Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/449c02-f262-45d3-8f8f-d4b723ed781c/1/9lQZ43AKNrorA5Bsn49NLf2EgHA.mft
File: 9lQZ43AKNrorA5Bsn49NLf2EgHA.mft (raw, json)
Hash identifier: R9ryciUJ+bvwCGG+KOOeavpvB27mZ0tImVTXOUg8DSU=
Subject key identifier: C8:56:0F:FA:02:8A:88:CA:63:D8:1F:D7:67:00:FB:FE:57:10:5C:16
Authority key identifier: F6:54:19:E3:70:0A:36:BA:2B:03:90:6C:9F:8F:4D:2D:FD:84:80:70
Certificate issuer: /CN=f65419e3700a36ba2b03906c9f8f4d2dfd848070
Certificate serial: 019A71B87AFEB4AD8987EBE32F6807CCD5CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9lQZ43AKNrorA5Bsn49NLf2EgHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/449c02-f262-45d3-8f8f-d4b723ed781c/1/9lQZ43AKNrorA5Bsn49NLf2EgHA.mft
Manifest number: 0E3A
Signing time: Tue 11 Nov 2025 07:01:46 +0000
Manifest this update: Tue 11 Nov 2025 07:01:46 +0000
Manifest next update: Wed 12 Nov 2025 07:01:46 +0000
Files and hashes: 1: 9lQZ43AKNrorA5Bsn49NLf2EgHA.crl (hash: F87REvzazkzGYNMclg6gr4Qw3AUk3OIfOaZdSFeMMCE=)
2: khAk69GaviX3ISVPskdgmXYxHg0.roa (hash: iZg+JNU8yAUj+GbVfYYrGDVbFREqgvj716gjoOSNlMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/449c02-f262-45d3-8f8f-d4b723ed781c/1/9lQZ43AKNrorA5Bsn49NLf2EgHA.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/449c02-f262-45d3-8f8f-d4b723ed781c/1/9lQZ43AKNrorA5Bsn49NLf2EgHA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9lQZ43AKNrorA5Bsn49NLf2EgHA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:7a:fe:b4:ad:89:87:eb:e3:2f:68:07:cc:d5:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f65419e3700a36ba2b03906c9f8f4d2dfd848070
Validity
Not Before: Nov 11 07:01:46 2025 GMT
Not After : Nov 12 07:01:46 2025 GMT
Subject: CN=c8560ffa028a88ca63d81fd76700fbfe57105c16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f3:16:e6:3d:10:71:42:80:5a:88:f0:e0:f7:
88:37:f9:4f:06:2e:33:db:95:90:96:a8:34:08:7d:
f7:8b:d8:62:50:57:40:68:ae:48:69:4e:d9:af:5f:
87:00:0e:36:b6:36:6a:b0:69:c2:54:e7:5d:60:c3:
f1:64:b5:a5:3a:dc:ec:d6:8c:b9:c8:2d:d6:3c:af:
e1:3e:80:d6:84:60:08:92:95:1c:81:ac:42:1c:f1:
64:fe:76:12:8c:ee:23:e0:76:f2:ce:33:ac:8d:4f:
62:36:36:0f:ee:20:8e:75:67:3a:7b:f8:8f:4f:12:
c4:b2:0b:be:74:fd:3d:55:df:a0:da:d6:67:e1:2e:
96:4c:89:c8:d9:64:5b:5b:42:03:18:2a:5f:5f:04:
58:e7:59:1c:c2:35:21:c4:f5:9b:a8:31:fd:d2:36:
02:79:ec:6c:78:31:af:c4:96:ad:c5:c0:f7:3a:c0:
e3:b5:2c:d9:69:a0:b5:e4:5a:d3:82:31:77:5e:89:
15:97:00:d8:67:81:57:6d:8e:ac:46:dc:43:d4:72:
a4:1d:b4:84:72:c6:d4:d9:f6:8c:eb:f5:1f:22:3e:
ca:de:cc:0c:52:9c:67:c4:32:31:0c:59:2a:37:d3:
29:7b:85:38:b4:02:bf:a2:68:fc:be:09:26:7e:f1:
27:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:56:0F:FA:02:8A:88:CA:63:D8:1F:D7:67:00:FB:FE:57:10:5C:16
X509v3 Authority Key Identifier:
keyid:F6:54:19:E3:70:0A:36:BA:2B:03:90:6C:9F:8F:4D:2D:FD:84:80:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lQZ43AKNrorA5Bsn49NLf2EgHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/449c02-f262-45d3-8f8f-d4b723ed781c/1/9lQZ43AKNrorA5Bsn49NLf2EgHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/449c02-f262-45d3-8f8f-d4b723ed781c/1/9lQZ43AKNrorA5Bsn49NLf2EgHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:84:87:d4:c5:af:25:36:22:ef:c4:36:20:46:00:ec:87:f5:
ff:f6:3c:0e:69:fc:ec:25:6b:02:4d:84:6f:91:f5:30:c8:00:
46:68:0c:e5:4e:d8:de:6b:49:eb:f4:d2:69:8c:fe:1c:8c:cb:
2f:d2:64:1f:28:dc:54:fb:74:73:97:63:12:83:70:52:1c:d9:
cc:51:b0:7f:ba:52:1f:5d:92:47:bd:c2:b2:16:b8:ce:a2:9f:
7e:7a:a6:2b:f0:02:54:fa:4b:06:f5:50:7e:de:d5:4c:5f:a9:
10:cf:5a:c7:8a:9c:0a:de:48:bb:c5:81:59:84:7e:b0:3a:d1:
cd:d4:61:65:e3:d7:34:96:cb:0d:75:c6:ab:05:e0:01:67:bb:
44:d3:ea:0a:a5:e3:bc:2d:77:62:bb:36:f3:fa:d6:2b:82:1a:
5d:e9:80:6c:89:64:5e:5f:5a:27:88:ac:31:75:76:4a:ad:e3:
b3:88:41:57:4e:9a:79:97:f9:4f:bd:05:45:64:42:01:04:6b:
0b:39:34:ff:2b:dc:91:06:07:9e:9d:f2:de:15:85:eb:7f:96:
ce:d3:18:13:7c:0c:19:b6:b7:3c:80:8a:a6:e2:31:88:60:72:
c1:1c:2a:3d:f1:44:92:5f:69:20:48:18:b7:92:c4:45:f1:f4:
06:56:74:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuHr+tK2Jh+vjL2gHzNXLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2NTQxOWUzNzAwYTM2YmEyYjAzOTA2YzlmOGY0ZDJkZmQ4
NDgwNzAwHhcNMjUxMTExMDcwMTQ2WhcNMjUxMTEyMDcwMTQ2WjAzMTEwLwYDVQQD
EyhjODU2MGZmYTAyOGE4OGNhNjNkODFmZDc2NzAwZmJmZTU3MTA1YzE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzPMW5j0QcUKAWojw4PeIN/lPBi4z
25WQlqg0CH33i9hiUFdAaK5IaU7Zr1+HAA42tjZqsGnCVOddYMPxZLWlOtzs1oy5
yC3WPK/hPoDWhGAIkpUcgaxCHPFk/nYSjO4j4HbyzjOsjU9iNjYP7iCOdWc6e/iP
TxLEsgu+dP09Vd+g2tZn4S6WTInI2WRbW0IDGCpfXwRY51kcwjUhxPWbqDH90jYC
eexseDGvxJatxcD3OsDjtSzZaaC15FrTgjF3XokVlwDYZ4FXbY6sRtxD1HKkHbSE
csbU2faM6/UfIj7K3swMUpxnxDIxDFkqN9Mpe4U4tAK/omj8vgkmfvEnDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMhWD/oCiojKY9gf12cA+/5XEFwWMB8GA1UdIwQY
MBaAFPZUGeNwCja6KwOQbJ+PTS39hIBwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWxRWjQzQUtOcm9yQTVCc240OU5MZjJFZ0hBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny80NDljMDItZjI2Mi00NWQzLThmOGYt
ZDRiNzIzZWQ3ODFjLzEvOWxRWjQzQUtOcm9yQTVCc240OU5MZjJFZ0hBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny80NDljMDItZjI2Mi00NWQzLThmOGYtZDRiNzIzZWQ3ODFj
LzEvOWxRWjQzQUtOcm9yQTVCc240OU5MZjJFZ0hBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr4SH1MWv
JTYi78Q2IEYA7If1//Y8Dmn87CVrAk2Eb5H1MMgARmgM5U7Y3mtJ6/TSaYz+HIzL
L9JkHyjcVPt0c5djEoNwUhzZzFGwf7pSH12SR73Csha4zqKffnqmK/ACVPpLBvVQ
ft7VTF+pEM9ax4qcCt5Iu8WBWYR+sDrRzdRhZePXNJbLDXXGqwXgAWe7RNPqCqXj
vC13Yrs28/rWK4IaXemAbIlkXl9aJ4isMXV2Sq3js4hBV06aeZf5T70FRWRCAQRr
Czk0/yvckQYHnp3y3hWF63+WztMYE3wMGba3PICKpuIxiGBywRwqPfFEkl9pIEgY
t5LERfH0BlZ06Q==
-----END CERTIFICATE-----
Generated at Tue Nov 11 13:00:33 2025 by rpki-client