Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/8941f8-9fb6-4d0f-b495-93385f805655/1/dAId0eJ80ed44tu9YKoYSxY7zv4.mft
File: dAId0eJ80ed44tu9YKoYSxY7zv4.mft (raw, json)
Hash identifier: wYwXXsFKkySYtrr5QhqIxND6rAfWswGLvam2oqQuGxQ=
Subject key identifier: A9:C4:A1:41:EB:F0:A9:5F:14:1F:9E:A3:03:D7:84:26:CA:9F:D0:64
Authority key identifier: 74:02:1D:D1:E2:7C:D1:E7:78:E2:DB:BD:60:AA:18:4B:16:3B:CE:FE
Certificate issuer: /CN=74021dd1e27cd1e778e2dbbd60aa184b163bcefe
Certificate serial: 019A70A509D9C98B771B0035A2D6D88650A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dAId0eJ80ed44tu9YKoYSxY7zv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/8941f8-9fb6-4d0f-b495-93385f805655/1/dAId0eJ80ed44tu9YKoYSxY7zv4.mft
Manifest number: 0274
Signing time: Tue 11 Nov 2025 02:00:55 +0000
Manifest this update: Tue 11 Nov 2025 02:00:55 +0000
Manifest next update: Wed 12 Nov 2025 02:00:55 +0000
Files and hashes: 1: SFufe6GxPr18jUulsobsVcJNabA.roa (hash: BS7brnhU1ziQ1RkRsO80taFEBA/xtbs+mzY1lj67wlg=)
2: dAId0eJ80ed44tu9YKoYSxY7zv4.crl (hash: 8BGviuAgaf//WnVRurgr/1bCfXIQDDwCvnG4KhzuRkY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/8941f8-9fb6-4d0f-b495-93385f805655/1/dAId0eJ80ed44tu9YKoYSxY7zv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/8941f8-9fb6-4d0f-b495-93385f805655/1/dAId0eJ80ed44tu9YKoYSxY7zv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/dAId0eJ80ed44tu9YKoYSxY7zv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:09:d9:c9:8b:77:1b:00:35:a2:d6:d8:86:50:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74021dd1e27cd1e778e2dbbd60aa184b163bcefe
Validity
Not Before: Nov 11 02:00:55 2025 GMT
Not After : Nov 12 02:00:55 2025 GMT
Subject: CN=a9c4a141ebf0a95f141f9ea303d78426ca9fd064
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:94:75:11:76:3b:e7:5f:e7:4c:8f:a4:9c:8f:
4f:23:b1:ca:42:53:47:1a:f3:25:16:c4:75:d1:9d:
65:4a:3c:e9:57:11:4b:fa:7e:13:c0:8a:75:40:64:
62:b0:ba:ea:fa:ac:ea:1c:63:71:6f:ee:4a:63:d3:
ec:10:8f:07:e4:65:1e:3c:8f:5e:d8:5d:5f:e8:f9:
94:59:93:30:40:80:a2:a9:a6:9f:05:29:c0:fe:1b:
65:87:20:a9:d3:55:76:11:da:16:d0:00:87:88:01:
1c:5c:89:cf:73:6a:5b:5c:ae:b2:c4:c9:15:ca:72:
bf:29:4c:1a:cd:87:65:cd:c8:99:5c:7e:29:92:90:
8b:40:c7:d9:2a:7a:65:cc:11:34:0a:5c:77:94:45:
ab:a0:f7:46:81:0d:27:e2:57:bb:ba:ce:7e:f9:29:
90:b8:9c:5e:25:ce:7d:cc:29:b7:f9:ed:cc:ea:2d:
f9:0d:23:f0:0d:cc:87:f1:ca:98:7c:24:34:67:9e:
1a:9d:da:91:2a:f5:b1:65:d1:86:e7:4e:ce:5f:77:
45:45:26:c9:f8:54:6c:e2:4d:34:a6:c9:09:29:4c:
a1:0b:f7:d4:10:8f:df:60:76:c3:eb:f7:50:87:82:
32:b0:e9:de:45:29:f3:3c:de:56:54:df:ae:02:c1:
cf:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:C4:A1:41:EB:F0:A9:5F:14:1F:9E:A3:03:D7:84:26:CA:9F:D0:64
X509v3 Authority Key Identifier:
keyid:74:02:1D:D1:E2:7C:D1:E7:78:E2:DB:BD:60:AA:18:4B:16:3B:CE:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dAId0eJ80ed44tu9YKoYSxY7zv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/8941f8-9fb6-4d0f-b495-93385f805655/1/dAId0eJ80ed44tu9YKoYSxY7zv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/8941f8-9fb6-4d0f-b495-93385f805655/1/dAId0eJ80ed44tu9YKoYSxY7zv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:fd:76:1e:8b:46:b1:ea:b8:44:bd:9c:7e:f7:6c:95:d9:ae:
bd:8e:ef:6f:54:12:a2:9d:53:a3:16:25:9f:05:d9:59:36:3b:
09:8f:a5:cb:64:32:cd:e9:80:50:98:5c:84:ae:11:4b:d7:23:
4c:74:72:d8:5f:f5:8b:63:d7:fe:60:5a:52:6a:a5:34:00:26:
80:6d:7a:bf:52:46:20:6a:89:68:ee:9e:95:50:80:b0:64:40:
e8:cc:0e:51:61:df:7c:d6:d8:78:b6:fb:7a:73:b3:92:b3:cf:
0a:39:b8:61:c9:37:fa:64:cd:85:8d:59:b0:54:16:dc:7f:62:
28:28:1b:2a:03:24:e5:c5:2b:26:96:3b:e7:bc:7c:e8:18:77:
c0:6b:89:21:45:26:7e:b4:bd:53:f8:e8:d1:7e:c8:2f:f3:44:
72:54:16:75:a4:5c:d8:ae:65:e5:1d:58:5d:b7:95:40:4c:cf:
0a:49:99:55:ad:03:98:d9:2f:bc:56:2e:3d:29:72:57:b0:d7:
29:b7:59:4e:be:54:b2:ae:72:41:e6:2c:62:65:79:f3:1a:97:
40:2b:ec:06:d0:2e:a2:ef:46:71:69:11:a1:1f:05:90:65:d9:
62:62:9d:6e:80:2a:01:eb:76:38:93:bd:da:02:06:71:0d:65:
bd:d8:06:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpwpQnZyYt3GwA1otbYhlCnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0MDIxZGQxZTI3Y2QxZTc3OGUyZGJiZDYwYWExODRiMTYz
YmNlZmUwHhcNMjUxMTExMDIwMDU1WhcNMjUxMTEyMDIwMDU1WjAzMTEwLwYDVQQD
EyhhOWM0YTE0MWViZjBhOTVmMTQxZjllYTMwM2Q3ODQyNmNhOWZkMDY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJR1EXY751/nTI+knI9PI7HKQlNH
GvMlFsR10Z1lSjzpVxFL+n4TwIp1QGRisLrq+qzqHGNxb+5KY9PsEI8H5GUePI9e
2F1f6PmUWZMwQICiqaafBSnA/htlhyCp01V2EdoW0ACHiAEcXInPc2pbXK6yxMkV
ynK/KUwazYdlzciZXH4pkpCLQMfZKnplzBE0Clx3lEWroPdGgQ0n4le7us5++SmQ
uJxeJc59zCm3+e3M6i35DSPwDcyH8cqYfCQ0Z54andqRKvWxZdGG507OX3dFRSbJ
+FRs4k00pskJKUyhC/fUEI/fYHbD6/dQh4IysOneRSnzPN5WVN+uAsHP0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKnEoUHr8KlfFB+eowPXhCbKn9BkMB8GA1UdIwQY
MBaAFHQCHdHifNHneOLbvWCqGEsWO87+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEFJZDBlSjgwZWQ0NHR1OVlLb1lTeFk3enY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC84OTQxZjgtOWZiNi00ZDBmLWI0OTUt
OTMzODVmODA1NjU1LzEvZEFJZDBlSjgwZWQ0NHR1OVlLb1lTeFk3enY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC84OTQxZjgtOWZiNi00ZDBmLWI0OTUtOTMzODVmODA1NjU1
LzEvZEFJZDBlSjgwZWQ0NHR1OVlLb1lTeFk3enY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAf12HotG
seq4RL2cfvdsldmuvY7vb1QSop1ToxYlnwXZWTY7CY+ly2QyzemAUJhchK4RS9cj
THRy2F/1i2PX/mBaUmqlNAAmgG16v1JGIGqJaO6elVCAsGRA6MwOUWHffNbYeLb7
enOzkrPPCjm4Yck3+mTNhY1ZsFQW3H9iKCgbKgMk5cUrJpY757x86Bh3wGuJIUUm
frS9U/jo0X7IL/NEclQWdaRc2K5l5R1YXbeVQEzPCkmZVa0DmNkvvFYuPSlyV7DX
KbdZTr5Usq5yQeYsYmV58xqXQCvsBtAuou9GcWkRoR8FkGXZYmKdboAqAet2OJO9
2gIGcQ1lvdgGfA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:23 2025 by rpki-client