Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/9caa50-a510-417a-b589-8ce4179232c8/1/ldn8gV6QyoeSeQfF6rP-ecohXqo.mft
File: ldn8gV6QyoeSeQfF6rP-ecohXqo.mft (raw, json)
Hash identifier: YGEMvlKbpcuMjww7tCyVEM7Al61yf5yyqor9OdkbJzE=
Subject key identifier: CA:60:48:BF:D5:7E:8F:AA:F1:C5:F4:2D:3B:45:0C:0D:38:C8:5E:08
Authority key identifier: 95:D9:FC:81:5E:90:CA:87:92:79:07:C5:EA:B3:FE:79:CA:21:5E:AA
Certificate issuer: /CN=95d9fc815e90ca87927907c5eab3fe79ca215eaa
Certificate serial: 019A2108FFC601530CB423589D9A5F4B2E9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ldn8gV6QyoeSeQfF6rP-ecohXqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/9caa50-a510-417a-b589-8ce4179232c8/1/ldn8gV6QyoeSeQfF6rP-ecohXqo.mft
Manifest number: 03F7
Signing time: Sun 26 Oct 2025 15:00:29 +0000
Manifest this update: Sun 26 Oct 2025 15:00:29 +0000
Manifest next update: Mon 27 Oct 2025 15:00:29 +0000
Files and hashes: 1: A4UfYrXsQ6iSsiav-YeuLfimOTs.roa (hash: cPKqM44Z83MlRMbviQtgWddEZ3JyHZfP+3cvsuoyczI=)
2: WqCM--ZSqxtcqHxil1wItYtEpEM.roa (hash: CPcHuYLnfs1zjrIDaz07dO7we+nME2TOlwKRzyCU7gM=)
3: ldn8gV6QyoeSeQfF6rP-ecohXqo.crl (hash: SFMpUVmIq60dIMpgvfvRkLVQyemfEkCdLKVJAHSBGFk=)
4: wkbm61J6JI58DzdO7MCd9o4dj-o.roa (hash: hSaua0y3ny5hOslQkyLJESOAWMtyf0RUHAd8EHcHySo=)
5: xhhJQqhM5sB1fU9J0vxm3RoZWw0.roa (hash: +YOuzWIZ++rhf1ENTPtE45w85KCzRIvAgoMtfwrZcLw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/9caa50-a510-417a-b589-8ce4179232c8/1/ldn8gV6QyoeSeQfF6rP-ecohXqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/9caa50-a510-417a-b589-8ce4179232c8/1/ldn8gV6QyoeSeQfF6rP-ecohXqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ldn8gV6QyoeSeQfF6rP-ecohXqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:08:ff:c6:01:53:0c:b4:23:58:9d:9a:5f:4b:2e:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95d9fc815e90ca87927907c5eab3fe79ca215eaa
Validity
Not Before: Oct 26 15:00:29 2025 GMT
Not After : Oct 27 15:00:29 2025 GMT
Subject: CN=ca6048bfd57e8faaf1c5f42d3b450c0d38c85e08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f2:b5:a7:7e:72:4f:e2:61:f7:27:38:15:03:
85:ed:db:03:a4:54:d4:ac:1c:8c:29:3c:03:b4:e3:
cc:65:1e:26:04:1f:2d:4a:48:ff:a0:45:a4:7e:bf:
e2:b3:4b:7a:2d:9a:ab:55:b9:47:b7:a1:fe:75:f2:
f8:17:7d:f4:89:85:4e:09:3b:42:de:a3:6f:25:57:
57:fa:13:68:23:b0:0f:fb:19:99:7e:d9:f6:f0:ae:
54:2e:8f:a6:0f:31:f1:0c:3b:cb:ef:67:b1:82:f0:
64:33:aa:73:71:cd:0e:04:07:64:3f:e7:b1:25:06:
0f:45:1e:c7:5d:57:c8:53:4c:25:a4:29:b3:45:c6:
9f:09:6b:a2:6c:80:a8:28:91:0c:4e:8a:12:40:1f:
cf:8c:91:5b:e9:6c:15:a6:9f:c9:90:70:56:6c:99:
cc:de:c2:41:bf:0e:b2:c3:b1:b0:91:8a:39:1e:07:
2f:e3:24:e9:d6:78:cc:d7:bd:44:37:79:db:94:a4:
a3:98:d3:07:54:4c:9c:c6:32:14:dd:a4:52:e2:39:
72:4a:e9:8c:3c:3a:d2:bf:61:83:76:46:70:ce:95:
3d:0f:46:97:60:36:cb:a5:a7:01:84:de:8e:0a:4b:
9b:e4:15:33:e7:fb:fc:c5:7b:c2:2b:74:aa:8b:46:
a2:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:60:48:BF:D5:7E:8F:AA:F1:C5:F4:2D:3B:45:0C:0D:38:C8:5E:08
