Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/cJSkJVlekjxLU7nAAKqPGa2SPyA.mft
File: cJSkJVlekjxLU7nAAKqPGa2SPyA.mft (raw, json)
Hash identifier: pfMaUbUCv1hC15i1BgQA0dQRkm5c5rtVRXZ+lzGM0bw=
Subject key identifier: 9A:5D:4F:5A:53:F5:D6:3C:0B:C0:D9:C0:96:AB:67:9F:AF:9D:7B:A7
Authority key identifier: 70:94:A4:25:59:5E:92:3C:4B:53:B9:C0:00:AA:8F:19:AD:92:3F:20
Certificate issuer: /CN=7094a425595e923c4b53b9c000aa8f19ad923f20
Certificate serial: 019A225245D14E5E3B6460C288A0E7CF6E3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cJSkJVlekjxLU7nAAKqPGa2SPyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/cJSkJVlekjxLU7nAAKqPGa2SPyA.mft
Manifest number: 130D
Signing time: Sun 26 Oct 2025 21:00:08 +0000
Manifest this update: Sun 26 Oct 2025 21:00:08 +0000
Manifest next update: Mon 27 Oct 2025 21:00:08 +0000
Files and hashes: 1: ErcDe0XtLYd6d7uV6p9EKzdm4nk.roa (hash: 9p84KRKbOU/bcvDuyS4jKGMGlhWUqv7TM1ev7aRzlJY=)
2: GgOjLst_2cOjWFXXQ04HdoXttH4.roa (hash: z2Rfj6acoKtcXjm6dwLXQBUNElg6LrojkoNiCuSKCms=)
3: RUbC7Anwng13DAmADxwjexI1dI4.roa (hash: z1iIQJGzT3kqShcPysOpmjaiqY2qZ/jm3snobkdy6yE=)
4: StWwJRIdLVG2AMr41LeqT3VLiMY.roa (hash: eHQmJVkUkkZ8vtMtrgklqHvKfJQIUIWoCE0Hf2r79IE=)
5: cJSkJVlekjxLU7nAAKqPGa2SPyA.crl (hash: po7ni/NVtWTliv0f1FnUZLAG93g/6UXwmWLnfSVhzc0=)
6: gp9nHU_cukvMULZAvDnIuT6ptiM.roa (hash: 7wIfWYcUlSAbfRukKEeXPASEhd8fL4WRrL0l2D1YuTg=)
7: rSaIHtGhDT0jOkbwk5w9J-_5svc.roa (hash: DVoLZl1ZXv/1pFpFxvGq3uqDR2CUE2IcgixTkQGHWKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/cJSkJVlekjxLU7nAAKqPGa2SPyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/cJSkJVlekjxLU7nAAKqPGa2SPyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/cJSkJVlekjxLU7nAAKqPGa2SPyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 14:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:52:45:d1:4e:5e:3b:64:60:c2:88:a0:e7:cf:6e:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7094a425595e923c4b53b9c000aa8f19ad923f20
Validity
Not Before: Oct 26 21:00:08 2025 GMT
Not After : Oct 27 21:00:08 2025 GMT
Subject: CN=9a5d4f5a53f5d63c0bc0d9c096ab679faf9d7ba7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c3:c3:e5:01:9a:f4:7f:08:a5:c1:c8:24:54:
33:60:26:e7:61:43:af:f6:97:99:02:f2:bf:bc:df:
9d:63:77:13:8c:75:7f:9f:5a:3c:f5:1a:71:c0:f8:
f6:90:8a:01:31:ba:22:70:d1:fd:9d:78:a4:c4:70:
37:77:b9:ba:bb:c7:4e:1a:91:09:e2:eb:14:b2:1a:
c5:2d:18:4d:bf:06:9d:a7:0f:5a:2b:53:06:da:0c:
d0:69:4c:87:12:4c:da:93:91:a5:46:be:84:8d:21:
40:c5:24:50:44:52:c7:3d:c0:dd:6d:c2:aa:1a:03:
1a:e3:67:92:2f:61:9b:26:36:a8:4f:4d:8c:e6:5c:
c0:e8:17:82:15:fb:c1:3f:47:bf:1a:75:2c:91:dd:
07:9c:a3:0a:8d:08:4e:e3:36:60:3b:73:2b:04:bc:
19:59:18:b2:44:46:31:63:35:07:6e:ed:42:2e:7b:
7d:99:fe:9f:3f:be:c5:3b:2b:84:8b:4f:d1:49:69:
2a:3c:d3:17:b4:7d:32:64:ae:22:b7:af:78:bc:c8:
f6:9c:92:79:ca:f5:c4:58:1e:76:a0:ba:f1:23:7e:
a0:4a:93:e6:00:4d:28:13:2b:c0:89:dc:38:10:1d:
cb:0f:01:59:e7:bb:ae:0a:b2:62:0f:23:bc:3c:bd:
