Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/3347f7-5259-4238-adb6-835de0f5892e/1/x24D_30L_eMoOcKP7IHGJ1wE0z8.mft
File: x24D_30L_eMoOcKP7IHGJ1wE0z8.mft (raw, json)
Hash identifier: g+Vv2w/hXmpAdtZ4V6COfqAGsU8yy8QcemT4Sq/uSFU=
Subject key identifier: FE:11:33:0D:1B:3D:B9:9A:A0:54:FA:2C:AF:16:4F:32:AE:F4:62:D0
Authority key identifier: C7:6E:03:FF:7D:0B:FD:E3:28:39:C2:8F:EC:81:C6:27:5C:04:D3:3F
Certificate issuer: /CN=c76e03ff7d0bfde32839c28fec81c6275c04d33f
Certificate serial: 019A72CA85533FC889F37C60952E227E5C38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x24D_30L_eMoOcKP7IHGJ1wE0z8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/3347f7-5259-4238-adb6-835de0f5892e/1/x24D_30L_eMoOcKP7IHGJ1wE0z8.mft
Manifest number: 1722
Signing time: Tue 11 Nov 2025 12:01:06 +0000
Manifest this update: Tue 11 Nov 2025 12:01:06 +0000
Manifest next update: Wed 12 Nov 2025 12:01:06 +0000
Files and hashes: 1: N35ogLyeBi2BuFWlUXcGcxqHzqk.roa (hash: KCN204MjqT3ieOgIgu9cP0A/BCFFBOWU+ExI90E1Oec=)
2: gMMT4CFkCWRYtDrF3UxIZfPsxKc.roa (hash: 2/OhbtZSnC9mHzUn7UoTXNOmX1wP26fthpipUmjf41Y=)
3: x24D_30L_eMoOcKP7IHGJ1wE0z8.crl (hash: pXc6ISNhj3u1XxiKeiuZTh5NmfGDYDFSwqmCy0GK6IU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/3347f7-5259-4238-adb6-835de0f5892e/1/x24D_30L_eMoOcKP7IHGJ1wE0z8.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/3347f7-5259-4238-adb6-835de0f5892e/1/x24D_30L_eMoOcKP7IHGJ1wE0z8.mft
rsync://rpki.ripe.net/repository/DEFAULT/x24D_30L_eMoOcKP7IHGJ1wE0z8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:85:53:3f:c8:89:f3:7c:60:95:2e:22:7e:5c:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c76e03ff7d0bfde32839c28fec81c6275c04d33f
Validity
Not Before: Nov 11 12:01:06 2025 GMT
Not After : Nov 12 12:01:06 2025 GMT
Subject: CN=fe11330d1b3db99aa054fa2caf164f32aef462d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:04:e7:ca:25:2a:05:ad:c4:64:fb:e6:77:5e:
3b:0e:71:51:27:78:f1:39:7d:9b:73:ce:a2:91:19:
38:f5:74:0f:57:49:48:4d:3d:22:87:16:6f:ed:39:
31:1e:aa:2d:b4:7b:c5:b8:7d:4d:a4:af:5f:bb:90:
ec:19:ec:2c:04:02:56:88:ef:3e:da:a6:53:4f:27:
fa:35:f5:e9:9e:86:f6:e1:c8:d8:6c:d9:35:5d:89:
d5:8c:34:dc:c9:0e:01:07:f8:c2:29:aa:81:e3:8a:
28:50:6b:66:4f:90:e0:cc:1f:a3:80:37:eb:b5:69:
2b:b0:b1:26:7b:5e:62:14:87:e2:99:b7:5e:76:c2:
b1:38:f3:1a:4f:01:f5:e2:e2:18:8e:62:38:f7:e8:
79:4d:12:da:b4:f3:80:b2:17:4e:4e:ba:e2:47:bc:
f2:d8:79:14:f4:c2:95:c1:55:25:5f:ea:c5:d5:d7:
9a:5b:2b:35:a0:b6:7b:49:19:06:0d:bd:83:55:92:
9e:00:5d:83:0b:da:e3:2d:e4:3a:c2:9f:e8:18:54:
1d:e2:ca:56:43:cb:b8:3b:0d:e1:e7:8d:fe:93:9c:
9b:d7:9d:23:0b:f1:5e:61:44:93:ff:2b:3b:6b:88:
e0:c4:74:1b:cb:b3:39:17:90:9a:96:8b:e1:46:f8:
82:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:11:33:0D:1B:3D:B9:9A:A0:54:FA:2C:AF:16:4F:32:AE:F4:62:D0
X509v3 Authority Key Identifier:
