Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/66908c-d5cb-47c8-bfce-c9c12b866078/1/mP1EDLuwS5abkrtrOcC7tBY0zRI.mft
File: mP1EDLuwS5abkrtrOcC7tBY0zRI.mft (raw, json)
Hash identifier: oqTAFKlEHcpDWZFnarSY6uN8ioYs/aBemOsxZ/4Vods=
Subject key identifier: FF:BA:C5:EA:F3:E1:4A:6B:44:94:E5:1F:2E:0C:CB:1D:89:84:65:5C
Authority key identifier: 98:FD:44:0C:BB:B0:4B:96:9B:92:BB:6B:39:C0:BB:B4:16:34:CD:12
Certificate issuer: /CN=98fd440cbbb04b969b92bb6b39c0bbb41634cd12
Certificate serial: 019A627B753E93F7B0FE3B607307390CF44E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mP1EDLuwS5abkrtrOcC7tBY0zRI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/66908c-d5cb-47c8-bfce-c9c12b866078/1/mP1EDLuwS5abkrtrOcC7tBY0zRI.mft
Manifest number: 171B
Signing time: Sat 08 Nov 2025 08:00:49 +0000
Manifest this update: Sat 08 Nov 2025 08:00:49 +0000
Manifest next update: Sun 09 Nov 2025 08:00:49 +0000
Files and hashes: 1: LftCOxJQ1oI6hFFXrfR0Ib7DvgM.roa (hash: cJ8bZtPB0/69tGKrzdUG2h5XVvEuA3yRLVGrsJgKFnE=)
2: fiJWC8ddg3-RMvnLmmNHKEtDpC4.roa (hash: +jcPkN0cWNwP620eirlv12vXP4bDJPvRMmAHlZSYorg=)
3: mP1EDLuwS5abkrtrOcC7tBY0zRI.crl (hash: cIEPgjwlbDGRS5btHs3ZyJ4pZVJcnvvqjGcXciFvT0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/66908c-d5cb-47c8-bfce-c9c12b866078/1/mP1EDLuwS5abkrtrOcC7tBY0zRI.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/66908c-d5cb-47c8-bfce-c9c12b866078/1/mP1EDLuwS5abkrtrOcC7tBY0zRI.mft
rsync://rpki.ripe.net/repository/DEFAULT/mP1EDLuwS5abkrtrOcC7tBY0zRI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Nov 2025 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:62:7b:75:3e:93:f7:b0:fe:3b:60:73:07:39:0c:f4:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98fd440cbbb04b969b92bb6b39c0bbb41634cd12
Validity
Not Before: Nov 8 08:00:49 2025 GMT
Not After : Nov 9 08:00:49 2025 GMT
Subject: CN=ffbac5eaf3e14a6b4494e51f2e0ccb1d8984655c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:1f:0d:2b:cd:1f:42:4e:e7:92:1c:a6:fd:98:
61:93:d0:82:0b:10:de:08:93:29:99:6a:dc:7c:ff:
7b:4d:c0:db:f3:70:20:97:ac:6a:b8:af:9d:da:26:
d7:96:66:81:7f:51:ff:79:1f:21:4b:e6:87:43:5b:
31:07:0c:30:cc:b8:54:88:dc:d4:97:c1:3a:19:d2:
34:35:9f:3f:90:a7:44:f9:b4:73:2d:95:31:1e:96:
89:9c:36:4d:0c:be:fd:2c:b3:1c:5b:ea:d7:1b:f9:
44:7f:62:9d:f8:62:90:89:b1:f8:72:80:39:87:c9:
f0:c9:86:47:73:53:e2:10:da:41:2a:cb:ae:8e:fa:
51:58:ce:17:b1:80:b4:de:68:4c:ca:2b:6b:a5:10:
28:47:cd:43:88:34:df:bc:a9:83:36:80:54:21:97:
c5:bb:60:00:60:16:38:98:34:0a:f6:40:6e:1c:0a:
f0:2d:c5:59:41:6c:9c:db:97:cc:1f:79:05:f0:7b:
74:74:f5:21:de:7b:70:11:01:a1:58:69:40:79:35:
4b:1c:c2:dd:e7:ac:d9:f6:d1:bf:55:1b:9f:a1:9e:
5a:f5:1f:9f:a0:b7:e1:3f:b7:14:c7:3f:ff:48:07:
92:68:d0:a7:36:2e:1a:bf:fc:a3:64:66:f1:0a:fb:
ae:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:BA:C5:EA:F3:E1:4A:6B:44:94:E5:1F:2E:0C:CB:1D:89:84:65:5C
X509v3 Authority Key Identifier:
