Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/393218-46e5-468b-b58b-7f3352234e21/1/pJ0uULdziu0KzBoOwv7jAIAlWDg.mft
File: pJ0uULdziu0KzBoOwv7jAIAlWDg.mft (raw, json)
Hash identifier: VarEemQvgFdxBGFhf6HgF7W3SbJDXCbmLTaZsE87rOE=
Subject key identifier: 88:BD:2B:CC:96:62:11:CB:38:EC:3D:78:F0:EA:9C:8C:32:1A:E4:85
Authority key identifier: A4:9D:2E:50:B7:73:8A:ED:0A:CC:1A:0E:C2:FE:E3:00:80:25:58:38
Certificate issuer: /CN=a49d2e50b7738aed0acc1a0ec2fee30080255838
Certificate serial: 019A1FBF0B7643C0AB9A3EEE300836B6FC36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJ0uULdziu0KzBoOwv7jAIAlWDg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/393218-46e5-468b-b58b-7f3352234e21/1/pJ0uULdziu0KzBoOwv7jAIAlWDg.mft
Manifest number: 0A36
Signing time: Sun 26 Oct 2025 09:00:05 +0000
Manifest this update: Sun 26 Oct 2025 09:00:05 +0000
Manifest next update: Mon 27 Oct 2025 09:00:05 +0000
Files and hashes: 1: cGGNHHL2taAbcfw5rMUB84kQw_k.roa (hash: J56YjCbrct/bNrc5fidg1pLfrEEsu9MaAGzXOMhbxY8=)
2: pJ0uULdziu0KzBoOwv7jAIAlWDg.crl (hash: oZIGoa7d7xS4cJvhxyj3H1JwGND+v5Mm95yGCS/6n/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/393218-46e5-468b-b58b-7f3352234e21/1/pJ0uULdziu0KzBoOwv7jAIAlWDg.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/393218-46e5-468b-b58b-7f3352234e21/1/pJ0uULdziu0KzBoOwv7jAIAlWDg.mft
rsync://rpki.ripe.net/repository/DEFAULT/pJ0uULdziu0KzBoOwv7jAIAlWDg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 03:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1f:bf:0b:76:43:c0:ab:9a:3e:ee:30:08:36:b6:fc:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a49d2e50b7738aed0acc1a0ec2fee30080255838
Validity
Not Before: Oct 26 09:00:05 2025 GMT
Not After : Oct 27 09:00:05 2025 GMT
Subject: CN=88bd2bcc966211cb38ec3d78f0ea9c8c321ae485
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:3f:d5:14:f6:3f:84:77:49:5b:58:87:12:86:
5c:ec:95:b4:bc:8b:a9:59:01:01:ba:05:97:54:7d:
c8:22:6c:46:46:9a:f7:c8:88:ed:77:b7:79:96:18:
5d:03:9c:e7:7f:cd:93:9b:a1:79:66:c4:87:9a:b9:
e8:fb:90:74:21:ca:1b:b6:07:ab:2d:cd:c2:f4:19:
56:6a:f3:99:d3:8e:29:6d:2f:2e:d3:63:e2:16:09:
f1:94:01:25:32:0e:e2:1c:48:9d:d8:7a:b8:b3:3f:
9a:7e:e5:9f:55:f8:f3:12:de:c0:01:24:72:d3:e1:
ec:b4:b8:07:99:c4:8e:d6:77:45:7b:db:bd:50:97:
a9:0b:f1:36:b6:99:ed:45:42:cc:3a:82:d8:2d:be:
25:13:5a:72:ce:2c:66:62:b1:84:54:ee:75:12:b1:
6e:c8:f5:29:3d:f3:6e:3c:66:de:84:f1:1e:ce:89:
4a:42:09:3e:89:7f:eb:33:1f:e0:53:38:ff:47:91:
ca:73:8f:88:62:d3:70:3b:d3:00:d5:4f:9f:7c:43:
73:5a:60:51:36:a0:bb:2e:48:45:09:72:b0:c5:1d:
a2:a5:98:96:6c:9a:f2:17:d5:6b:27:b6:ec:e2:d1:
71:b3:cb:3b:49:66:6a:c1:3f:03:f3:d4:4d:22:3d:
34:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:BD:2B:CC:96:62:11:CB:38:EC:3D:78:F0:EA:9C:8C:32:1A:E4:85
X509v3 Authority Key Identifier:
keyid:A4:9D:2E:50:B7:73:8A:ED:0A:CC:1A:0E:C2:FE:E3:00:80:25:58:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJ0uULdziu0KzBoOwv7jAIAlWDg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/393218-46e5-468b-b58b-7f3352234e21/1/pJ0uULdziu0KzBoOwv7jAIAlWDg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/393218-46e5-468b-b58b-7f3352234e21/1/pJ0uULdziu0KzBoOwv7jAIAlWDg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:7d:85:24:d5:6a:8f:c0:10:87:c0:90:56:74:60:f1:78:60:
04:d7:6c:14:10:e6:66:7b:ef:9b:e3:4f:f1:7c:fa:c2:aa:62:
d2:ae:20:03:c6:ba:7f:d3:0b:f8:43:36:f7:22:b5:97:2f:45:
80:cf:06:8d:ff:b0:5e:cf:03:6a:30:de:cd:8d:53:40:fe:09:
07:23:7c:35:73:99:12:1c:c7:48:4f:33:78:6a:d8:60:8a:c2:
c6:6f:f3:37:1d:2b:3d:94:8a:6e:81:58:77:d4:74:33:74:7f:
ad:b5:65:f6:03:8b:44:ad:07:06:bd:a7:da:b3:7f:32:7d:5f:
11:31:d6:6c:df:33:4c:6e:ec:05:68:1a:8e:d5:56:02:98:cd:
33:a2:6d:72:56:6e:40:89:8d:cf:a2:6e:5e:32:3c:24:7a:0e:
5d:ac:27:26:b5:3c:09:8e:2b:9e:49:61:ce:30:cb:86:2b:27:
21:18:5d:55:62:78:d9:1f:41:4c:51:dc:a1:46:ed:5f:3c:aa:
ee:f9:75:66:20:70:cb:24:7f:a6:9f:e8:2a:14:d0:37:93:c4:
c4:3a:14:55:ff:38:e1:ff:df:24:b9:e2:08:f0:ef:a4:67:2e:
d3:02:cc:c2:ee:8f:82:00:96:f8:0e:08:3a:e6:91:1d:58:3f:
f9:d5:0a:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZofvwt2Q8Crmj7uMAg2tvw2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0OWQyZTUwYjc3MzhhZWQwYWNjMWEwZWMyZmVlMzAwODAy
NTU4MzgwHhcNMjUxMDI2MDkwMDA1WhcNMjUxMDI3MDkwMDA1WjAzMTEwLwYDVQQD
Eyg4OGJkMmJjYzk2NjIxMWNiMzhlYzNkNzhmMGVhOWM4YzMyMWFlNDg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8D/VFPY/hHdJW1iHEoZc7JW0vIup
WQEBugWXVH3IImxGRpr3yIjtd7d5lhhdA5znf82Tm6F5ZsSHmrno+5B0Icobtger
Lc3C9BlWavOZ044pbS8u02PiFgnxlAElMg7iHEid2Hq4sz+afuWfVfjzEt7AASRy
0+HstLgHmcSO1ndFe9u9UJepC/E2tpntRULMOoLYLb4lE1pyzixmYrGEVO51ErFu
yPUpPfNuPGbehPEezolKQgk+iX/rMx/gUzj/R5HKc4+IYtNwO9MA1U+ffENzWmBR
NqC7LkhFCXKwxR2ipZiWbJryF9VrJ7bs4tFxs8s7SWZqwT8D89RNIj00HwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIi9K8yWYhHLOOw9ePDqnIwyGuSFMB8GA1UdIwQY
MBaAFKSdLlC3c4rtCswaDsL+4wCAJVg4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEowdVVMZHppdTBLekJvT3d2N2pBSUFsV0RnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny8zOTMyMTgtNDZlNS00NjhiLWI1OGIt
N2YzMzUyMjM0ZTIxLzEvcEowdVVMZHppdTBLekJvT3d2N2pBSUFsV0RnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny8zOTMyMTgtNDZlNS00NjhiLWI1OGItN2YzMzUyMjM0ZTIx
LzEvcEowdVVMZHppdTBLekJvT3d2N2pBSUFsV0RnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKX2FJNVq
j8AQh8CQVnRg8XhgBNdsFBDmZnvvm+NP8Xz6wqpi0q4gA8a6f9ML+EM29yK1ly9F
gM8Gjf+wXs8DajDezY1TQP4JByN8NXOZEhzHSE8zeGrYYIrCxm/zNx0rPZSKboFY
d9R0M3R/rbVl9gOLRK0HBr2n2rN/Mn1fETHWbN8zTG7sBWgajtVWApjNM6JtclZu
QImNz6JuXjI8JHoOXawnJrU8CY4rnklhzjDLhisnIRhdVWJ42R9BTFHcoUbtXzyq
7vl1ZiBwyyR/pp/oKhTQN5PExDoUVf844f/fJLniCPDvpGcu0wLMwu6PggCW+A4I
OuaRHVg/+dUKUQ==
-----END CERTIFICATE-----
Generated at Sun Oct 26 10:52:33 2025 by rpki-client