d4:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:5D:4F:5A:53:F5:D6:3C:0B:C0:D9:C0:96:AB:67:9F:AF:9D:7B:A7
X509v3 Authority Key Identifier:
keyid:70:94:A4:25:59:5E:92:3C:4B:53:B9:C0:00:AA:8F:19:AD:92:3F:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cJSkJVlekjxLU7nAAKqPGa2SPyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/cJSkJVlekjxLU7nAAKqPGa2SPyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/cJSkJVlekjxLU7nAAKqPGa2SPyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:4f:f0:c0:23:b6:66:7b:26:f6:55:7b:df:20:a5:7f:bf:01:
c0:2a:05:17:7c:08:8e:9c:f7:13:ef:6b:68:2c:a0:b7:ea:59:
b5:76:02:1b:7f:eb:a9:2a:ab:51:d2:56:85:3a:64:41:fc:37:
f8:bb:47:1f:a8:53:44:4d:2e:38:3c:98:37:87:65:f5:15:c3:
7b:17:1c:2b:3e:66:fc:06:09:76:02:b4:a9:2e:2c:77:b5:9c:
f4:67:f8:cb:d4:0c:e9:a0:e9:b5:d3:84:9b:ae:32:b1:dc:d4:
3e:32:dc:3a:99:63:f7:a7:1d:8e:88:e1:a3:41:03:6f:86:8f:
98:0a:bb:00:de:bd:e3:74:a3:f6:7b:08:ab:cd:54:8b:7c:b9:
ad:f1:4f:42:ef:bc:b3:09:05:c0:3f:2a:26:15:9f:68:fd:e0:
fb:49:89:e7:70:7c:a4:58:b4:27:73:11:60:97:b4:3c:e4:36:
32:e5:88:fa:8d:fc:f5:99:2f:15:58:7c:b4:4a:42:02:b4:d4:
bc:b9:b3:39:29:ca:6d:fc:d6:dc:f1:83:5b:e8:91:8c:1f:84:
bf:ed:cf:47:bc:45:08:44:3a:98:f0:5c:57:2c:bb:d3:cc:5c:
35:df:7d:f5:ae:20:36:22:88:ca:56:44:6a:73:89:06:30:83:
82:53:03:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoiUkXRTl47ZGDCiKDnz24/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwOTRhNDI1NTk1ZTkyM2M0YjUzYjljMDAwYWE4ZjE5YWQ5
MjNmMjAwHhcNMjUxMDI2MjEwMDA4WhcNMjUxMDI3MjEwMDA4WjAzMTEwLwYDVQQD
Eyg5YTVkNGY1YTUzZjVkNjNjMGJjMGQ5YzA5NmFiNjc5ZmFmOWQ3YmE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyMPD5QGa9H8IpcHIJFQzYCbnYUOv
9peZAvK/vN+dY3cTjHV/n1o89RpxwPj2kIoBMboicNH9nXikxHA3d7m6u8dOGpEJ
4usUshrFLRhNvwadpw9aK1MG2gzQaUyHEkzak5GlRr6EjSFAxSRQRFLHPcDdbcKq
GgMa42eSL2GbJjaoT02M5lzA6BeCFfvBP0e/GnUskd0HnKMKjQhO4zZgO3MrBLwZ
WRiyREYxYzUHbu1CLnt9mf6fP77FOyuEi0/RSWkqPNMXtH0yZK4it694vMj2nJJ5
yvXEWB52oLrxI36gSpPmAE0oEyvAidw4EB3LDwFZ57uuCrJiDyO8PL3URwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJpdT1pT9dY8C8DZwJarZ5+vnXunMB8GA1UdIwQY
MBaAFHCUpCVZXpI8S1O5wACqjxmtkj8gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0pTa0pWbGVranhMVTduQUFLcVBHYTJTUHlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS85NjMxNzAtNThiZS00NmJiLWE1ZGUt
Nzc3MzczZTYwNTVlLzEvY0pTa0pWbGVranhMVTduQUFLcVBHYTJTUHlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS85NjMxNzAtNThiZS00NmJiLWE1ZGUtNzc3MzczZTYwNTVl
LzEvY0pTa0pWbGVranhMVTduQUFLcVBHYTJTUHlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsk/wwCO2
Znsm9lV73yClf78BwCoFF3wIjpz3E+9raCygt+pZtXYCG3/rqSqrUdJWhTpkQfw3
+LtHH6hTRE0uODyYN4dl9RXDexccKz5m/AYJdgK0qS4sd7Wc9Gf4y9QM6aDptdOE
m64ysdzUPjLcOplj96cdjojho0EDb4aPmAq7AN6943Sj9nsIq81Ui3y5rfFPQu+8
swkFwD8qJhWfaP3g+0mJ53B8pFi0J3MRYJe0POQ2MuWI+o389ZkvFVh8tEpCArTU
vLmzOSnKbfzW3PGDW+iRjB+Ev+3PR7xFCEQ6mPBcVyy708xcNd999a4gNiKIylZE
anOJBjCDglMDIA==
-----END CERTIFICATE-----
Generated at Sun Oct 26 23:17:46 2025 by rpki-client