Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/00ebf2-ebeb-4e46-876c-2d9cd5f25145/1/MtSwKBxKVrJ2-vRvKFD-DPThzE8.mft
File: MtSwKBxKVrJ2-vRvKFD-DPThzE8.mft (raw, json)
Hash identifier: iuUhz5fxHgOtbvL4gO3YLTxeo02MGzF+HHaOen9dRIs=
Subject key identifier: 96:3C:78:BC:E5:0E:E1:CC:E8:BD:12:FA:5A:89:F9:DC:32:19:0A:A2
Authority key identifier: 32:D4:B0:28:1C:4A:56:B2:76:FA:F4:6F:28:50:FE:0C:F4:E1:CC:4F
Certificate issuer: /CN=32d4b0281c4a56b276faf46f2850fe0cf4e1cc4f
Certificate serial: 019A72258727AEFF3636030555D7EBAE2B86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MtSwKBxKVrJ2-vRvKFD-DPThzE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/00ebf2-ebeb-4e46-876c-2d9cd5f25145/1/MtSwKBxKVrJ2-vRvKFD-DPThzE8.mft
Manifest number: 14
Signing time: Tue 11 Nov 2025 09:00:53 +0000
Manifest this update: Tue 11 Nov 2025 09:00:53 +0000
Manifest next update: Wed 12 Nov 2025 09:00:53 +0000
Files and hashes: 1: MtSwKBxKVrJ2-vRvKFD-DPThzE8.crl (hash: qxKv8vLFzuizwL94lS7Qfsp/XRrBqbOzdA89jf8hvuk=)
2: eNWnwqIDMEiQxfYhNRHjW54poNY.roa (hash: ycpxV8nYGU8l1ZJlM7ZM3skLLwnEhIqNMh55U8iJWmw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/00ebf2-ebeb-4e46-876c-2d9cd5f25145/1/MtSwKBxKVrJ2-vRvKFD-DPThzE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/00ebf2-ebeb-4e46-876c-2d9cd5f25145/1/MtSwKBxKVrJ2-vRvKFD-DPThzE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/MtSwKBxKVrJ2-vRvKFD-DPThzE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:87:27:ae:ff:36:36:03:05:55:d7:eb:ae:2b:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32d4b0281c4a56b276faf46f2850fe0cf4e1cc4f
Validity
Not Before: Nov 11 09:00:53 2025 GMT
Not After : Nov 12 09:00:53 2025 GMT
Subject: CN=963c78bce50ee1cce8bd12fa5a89f9dc32190aa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:77:14:4b:e0:b3:a9:56:11:08:57:2f:d8:54:
05:ed:40:77:45:7a:51:b7:bc:3a:78:f6:7f:0a:8c:
75:00:53:7e:93:3d:ac:e3:b7:75:21:10:c1:fa:f1:
02:a9:f9:9f:8e:ea:89:e4:b6:3c:7b:b0:cf:af:6b:
19:e1:9c:a6:70:02:6e:f5:8e:d7:16:aa:0f:f6:b8:
51:68:55:f1:d1:65:5e:bb:c1:04:10:2d:e4:2a:34:
2d:38:e5:fc:c4:96:9e:15:6c:7f:55:95:01:35:25:
09:1c:7f:77:c4:9b:91:0b:58:92:60:90:a5:f4:59:
5a:74:12:c0:9f:7d:a0:87:41:cf:09:7f:cd:5b:30:
11:ba:92:51:d8:79:8b:67:de:19:b2:66:df:9e:30:
e9:cf:4a:5d:f7:7a:e8:b3:b3:fd:23:f7:1d:dc:c6:
e9:78:cc:f4:41:0e:38:41:7e:18:62:53:56:54:12:
93:e3:ab:d5:c1:ae:14:65:dc:90:a5:59:61:8f:ea:
26:b5:26:22:60:fb:8f:3a:28:7c:ac:64:28:87:da:
ca:22:7a:f4:83:d1:2d:1e:71:c3:8b:c2:b2:d1:59:
b8:19:bc:b4:4d:a5:48:2e:3a:94:9b:94:a3:d8:8e:
93:08:1a:a1:ae:7e:84:77:40:bf:94:59:58:bf:b3:
41:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:3C:78:BC:E5:0E:E1:CC:E8:BD:12:FA:5A:89:F9:DC:32:19:0A:A2
X509v3 Authority Key Identifier:
