Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/fff1c7-cee1-4fa6-a99b-c9c8ab188853/1/aSJs60DGcfMKzxH6NrjX0cZ1RwQ.mft
File: aSJs60DGcfMKzxH6NrjX0cZ1RwQ.mft (raw, json)
Hash identifier: ig4HisaGJtMwzLmhN8QApbI61wSm/MGGEPbEB55eXSQ=
Subject key identifier: 7A:1C:59:72:5F:E4:7C:B5:EE:CA:2A:C6:B4:44:14:6D:B2:04:25:BB
Authority key identifier: 69:22:6C:EB:40:C6:71:F3:0A:CF:11:FA:36:B8:D7:D1:C6:75:47:04
Certificate issuer: /CN=69226ceb40c671f30acf11fa36b8d7d1c6754704
Certificate serial: 019A73388B3AACC6CBBB31E60FEF7ADD7D7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aSJs60DGcfMKzxH6NrjX0cZ1RwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/fff1c7-cee1-4fa6-a99b-c9c8ab188853/1/aSJs60DGcfMKzxH6NrjX0cZ1RwQ.mft
Manifest number: 1727
Signing time: Tue 11 Nov 2025 14:01:16 +0000
Manifest this update: Tue 11 Nov 2025 14:01:16 +0000
Manifest next update: Wed 12 Nov 2025 14:01:16 +0000
Files and hashes: 1: aSJs60DGcfMKzxH6NrjX0cZ1RwQ.crl (hash: yAN5tdSHuAnbVEm743KBugczmfSsGp1Jetb3i2R/W8g=)
2: haMdABaXVysRqHMnxwzwnxPmy3c.roa (hash: qOyf4cvYsbSBRT8OdzzVWfnIBaN7hD9KoD7F7avNbKY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/fff1c7-cee1-4fa6-a99b-c9c8ab188853/1/aSJs60DGcfMKzxH6NrjX0cZ1RwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/fff1c7-cee1-4fa6-a99b-c9c8ab188853/1/aSJs60DGcfMKzxH6NrjX0cZ1RwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/aSJs60DGcfMKzxH6NrjX0cZ1RwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:38:8b:3a:ac:c6:cb:bb:31:e6:0f:ef:7a:dd:7d:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69226ceb40c671f30acf11fa36b8d7d1c6754704
Validity
Not Before: Nov 11 14:01:16 2025 GMT
Not After : Nov 12 14:01:16 2025 GMT
Subject: CN=7a1c59725fe47cb5eeca2ac6b444146db20425bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a7:98:e7:aa:d2:90:63:f9:79:a6:8a:2b:30:
c2:c3:f1:01:2b:61:94:cc:99:51:73:b3:63:58:ab:
db:e5:c1:de:ac:ab:74:11:30:a8:89:82:ad:7c:66:
55:f4:31:fe:ef:7b:03:91:1b:12:64:fa:f5:b1:84:
e8:b9:60:4b:e3:11:44:58:1c:54:ef:2f:65:83:70:
cc:e7:88:be:21:70:8c:ed:68:c2:e2:23:e9:44:a8:
c5:22:a2:7c:15:71:65:ed:44:96:f9:a2:9f:c0:a5:
f0:3c:f3:3e:9c:97:2b:19:05:71:e9:bb:ff:c9:53:
50:4e:8f:15:37:b0:06:90:50:af:b0:fa:7b:f0:f0:
f4:1f:f6:26:eb:f5:95:c2:f9:fe:f6:9c:da:1b:d6:
4b:f4:b4:54:e4:14:39:40:61:55:2c:2b:b9:50:0c:
9c:c7:40:d4:07:8a:f6:85:2d:2d:75:d5:5c:a4:7f:
06:4d:39:14:a3:64:cb:8b:d5:3a:2c:c1:0e:c8:df:
15:23:65:c0:f5:e3:2c:3d:47:3a:47:ce:51:18:4a:
4e:b6:18:af:2d:40:f6:02:ea:11:b7:24:b2:0b:87:
36:44:96:c2:b8:71:e9:3a:d1:d7:b0:57:d9:98:9e:
30:f2:48:18:81:86:39:b2:41:50:9e:63:df:c4:65:
42:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:1C:59:72:5F:E4:7C:B5:EE:CA:2A:C6:B4:44:14:6D:B2:04:25:BB
X509v3 Authority Key Identifier:
keyid:69:22:6C:EB:40:C6:71:F3:0A:CF:11:FA:36:B8:D7:D1:C6:75:47:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aSJs60DGcfMKzxH6NrjX0cZ1RwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fff1c7-cee1-4fa6-a99b-c9c8ab188853/1/aSJs60DGcfMKzxH6NrjX0cZ1RwQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fff1c7-cee1-4fa6-a99b-c9c8ab188853/1/aSJs60DGcfMKzxH6NrjX0cZ1RwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
f4:e2:09:8f:d5:34:c8:cb:a5:ec:fa:04:04:ff:52:e2:32:7c:
a5:60:ef:65:57:51:35:04:51:e7:0d:53:dc:a6:a1:03:a7:b6:
8a:56:ad:c5:a0:d8:24:38:f8:d0:5f:3e:bb:9a:c3:08:9d:1f:
d0:0f:aa:da:94:40:75:57:f6:f1:e2:7c:d7:22:2a:b0:e0:1d:
ba:bc:2b:44:42:a9:89:08:6b:dd:a4:e4:a8:b4:9c:bd:af:87:
c2:f5:65:d1:e6:08:bc:02:06:d0:b2:72:a3:24:f9:37:b8:7f:
38:87:bc:e2:89:61:49:28:31:06:b4:4c:23:e7:f4:68:f2:8f:
b6:23:22:a7:b6:08:42:6c:69:86:c5:d2:c2:46:80:68:3e:46:
71:29:01:fd:91:cb:7a:52:98:b3:80:86:15:3a:e8:34:7b:d6:
43:66:c4:a0:93:80:34:b3:e8:d0:db:5b:ed:39:56:64:20:6b:
af:42:3f:00:53:ad:0e:3b:03:25:3f:aa:89:e8:cb:95:6c:58:
29:c8:95:42:df:4c:59:c2:ab:6a:d4:f6:e0:a6:72:72:55:49:
35:b2:2d:63:33:7b:01:c9:18:db:ac:fa:fe:41:ea:53:42:93:
b5:9e:3e:0d:cd:32:89:43:1c:89:a7:4b:84:62:4e:e4:aa:20:
d7:41:f1:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpzOIs6rMbLuzHmD+963X1/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5MjI2Y2ViNDBjNjcxZjMwYWNmMTFmYTM2YjhkN2QxYzY3
NTQ3MDQwHhcNMjUxMTExMTQwMTE2WhcNMjUxMTEyMTQwMTE2WjAzMTEwLwYDVQQD
Eyg3YTFjNTk3MjVmZTQ3Y2I1ZWVjYTJhYzZiNDQ0MTQ2ZGIyMDQyNWJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqeY56rSkGP5eaaKKzDCw/EBK2GU
zJlRc7NjWKvb5cHerKt0ETCoiYKtfGZV9DH+73sDkRsSZPr1sYTouWBL4xFEWBxU
7y9lg3DM54i+IXCM7WjC4iPpRKjFIqJ8FXFl7USW+aKfwKXwPPM+nJcrGQVx6bv/
yVNQTo8VN7AGkFCvsPp78PD0H/Ym6/WVwvn+9pzaG9ZL9LRU5BQ5QGFVLCu5UAyc
x0DUB4r2hS0tddVcpH8GTTkUo2TLi9U6LMEOyN8VI2XA9eMsPUc6R85RGEpOthiv
LUD2AuoRtySyC4c2RJbCuHHpOtHXsFfZmJ4w8kgYgYY5skFQnmPfxGVCRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHocWXJf5Hy17soqxrREFG2yBCW7MB8GA1UdIwQY
MBaAFGkibOtAxnHzCs8R+ja419HGdUcEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVNKczYwREdjZk1LenhINk5yalgwY1oxUndRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy9mZmYxYzctY2VlMS00ZmE2LWE5OWIt
YzljOGFiMTg4ODUzLzEvYVNKczYwREdjZk1LenhINk5yalgwY1oxUndRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy9mZmYxYzctY2VlMS00ZmE2LWE5OWItYzljOGFiMTg4ODUz
LzEvYVNKczYwREdjZk1LenhINk5yalgwY1oxUndRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA9OIJj9U0
yMul7PoEBP9S4jJ8pWDvZVdRNQRR5w1T3KahA6e2ilatxaDYJDj40F8+u5rDCJ0f
0A+q2pRAdVf28eJ81yIqsOAdurwrREKpiQhr3aTkqLScva+HwvVl0eYIvAIG0LJy
oyT5N7h/OIe84olhSSgxBrRMI+f0aPKPtiMip7YIQmxphsXSwkaAaD5GcSkB/ZHL
elKYs4CGFTroNHvWQ2bEoJOANLPo0Ntb7TlWZCBrr0I/AFOtDjsDJT+qiejLlWxY
KciVQt9MWcKratT24KZyclVJNbItYzN7AckY26z6/kHqU0KTtZ4+Dc0yiUMciadL
hGJO5Kog10Hxeg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:28:06 2025 by rpki-client