a7:bd:49:4d:2c:31:d5:d3:
20:7e:57:88:4c:8a:6a:dc:36:38:a2:1c:58:44:1d:
be:7e:7e:25:0b:65:a4:49:87:95:dd:ff:86:df:4d:
78:2e:29:fa:ce:10:ff:fa:79:89:93:b9:34:27:ab:
46:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:79:66:55:6C:C7:0A:68:C6:27:3D:50:83:9F:61:FE:26:0A:61:4E
X509v3 Authority Key Identifier:
keyid:49:59:6C:EC:C2:1D:D0:26:77:A7:27:EF:37:F0:68:95:46:EA:50:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SVls7MId0CZ3pyfvN_BolUbqUJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/SVls7MId0CZ3pyfvN_BolUbqUJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/SVls7MId0CZ3pyfvN_BolUbqUJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:64:72:ad:7e:b7:04:93:97:c6:37:b5:a7:dc:77:79:df:e1:
35:5c:f2:52:96:7e:3a:a6:3d:ff:84:f3:6a:e7:49:5d:be:6b:
14:cc:4b:2b:cf:47:dc:f0:b2:74:19:ab:6e:a7:6f:95:52:5c:
24:8e:ad:99:5f:0a:77:00:86:27:79:f6:dd:4a:42:24:b1:9e:
f0:17:8b:81:ac:86:bc:b7:01:eb:9b:15:58:fb:8e:48:2d:c7:
d0:90:87:e8:a3:9f:35:f4:a6:87:54:e7:72:0a:a7:b7:5e:a6:
6a:3d:4c:51:2a:50:ae:67:b4:dd:d6:44:a7:44:ba:c5:02:29:
a4:7a:a1:53:06:d9:d1:c4:7f:de:cd:02:cd:14:a8:55:2e:4f:
52:6b:79:4f:91:ed:92:ea:f9:9b:aa:50:10:ff:01:eb:60:8e:
6e:d2:1f:f4:5a:02:a0:22:72:91:28:75:99:01:f4:d5:7f:c4:
84:f6:c3:5b:c6:e1:ce:88:01:df:69:be:01:8d:af:c2:e0:cb:
e6:e8:f7:62:e2:a7:3d:94:33:5c:95:1d:15:c1:a9:73:f4:18:
72:4d:bb:75:43:0a:8b:dc:cf:61:58:f7:a9:84:86:60:b6:4f:
be:97:e2:84:62:8a:89:60:8b:0b:20:60:cd:7d:a3:70:66:f0:
3b:97:b4:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxSZQ736K069n7z1MyYRI7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5NTk2Y2VjYzIxZGQwMjY3N2E3MjdlZjM3ZjA2ODk1NDZl
YTUwOTcwHhcNMjUxMTExMDUwMDM4WhcNMjUxMTEyMDUwMDM4WjAzMTEwLwYDVQQD
EyhhYTc5NjY1NTZjYzcwYTY4YzYyNzNkNTA4MzlmNjFmZTI2MGE2MTRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1cvLQYiyjLiYyr9f47leEJqKPpFR
vYxeu1RczLjCDOpIMczmac0G0Y4oZzL/EnRIg51lcwsb97Ll1hZe4nwy4vquDa1H
PQxB++H5aBwz3t2SKQnBTyWg0aDABJ9h0O3RTLfW6I8hT57H/A2PHOR2NJbSOifk
VBkI7n0XYLKvvAqvRmzrVSBXZbDBEn85W/scv/jf3WHDHZL3YPfQAiQMfxye3G8O
rqeADrrohBM+OrUvHiHC9gk4BQuzJjR1KYMUZ/D5i+Q/Lx6Zp71JTSwx1dMgfleI
TIpq3DY4ohxYRB2+fn4lC2WkSYeV3f+G3014Lin6zhD/+nmJk7k0J6tGbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKp5ZlVsxwpoxic9UIOfYf4mCmFOMB8GA1UdIwQY
MBaAFElZbOzCHdAmd6cn7zfwaJVG6lCXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1ZsczdNSWQwQ1ozcHlmdk5fQm9sVWJxVUpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9lN2JkMDEtNDMyZi00YmY5LTgwYzUt
ODk3ZDAwOTc3ZmYyLzEvU1ZsczdNSWQwQ1ozcHlmdk5fQm9sVWJxVUpjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi9lN2JkMDEtNDMyZi00YmY5LTgwYzUtODk3ZDAwOTc3ZmYy
LzEvU1ZsczdNSWQwQ1ozcHlmdk5fQm9sVWJxVUpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABWRyrX63
BJOXxje1p9x3ed/hNVzyUpZ+OqY9/4TzaudJXb5rFMxLK89H3PCydBmrbqdvlVJc
JI6tmV8KdwCGJ3n23UpCJLGe8BeLgayGvLcB65sVWPuOSC3H0JCH6KOfNfSmh1Tn
cgqnt16maj1MUSpQrme03dZEp0S6xQIppHqhUwbZ0cR/3s0CzRSoVS5PUmt5T5Ht
kur5m6pQEP8B62CObtIf9FoCoCJykSh1mQH01X/EhPbDW8bhzogB32m+AY2vwuDL
5uj3YuKnPZQzXJUdFcGpc/QYck27dUMKi9zPYVj3qYSGYLZPvpfihGKKiWCLCyBg
zX2jcGbwO5e0pA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:08 2025 by rpki-client