Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/bd22ce-772c-4f1e-b4aa-85c0d01f9de2/1/0kkXcM6bZjACp5RULZiG0aLOY6s.mft
File: 0kkXcM6bZjACp5RULZiG0aLOY6s.mft (raw, json)
Hash identifier: dsUrV9C4ieVBoP77Uocf6xyTXE43HHxDmz24+dtrr4A=
Subject key identifier: 17:56:9E:D7:FA:A1:7E:E7:AA:EB:4C:BF:00:B4:09:C0:F4:0F:D3:EF
Authority key identifier: D2:49:17:70:CE:9B:66:30:02:A7:94:54:2D:98:86:D1:A2:CE:63:AB
Certificate issuer: /CN=d2491770ce9b663002a794542d9886d1a2ce63ab
Certificate serial: 019A28C27DAC95A5BD93D69791EA24DC4376
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0kkXcM6bZjACp5RULZiG0aLOY6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/bd22ce-772c-4f1e-b4aa-85c0d01f9de2/1/0kkXcM6bZjACp5RULZiG0aLOY6s.mft
Manifest number: 095C
Signing time: Tue 28 Oct 2025 03:00:25 +0000
Manifest this update: Tue 28 Oct 2025 03:00:25 +0000
Manifest next update: Wed 29 Oct 2025 03:00:25 +0000
Files and hashes: 1: 0kkXcM6bZjACp5RULZiG0aLOY6s.crl (hash: kqve742QOMdqATB8H/+gNx0PnSpPu3TmUqRqjtSZjRA=)
2: tkNgBbUczBhXw3Q7nsd4bFDL5Ko.roa (hash: 2ZBjCKDVEUumVBdfZIcGHq5+w377C2/RlriHj7O796c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/bd22ce-772c-4f1e-b4aa-85c0d01f9de2/1/0kkXcM6bZjACp5RULZiG0aLOY6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/bd22ce-772c-4f1e-b4aa-85c0d01f9de2/1/0kkXcM6bZjACp5RULZiG0aLOY6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/0kkXcM6bZjACp5RULZiG0aLOY6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:28:c2:7d:ac:95:a5:bd:93:d6:97:91:ea:24:dc:43:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2491770ce9b663002a794542d9886d1a2ce63ab
Validity
Not Before: Oct 28 03:00:25 2025 GMT
Not After : Oct 29 03:00:25 2025 GMT
Subject: CN=17569ed7faa17ee7aaeb4cbf00b409c0f40fd3ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:90:0b:5d:14:00:c1:b3:3b:f1:7e:a1:7d:de:
46:31:be:e4:e4:1e:55:67:10:88:4e:0c:a6:a8:f1:
c1:58:95:72:86:5c:bb:27:e8:97:78:0e:4d:a9:61:
a8:a2:b4:b4:9e:a5:15:f0:68:fc:3d:33:07:95:aa:
04:fe:64:9a:17:ae:e4:bc:31:3b:92:25:6f:1b:32:
fe:66:9b:15:7f:c7:c8:ce:5c:21:37:52:eb:e0:56:
d1:6a:e5:3b:61:6a:0e:0d:b9:b8:2d:e5:ec:be:7e:
6f:f3:5c:ef:dd:65:c5:9b:e4:8c:46:36:0f:ea:11:
f6:19:6f:49:81:cb:fa:8e:67:17:67:b6:85:8b:f4:
02:0b:9b:ca:60:5c:09:81:42:4f:89:1a:36:c9:4a:
c1:6c:62:1e:ca:13:dc:2a:c2:6d:94:9e:af:e6:92:
3c:d3:a5:c4:cf:f1:b7:b9:0a:c0:65:53:d5:ea:f8:
2b:93:3b:48:88:82:fc:54:9f:4e:56:8f:d9:a1:1d:
21:0b:24:8b:fd:b0:1a:77:ac:64:a9:82:54:4b:87:
dc:99:56:c2:e7:7a:ff:c6:59:d2:f6:a8:92:ba:f3:
46:1e:d8:38:5e:d0:21:47:f5:a8:20:03:b7:5b:3c:
ea:9d:f2:9f:32:a9:ee:c7:9e:8c:db:2f:3c:2f:fc:
49:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:56:9E:D7:FA:A1:7E:E7:AA:EB:4C:BF:00:B4:09:C0:F4:0F:D3:EF
X509v3 Authority Key Identifier:
