Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/91101c-3437-4f3c-b120-752c933639e5/1/ddUf2ReUrgygfzkwcw0Gmqwbku0.mft
File: ddUf2ReUrgygfzkwcw0Gmqwbku0.mft (raw, json)
Hash identifier: tFSoNbni5Ivac2Ep1cWrvPWUXieWN35UWiQySSsV+d8=
Subject key identifier: 94:86:28:60:4B:81:F0:D8:40:7B:96:99:EB:14:79:C3:93:B9:E9:6A
Authority key identifier: 75:D5:1F:D9:17:94:AE:0C:A0:7F:39:30:73:0D:06:9A:AC:1B:92:ED
Certificate issuer: /CN=75d51fd91794ae0ca07f3930730d069aac1b92ed
Certificate serial: 019A72260E68ECBDCDD179989C29E3DE3AC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ddUf2ReUrgygfzkwcw0Gmqwbku0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/91101c-3437-4f3c-b120-752c933639e5/1/ddUf2ReUrgygfzkwcw0Gmqwbku0.mft
Manifest number: 025C
Signing time: Tue 11 Nov 2025 09:01:27 +0000
Manifest this update: Tue 11 Nov 2025 09:01:27 +0000
Manifest next update: Wed 12 Nov 2025 09:01:27 +0000
Files and hashes: 1: ddUf2ReUrgygfzkwcw0Gmqwbku0.crl (hash: wFKfrBR11A+NnvZ4xwkTY1HAHzzz/dkxZS6tP28F8HQ=)
2: ggnUuCiiw5KDxP7VC2MuE-m18jg.roa (hash: hCPwze5ka3HW9b6kkZEr86kyUHzmDg3+6W3Ek9YCVgo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/91101c-3437-4f3c-b120-752c933639e5/1/ddUf2ReUrgygfzkwcw0Gmqwbku0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/91101c-3437-4f3c-b120-752c933639e5/1/ddUf2ReUrgygfzkwcw0Gmqwbku0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ddUf2ReUrgygfzkwcw0Gmqwbku0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:0e:68:ec:bd:cd:d1:79:98:9c:29:e3:de:3a:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75d51fd91794ae0ca07f3930730d069aac1b92ed
Validity
Not Before: Nov 11 09:01:27 2025 GMT
Not After : Nov 12 09:01:27 2025 GMT
Subject: CN=948628604b81f0d8407b9699eb1479c393b9e96a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:8e:9e:c8:72:49:79:5f:ad:c1:6e:d6:d6:6a:
95:43:10:43:db:79:77:cc:bf:d9:9b:c3:07:b9:8b:
28:1f:31:ea:61:e2:0c:1f:57:23:7f:4a:9e:f4:80:
06:ae:39:99:a4:0a:b3:bd:0f:a6:4a:77:ba:b3:77:
e2:52:f7:cf:cd:d5:ef:ea:16:23:b7:5d:de:c7:1e:
a4:19:54:40:bc:f0:21:a0:49:c6:8b:ad:5f:d8:9b:
0d:27:c7:2c:3b:93:28:11:c5:2b:0d:29:c4:63:9d:
a2:94:ba:4f:b6:6c:1a:b6:b9:88:85:38:5f:6f:a1:
18:f0:ec:21:09:f3:69:f2:76:f3:62:c3:17:08:38:
74:92:d5:03:4d:0a:97:8b:7c:04:0b:ae:6b:94:7c:
d8:5a:25:9e:ad:53:ed:33:0b:a9:62:6f:fb:56:35:
0f:fa:6f:13:a9:d7:2d:b8:90:07:79:4e:2d:6e:81:
20:6d:2a:f9:f7:90:35:af:75:4f:12:75:99:d1:54:
71:95:27:bd:f1:09:cf:67:09:ab:f5:5d:b4:92:22:
e7:a8:51:a1:6c:cd:69:1e:7c:68:b2:5a:20:05:b5:
93:7a:05:6e:56:e9:3d:92:b8:08:df:85:ff:a4:49:
d0:81:fc:25:0a:37:6a:ca:24:03:c2:ad:b6:da:8d:
d4:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:86:28:60:4B:81:F0:D8:40:7B:96:99:EB:14:79:C3:93:B9:E9:6A
X509v3 Authority Key Identifier:
keyid:75:D5:1F:D9:17:94:AE:0C:A0:7F:39:30:73:0D:06:9A:AC:1B:92:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ddUf2ReUrgygfzkwcw0Gmqwbku0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/91101c-3437-4f3c-b120-752c933639e5/1/ddUf2ReUrgygfzkwcw0Gmqwbku0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/91101c-3437-4f3c-b120-752c933639e5/1/ddUf2ReUrgygfzkwcw0Gmqwbku0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:d0:e3:b1:5b:cd:6d:ca:ae:e1:46:f9:34:5f:cc:e4:5a:a9:
88:2f:ca:e5:d6:e0:a8:eb:9f:61:a2:e9:ae:88:53:e5:6a:53:
f1:20:a4:74:be:e0:f5:8e:31:ec:72:0b:42:0a:2d:91:f5:a5:
85:9a:db:86:ce:6e:90:0c:94:ef:c5:e5:ca:93:82:6e:49:65:
c3:1e:b5:f2:7d:6e:10:a6:24:68:2a:c2:db:d4:20:92:01:29:
ca:cd:04:94:7a:f1:61:eb:c4:1b:cc:3c:1f:e3:b2:2a:1d:f2:
b3:03:e2:17:da:fa:9e:92:70:d8:71:20:57:18:eb:a6:b9:91:
90:22:ed:e8:4c:1d:4c:11:c0:85:ec:6c:f0:52:88:8e:24:ca:
1d:42:50:77:50:ae:76:34:99:93:43:e6:6d:ad:84:6e:ad:9a:
dc:3d:e8:74:25:98:95:a4:2f:fb:f9:77:18:a3:62:2a:1c:d0:
fd:37:78:67:b5:20:1c:6a:d4:5a:c1:7a:16:68:55:5e:1f:27:
73:5c:42:96:93:97:03:9f:39:aa:40:df:37:ff:0e:44:89:25:
4b:53:40:56:d3:38:cb:6e:b4:36:37:e1:1e:7e:5a:3a:45:08:
37:0f:14:95:1e:21:94:f4:cc:8e:a1:87:24:d1:36:9e:02:70:
5f:5a:d8:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJg5o7L3N0XmYnCnj3jrGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1ZDUxZmQ5MTc5NGFlMGNhMDdmMzkzMDczMGQwNjlhYWMx
YjkyZWQwHhcNMjUxMTExMDkwMTI3WhcNMjUxMTEyMDkwMTI3WjAzMTEwLwYDVQQD
Eyg5NDg2Mjg2MDRiODFmMGQ4NDA3Yjk2OTllYjE0NzljMzkzYjllOTZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1I6eyHJJeV+twW7W1mqVQxBD23l3
zL/Zm8MHuYsoHzHqYeIMH1cjf0qe9IAGrjmZpAqzvQ+mSne6s3fiUvfPzdXv6hYj
t13exx6kGVRAvPAhoEnGi61f2JsNJ8csO5MoEcUrDSnEY52ilLpPtmwatrmIhThf
b6EY8OwhCfNp8nbzYsMXCDh0ktUDTQqXi3wEC65rlHzYWiWerVPtMwupYm/7VjUP
+m8TqdctuJAHeU4tboEgbSr595A1r3VPEnWZ0VRxlSe98QnPZwmr9V20kiLnqFGh
bM1pHnxoslogBbWTegVuVuk9krgI34X/pEnQgfwlCjdqyiQDwq222o3UOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJSGKGBLgfDYQHuWmesUecOTuelqMB8GA1UdIwQY
MBaAFHXVH9kXlK4MoH85MHMNBpqsG5LtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGRVZjJSZVVyZ3lnZnprd2N3MEdtcXdia3UwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS85MTEwMWMtMzQzNy00ZjNjLWIxMjAt
NzUyYzkzMzYzOWU1LzEvZGRVZjJSZVVyZ3lnZnprd2N3MEdtcXdia3UwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS85MTEwMWMtMzQzNy00ZjNjLWIxMjAtNzUyYzkzMzYzOWU1
LzEvZGRVZjJSZVVyZ3lnZnprd2N3MEdtcXdia3UwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYNDjsVvN
bcqu4Ub5NF/M5FqpiC/K5dbgqOufYaLprohT5WpT8SCkdL7g9Y4x7HILQgotkfWl
hZrbhs5ukAyU78XlypOCbkllwx618n1uEKYkaCrC29QgkgEpys0ElHrxYevEG8w8
H+OyKh3yswPiF9r6npJw2HEgVxjrprmRkCLt6EwdTBHAhexs8FKIjiTKHUJQd1Cu
djSZk0Pmba2Ebq2a3D3odCWYlaQv+/l3GKNiKhzQ/Td4Z7UgHGrUWsF6FmhVXh8n
c1xClpOXA585qkDfN/8ORIklS1NAVtM4y260NjfhHn5aOkUINw8UlR4hlPTMjqGH
JNE2ngJwX1rYHQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:12 2025 by rpki-client