keyid:32:D4:B0:28:1C:4A:56:B2:76:FA:F4:6F:28:50:FE:0C:F4:E1:CC:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MtSwKBxKVrJ2-vRvKFD-DPThzE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/00ebf2-ebeb-4e46-876c-2d9cd5f25145/1/MtSwKBxKVrJ2-vRvKFD-DPThzE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/00ebf2-ebeb-4e46-876c-2d9cd5f25145/1/MtSwKBxKVrJ2-vRvKFD-DPThzE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:11:f9:a3:29:3d:e6:ec:1d:ad:f3:e3:1f:92:b2:5e:29:a2:
b7:f3:95:07:be:8f:c7:c6:46:5f:60:06:b3:79:93:be:99:43:
47:c0:7b:f0:f1:26:3c:7f:2f:74:f5:a9:9f:89:a1:72:13:b0:
57:fa:61:44:02:ba:1c:b4:f4:6f:18:35:75:3b:a2:44:0e:f3:
e0:a4:7f:c1:b0:29:54:0a:e3:c3:75:05:47:96:41:68:da:28:
7e:4c:1c:88:55:a6:ff:cb:26:9c:32:fc:f4:86:74:ae:0a:e7:
90:97:99:37:58:cc:41:ab:f2:67:88:f4:af:02:7e:4f:15:5c:
88:ee:06:1d:20:02:a5:09:b0:13:f6:a0:71:d2:79:a1:76:02:
f0:0c:7b:f9:95:8f:81:93:a8:5b:02:e0:67:53:19:ab:f0:d7:
ac:39:23:27:83:3f:00:a0:97:d1:4b:52:6c:b9:de:2e:db:6b:
5d:14:26:54:03:73:18:db:48:f5:7c:04:52:86:21:05:f3:31:
54:bc:c4:b9:b5:b7:59:2e:f3:e6:1a:dc:b5:aa:1e:ad:b7:a9:
39:5b:ab:14:9b:69:8d:81:fb:d7:14:5a:40:53:65:8d:8a:b4:
8d:18:00:d6:c7:d7:a5:f8:f6:ef:e1:73:c2:3b:02:c4:dc:0f:
c4:79:7d:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJYcnrv82NgMFVdfrriuGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyZDRiMDI4MWM0YTU2YjI3NmZhZjQ2ZjI4NTBmZTBjZjRl
MWNjNGYwHhcNMjUxMTExMDkwMDUzWhcNMjUxMTEyMDkwMDUzWjAzMTEwLwYDVQQD
Eyg5NjNjNzhiY2U1MGVlMWNjZThiZDEyZmE1YTg5ZjlkYzMyMTkwYWEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjncUS+CzqVYRCFcv2FQF7UB3RXpR
t7w6ePZ/Cox1AFN+kz2s47d1IRDB+vECqfmfjuqJ5LY8e7DPr2sZ4ZymcAJu9Y7X
FqoP9rhRaFXx0WVeu8EEEC3kKjQtOOX8xJaeFWx/VZUBNSUJHH93xJuRC1iSYJCl
9FladBLAn32gh0HPCX/NWzARupJR2HmLZ94ZsmbfnjDpz0pd93ros7P9I/cd3Mbp
eMz0QQ44QX4YYlNWVBKT46vVwa4UZdyQpVlhj+omtSYiYPuPOih8rGQoh9rKInr0
g9EtHnHDi8Ky0Vm4Gby0TaVILjqUm5Sj2I6TCBqhrn6Ed0C/lFlYv7NBJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJY8eLzlDuHM6L0S+lqJ+dwyGQqiMB8GA1UdIwQY
MBaAFDLUsCgcSlaydvr0byhQ/gz04cxPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXRTd0tCeEtWckoyLXZSdktGRC1EUFRoekU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC8wMGViZjItZWJlYi00ZTQ2LTg3NmMt
MmQ5Y2Q1ZjI1MTQ1LzEvTXRTd0tCeEtWckoyLXZSdktGRC1EUFRoekU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC8wMGViZjItZWJlYi00ZTQ2LTg3NmMtMmQ5Y2Q1ZjI1MTQ1
LzEvTXRTd0tCeEtWckoyLXZSdktGRC1EUFRoekU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJxH5oyk9
5uwdrfPjH5KyXimit/OVB76Px8ZGX2AGs3mTvplDR8B78PEmPH8vdPWpn4mhchOw
V/phRAK6HLT0bxg1dTuiRA7z4KR/wbApVArjw3UFR5ZBaNoofkwciFWm/8smnDL8
9IZ0rgrnkJeZN1jMQavyZ4j0rwJ+TxVciO4GHSACpQmwE/agcdJ5oXYC8Ax7+ZWP
gZOoWwLgZ1MZq/DXrDkjJ4M/AKCX0UtSbLneLttrXRQmVANzGNtI9XwEUoYhBfMx
VLzEubW3WS7z5hrctaoerbepOVurFJtpjYH71xRaQFNljYq0jRgA1sfXpfj27+Fz
wjsCxNwPxHl9cw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:37:37 2025 by rpki-client