Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/68e857-e2e9-42d5-864e-cc7ad16d1b0c/1/05aWp2gOlVKR_q-h77qfvP8viIs.mft
File: 05aWp2gOlVKR_q-h77qfvP8viIs.mft (raw, json)
Hash identifier: pDNPfRmmjGjKXiXGgUhSKlOUtxBx9DtXlktjMmAK8d4=
Subject key identifier: C0:2A:06:F0:17:70:DF:73:6B:15:B0:DD:E7:84:05:59:F1:D1:B3:A1
Authority key identifier: D3:96:96:A7:68:0E:95:52:91:FE:AF:A1:EF:BA:9F:BC:FF:2F:88:8B
Certificate issuer: /CN=d39696a7680e955291feafa1efba9fbcff2f888b
Certificate serial: 019A2289AC04DB4FE82BD8B473A488A2A48F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/05aWp2gOlVKR_q-h77qfvP8viIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/68e857-e2e9-42d5-864e-cc7ad16d1b0c/1/05aWp2gOlVKR_q-h77qfvP8viIs.mft
Manifest number: 11E7
Signing time: Sun 26 Oct 2025 22:00:39 +0000
Manifest this update: Sun 26 Oct 2025 22:00:39 +0000
Manifest next update: Mon 27 Oct 2025 22:00:39 +0000
Files and hashes: 1: 05aWp2gOlVKR_q-h77qfvP8viIs.crl (hash: 9ny7idymZtPTNSrh8VBzaI38cyhIrBNMhpCP73GAHq0=)
2: rB2INOwVRpDLnI62nHFRLMGjim8.roa (hash: 4e9dGvThW6tLmtEOnyeNLHSG2RRsUkaY7l6l90Sl8lc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/68e857-e2e9-42d5-864e-cc7ad16d1b0c/1/05aWp2gOlVKR_q-h77qfvP8viIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/68e857-e2e9-42d5-864e-cc7ad16d1b0c/1/05aWp2gOlVKR_q-h77qfvP8viIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/05aWp2gOlVKR_q-h77qfvP8viIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:89:ac:04:db:4f:e8:2b:d8:b4:73:a4:88:a2:a4:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d39696a7680e955291feafa1efba9fbcff2f888b
Validity
Not Before: Oct 26 22:00:39 2025 GMT
Not After : Oct 27 22:00:39 2025 GMT
Subject: CN=c02a06f01770df736b15b0dde7840559f1d1b3a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7d:f5:3a:35:5f:6d:6a:f1:b9:8a:6a:d8:ed:
42:c2:1d:88:80:88:c9:e5:c6:bb:2e:8c:8f:d7:e8:
9e:6b:03:03:a8:12:bb:38:38:58:32:d6:30:8e:e8:
b5:ed:8c:60:bb:d7:cf:72:50:08:af:a9:99:bc:90:
19:2a:e9:d4:7e:df:66:0e:d6:cb:0d:80:c0:42:62:
04:cf:45:66:fa:d3:4e:6b:ae:68:71:32:5c:fa:50:
4c:47:d2:9a:d1:ee:a7:9d:6a:1a:59:75:63:95:7d:
ba:c0:52:4e:78:70:a4:05:93:fb:bf:ea:e2:f8:58:
4c:c6:f7:93:ad:7e:01:53:3c:a3:15:9b:2e:25:3b:
d1:b1:67:ed:aa:2d:ec:01:72:2e:0d:7a:87:7f:b7:
1b:10:f7:2d:de:3c:c4:4e:50:f2:03:70:2b:45:ed:
d9:ef:2f:a5:60:e8:4c:c6:f5:a5:ec:0d:a3:d9:62:
29:92:60:d8:70:60:49:f6:48:82:43:29:3f:ff:d8:
7e:bf:71:14:75:e3:ec:6d:0e:30:92:e4:d2:2e:a8:
b7:51:9c:88:d1:5c:ab:77:1a:06:a1:28:57:5e:78:
f8:56:16:34:54:ec:a3:2c:57:27:a8:f0:62:90:0e:
1c:7e:17:07:82:e6:b9:34:a3:bc:fc:4f:dd:f4:ee:
de:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:2A:06:F0:17:70:DF:73:6B:15:B0:DD:E7:84:05:59:F1:D1:B3:A1
X509v3 Authority Key Identifier:
keyid:D3:96:96:A7:68:0E:95:52:91:FE:AF:A1:EF:BA:9F:BC:FF:2F:88:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/05aWp2gOlVKR_q-h77qfvP8viIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/68e857-e2e9-42d5-864e-cc7ad16d1b0c/1/05aWp2gOlVKR_q-h77qfvP8viIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/68e857-e2e9-42d5-864e-cc7ad16d1b0c/1/05aWp2gOlVKR_q-h77qfvP8viIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:78:30:5c:86:51:aa:ae:ff:00:24:d6:2c:7a:f5:29:1b:78:
6f:bc:8e:23:2b:f1:b0:31:d7:da:3b:19:22:a4:77:8d:e5:1b:
89:e0:6f:65:72:c9:fc:fe:ea:ca:e7:ab:61:5e:a1:27:18:de:
79:e0:1d:34:cd:3a:72:7c:d2:42:0e:a2:cb:4a:5d:45:77:05:
35:87:81:a5:54:ee:07:44:41:39:57:92:12:ff:de:72:5b:f4:
9c:cf:f8:c1:b6:be:13:ff:7b:f0:88:01:2a:d1:b9:36:dd:f3:
15:18:3d:1e:d0:d3:eb:c7:df:2b:ed:8a:d9:41:e0:99:30:67:
38:d8:74:87:9b:f1:ef:25:b3:1d:7e:7b:d1:a4:47:76:07:21:
43:9b:4d:2d:59:42:a2:da:81:7b:ae:17:19:bd:78:40:e6:f6:
ff:27:d2:a2:dc:3c:7f:8a:1b:29:d8:13:f9:8c:58:80:37:89:
eb:a4:52:63:aa:fc:c6:f4:69:d9:6e:80:40:3c:40:44:73:20:
21:99:83:a1:6e:1e:82:a9:04:3c:e2:f0:70:f7:63:df:37:ca:
97:6e:92:83:7e:9f:f6:73:73:48:10:e0:97:4e:dc:5e:9e:ec:
36:62:e2:ce:d1:cb:aa:49:06:06:b9:ec:8d:83:9c:ef:12:7d:
0d:bf:49:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoiiawE20/oK9i0c6SIoqSPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzOTY5NmE3NjgwZTk1NTI5MWZlYWZhMWVmYmE5ZmJjZmYy
Zjg4OGIwHhcNMjUxMDI2MjIwMDM5WhcNMjUxMDI3MjIwMDM5WjAzMTEwLwYDVQQD
EyhjMDJhMDZmMDE3NzBkZjczNmIxNWIwZGRlNzg0MDU1OWYxZDFiM2ExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApH31OjVfbWrxuYpq2O1Cwh2IgIjJ
5ca7LoyP1+ieawMDqBK7ODhYMtYwjui17Yxgu9fPclAIr6mZvJAZKunUft9mDtbL
DYDAQmIEz0Vm+tNOa65ocTJc+lBMR9Ka0e6nnWoaWXVjlX26wFJOeHCkBZP7v+ri
+FhMxveTrX4BUzyjFZsuJTvRsWftqi3sAXIuDXqHf7cbEPct3jzETlDyA3ArRe3Z
7y+lYOhMxvWl7A2j2WIpkmDYcGBJ9kiCQyk//9h+v3EUdePsbQ4wkuTSLqi3UZyI
0VyrdxoGoShXXnj4VhY0VOyjLFcnqPBikA4cfhcHgua5NKO8/E/d9O7e6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMAqBvAXcN9zaxWw3eeEBVnx0bOhMB8GA1UdIwQY
MBaAFNOWlqdoDpVSkf6voe+6n7z/L4iLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDVhV3AyZ09sVktSX3EtaDc3cWZ2UDh2aUlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy82OGU4NTctZTJlOS00MmQ1LTg2NGUt
Y2M3YWQxNmQxYjBjLzEvMDVhV3AyZ09sVktSX3EtaDc3cWZ2UDh2aUlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy82OGU4NTctZTJlOS00MmQ1LTg2NGUtY2M3YWQxNmQxYjBj
LzEvMDVhV3AyZ09sVktSX3EtaDc3cWZ2UDh2aUlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeXgwXIZR
qq7/ACTWLHr1KRt4b7yOIyvxsDHX2jsZIqR3jeUbieBvZXLJ/P7qyuerYV6hJxje
eeAdNM06cnzSQg6iy0pdRXcFNYeBpVTuB0RBOVeSEv/eclv0nM/4wba+E/978IgB
KtG5Nt3zFRg9HtDT68ffK+2K2UHgmTBnONh0h5vx7yWzHX570aRHdgchQ5tNLVlC
otqBe64XGb14QOb2/yfSotw8f4obKdgT+YxYgDeJ66RSY6r8xvRp2W6AQDxARHMg
IZmDoW4egqkEPOLwcPdj3zfKl26Sg36f9nNzSBDgl07cXp7sNmLiztHLqkkGBrns
jYOc7xJ9Db9JnQ==
-----END CERTIFICATE-----
Generated at Mon Oct 27 03:57:25 2025 by rpki-client