Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/1edd25-ff90-40ae-8a20-f76b8353ad68/1/mZYvXuAnimDLvNQWkZH3FIEhatQ.mft
File: mZYvXuAnimDLvNQWkZH3FIEhatQ.mft (raw, json)
Hash identifier: aIHnp9USmVamY4DA4bynIbTbcI7KmXDVk+Q+9TGDl50=
Subject key identifier: FF:AC:A1:21:6C:0F:AF:17:61:50:85:83:F8:94:4C:1B:14:1C:72:70
Authority key identifier: 99:96:2F:5E:E0:27:8A:60:CB:BC:D4:16:91:91:F7:14:81:21:6A:D4
Certificate issuer: /CN=99962f5ee0278a60cbbcd4169191f71481216ad4
Certificate serial: 019A1083A2C628CF458D7027B269DB02CDCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mZYvXuAnimDLvNQWkZH3FIEhatQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/1edd25-ff90-40ae-8a20-f76b8353ad68/1/mZYvXuAnimDLvNQWkZH3FIEhatQ.mft
Manifest number: 1424
Signing time: Thu 23 Oct 2025 10:00:53 +0000
Manifest this update: Thu 23 Oct 2025 10:00:53 +0000
Manifest next update: Fri 24 Oct 2025 10:00:53 +0000
Files and hashes: 1: PcKfcpxjxCfbogVi4GU3TNWXfWo.roa (hash: FyEhv9qszU5/I+NRa1KRYr4i13WZJNlUiL5+rA2wd9M=)
2: dKjh9OyM_cot3UzX7jW4QBDob5U.roa (hash: HTTUqeSNDV7AnFAFILfDkkX8OZRGZuFCWYdTMt5tQp0=)
3: mZYvXuAnimDLvNQWkZH3FIEhatQ.crl (hash: dmCalU1vCEhqbm4wyFprPXQrnczJmoJJRBZLKcSYLBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/1edd25-ff90-40ae-8a20-f76b8353ad68/1/mZYvXuAnimDLvNQWkZH3FIEhatQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/1edd25-ff90-40ae-8a20-f76b8353ad68/1/mZYvXuAnimDLvNQWkZH3FIEhatQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/mZYvXuAnimDLvNQWkZH3FIEhatQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Oct 2025 10:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:10:83:a2:c6:28:cf:45:8d:70:27:b2:69:db:02:cd:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99962f5ee0278a60cbbcd4169191f71481216ad4
Validity
Not Before: Oct 23 10:00:53 2025 GMT
Not After : Oct 24 10:00:53 2025 GMT
Subject: CN=ffaca1216c0faf1761508583f8944c1b141c7270
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:8a:e5:76:e4:24:ee:0a:cb:28:ea:9a:96:7d:
c8:c3:32:c3:60:d5:b6:75:77:c7:41:c2:33:01:99:
39:b0:f8:7d:8b:05:8e:b1:15:17:c0:7a:28:b9:89:
7d:3a:2c:6f:83:24:c6:a8:23:7c:b9:c4:f5:13:61:
ef:36:79:8e:73:be:6f:18:0f:03:d8:8d:a2:f3:69:
14:5a:bf:26:3a:ac:35:21:83:89:8c:68:99:34:ae:
c5:62:f0:d9:ac:23:17:5d:ab:0f:0a:dc:99:9c:dd:
06:ad:12:65:0a:a8:d7:f8:50:60:3f:69:9b:ac:58:
a5:4e:25:79:99:56:8f:4b:a1:0c:5b:a5:78:5e:39:
11:2a:d5:4d:c3:91:1a:d5:d3:02:6a:37:e1:15:a2:
12:12:75:84:25:6f:fb:a3:08:25:8e:16:88:8c:3a:
03:d5:e6:b0:28:55:1e:36:c7:ef:8c:c2:76:06:be:
84:45:ea:fb:50:8f:22:79:f3:b1:8c:ee:20:2e:b5:
ad:91:3f:7d:b3:9f:a3:d7:7b:d1:1c:15:a1:c7:71:
be:82:cc:64:6d:62:39:90:b6:14:61:ec:c9:bc:9b:
79:36:4c:13:2b:4e:cf:47:7f:dd:c8:e4:d8:91:95:
b3:f1:f0:1b:5b:ce:09:02:8f:8a:ed:60:74:51:8a:
6d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:AC:A1:21:6C:0F:AF:17:61:50:85:83:F8:94:4C:1B:14:1C:72:70
X509v3 Authority Key Identifier:
keyid:99:96:2F:5E:E0:27:8A:60:CB:BC:D4:16:91:91:F7:14:81:21:6A:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mZYvXuAnimDLvNQWkZH3FIEhatQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1edd25-ff90-40ae-8a20-f76b8353ad68/1/mZYvXuAnimDLvNQWkZH3FIEhatQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1edd25-ff90-40ae-8a20-f76b8353ad68/1/mZYvXuAnimDLvNQWkZH3FIEhatQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:70:ef:d4:a1:09:ce:c3:53:2d:2c:44:47:0d:27:2c:c9:f6:
10:4c:c8:cf:1d:4f:92:6b:b4:ef:87:53:db:e8:a0:9b:68:90:
7e:24:91:ec:92:b7:44:4b:f6:fb:97:ec:5f:c2:87:6b:bd:45:
b1:e3:7e:2f:84:c9:bd:19:fc:63:11:d7:e5:6a:a1:72:a7:14:
87:af:b3:1c:46:c8:8f:0e:ad:cc:62:41:a4:7c:ab:a4:8a:f0:
35:42:2d:61:72:5d:eb:80:62:10:89:c6:cd:db:96:f1:45:8c:
3a:2a:0e:7d:14:76:8a:0c:f6:f2:fd:c7:ab:32:13:e7:62:08:
a9:e5:b1:c5:ec:c5:31:56:6d:d7:90:0d:4b:dd:b1:23:76:a5:
05:b7:11:de:84:32:60:b4:14:a7:eb:79:82:eb:37:e1:11:a2:
9f:18:82:ac:af:dc:6a:5b:7d:ea:fb:2b:61:2b:c3:85:f3:24:
39:0f:0a:10:63:ac:37:24:43:52:51:6f:97:d5:51:b4:4f:47:
f8:ae:52:e8:9b:dd:91:ee:f2:97:45:71:f6:01:58:d2:36:08:
06:3c:b1:8e:1d:ed:9a:65:5c:5c:15:a9:74:6e:60:19:d1:22:
54:68:35:0c:79:1a:e1:11:fa:60:81:19:58:63:d1:44:b4:92:
32:73:f3:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoQg6LGKM9FjXAnsmnbAs3NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5OTYyZjVlZTAyNzhhNjBjYmJjZDQxNjkxOTFmNzE0ODEy
MTZhZDQwHhcNMjUxMDIzMTAwMDUzWhcNMjUxMDI0MTAwMDUzWjAzMTEwLwYDVQQD
EyhmZmFjYTEyMTZjMGZhZjE3NjE1MDg1ODNmODk0NGMxYjE0MWM3MjcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2IrlduQk7grLKOqaln3IwzLDYNW2
dXfHQcIzAZk5sPh9iwWOsRUXwHoouYl9OixvgyTGqCN8ucT1E2HvNnmOc75vGA8D
2I2i82kUWr8mOqw1IYOJjGiZNK7FYvDZrCMXXasPCtyZnN0GrRJlCqjX+FBgP2mb
rFilTiV5mVaPS6EMW6V4XjkRKtVNw5Ea1dMCajfhFaISEnWEJW/7owgljhaIjDoD
1eawKFUeNsfvjMJ2Br6ERer7UI8iefOxjO4gLrWtkT99s5+j13vRHBWhx3G+gsxk
bWI5kLYUYezJvJt5NkwTK07PR3/dyOTYkZWz8fAbW84JAo+K7WB0UYptfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP+soSFsD68XYVCFg/iUTBsUHHJwMB8GA1UdIwQY
MBaAFJmWL17gJ4pgy7zUFpGR9xSBIWrUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVpZdlh1QW5pbURMdk5RV2taSDNGSUVoYXRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC8xZWRkMjUtZmY5MC00MGFlLThhMjAt
Zjc2YjgzNTNhZDY4LzEvbVpZdlh1QW5pbURMdk5RV2taSDNGSUVoYXRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC8xZWRkMjUtZmY5MC00MGFlLThhMjAtZjc2YjgzNTNhZDY4
LzEvbVpZdlh1QW5pbURMdk5RV2taSDNGSUVoYXRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUnDv1KEJ
zsNTLSxERw0nLMn2EEzIzx1Pkmu074dT2+igm2iQfiSR7JK3REv2+5fsX8KHa71F
seN+L4TJvRn8YxHX5WqhcqcUh6+zHEbIjw6tzGJBpHyrpIrwNUItYXJd64BiEInG
zduW8UWMOioOfRR2igz28v3HqzIT52IIqeWxxezFMVZt15ANS92xI3alBbcR3oQy
YLQUp+t5gus34RGinxiCrK/calt96vsrYSvDhfMkOQ8KEGOsNyRDUlFvl9VRtE9H
+K5S6Jvdke7yl0Vx9gFY0jYIBjyxjh3tmmVcXBWpdG5gGdEiVGg1DHka4RH6YIEZ
WGPRRLSSMnPzlw==
-----END CERTIFICATE-----
Generated at Thu Oct 23 15:51:52 2025 by rpki-client