keyid:D2:49:17:70:CE:9B:66:30:02:A7:94:54:2D:98:86:D1:A2:CE:63:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0kkXcM6bZjACp5RULZiG0aLOY6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/bd22ce-772c-4f1e-b4aa-85c0d01f9de2/1/0kkXcM6bZjACp5RULZiG0aLOY6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/bd22ce-772c-4f1e-b4aa-85c0d01f9de2/1/0kkXcM6bZjACp5RULZiG0aLOY6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:0a:be:a6:76:83:93:9a:bc:c8:26:68:ba:c2:c1:aa:43:31:
ae:a1:1d:4d:ec:11:f9:7b:6c:36:93:12:61:c3:5d:6a:f9:2c:
76:0c:ad:3f:e6:21:1e:72:a3:4f:d3:c9:9d:26:e9:96:f2:89:
88:76:ed:4d:e1:21:d3:16:97:38:99:c4:b3:6f:d6:40:0d:aa:
6d:d3:87:7e:28:63:99:2f:c4:af:b3:04:ed:dc:be:ac:8a:57:
7b:ff:07:3b:11:2c:4a:8f:64:bf:f4:29:3e:8e:7e:7a:4d:da:
78:ab:73:c0:6d:3b:de:2a:55:13:fd:33:c3:c9:18:6e:32:ea:
52:ad:4b:f5:1f:39:86:28:88:ff:78:c4:e2:c1:85:37:2e:d8:
59:7b:91:a8:4d:0e:70:51:7a:cc:1f:47:53:42:37:17:ee:cb:
ba:d6:84:20:3b:e0:49:b0:3d:9c:7e:0c:c5:d3:70:3d:9c:17:
da:13:f0:44:55:2b:93:3a:76:76:63:a8:48:4f:17:7a:78:c4:
25:e8:ee:8c:b6:e3:b3:32:1f:a6:13:c5:57:8f:5f:c2:19:4d:
28:34:39:a5:22:d8:3e:cd:1f:fa:93:9d:fc:76:be:ae:19:c6:
93:48:2a:f9:f3:7c:70:d1:1c:de:37:94:f1:8c:aa:28:54:06:
52:3b:29:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoown2slaW9k9aXkeok3EN2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyNDkxNzcwY2U5YjY2MzAwMmE3OTQ1NDJkOTg4NmQxYTJj
ZTYzYWIwHhcNMjUxMDI4MDMwMDI1WhcNMjUxMDI5MDMwMDI1WjAzMTEwLwYDVQQD
EygxNzU2OWVkN2ZhYTE3ZWU3YWFlYjRjYmYwMGI0MDljMGY0MGZkM2VmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwpALXRQAwbM78X6hfd5GMb7k5B5V
ZxCITgymqPHBWJVyhly7J+iXeA5NqWGoorS0nqUV8Gj8PTMHlaoE/mSaF67kvDE7
kiVvGzL+ZpsVf8fIzlwhN1Lr4FbRauU7YWoODbm4LeXsvn5v81zv3WXFm+SMRjYP
6hH2GW9Jgcv6jmcXZ7aFi/QCC5vKYFwJgUJPiRo2yUrBbGIeyhPcKsJtlJ6v5pI8
06XEz/G3uQrAZVPV6vgrkztIiIL8VJ9OVo/ZoR0hCySL/bAad6xkqYJUS4fcmVbC
53r/xlnS9qiSuvNGHtg4XtAhR/WoIAO3WzzqnfKfMqnux56M2y88L/xJkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBdWntf6oX7nqutMvwC0CcD0D9PvMB8GA1UdIwQY
MBaAFNJJF3DOm2YwAqeUVC2YhtGizmOrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGtrWGNNNmJaakFDcDVSVUxaaUcwYUxPWTZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9iZDIyY2UtNzcyYy00ZjFlLWI0YWEt
ODVjMGQwMWY5ZGUyLzEvMGtrWGNNNmJaakFDcDVSVUxaaUcwYUxPWTZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC9iZDIyY2UtNzcyYy00ZjFlLWI0YWEtODVjMGQwMWY5ZGUy
LzEvMGtrWGNNNmJaakFDcDVSVUxaaUcwYUxPWTZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcgq+pnaD
k5q8yCZousLBqkMxrqEdTewR+XtsNpMSYcNdavksdgytP+YhHnKjT9PJnSbplvKJ
iHbtTeEh0xaXOJnEs2/WQA2qbdOHfihjmS/Er7ME7dy+rIpXe/8HOxEsSo9kv/Qp
Po5+ek3aeKtzwG073ipVE/0zw8kYbjLqUq1L9R85hiiI/3jE4sGFNy7YWXuRqE0O
cFF6zB9HU0I3F+7LutaEIDvgSbA9nH4MxdNwPZwX2hPwRFUrkzp2dmOoSE8XenjE
JejujLbjszIfphPFV49fwhlNKDQ5pSLYPs0f+pOd/Ha+rhnGk0gq+fN8cNEc3jeU
8YyqKFQGUjspjg==
-----END CERTIFICATE-----
Generated at Tue Oct 28 08:56:10 2025 by rpki-client