Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/d5daf8-4924-4bec-8518-aefc189fd851/1/SxzcuQuYMgFnSKfiaMwe_yOSYvg.mft
File: SxzcuQuYMgFnSKfiaMwe_yOSYvg.mft (raw, json)
Hash identifier: pwgi7VO0n14dujI0I2dYgdjHMRoF9nXOq+nHQ3NRxas=
Subject key identifier: F7:02:E5:5F:CC:A1:DB:AD:49:54:D8:8C:2C:D1:BF:3F:D9:1C:D5:6D
Authority key identifier: 4B:1C:DC:B9:0B:98:32:01:67:48:A7:E2:68:CC:1E:FF:23:92:62:F8
Certificate issuer: /CN=4b1cdcb90b9832016748a7e268cc1eff239262f8
Certificate serial: 019A71B8460BA407D293B6A90F0FD0C64FE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SxzcuQuYMgFnSKfiaMwe_yOSYvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/d5daf8-4924-4bec-8518-aefc189fd851/1/SxzcuQuYMgFnSKfiaMwe_yOSYvg.mft
Manifest number: 145B
Signing time: Tue 11 Nov 2025 07:01:33 +0000
Manifest this update: Tue 11 Nov 2025 07:01:33 +0000
Manifest next update: Wed 12 Nov 2025 07:01:33 +0000
Files and hashes: 1: SxzcuQuYMgFnSKfiaMwe_yOSYvg.crl (hash: oqwjBQ/cz5WOB2aVn5YPQfS/fFX2aKTx7cZnBldcy7o=)
2: eiFnEmDTPMfL3dAfRXolzkxp_i4.roa (hash: 4dzfRJYq125S/BqKfHbwTEsWNU4YgfgsuuliSEpx9eU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/d5daf8-4924-4bec-8518-aefc189fd851/1/SxzcuQuYMgFnSKfiaMwe_yOSYvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/d5daf8-4924-4bec-8518-aefc189fd851/1/SxzcuQuYMgFnSKfiaMwe_yOSYvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/SxzcuQuYMgFnSKfiaMwe_yOSYvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:46:0b:a4:07:d2:93:b6:a9:0f:0f:d0:c6:4f:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b1cdcb90b9832016748a7e268cc1eff239262f8
Validity
Not Before: Nov 11 07:01:33 2025 GMT
Not After : Nov 12 07:01:33 2025 GMT
Subject: CN=f702e55fcca1dbad4954d88c2cd1bf3fd91cd56d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:58:50:49:46:96:4d:af:8e:c0:0a:14:97:7b:
4b:a1:6a:3f:58:7a:a5:39:7f:69:21:a1:fb:53:94:
af:ba:8c:96:6d:6e:80:7e:3a:ac:69:e7:3a:40:35:
a9:4c:55:7b:18:ae:78:33:1c:84:5f:fd:5b:2d:75:
89:8e:00:26:26:35:79:51:aa:8f:fd:21:7c:6c:46:
9a:f2:08:84:ca:1d:2e:c2:21:5b:93:eb:cf:19:2d:
4f:33:6e:3f:80:28:c4:57:92:1e:a6:8c:6e:32:e2:
a7:55:49:0e:cc:f1:65:c3:76:2c:22:0a:e1:6b:69:
f0:0c:09:d7:1a:45:43:11:83:a9:61:ae:b6:ea:b4:
b0:87:49:7e:3f:64:ea:da:81:b6:e1:b2:07:de:54:
7a:94:44:8b:11:0f:4e:7c:dd:53:79:d2:34:aa:3d:
f1:24:c7:d5:7f:6a:f6:0a:3e:99:af:ce:e3:12:cb:
61:89:63:27:a3:7b:6f:76:4f:c3:72:35:47:62:fd:
d9:22:e3:d6:83:ce:33:49:70:3d:65:f7:72:26:7f:
47:d3:df:11:70:39:bb:29:6e:a2:e7:5c:04:4e:6c:
0d:36:9a:b1:92:01:e6:af:fb:b2:78:ab:aa:1d:1f:
91:13:2e:3c:e9:41:5d:0a:45:46:cf:8e:38:db:a2:
5f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:02:E5:5F:CC:A1:DB:AD:49:54:D8:8C:2C:D1:BF:3F:D9:1C:D5:6D
X509v3 Authority Key Identifier:
