Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.mft
File: 14gO0QIdDsrHEgVnOwBIE7Od_Jk.mft (raw, json)
Hash identifier: EcIGHezIZIsLKtDgUmijpGQz5EVHoXBH/TmBF46Wn58=
Subject key identifier: 7E:13:B2:D8:9A:53:BE:99:99:2D:C0:EF:67:5B:09:23:40:B6:A7:54
Authority key identifier: D7:88:0E:D1:02:1D:0E:CA:C7:12:05:67:3B:00:48:13:B3:9D:FC:99
Certificate issuer: /CN=d7880ed1021d0ecac71205673b004813b39dfc99
Certificate serial: 019A73388C31CFA7B2F551ACF5619568A167
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/14gO0QIdDsrHEgVnOwBIE7Od_Jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.mft
Manifest number: 1725
Signing time: Tue 11 Nov 2025 14:01:17 +0000
Manifest this update: Tue 11 Nov 2025 14:01:17 +0000
Manifest next update: Wed 12 Nov 2025 14:01:17 +0000
Files and hashes: 1: 1-lmapd5w9HD2F08R09w_tZRWCa0.roa (hash: wweZhb13in2MHBYbFFvgxz1Av+9tarTLaej3LMI0a4A=)
2: 14gO0QIdDsrHEgVnOwBIE7Od_Jk.crl (hash: ptX0qyCikosUEYD2QKwkL43Er0JUPLikSqKLpKfTxBw=)
3: kwtdCRFAZPjQFHCak21_zozRzyg.roa (hash: EWeYVWP/wMFz4uen+0vNjC0GMpRDuD50ya++g2lRAIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.mft
rsync://rpki.ripe.net/repository/DEFAULT/14gO0QIdDsrHEgVnOwBIE7Od_Jk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:38:8c:31:cf:a7:b2:f5:51:ac:f5:61:95:68:a1:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7880ed1021d0ecac71205673b004813b39dfc99
Validity
Not Before: Nov 11 14:01:17 2025 GMT
Not After : Nov 12 14:01:17 2025 GMT
Subject: CN=7e13b2d89a53be99992dc0ef675b092340b6a754
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7f:76:f2:16:22:42:76:93:9a:a4:98:2f:5c:
24:cc:15:a6:6b:96:cb:8c:0c:ac:03:90:4c:02:07:
21:ec:b1:1f:87:0c:3e:cf:89:5e:8e:8f:76:9b:74:
cf:e6:48:0c:5f:7a:30:7c:77:da:ea:76:06:46:95:
1a:d6:58:d7:2f:a4:4b:ac:7a:c4:13:64:aa:1c:e7:
6c:6b:5b:7e:7e:cf:da:c0:5e:6b:af:45:8d:fc:49:
ce:b7:04:63:e5:ca:ea:bd:3c:3d:dd:a7:16:25:b6:
4b:27:e3:cb:a6:c2:7c:ac:0d:63:70:0b:e0:e6:1d:
43:ae:ae:66:4e:8f:24:d0:0a:e4:0e:9d:e8:da:c9:
9d:67:c5:d1:28:c6:e9:18:dc:fa:ba:b5:25:ad:f4:
ba:8f:e8:42:a4:9a:58:b9:b2:77:ca:4c:89:18:35:
5e:99:52:04:c2:7f:68:57:b9:40:ff:80:ad:e2:ee:
59:10:cf:45:85:fb:44:c6:18:5c:48:a1:0e:79:3e:
9a:13:70:cf:ff:88:a9:81:f7:97:a0:85:6a:a3:c6:
13:b8:4f:d3:f1:c8:17:75:a7:e5:44:02:6a:2f:3a:
b9:af:f6:8a:76:12:34:56:47:44:45:fe:91:97:d6:
33:52:8d:89:df:02:59:c7:b3:48:11:23:78:3e:1c:
f1:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:13:B2:D8:9A:53:BE:99:99:2D:C0:EF:67:5B:09:23:40:B6:A7:54
X509v3 Authority Key Identifier:
keyid:D7:88:0E:D1:02:1D:0E:CA:C7:12:05:67:3B:00:48:13:B3:9D:FC:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/14gO0QIdDsrHEgVnOwBIE7Od_Jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:cb:ba:34:0c:15:cc:8f:fb:80:81:04:35:c4:28:1d:04:d4:
81:d3:29:48:1d:28:15:b3:f1:04:04:7d:58:4d:07:49:88:6f:
7c:c9:04:86:fa:0b:5d:2b:ca:4f:da:ef:36:f6:31:dc:ea:35:
4a:56:6f:c4:94:e1:af:11:20:c6:3b:94:29:84:b2:8b:2e:1f:
65:4b:a5:89:af:32:27:35:d0:98:f1:20:f6:06:8d:4a:ed:43:
01:3c:a0:53:24:84:bc:3f:31:e8:6c:99:d3:48:01:11:b6:9e:
49:5b:c0:07:73:fe:3e:39:c5:e8:bd:fd:ec:ca:9b:85:c5:2d:
a5:d5:f5:0a:6c:bb:eb:f9:75:d9:98:d5:86:cc:f6:27:bd:8e:
57:d0:6a:4a:7e:db:6c:36:0d:a3:f3:73:2c:e5:d3:6c:55:51:
51:ad:6d:eb:04:41:de:d5:03:3a:0e:69:01:1c:b7:55:cc:f0:
91:89:14:68:09:ef:be:93:f6:d3:c6:c4:9d:5c:8d:4f:b2:77:
3b:90:83:c9:39:3a:a3:5a:c4:08:1c:f6:67:00:75:5f:a3:53:
62:ec:c6:07:a8:75:ea:73:59:1e:98:a4:61:2a:e9:69:6b:08:
e6:4d:d7:64:3d:67:03:5a:87:29:0b:56:09:d0:93:1b:5e:a0:
de:f5:3a:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpzOIwxz6ey9VGs9WGVaKFnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3ODgwZWQxMDIxZDBlY2FjNzEyMDU2NzNiMDA0ODEzYjM5
ZGZjOTkwHhcNMjUxMTExMTQwMTE3WhcNMjUxMTEyMTQwMTE3WjAzMTEwLwYDVQQD
Eyg3ZTEzYjJkODlhNTNiZTk5OTkyZGMwZWY2NzViMDkyMzQwYjZhNzU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtH928hYiQnaTmqSYL1wkzBWma5bL
jAysA5BMAgch7LEfhww+z4lejo92m3TP5kgMX3owfHfa6nYGRpUa1ljXL6RLrHrE
E2SqHOdsa1t+fs/awF5rr0WN/EnOtwRj5crqvTw93acWJbZLJ+PLpsJ8rA1jcAvg
5h1Drq5mTo8k0ArkDp3o2smdZ8XRKMbpGNz6urUlrfS6j+hCpJpYubJ3ykyJGDVe
mVIEwn9oV7lA/4Ct4u5ZEM9FhftExhhcSKEOeT6aE3DP/4ipgfeXoIVqo8YTuE/T
8cgXdaflRAJqLzq5r/aKdhI0VkdERf6Rl9YzUo2J3wJZx7NIESN4PhzxRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH4TstiaU76ZmS3A72dbCSNAtqdUMB8GA1UdIwQY
MBaAFNeIDtECHQ7KxxIFZzsASBOznfyZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTRnTzBRSWREc3JIRWdWbk93QklFN09kX0prLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC83NTY1MDUtMjA2Mi00OWU3LTk0ZmUt
MDQ3NzdjMTk4ZWYxLzEvMTRnTzBRSWREc3JIRWdWbk93QklFN09kX0prLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC83NTY1MDUtMjA2Mi00OWU3LTk0ZmUtMDQ3NzdjMTk4ZWYx
LzEvMTRnTzBRSWREc3JIRWdWbk93QklFN09kX0prLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaMu6NAwV
zI/7gIEENcQoHQTUgdMpSB0oFbPxBAR9WE0HSYhvfMkEhvoLXSvKT9rvNvYx3Oo1
SlZvxJThrxEgxjuUKYSyiy4fZUulia8yJzXQmPEg9gaNSu1DATygUySEvD8x6GyZ
00gBEbaeSVvAB3P+PjnF6L397MqbhcUtpdX1Cmy76/l12ZjVhsz2J72OV9BqSn7b
bDYNo/NzLOXTbFVRUa1t6wRB3tUDOg5pARy3VczwkYkUaAnvvpP208bEnVyNT7J3
O5CDyTk6o1rECBz2ZwB1X6NTYuzGB6h16nNZHpikYSrpaWsI5k3XZD1nA1qHKQtW
CdCTG16g3vU67w==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:50:42 2025 by rpki-client