Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/a71a5c-1746-43c4-a67f-a8f76bd26a27/1/c2spT5ZdrWQPnjU784-a8RkUeeo.mft
File: c2spT5ZdrWQPnjU784-a8RkUeeo.mft (raw, json)
Hash identifier: QE8osHrgDD/a1NG/wvS7aEjyO6XlWfvXsTpsCr6v/Ns=
Subject key identifier: 8D:0A:21:0D:09:C2:E6:A4:A3:D3:8F:C3:94:F0:5C:15:2C:C4:A6:A1
Authority key identifier: 73:6B:29:4F:96:5D:AD:64:0F:9E:35:3B:F3:8F:9A:F1:19:14:79:EA
Certificate issuer: /CN=736b294f965dad640f9e353bf38f9af1191479ea
Certificate serial: 019A73012B74ADB2C85E4FD80C94C3FE80E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c2spT5ZdrWQPnjU784-a8RkUeeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/a71a5c-1746-43c4-a67f-a8f76bd26a27/1/c2spT5ZdrWQPnjU784-a8RkUeeo.mft
Manifest number: 153C
Signing time: Tue 11 Nov 2025 13:00:47 +0000
Manifest this update: Tue 11 Nov 2025 13:00:47 +0000
Manifest next update: Wed 12 Nov 2025 13:00:47 +0000
Files and hashes: 1: Pb8L9pbGV7NQfgKmcvhMk6D02_s.roa (hash: CoNWry2kYRJwo9FhSFsPeMR2m6gz3FAFYuGEKzEDx5w=)
2: c2spT5ZdrWQPnjU784-a8RkUeeo.crl (hash: VBkAwO47vSQze5O2YZAtcJr/77TBspO/4l438HxxPFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/a71a5c-1746-43c4-a67f-a8f76bd26a27/1/c2spT5ZdrWQPnjU784-a8RkUeeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/a71a5c-1746-43c4-a67f-a8f76bd26a27/1/c2spT5ZdrWQPnjU784-a8RkUeeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/c2spT5ZdrWQPnjU784-a8RkUeeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:2b:74:ad:b2:c8:5e:4f:d8:0c:94:c3:fe:80:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=736b294f965dad640f9e353bf38f9af1191479ea
Validity
Not Before: Nov 11 13:00:47 2025 GMT
Not After : Nov 12 13:00:47 2025 GMT
Subject: CN=8d0a210d09c2e6a4a3d38fc394f05c152cc4a6a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:8f:3f:62:ee:e5:2e:67:7c:72:9c:fe:b9:d1:
d1:05:7b:50:48:4c:63:42:8f:1c:33:7a:56:fa:86:
15:88:04:9e:0d:f2:c5:5a:db:2d:bc:6c:58:ea:ed:
6f:7a:01:f9:30:66:68:4d:90:9c:6c:de:df:c4:89:
d6:ae:89:43:c8:08:34:ad:e6:72:36:c0:a5:d7:56:
c9:ef:25:fe:e4:2f:f4:39:e8:96:b0:e1:6d:88:0a:
3c:c8:84:ef:be:2a:9f:ac:c1:1f:9c:a2:1c:9e:9c:
7a:40:44:9b:f1:d0:d6:47:61:88:f7:18:da:5b:ac:
dd:37:cb:52:7d:44:0d:8e:71:4e:9f:24:7b:c4:27:
d1:27:63:c1:7a:70:21:19:63:be:b2:4d:85:35:7c:
7c:e8:a0:db:da:7e:38:2c:ec:52:46:61:7c:87:57:
1c:2d:15:10:68:fd:77:41:39:ca:6c:43:24:2c:2f:
dd:2e:ff:d8:5a:8f:6d:28:d3:85:44:83:2c:eb:7e:
31:c6:6d:e9:4d:52:a3:03:a3:ed:12:6e:40:05:d2:
f4:55:40:6e:ad:1f:9b:59:92:ce:00:76:3c:fa:8b:
1d:71:bb:5c:b3:82:93:e2:5a:8c:70:b8:1a:16:75:
97:46:51:42:4b:c7:1a:c5:d5:3d:5c:7d:06:8f:47:
da:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:0A:21:0D:09:C2:E6:A4:A3:D3:8F:C3:94:F0:5C:15:2C:C4:A6:A1
X509v3 Authority Key Identifier:
