Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/88cc50-2273-45ff-adb5-eccd665f1f03/1/cH89q67iT8Q7hlqvo_PJwvNkv8k.mft
File: cH89q67iT8Q7hlqvo_PJwvNkv8k.mft (raw, json)
Hash identifier: ZV5kJfc3Qgwn+UsL1mYJa+XdEiNoPtecE9bKj6rVaE8=
Subject key identifier: 23:AD:88:3D:54:65:2D:F6:76:42:A4:90:F5:22:E0:EC:97:E7:9D:4D
Authority key identifier: 70:7F:3D:AB:AE:E2:4F:C4:3B:86:5A:AF:A3:F3:C9:C2:F3:64:BF:C9
Certificate issuer: /CN=707f3dabaee24fc43b865aafa3f3c9c2f364bfc9
Certificate serial: 019A1ACFD26846B49E0CC60406D53071BAC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cH89q67iT8Q7hlqvo_PJwvNkv8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/88cc50-2273-45ff-adb5-eccd665f1f03/1/cH89q67iT8Q7hlqvo_PJwvNkv8k.mft
Manifest number: 1685
Signing time: Sat 25 Oct 2025 10:00:18 +0000
Manifest this update: Sat 25 Oct 2025 10:00:18 +0000
Manifest next update: Sun 26 Oct 2025 10:00:18 +0000
Files and hashes: 1: MmMjPcmgSnmpat_UrnnkwrG8N3M.roa (hash: P+6oU+/zVxV3KfOFEMlrjbqkg2yguA/0UthTHnReUm8=)
2: cH89q67iT8Q7hlqvo_PJwvNkv8k.crl (hash: ncA1hiO/JIS5Hds5bIh+r2haOw+F8iUkXeock71oXbo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/88cc50-2273-45ff-adb5-eccd665f1f03/1/cH89q67iT8Q7hlqvo_PJwvNkv8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/88cc50-2273-45ff-adb5-eccd665f1f03/1/cH89q67iT8Q7hlqvo_PJwvNkv8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/cH89q67iT8Q7hlqvo_PJwvNkv8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 08:33:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1a:cf:d2:68:46:b4:9e:0c:c6:04:06:d5:30:71:ba:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=707f3dabaee24fc43b865aafa3f3c9c2f364bfc9
Validity
Not Before: Oct 25 10:00:18 2025 GMT
Not After : Oct 26 10:00:18 2025 GMT
Subject: CN=23ad883d54652df67642a490f522e0ec97e79d4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3c:cd:87:be:49:b1:f3:ab:45:e6:ba:c6:99:
60:23:5b:90:cd:0a:7b:b2:10:5a:b2:bb:25:cc:9b:
bc:6a:fd:a1:1b:8c:32:b9:fe:3d:96:32:76:36:5e:
e2:4a:63:84:3e:ab:31:96:d5:35:fa:69:7a:6b:73:
e5:06:9a:87:ad:2b:a8:4a:73:cb:41:df:2d:26:28:
1f:53:54:9d:6f:53:51:3d:fe:30:81:5a:48:9c:63:
c1:1a:e0:0f:8f:3f:c5:9d:df:ca:9f:dd:54:a0:85:
bc:0a:95:93:68:92:f8:a4:fa:71:44:02:fa:3d:3b:
6d:86:3a:9d:c8:cf:3e:4d:73:1e:d8:0e:36:b9:1f:
51:de:65:84:48:be:f4:4d:a3:36:87:2c:6f:38:ea:
9d:6c:49:48:fe:9d:41:0b:c0:ea:4f:82:32:fc:44:
0b:15:46:98:25:6e:10:37:6e:24:63:46:b7:6e:42:
2c:ed:ed:f6:16:15:2e:cd:dd:cc:22:7f:80:3d:b2:
20:8f:5b:93:65:18:ac:d1:2a:38:35:4f:f2:e9:d8:
80:a0:b5:78:39:c3:41:03:db:92:ae:24:b1:26:39:
75:b8:64:b0:f1:6a:03:b1:50:70:97:fb:32:33:af:
91:63:70:fd:d2:a1:74:6e:7c:7e:2f:30:7d:78:70:
1e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:AD:88:3D:54:65:2D:F6:76:42:A4:90:F5:22:E0:EC:97:E7:9D:4D
X509v3 Authority Key Identifier:
keyid:70:7F:3D:AB:AE:E2:4F:C4:3B:86:5A:AF:A3:F3:C9:C2:F3:64:BF:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cH89q67iT8Q7hlqvo_PJwvNkv8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/88cc50-2273-45ff-adb5-eccd665f1f03/1/cH89q67iT8Q7hlqvo_PJwvNkv8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/88cc50-2273-45ff-adb5-eccd665f1f03/1/cH89q67iT8Q7hlqvo_PJwvNkv8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:57:64:a9:9a:8b:f4:07:2f:3a:2d:e2:4a:7d:13:d9:72:43:
2d:a0:7e:9d:d3:0a:48:86:56:11:1b:c2:84:c6:af:df:45:72:
1d:c1:24:46:1d:c7:d0:ab:da:bd:17:d2:3f:a0:ad:30:c5:11:
b4:b5:32:d6:5e:56:d5:20:62:25:0c:f0:37:7c:6f:5e:c2:c4:
f3:e2:bf:03:03:a4:a0:c3:bc:93:0d:fe:d6:68:8c:53:45:b4:
da:8b:fa:bf:74:50:ce:9e:69:c3:c4:83:01:2e:c1:b1:30:ba:
f7:7f:06:8d:e4:fc:7a:26:8a:9f:dd:d9:2e:84:95:07:e3:05:
cb:f7:f2:c6:4f:28:ac:e3:91:93:e2:4e:68:e8:e6:ae:04:8c:
ad:cc:bb:93:e2:5c:06:1d:37:3e:6b:dc:1a:2e:62:e7:18:59:
2c:56:bf:9a:e0:ae:b7:ca:8e:fb:f9:0f:e3:62:7d:d8:d6:40:
62:b1:71:98:ec:2b:d4:c5:ed:d2:2c:11:46:8c:b7:d1:50:2a:
1e:aa:13:36:a8:53:f2:75:47:4f:09:ff:5d:cf:97:a2:7c:68:
47:9e:65:db:96:9f:02:be:d3:b9:0f:9c:2b:64:41:48:4b:92:
c0:f6:90:02:f0:a8:78:b5:97:4d:ea:a4:81:e3:25:a9:e1:8a:
f5:94:18:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoaz9JoRrSeDMYEBtUwcbrBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwN2YzZGFiYWVlMjRmYzQzYjg2NWFhZmEzZjNjOWMyZjM2
NGJmYzkwHhcNMjUxMDI1MTAwMDE4WhcNMjUxMDI2MTAwMDE4WjAzMTEwLwYDVQQD
EygyM2FkODgzZDU0NjUyZGY2NzY0MmE0OTBmNTIyZTBlYzk3ZTc5ZDRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDzNh75JsfOrRea6xplgI1uQzQp7
shBasrslzJu8av2hG4wyuf49ljJ2Nl7iSmOEPqsxltU1+ml6a3PlBpqHrSuoSnPL
Qd8tJigfU1Sdb1NRPf4wgVpInGPBGuAPjz/Fnd/Kn91UoIW8CpWTaJL4pPpxRAL6
PTtthjqdyM8+TXMe2A42uR9R3mWESL70TaM2hyxvOOqdbElI/p1BC8DqT4Iy/EQL
FUaYJW4QN24kY0a3bkIs7e32FhUuzd3MIn+APbIgj1uTZRis0So4NU/y6diAoLV4
OcNBA9uSriSxJjl1uGSw8WoDsVBwl/syM6+RY3D90qF0bnx+LzB9eHAeTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCOtiD1UZS32dkKkkPUi4OyX551NMB8GA1UdIwQY
MBaAFHB/Pauu4k/EO4Zar6PzycLzZL/JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0g4OXE2N2lUOFE3aGxxdm9fUEp3dk5rdjhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi84OGNjNTAtMjI3My00NWZmLWFkYjUt
ZWNjZDY2NWYxZjAzLzEvY0g4OXE2N2lUOFE3aGxxdm9fUEp3dk5rdjhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi84OGNjNTAtMjI3My00NWZmLWFkYjUtZWNjZDY2NWYxZjAz
LzEvY0g4OXE2N2lUOFE3aGxxdm9fUEp3dk5rdjhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnldkqZqL
9AcvOi3iSn0T2XJDLaB+ndMKSIZWERvChMav30VyHcEkRh3H0KvavRfSP6CtMMUR
tLUy1l5W1SBiJQzwN3xvXsLE8+K/AwOkoMO8kw3+1miMU0W02ov6v3RQzp5pw8SD
AS7BsTC6938GjeT8eiaKn93ZLoSVB+MFy/fyxk8orOORk+JOaOjmrgSMrcy7k+Jc
Bh03PmvcGi5i5xhZLFa/muCut8qO+/kP42J92NZAYrFxmOwr1MXt0iwRRoy30VAq
HqoTNqhT8nVHTwn/Xc+XonxoR55l25afAr7TuQ+cK2RBSEuSwPaQAvCoeLWXTeqk
geMlqeGK9ZQYqg==
-----END CERTIFICATE-----
Generated at Sat Oct 25 13:39:30 2025 by rpki-client