Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/2b9e29-d568-4d53-b128-488792388e5b/1/d9LZKEIxBOXDSA4htKPtFJiyon4.mft
File: d9LZKEIxBOXDSA4htKPtFJiyon4.mft (raw, json)
Hash identifier: d9k7UznSi3ub2JvdiwjA5nB1yQur51uljDroIvPcIKU=
Subject key identifier: 6D:7A:5F:F2:C1:15:8D:C3:D1:AB:98:3A:79:22:17:DE:8D:93:65:61
Authority key identifier: 77:D2:D9:28:42:31:04:E5:C3:48:0E:21:B4:A3:ED:14:98:B2:A2:7E
Certificate issuer: /CN=77d2d928423104e5c3480e21b4a3ed1498b2a27e
Certificate serial: 019A71B9267D1767187E6938BF1FA0DD2821
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d9LZKEIxBOXDSA4htKPtFJiyon4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/2b9e29-d568-4d53-b128-488792388e5b/1/d9LZKEIxBOXDSA4htKPtFJiyon4.mft
Manifest number: 0C97
Signing time: Tue 11 Nov 2025 07:02:30 +0000
Manifest this update: Tue 11 Nov 2025 07:02:30 +0000
Manifest next update: Wed 12 Nov 2025 07:02:30 +0000
Files and hashes: 1: HX3f5FZnDXBVPEnE5bxp-46XcDI.roa (hash: Cn4L/fOgVlSahDb0v8tdmodjivbISS4FJEJArlg0b+Y=)
2: d9LZKEIxBOXDSA4htKPtFJiyon4.crl (hash: /fEr4V46dx/jtILvs3JNMyTU/QMuncUiEmwpEJMvxSk=)
3: jKFJgU1IkNXTMlJ4fb3SLPhpIEs.roa (hash: gVNSWZlrE4CqYnhrjWkiPYyY6GBkTGDHd/hL4ezDiUs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/2b9e29-d568-4d53-b128-488792388e5b/1/d9LZKEIxBOXDSA4htKPtFJiyon4.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/2b9e29-d568-4d53-b128-488792388e5b/1/d9LZKEIxBOXDSA4htKPtFJiyon4.mft
rsync://rpki.ripe.net/repository/DEFAULT/d9LZKEIxBOXDSA4htKPtFJiyon4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:26:7d:17:67:18:7e:69:38:bf:1f:a0:dd:28:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77d2d928423104e5c3480e21b4a3ed1498b2a27e
Validity
Not Before: Nov 11 07:02:30 2025 GMT
Not After : Nov 12 07:02:30 2025 GMT
Subject: CN=6d7a5ff2c1158dc3d1ab983a792217de8d936561
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:7c:3b:38:f9:81:96:17:cf:7e:0d:e8:de:ca:
28:0f:74:90:5f:5a:04:9e:57:f4:87:0e:1c:b7:ba:
e3:ec:d4:95:45:05:f1:1a:e8:1d:b7:34:0a:f2:1b:
18:0f:1f:be:d9:4c:d3:1f:97:12:ff:63:e6:74:f3:
e4:73:32:a6:18:4f:9e:34:b4:f6:ce:0f:3b:02:6a:
13:13:73:29:76:20:a4:af:41:31:b8:f6:d7:6f:df:
f0:a1:41:21:de:8c:3a:61:df:4d:b3:6e:13:a6:9e:
12:0e:45:27:cd:e3:e5:6f:a6:9e:82:d8:a6:c8:57:
93:0c:34:1b:32:bc:04:5e:f0:31:e3:de:29:79:73:
1f:0d:70:5d:65:61:7d:3e:c4:01:1b:66:49:45:2e:
3b:bf:1d:e1:05:23:21:b4:59:88:b9:f4:83:9f:fb:
78:33:9e:4e:df:dd:dd:85:71:f4:af:3f:6b:0d:0e:
6d:35:31:06:97:b4:25:18:4c:98:93:fc:4f:3d:7d:
e2:ec:ac:ca:c0:63:8b:24:9f:8e:a3:9b:fd:82:e4:
d6:54:b8:a7:69:bc:e7:9d:e8:4e:69:83:6e:17:16:
89:95:ab:9a:01:a3:20:3a:f0:93:ca:ca:98:85:4b:
21:f6:38:65:08:9c:77:ef:f4:61:08:d7:47:cd:89:
9b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:7A:5F:F2:C1:15:8D:C3:D1:AB:98:3A:79:22:17:DE:8D:93:65:61
X509v3 Authority Key Identifier:
