Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/32d49c-fbb9-4664-9ab8-f2bdc2275b6e/1/D01Q85DPlFxvpbkAkFtNUX67CRo.mft
File: D01Q85DPlFxvpbkAkFtNUX67CRo.mft (raw, json)
Hash identifier: NuuptfWDDg/94OrSdY41FasHr+XRkqkx1OQSjXCnV+Q=
Subject key identifier: CE:01:60:F6:D4:92:E3:F0:0B:59:9C:1F:D0:1B:FB:15:05:55:A1:8E
Authority key identifier: 0F:4D:50:F3:90:CF:94:5C:6F:A5:B9:00:90:5B:4D:51:7E:BB:09:1A
Certificate issuer: /CN=0f4d50f390cf945c6fa5b900905b4d517ebb091a
Certificate serial: 019A1E3E978F8967CAF7981806F2875EC41F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D01Q85DPlFxvpbkAkFtNUX67CRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/32d49c-fbb9-4664-9ab8-f2bdc2275b6e/1/D01Q85DPlFxvpbkAkFtNUX67CRo.mft
Manifest number: 0442
Signing time: Sun 26 Oct 2025 02:00:09 +0000
Manifest this update: Sun 26 Oct 2025 02:00:09 +0000
Manifest next update: Mon 27 Oct 2025 02:00:09 +0000
Files and hashes: 1: 6t_nnlmTXWp3OzIKRqSj0hcN4no.roa (hash: W90ueV41Ar0nzHXhwJLVE6WKCjLM7hges3g+HZc2lOE=)
2: D01Q85DPlFxvpbkAkFtNUX67CRo.crl (hash: +CTZT7m0HBFzwd8VeMngQpGa4X7+hY6M+Lpgn2xhQgk=)
3: vkoeIYHKBiHw3JW2EwGeByZF2OI.roa (hash: 0gHlaMAsvnnPjNWVDTFa0UhQf6R/7xyb1Ul2Br7gTg0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/32d49c-fbb9-4664-9ab8-f2bdc2275b6e/1/D01Q85DPlFxvpbkAkFtNUX67CRo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/32d49c-fbb9-4664-9ab8-f2bdc2275b6e/1/D01Q85DPlFxvpbkAkFtNUX67CRo.mft
rsync://rpki.ripe.net/repository/DEFAULT/D01Q85DPlFxvpbkAkFtNUX67CRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 02:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1e:3e:97:8f:89:67:ca:f7:98:18:06:f2:87:5e:c4:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f4d50f390cf945c6fa5b900905b4d517ebb091a
Validity
Not Before: Oct 26 02:00:09 2025 GMT
Not After : Oct 27 02:00:09 2025 GMT
Subject: CN=ce0160f6d492e3f00b599c1fd01bfb150555a18e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:51:c5:c0:58:90:df:b3:45:b8:0b:10:8d:c8:
cc:aa:6e:35:51:c6:09:c7:01:95:cf:14:c9:ef:db:
eb:f4:1f:a4:89:f1:58:74:a4:96:d2:4f:0b:0e:b3:
ce:4a:51:74:f8:ab:25:cd:20:3e:bc:ac:d7:fc:91:
5c:e6:5e:66:c0:30:69:6c:7e:16:eb:13:3c:a4:23:
22:33:bb:74:f4:b4:27:5c:14:39:92:6e:cc:f5:12:
81:10:f0:ee:f1:c1:73:6f:37:d5:fb:f5:42:83:5e:
d1:9b:46:6d:a4:33:66:35:94:59:7b:6d:77:3e:b2:
07:3a:e7:8a:bf:e3:5f:e1:d5:ed:92:ed:5c:2f:b2:
72:d9:34:41:56:c2:14:cf:03:9d:f5:92:63:b1:2e:
48:b0:48:29:eb:c4:b6:28:24:4c:9f:77:98:27:44:
30:9e:48:a9:36:02:2e:61:f6:a1:aa:3f:6b:69:27:
54:7c:31:35:e1:84:23:a2:00:9f:5a:12:d2:52:ed:
f5:fc:4e:1e:40:ec:92:cc:19:b1:bd:55:c1:32:30:
61:1f:67:be:d4:55:9b:48:b0:d5:a7:fb:db:be:1c:
bf:c8:cf:34:62:df:f3:cd:f1:4f:8c:62:af:cb:c5:
f2:92:ef:82:c2:2e:df:71:6e:9e:70:44:7d:8d:2a:
5e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:01:60:F6:D4:92:E3:F0:0B:59:9C:1F:D0:1B:FB:15:05:55:A1:8E
X509v3 Authority Key Identifier:
keyid:0F:4D:50:F3:90:CF:94:5C:6F:A5:B9:00:90:5B:4D:51:7E:BB:09:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D01Q85DPlFxvpbkAkFtNUX67CRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/32d49c-fbb9-4664-9ab8-f2bdc2275b6e/1/D01Q85DPlFxvpbkAkFtNUX67CRo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/32d49c-fbb9-4664-9ab8-f2bdc2275b6e/1/D01Q85DPlFxvpbkAkFtNUX67CRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:f0:9f:da:95:cd:72:4c:3d:74:da:b2:e0:df:cf:88:c9:18:
3e:9a:3a:53:16:f5:b5:cb:fc:3f:a4:2c:24:80:2b:a3:98:e4:
10:af:dd:13:61:c5:0f:64:59:3f:70:d8:5f:17:d7:64:6d:67:
34:c9:d6:66:f4:f0:ce:65:a1:8e:d0:2a:d2:b7:71:df:ac:43:
b5:c9:48:3c:83:4c:4e:bd:3f:56:dc:39:f6:54:fa:26:13:39:
89:fa:83:46:be:42:4c:6f:60:df:df:b2:63:1a:23:5c:1d:ea:
1d:52:e6:9d:49:7a:f6:d6:7f:2c:81:c2:91:ea:d3:15:11:2a:
b3:41:61:92:12:e2:2b:49:72:e9:ba:16:12:e4:2b:a9:aa:2e:
c1:92:09:ee:f7:ce:71:4b:3b:77:ad:71:b4:9f:70:6c:fc:74:
58:28:be:43:31:58:e5:9f:05:17:35:ed:f1:e7:f8:5f:14:00:
dc:a9:3e:83:22:40:e6:08:a7:bc:94:4f:f0:21:d6:e5:2e:c7:
67:a7:78:ef:f3:57:0c:21:46:6d:b6:0f:1f:11:0d:ab:d2:9f:
1d:50:3c:49:b4:02:c7:6c:77:4b:64:1d:6e:55:24:6f:a6:5b:
c4:60:10:56:ef:89:bc:53:ca:a1:62:91:d5:6f:f3:8d:e8:83:
ed:46:44:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoePpePiWfK95gYBvKHXsQfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmNGQ1MGYzOTBjZjk0NWM2ZmE1YjkwMDkwNWI0ZDUxN2Vi
YjA5MWEwHhcNMjUxMDI2MDIwMDA5WhcNMjUxMDI3MDIwMDA5WjAzMTEwLwYDVQQD
EyhjZTAxNjBmNmQ0OTJlM2YwMGI1OTljMWZkMDFiZmIxNTA1NTVhMThlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwlHFwFiQ37NFuAsQjcjMqm41UcYJ
xwGVzxTJ79vr9B+kifFYdKSW0k8LDrPOSlF0+KslzSA+vKzX/JFc5l5mwDBpbH4W
6xM8pCMiM7t09LQnXBQ5km7M9RKBEPDu8cFzbzfV+/VCg17Rm0ZtpDNmNZRZe213
PrIHOueKv+Nf4dXtku1cL7Jy2TRBVsIUzwOd9ZJjsS5IsEgp68S2KCRMn3eYJ0Qw
nkipNgIuYfahqj9raSdUfDE14YQjogCfWhLSUu31/E4eQOySzBmxvVXBMjBhH2e+
1FWbSLDVp/vbvhy/yM80Yt/zzfFPjGKvy8Xyku+Cwi7fcW6ecER9jSpemwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM4BYPbUkuPwC1mcH9Ab+xUFVaGOMB8GA1UdIwQY
MBaAFA9NUPOQz5Rcb6W5AJBbTVF+uwkaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDAxUTg1RFBsRnh2cGJrQWtGdE5VWDY3Q1JvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8zMmQ0OWMtZmJiOS00NjY0LTlhYjgt
ZjJiZGMyMjc1YjZlLzEvRDAxUTg1RFBsRnh2cGJrQWtGdE5VWDY3Q1JvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy8zMmQ0OWMtZmJiOS00NjY0LTlhYjgtZjJiZGMyMjc1YjZl
LzEvRDAxUTg1RFBsRnh2cGJrQWtGdE5VWDY3Q1JvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIvCf2pXN
ckw9dNqy4N/PiMkYPpo6Uxb1tcv8P6QsJIAro5jkEK/dE2HFD2RZP3DYXxfXZG1n
NMnWZvTwzmWhjtAq0rdx36xDtclIPINMTr0/Vtw59lT6JhM5ifqDRr5CTG9g39+y
YxojXB3qHVLmnUl69tZ/LIHCkerTFREqs0FhkhLiK0ly6boWEuQrqaouwZIJ7vfO
cUs7d61xtJ9wbPx0WCi+QzFY5Z8FFzXt8ef4XxQA3Kk+gyJA5ginvJRP8CHW5S7H
Z6d47/NXDCFGbbYPHxENq9KfHVA8SbQCx2x3S2QdblUkb6ZbxGAQVu+JvFPKoWKR
1W/zjeiD7UZEAg==
-----END CERTIFICATE-----
Generated at Sun Oct 26 12:00:47 2025 by rpki-client