Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/4963ec-576f-4167-993c-99f182213d4f/1/0d4HoaH2W9EW4R-fEQhgS26VzP0.mft
File: 0d4HoaH2W9EW4R-fEQhgS26VzP0.mft (raw, json)
Hash identifier: NoMa53E32IGbdG6/5R79DtXq/VhTRzU3ZtQXuTT1HE8=
Subject key identifier: 06:B7:AE:49:9A:73:78:11:24:3F:3D:7B:81:BD:4E:AC:D8:6B:7E:80
Authority key identifier: D1:DE:07:A1:A1:F6:5B:D1:16:E1:1F:9F:11:08:60:4B:6E:95:CC:FD
Certificate issuer: /CN=d1de07a1a1f65bd116e11f9f1108604b6e95ccfd
Certificate serial: 019A16F4221BFC5F704EB9241E92D92EA932
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0d4HoaH2W9EW4R-fEQhgS26VzP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/4963ec-576f-4167-993c-99f182213d4f/1/0d4HoaH2W9EW4R-fEQhgS26VzP0.mft
Manifest number: 1286
Signing time: Fri 24 Oct 2025 16:01:29 +0000
Manifest this update: Fri 24 Oct 2025 16:01:29 +0000
Manifest next update: Sat 25 Oct 2025 16:01:29 +0000
Files and hashes: 1: 0d4HoaH2W9EW4R-fEQhgS26VzP0.crl (hash: cfrSNbegZNGbZn/q6Sj0iMEINNHht/9aGtVh0CG9Br8=)
2: QEHZF8Tlk9QKI2YxEH34bnx0Z1c.roa (hash: 8+749rwNuEEuELLtmccQKg/as7h9BdIGWfJq5dqwT3A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/4963ec-576f-4167-993c-99f182213d4f/1/0d4HoaH2W9EW4R-fEQhgS26VzP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/4963ec-576f-4167-993c-99f182213d4f/1/0d4HoaH2W9EW4R-fEQhgS26VzP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0d4HoaH2W9EW4R-fEQhgS26VzP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Oct 2025 15:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:16:f4:22:1b:fc:5f:70:4e:b9:24:1e:92:d9:2e:a9:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1de07a1a1f65bd116e11f9f1108604b6e95ccfd
Validity
Not Before: Oct 24 16:01:29 2025 GMT
Not After : Oct 25 16:01:29 2025 GMT
Subject: CN=06b7ae499a737811243f3d7b81bd4eacd86b7e80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e5:5f:30:a1:9f:03:09:90:fa:3e:bf:3e:4b:
a3:14:d4:b4:87:f0:1d:1f:ef:6e:a0:da:1b:f1:71:
1e:d6:9b:12:17:a8:e5:5e:a5:97:30:1e:eb:ce:a4:
4d:0d:e5:41:ea:a8:48:ad:da:e8:45:35:59:d2:53:
3b:97:5b:17:06:83:bd:eb:e1:5d:59:ac:f0:bf:09:
53:d3:34:a6:43:6e:61:0d:b8:9c:1d:c7:dc:26:2f:
97:21:af:06:d7:f3:5d:95:02:df:4c:ca:a9:90:87:
d1:f1:9d:53:2a:40:f4:36:bf:65:3f:1f:2b:4c:e9:
21:18:a8:e0:5a:cf:e4:c7:aa:bf:30:1f:09:2e:dd:
11:bb:e0:9d:b0:9d:9f:09:b9:d9:40:53:09:51:57:
85:d0:b1:64:b2:5e:15:96:e5:f2:95:4a:60:bf:6d:
8c:b8:48:dc:1d:04:28:af:ea:5d:59:04:ec:b3:93:
45:68:a3:0f:6f:9b:f3:ef:82:94:c3:4c:8a:80:93:
0a:09:eb:29:be:c1:4e:68:a1:3b:c3:12:57:5e:a3:
62:15:c9:48:2a:ea:b4:fb:8c:85:51:13:14:b9:1e:
f5:74:d8:7e:51:54:ea:43:07:bc:f8:f4:3c:02:02:
9c:d4:5c:a9:55:eb:a0:81:72:26:45:41:e9:aa:da:
6a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:B7:AE:49:9A:73:78:11:24:3F:3D:7B:81:BD:4E:AC:D8:6B:7E:80
X509v3 Authority Key Identifier:
keyid:D1:DE:07:A1:A1:F6:5B:D1:16:E1:1F:9F:11:08:60:4B:6E:95:CC:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d4HoaH2W9EW4R-fEQhgS26VzP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4963ec-576f-4167-993c-99f182213d4f/1/0d4HoaH2W9EW4R-fEQhgS26VzP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4963ec-576f-4167-993c-99f182213d4f/1/0d4HoaH2W9EW4R-fEQhgS26VzP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:b4:1c:f7:26:6d:c5:cb:71:70:9e:a6:1b:df:f0:5e:b9:13:
5f:a0:e6:47:59:30:9c:85:8f:ad:30:ef:7d:8d:53:0e:d2:b9:
c1:79:23:ef:c7:a7:c1:27:ca:30:44:0c:a0:ff:a9:32:34:26:
a5:01:69:d4:45:21:22:75:ed:70:5b:9b:2c:b7:79:dc:1f:1d:
64:ee:99:ea:24:32:76:77:64:3f:63:38:b9:b0:50:56:39:ff:
8d:57:8d:ae:4d:22:2b:8a:9e:37:78:f5:c4:c0:6a:de:87:0a:
ae:13:a9:ee:2d:52:33:1a:d3:6a:96:28:41:7e:c0:b1:97:91:
a3:38:0c:15:91:54:e1:84:9f:bb:57:0a:e8:10:59:e3:3e:c7:
04:17:8f:b0:cf:dc:ea:38:62:dc:01:55:f8:1a:36:50:68:ac:
51:f1:d6:1f:b4:79:5e:34:dc:8b:7a:20:b2:10:28:cc:84:26:
51:b7:f8:c3:9a:0d:86:ba:ea:e5:e7:6b:37:45:06:bb:91:29:
3e:2b:6d:50:13:3b:00:5d:0c:98:cf:85:72:a2:7e:b3:fa:80:
93:a6:55:fa:b9:c9:03:51:ca:ab:21:83:0a:75:c6:20:dd:24:
96:b2:c6:73:1f:5e:5d:d4:9d:2f:83:b6:3b:2b:bb:57:06:5b:
fc:37:df:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoW9CIb/F9wTrkkHpLZLqkyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxZGUwN2ExYTFmNjViZDExNmUxMWY5ZjExMDg2MDRiNmU5
NWNjZmQwHhcNMjUxMDI0MTYwMTI5WhcNMjUxMDI1MTYwMTI5WjAzMTEwLwYDVQQD
EygwNmI3YWU0OTlhNzM3ODExMjQzZjNkN2I4MWJkNGVhY2Q4NmI3ZTgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwOVfMKGfAwmQ+j6/PkujFNS0h/Ad
H+9uoNob8XEe1psSF6jlXqWXMB7rzqRNDeVB6qhIrdroRTVZ0lM7l1sXBoO96+Fd
WazwvwlT0zSmQ25hDbicHcfcJi+XIa8G1/NdlQLfTMqpkIfR8Z1TKkD0Nr9lPx8r
TOkhGKjgWs/kx6q/MB8JLt0Ru+CdsJ2fCbnZQFMJUVeF0LFksl4VluXylUpgv22M
uEjcHQQor+pdWQTss5NFaKMPb5vz74KUw0yKgJMKCespvsFOaKE7wxJXXqNiFclI
Kuq0+4yFURMUuR71dNh+UVTqQwe8+PQ8AgKc1FypVeuggXImRUHpqtpqsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAa3rkmac3gRJD89e4G9TqzYa36AMB8GA1UdIwQY
MBaAFNHeB6Gh9lvRFuEfnxEIYEtulcz9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGQ0SG9hSDJXOUVXNFItZkVRaGdTMjZWelAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy80OTYzZWMtNTc2Zi00MTY3LTk5M2Mt
OTlmMTgyMjEzZDRmLzEvMGQ0SG9hSDJXOUVXNFItZkVRaGdTMjZWelAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy80OTYzZWMtNTc2Zi00MTY3LTk5M2MtOTlmMTgyMjEzZDRm
LzEvMGQ0SG9hSDJXOUVXNFItZkVRaGdTMjZWelAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvLQc9yZt
xctxcJ6mG9/wXrkTX6DmR1kwnIWPrTDvfY1TDtK5wXkj78enwSfKMEQMoP+pMjQm
pQFp1EUhInXtcFubLLd53B8dZO6Z6iQydndkP2M4ubBQVjn/jVeNrk0iK4qeN3j1
xMBq3ocKrhOp7i1SMxrTapYoQX7AsZeRozgMFZFU4YSfu1cK6BBZ4z7HBBePsM/c
6jhi3AFV+Bo2UGisUfHWH7R5XjTci3ogshAozIQmUbf4w5oNhrrq5edrN0UGu5Ep
PittUBM7AF0MmM+FcqJ+s/qAk6ZV+rnJA1HKqyGDCnXGIN0klrLGcx9eXdSdL4O2
Oyu7VwZb/DffaQ==
-----END CERTIFICATE-----
Generated at Fri Oct 24 18:49:09 2025 by rpki-client