keyid:77:D2:D9:28:42:31:04:E5:C3:48:0E:21:B4:A3:ED:14:98:B2:A2:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9LZKEIxBOXDSA4htKPtFJiyon4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/2b9e29-d568-4d53-b128-488792388e5b/1/d9LZKEIxBOXDSA4htKPtFJiyon4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/2b9e29-d568-4d53-b128-488792388e5b/1/d9LZKEIxBOXDSA4htKPtFJiyon4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:e9:96:af:c4:b7:01:33:e0:43:78:d6:8d:d2:23:07:a1:73:
76:c4:90:f2:15:77:ff:ec:a6:ce:cb:fa:79:ef:7f:78:ce:75:
23:5a:a1:d3:fc:01:cb:1e:90:c9:53:a4:57:99:f3:1e:7d:e1:
b6:a1:ad:88:49:6b:ba:15:1e:8e:af:1f:4c:b3:9a:f2:59:bb:
4e:4e:f2:19:6d:e6:ff:9d:e2:38:a0:3a:2c:65:ff:1b:1e:25:
5a:ef:8e:0e:69:61:c9:c2:b1:ab:3f:b9:e5:45:6a:25:a4:e8:
cb:8a:87:ac:43:b4:9e:54:de:1e:b4:e4:ec:3d:fb:ea:14:07:
2b:ae:0a:15:47:ac:a7:13:02:46:de:76:e7:ef:b5:e9:1d:0e:
c9:c9:98:9b:dd:80:a7:94:c1:19:99:6f:41:26:b6:64:d3:8d:
38:75:31:04:ab:99:04:29:5a:84:6d:6c:f9:af:b8:0f:f8:57:
63:10:e5:2d:9d:ad:b0:0e:1a:27:1c:32:6c:38:b1:4b:4d:1a:
d7:d1:62:6a:96:b7:0e:11:60:b4:9f:05:5f:ed:d9:e3:3d:51:
b5:00:40:0f:d2:c3:2c:53:2e:bc:7b:77:5c:91:e4:01:c2:a0:
61:34:37:ae:9a:42:24:b1:3f:b6:16:8f:b7:bb:f9:d9:34:73:
0c:e6:00:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuSZ9F2cYfmk4vx+g3SghMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3ZDJkOTI4NDIzMTA0ZTVjMzQ4MGUyMWI0YTNlZDE0OThi
MmEyN2UwHhcNMjUxMTExMDcwMjMwWhcNMjUxMTEyMDcwMjMwWjAzMTEwLwYDVQQD
Eyg2ZDdhNWZmMmMxMTU4ZGMzZDFhYjk4M2E3OTIyMTdkZThkOTM2NTYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwnw7OPmBlhfPfg3o3sooD3SQX1oE
nlf0hw4ct7rj7NSVRQXxGugdtzQK8hsYDx++2UzTH5cS/2PmdPPkczKmGE+eNLT2
zg87AmoTE3MpdiCkr0ExuPbXb9/woUEh3ow6Yd9Ns24Tpp4SDkUnzePlb6aegtim
yFeTDDQbMrwEXvAx494peXMfDXBdZWF9PsQBG2ZJRS47vx3hBSMhtFmIufSDn/t4
M55O393dhXH0rz9rDQ5tNTEGl7QlGEyYk/xPPX3i7KzKwGOLJJ+Oo5v9guTWVLin
abznnehOaYNuFxaJlauaAaMgOvCTysqYhUsh9jhlCJx37/RhCNdHzYmb4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG16X/LBFY3D0auYOnkiF96Nk2VhMB8GA1UdIwQY
MBaAFHfS2ShCMQTlw0gOIbSj7RSYsqJ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDlMWktFSXhCT1hEU0E0aHRLUHRGSml5b240LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS8yYjllMjktZDU2OC00ZDUzLWIxMjgt
NDg4NzkyMzg4ZTViLzEvZDlMWktFSXhCT1hEU0E0aHRLUHRGSml5b240Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS8yYjllMjktZDU2OC00ZDUzLWIxMjgtNDg4NzkyMzg4ZTVi
LzEvZDlMWktFSXhCT1hEU0E0aHRLUHRGSml5b240LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmOmWr8S3
ATPgQ3jWjdIjB6FzdsSQ8hV3/+ymzsv6ee9/eM51I1qh0/wByx6QyVOkV5nzHn3h
tqGtiElruhUejq8fTLOa8lm7Tk7yGW3m/53iOKA6LGX/Gx4lWu+ODmlhycKxqz+5
5UVqJaToy4qHrEO0nlTeHrTk7D376hQHK64KFUespxMCRt525++16R0OycmYm92A
p5TBGZlvQSa2ZNONOHUxBKuZBClahG1s+a+4D/hXYxDlLZ2tsA4aJxwybDixS00a
19Fiapa3DhFgtJ8FX+3Z4z1RtQBAD9LDLFMuvHt3XJHkAcKgYTQ3rppCJLE/thaP
t7v52TRzDOYArg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:34:58 2025 by rpki-client