keyid:73:6B:29:4F:96:5D:AD:64:0F:9E:35:3B:F3:8F:9A:F1:19:14:79:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2spT5ZdrWQPnjU784-a8RkUeeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a71a5c-1746-43c4-a67f-a8f76bd26a27/1/c2spT5ZdrWQPnjU784-a8RkUeeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a71a5c-1746-43c4-a67f-a8f76bd26a27/1/c2spT5ZdrWQPnjU784-a8RkUeeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:95:ec:6f:e0:6d:e4:a5:d7:95:2a:40:bc:b1:d4:98:e2:26:
b8:68:f4:a4:9e:84:59:76:2f:6e:7e:84:2d:09:0e:aa:e1:d2:
29:87:96:61:c5:39:98:e7:7b:6e:36:cd:b2:ea:1e:74:51:14:
41:6f:bf:ed:5c:8a:34:18:66:5a:72:07:94:41:02:ca:ba:18:
23:95:e1:7b:ed:b3:31:cb:a3:e4:bd:43:c8:ce:05:d8:02:e6:
95:cc:73:bc:65:28:e0:3b:c2:be:90:d0:87:0c:82:a7:20:ca:
19:46:75:6b:12:f2:62:65:0d:6d:d1:9b:49:3c:1e:51:e0:51:
13:9b:e5:50:b6:54:48:3d:0a:02:21:e1:76:05:2c:67:c7:82:
36:fb:7e:b5:aa:cb:33:9c:84:0a:e8:53:f2:28:d3:96:ff:0d:
b6:93:d2:68:a2:74:1c:4c:42:6a:8a:2c:70:3f:b8:ea:61:02:
3e:09:f4:37:e3:b3:cd:c2:cc:54:4e:65:47:f5:6d:ec:75:74:
11:98:8f:18:cd:04:f5:ac:24:62:0b:32:7c:a0:4a:bb:40:af:
31:f9:32:e9:ba:18:ed:4e:c6:00:9b:e2:da:e9:4d:92:5d:d0:
d5:f6:16:a5:36:da:e8:59:85:bf:57:b8:b8:60:e5:73:cb:4e:
24:59:34:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpzASt0rbLIXk/YDJTD/oDoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczNmIyOTRmOTY1ZGFkNjQwZjllMzUzYmYzOGY5YWYxMTkx
NDc5ZWEwHhcNMjUxMTExMTMwMDQ3WhcNMjUxMTEyMTMwMDQ3WjAzMTEwLwYDVQQD
Eyg4ZDBhMjEwZDA5YzJlNmE0YTNkMzhmYzM5NGYwNWMxNTJjYzRhNmExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw48/Yu7lLmd8cpz+udHRBXtQSExj
Qo8cM3pW+oYViASeDfLFWtstvGxY6u1vegH5MGZoTZCcbN7fxInWrolDyAg0reZy
NsCl11bJ7yX+5C/0OeiWsOFtiAo8yITvviqfrMEfnKIcnpx6QESb8dDWR2GI9xja
W6zdN8tSfUQNjnFOnyR7xCfRJ2PBenAhGWO+sk2FNXx86KDb2n44LOxSRmF8h1cc
LRUQaP13QTnKbEMkLC/dLv/YWo9tKNOFRIMs634xxm3pTVKjA6PtEm5ABdL0VUBu
rR+bWZLOAHY8+osdcbtcs4KT4lqMcLgaFnWXRlFCS8caxdU9XH0Gj0fazQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI0KIQ0Jwuako9OPw5TwXBUsxKahMB8GA1UdIwQY
MBaAFHNrKU+WXa1kD541O/OPmvEZFHnqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYzJzcFQ1WmRyV1FQbmpVNzg0LWE4UmtVZWVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9hNzFhNWMtMTc0Ni00M2M0LWE2N2Yt
YThmNzZiZDI2YTI3LzEvYzJzcFQ1WmRyV1FQbmpVNzg0LWE4UmtVZWVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC9hNzFhNWMtMTc0Ni00M2M0LWE2N2YtYThmNzZiZDI2YTI3
LzEvYzJzcFQ1WmRyV1FQbmpVNzg0LWE4UmtVZWVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv5Xsb+Bt
5KXXlSpAvLHUmOImuGj0pJ6EWXYvbn6ELQkOquHSKYeWYcU5mOd7bjbNsuoedFEU
QW+/7VyKNBhmWnIHlEECyroYI5Xhe+2zMcuj5L1DyM4F2ALmlcxzvGUo4DvCvpDQ
hwyCpyDKGUZ1axLyYmUNbdGbSTweUeBRE5vlULZUSD0KAiHhdgUsZ8eCNvt+tarL
M5yECuhT8ijTlv8NtpPSaKJ0HExCaooscD+46mECPgn0N+OzzcLMVE5lR/Vt7HV0
EZiPGM0E9awkYgsyfKBKu0CvMfky6boY7U7GAJvi2ulNkl3Q1fYWpTba6FmFv1e4
uGDlc8tOJFk0FA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:19:14 2025 by rpki-client