keyid:4B:1C:DC:B9:0B:98:32:01:67:48:A7:E2:68:CC:1E:FF:23:92:62:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SxzcuQuYMgFnSKfiaMwe_yOSYvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d5daf8-4924-4bec-8518-aefc189fd851/1/SxzcuQuYMgFnSKfiaMwe_yOSYvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d5daf8-4924-4bec-8518-aefc189fd851/1/SxzcuQuYMgFnSKfiaMwe_yOSYvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:44:cb:21:52:a3:14:ff:5b:41:e9:d5:51:32:37:4e:a7:60:
c1:e2:3f:09:18:d7:9c:ff:96:ae:9e:20:42:72:e4:9a:36:58:
a8:58:49:91:e3:2d:1d:30:fc:ed:a1:fb:1a:c9:0c:66:e1:bf:
70:df:e1:38:9d:de:3d:a5:0c:91:de:c0:68:56:4e:1a:25:76:
19:57:c7:35:52:de:dc:bc:52:a2:72:8a:c0:ca:35:25:0e:bf:
5a:19:bf:ff:53:b5:37:aa:28:5d:87:87:a5:02:5c:a2:f3:a4:
d7:78:28:79:cc:1d:24:62:9c:8b:04:16:f3:08:ea:50:60:51:
90:12:00:a6:df:da:eb:a5:6e:0b:71:41:84:e9:5b:fe:aa:7b:
af:43:e7:e4:cf:10:f7:10:7d:8a:74:4c:29:33:74:ed:80:df:
24:35:03:77:3c:2b:e1:be:18:5b:59:38:5b:1b:ef:e9:bc:69:
27:7a:d3:ba:ef:85:18:7a:8a:ed:83:02:57:c4:fe:d4:27:12:
3c:89:26:81:0b:b1:9d:28:4b:79:d5:db:c3:9c:eb:e1:ac:60:
28:82:0f:e3:ba:7d:41:00:c3:c6:6c:7f:e8:e9:41:06:b0:9a:
e8:72:20:5a:8c:9e:a7:2b:0a:55:9c:76:5d:bc:3f:96:0a:d0:
82:8d:c3:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuEYLpAfSk7apDw/Qxk/lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiMWNkY2I5MGI5ODMyMDE2NzQ4YTdlMjY4Y2MxZWZmMjM5
MjYyZjgwHhcNMjUxMTExMDcwMTMzWhcNMjUxMTEyMDcwMTMzWjAzMTEwLwYDVQQD
EyhmNzAyZTU1ZmNjYTFkYmFkNDk1NGQ4OGMyY2QxYmYzZmQ5MWNkNTZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVhQSUaWTa+OwAoUl3tLoWo/WHql
OX9pIaH7U5SvuoyWbW6Afjqsaec6QDWpTFV7GK54MxyEX/1bLXWJjgAmJjV5UaqP
/SF8bEaa8giEyh0uwiFbk+vPGS1PM24/gCjEV5IepoxuMuKnVUkOzPFlw3YsIgrh
a2nwDAnXGkVDEYOpYa626rSwh0l+P2Tq2oG24bIH3lR6lESLEQ9OfN1TedI0qj3x
JMfVf2r2Cj6Zr87jEsthiWMno3tvdk/DcjVHYv3ZIuPWg84zSXA9ZfdyJn9H098R
cDm7KW6i51wETmwNNpqxkgHmr/uyeKuqHR+REy486UFdCkVGz44426JfRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPcC5V/ModutSVTYjCzRvz/ZHNVtMB8GA1UdIwQY
MBaAFEsc3LkLmDIBZ0in4mjMHv8jkmL4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU3h6Y3VRdVlNZ0ZuU0tmaWFNd2VfeU9TWXZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9kNWRhZjgtNDkyNC00YmVjLTg1MTgt
YWVmYzE4OWZkODUxLzEvU3h6Y3VRdVlNZ0ZuU0tmaWFNd2VfeU9TWXZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC9kNWRhZjgtNDkyNC00YmVjLTg1MTgtYWVmYzE4OWZkODUx
LzEvU3h6Y3VRdVlNZ0ZuU0tmaWFNd2VfeU9TWXZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhETLIVKj
FP9bQenVUTI3TqdgweI/CRjXnP+Wrp4gQnLkmjZYqFhJkeMtHTD87aH7GskMZuG/
cN/hOJ3ePaUMkd7AaFZOGiV2GVfHNVLe3LxSonKKwMo1JQ6/Whm//1O1N6ooXYeH
pQJcovOk13goecwdJGKciwQW8wjqUGBRkBIApt/a66VuC3FBhOlb/qp7r0Pn5M8Q
9xB9inRMKTN07YDfJDUDdzwr4b4YW1k4Wxvv6bxpJ3rTuu+FGHqK7YMCV8T+1CcS
PIkmgQuxnShLedXbw5zr4axgKIIP47p9QQDDxmx/6OlBBrCa6HIgWoyepysKVZx2
Xbw/lgrQgo3Dcg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:51:27 2025 by rpki-client