keyid:C7:6E:03:FF:7D:0B:FD:E3:28:39:C2:8F:EC:81:C6:27:5C:04:D3:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x24D_30L_eMoOcKP7IHGJ1wE0z8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/3347f7-5259-4238-adb6-835de0f5892e/1/x24D_30L_eMoOcKP7IHGJ1wE0z8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/3347f7-5259-4238-adb6-835de0f5892e/1/x24D_30L_eMoOcKP7IHGJ1wE0z8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:e9:8c:3e:32:22:70:2a:06:75:6a:7a:b4:72:62:b7:63:01:
1d:72:10:5f:a1:a8:02:b9:ab:7a:ec:20:4c:f4:36:fd:d0:47:
ae:34:95:92:93:64:d7:f1:15:57:d7:cd:7c:2f:a9:d6:34:b9:
33:aa:2e:b4:7f:52:de:14:74:f5:c3:46:bb:20:4c:b1:48:3d:
5d:49:e0:2b:4a:49:1a:d2:7a:43:17:21:8f:42:f1:a4:41:29:
f9:19:c9:a9:7e:8b:21:b4:c1:50:f1:27:fb:e9:15:5d:28:eb:
a1:a8:ee:3f:95:42:04:c7:34:eb:f6:79:ae:e5:95:7e:c3:4b:
b5:0f:a6:3b:3c:7d:22:d3:5f:40:6f:7a:f5:e9:50:90:6f:c4:
e5:38:66:37:33:bb:85:f5:c3:28:98:58:42:c1:29:0f:9e:25:
af:d9:4a:14:87:8b:e6:8c:bf:48:a9:19:4b:57:bf:3c:4e:e9:
0a:f3:35:b0:97:66:5a:40:53:19:08:9b:83:92:46:d6:64:e3:
8d:44:d4:0e:58:7f:0f:9b:02:59:6e:fd:64:17:d2:aa:12:b8:
3f:7b:97:5a:67:42:7b:37:8b:6d:44:d0:4d:97:a7:18:87:f0:
5c:fd:33:c6:64:a2:9e:50:41:bd:7a:b5:1f:24:85:a0:8b:2f:
fd:9e:5b:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyyoVTP8iJ83xglS4iflw4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3NmUwM2ZmN2QwYmZkZTMyODM5YzI4ZmVjODFjNjI3NWMw
NGQzM2YwHhcNMjUxMTExMTIwMTA2WhcNMjUxMTEyMTIwMTA2WjAzMTEwLwYDVQQD
EyhmZTExMzMwZDFiM2RiOTlhYTA1NGZhMmNhZjE2NGYzMmFlZjQ2MmQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQTnyiUqBa3EZPvmd147DnFRJ3jx
OX2bc86ikRk49XQPV0lITT0ihxZv7TkxHqottHvFuH1NpK9fu5DsGewsBAJWiO8+
2qZTTyf6NfXpnob24cjYbNk1XYnVjDTcyQ4BB/jCKaqB44ooUGtmT5DgzB+jgDfr
tWkrsLEme15iFIfimbdedsKxOPMaTwH14uIYjmI49+h5TRLatPOAshdOTrriR7zy
2HkU9MKVwVUlX+rF1deaWys1oLZ7SRkGDb2DVZKeAF2DC9rjLeQ6wp/oGFQd4spW
Q8u4Ow3h543+k5yb150jC/FeYUST/ys7a4jgxHQby7M5F5CalovhRviCOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP4RMw0bPbmaoFT6LK8WTzKu9GLQMB8GA1UdIwQY
MBaAFMduA/99C/3jKDnCj+yBxidcBNM/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDI0RF8zMExfZU1vT2NLUDdJSEdKMXdFMHo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8zMzQ3ZjctNTI1OS00MjM4LWFkYjYt
ODM1ZGUwZjU4OTJlLzEveDI0RF8zMExfZU1vT2NLUDdJSEdKMXdFMHo4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8zMzQ3ZjctNTI1OS00MjM4LWFkYjYtODM1ZGUwZjU4OTJl
LzEveDI0RF8zMExfZU1vT2NLUDdJSEdKMXdFMHo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgumMPjIi
cCoGdWp6tHJit2MBHXIQX6GoArmreuwgTPQ2/dBHrjSVkpNk1/EVV9fNfC+p1jS5
M6outH9S3hR09cNGuyBMsUg9XUngK0pJGtJ6Qxchj0LxpEEp+RnJqX6LIbTBUPEn
++kVXSjroajuP5VCBMc06/Z5ruWVfsNLtQ+mOzx9ItNfQG969elQkG/E5ThmNzO7
hfXDKJhYQsEpD54lr9lKFIeL5oy/SKkZS1e/PE7pCvM1sJdmWkBTGQibg5JG1mTj
jUTUDlh/D5sCWW79ZBfSqhK4P3uXWmdCezeLbUTQTZenGIfwXP0zxmSinlBBvXq1
HySFoIsv/Z5bAA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:19:35 2025 by rpki-client