keyid:98:FD:44:0C:BB:B0:4B:96:9B:92:BB:6B:39:C0:BB:B4:16:34:CD:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mP1EDLuwS5abkrtrOcC7tBY0zRI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/66908c-d5cb-47c8-bfce-c9c12b866078/1/mP1EDLuwS5abkrtrOcC7tBY0zRI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/66908c-d5cb-47c8-bfce-c9c12b866078/1/mP1EDLuwS5abkrtrOcC7tBY0zRI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:53:67:1e:66:fd:9f:2e:66:cf:73:a6:6f:5c:10:b3:28:fc:
6e:d5:10:8f:f1:ed:20:47:1b:f8:18:5a:67:66:91:61:04:69:
e9:11:b3:c5:0a:e8:d7:ad:a4:5d:2c:c7:84:2e:77:63:3c:3d:
84:14:2d:c8:cb:e1:4b:5b:94:af:9c:80:62:3b:7d:e8:29:c9:
d7:86:ef:db:67:47:77:89:2c:f1:7e:0b:3c:31:e5:46:48:bc:
a8:09:20:3e:75:8c:21:1e:21:27:a2:3d:42:cb:65:8d:be:b3:
ec:48:c9:5f:17:7e:85:62:41:2b:73:56:2d:ff:2f:11:2a:85:
c3:73:b3:f8:21:67:28:2b:ff:22:7e:cf:81:9e:69:03:90:85:
ae:c9:2b:4b:a0:e5:62:f3:b4:64:1a:8f:2f:46:ea:c4:0c:98:
95:2a:95:ac:84:c3:df:70:0d:00:0d:04:03:72:d9:16:01:90:
9f:a6:ca:76:c1:ec:db:a6:d0:a3:df:43:e1:be:84:77:90:2b:
40:bc:2f:eb:f8:01:0e:8d:10:6e:9d:7c:06:3f:7c:ff:08:0e:
67:8c:0c:5a:d4:96:2e:8b:52:8b:e5:18:15:81:89:41:6f:1f:
72:99:13:ea:65:ae:a1:29:1a:2c:d6:19:5b:f6:cd:7e:69:63:
75:79:1a:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpie3U+k/ew/jtgcwc5DPROMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4ZmQ0NDBjYmJiMDRiOTY5YjkyYmI2YjM5YzBiYmI0MTYz
NGNkMTIwHhcNMjUxMTA4MDgwMDQ5WhcNMjUxMTA5MDgwMDQ5WjAzMTEwLwYDVQQD
EyhmZmJhYzVlYWYzZTE0YTZiNDQ5NGU1MWYyZTBjY2IxZDg5ODQ2NTVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkh8NK80fQk7nkhym/Zhhk9CCCxDe
CJMpmWrcfP97TcDb83Agl6xquK+d2ibXlmaBf1H/eR8hS+aHQ1sxBwwwzLhUiNzU
l8E6GdI0NZ8/kKdE+bRzLZUxHpaJnDZNDL79LLMcW+rXG/lEf2Kd+GKQibH4coA5
h8nwyYZHc1PiENpBKsuujvpRWM4XsYC03mhMyitrpRAoR81DiDTfvKmDNoBUIZfF
u2AAYBY4mDQK9kBuHArwLcVZQWyc25fMH3kF8Ht0dPUh3ntwEQGhWGlAeTVLHMLd
56zZ9tG/VRufoZ5a9R+foLfhP7cUxz//SAeSaNCnNi4av/yjZGbxCvuu7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP+6xerz4UprRJTlHy4Myx2JhGVcMB8GA1UdIwQY
MBaAFJj9RAy7sEuWm5K7aznAu7QWNM0SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVAxRURMdXdTNWFia3J0ck9jQzd0QlkwelJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS82NjkwOGMtZDVjYi00N2M4LWJmY2Ut
YzljMTJiODY2MDc4LzEvbVAxRURMdXdTNWFia3J0ck9jQzd0QlkwelJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS82NjkwOGMtZDVjYi00N2M4LWJmY2UtYzljMTJiODY2MDc4
LzEvbVAxRURMdXdTNWFia3J0ck9jQzd0QlkwelJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWVNnHmb9
ny5mz3Omb1wQsyj8btUQj/HtIEcb+BhaZ2aRYQRp6RGzxQro162kXSzHhC53Yzw9
hBQtyMvhS1uUr5yAYjt96CnJ14bv22dHd4ks8X4LPDHlRki8qAkgPnWMIR4hJ6I9
Qstljb6z7EjJXxd+hWJBK3NWLf8vESqFw3Oz+CFnKCv/In7PgZ5pA5CFrskrS6Dl
YvO0ZBqPL0bqxAyYlSqVrITD33ANAA0EA3LZFgGQn6bKdsHs26bQo99D4b6Ed5Ar
QLwv6/gBDo0Qbp18Bj98/wgOZ4wMWtSWLotSi+UYFYGJQW8fcpkT6mWuoSkaLNYZ
W/bNfmljdXkanA==
-----END CERTIFICATE-----
Generated at Sat Nov 8 16:03:05 2025 by rpki-client