X509v3 Authority Key Identifier:
keyid:95:D9:FC:81:5E:90:CA:87:92:79:07:C5:EA:B3:FE:79:CA:21:5E:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ldn8gV6QyoeSeQfF6rP-ecohXqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9caa50-a510-417a-b589-8ce4179232c8/1/ldn8gV6QyoeSeQfF6rP-ecohXqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9caa50-a510-417a-b589-8ce4179232c8/1/ldn8gV6QyoeSeQfF6rP-ecohXqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:0a:17:3e:d8:56:f2:e0:10:bb:b4:e5:71:c3:a1:33:0a:3b:
22:05:ee:81:98:44:40:f5:a0:02:77:f2:da:99:cd:2d:b3:0e:
a0:86:81:c5:04:68:82:6b:31:30:d8:55:64:64:f1:bf:bb:69:
0e:16:c6:de:c0:86:e2:f5:fd:0e:9f:29:01:b4:af:ae:1b:cd:
f8:9c:e9:36:ee:53:20:a5:bd:22:cf:a1:66:95:42:aa:3c:b2:
2d:92:75:22:d1:32:4e:4b:62:6e:22:5a:17:4a:d8:ed:fe:a6:
b3:c6:0e:fc:8a:af:cf:02:78:eb:e9:1d:8f:2a:4e:25:a9:b4:
8f:f2:26:88:93:43:06:34:8c:4d:0b:8d:c1:03:31:72:fd:7f:
3a:10:d9:cf:d5:05:79:bd:45:63:82:db:e8:bc:58:0c:0b:e6:
2b:d2:b3:e8:57:b2:de:8e:9c:e9:51:16:2d:50:bf:fe:3f:1c:
63:10:82:f8:3c:5e:ac:21:b3:7e:b9:85:f8:6d:0b:a3:1b:4f:
dc:a7:d4:7b:44:72:9d:0e:5b:df:71:87:b8:3b:b3:a0:7a:6c:
8a:b8:e9:b3:14:95:0d:f5:57:4e:67:16:9e:ee:30:b2:db:4a:
ad:55:8e:a4:0e:77:cc:42:e3:0c:59:35:b9:a7:c7:ca:e7:83:
2c:71:44:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZohCP/GAVMMtCNYnZpfSy6aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1ZDlmYzgxNWU5MGNhODc5Mjc5MDdjNWVhYjNmZTc5Y2Ey
MTVlYWEwHhcNMjUxMDI2MTUwMDI5WhcNMjUxMDI3MTUwMDI5WjAzMTEwLwYDVQQD
EyhjYTYwNDhiZmQ1N2U4ZmFhZjFjNWY0MmQzYjQ1MGMwZDM4Yzg1ZTA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApvK1p35yT+Jh9yc4FQOF7dsDpFTU
rByMKTwDtOPMZR4mBB8tSkj/oEWkfr/is0t6LZqrVblHt6H+dfL4F330iYVOCTtC
3qNvJVdX+hNoI7AP+xmZftn28K5ULo+mDzHxDDvL72exgvBkM6pzcc0OBAdkP+ex
JQYPRR7HXVfIU0wlpCmzRcafCWuibICoKJEMTooSQB/PjJFb6WwVpp/JkHBWbJnM
3sJBvw6yw7GwkYo5Hgcv4yTp1njM171EN3nblKSjmNMHVEycxjIU3aRS4jlySumM
PDrSv2GDdkZwzpU9D0aXYDbLpacBhN6OCkub5BUz5/v8xXvCK3Sqi0aiYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMpgSL/Vfo+q8cX0LTtFDA04yF4IMB8GA1UdIwQY
MBaAFJXZ/IFekMqHknkHxeqz/nnKIV6qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGRuOGdWNlF5b2VTZVFmRjZyUC1lY29oWHFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS85Y2FhNTAtYTUxMC00MTdhLWI1ODkt
OGNlNDE3OTIzMmM4LzEvbGRuOGdWNlF5b2VTZVFmRjZyUC1lY29oWHFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS85Y2FhNTAtYTUxMC00MTdhLWI1ODktOGNlNDE3OTIzMmM4
LzEvbGRuOGdWNlF5b2VTZVFmRjZyUC1lY29oWHFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcgoXPthW
8uAQu7TlccOhMwo7IgXugZhEQPWgAnfy2pnNLbMOoIaBxQRogmsxMNhVZGTxv7tp
DhbG3sCG4vX9Dp8pAbSvrhvN+JzpNu5TIKW9Is+hZpVCqjyyLZJ1ItEyTktibiJa
F0rY7f6ms8YO/IqvzwJ46+kdjypOJam0j/ImiJNDBjSMTQuNwQMxcv1/OhDZz9UF
eb1FY4Lb6LxYDAvmK9Kz6Fey3o6c6VEWLVC//j8cYxCC+DxerCGzfrmF+G0LoxtP
3KfUe0RynQ5b33GHuDuzoHpsirjpsxSVDfVXTmcWnu4wsttKrVWOpA53zELjDFk1
uafHyueDLHFELQ==
-----END CERTIFICATE-----
Generated at Sun Oct 26 20:14:38 2025 by rpki-client