Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/0ebeb9-31a8-4550-8396-695f4a927610/1/aI5xOwfHn5e0fp8DIXaLCUiLegM.mft
File: aI5xOwfHn5e0fp8DIXaLCUiLegM.mft (raw, json)
Hash identifier: nxHuSJdNsA48mORDyDseA1NLFa+dd11f45QAcw1lyY0=
Subject key identifier: 0F:B2:59:43:E6:E0:0C:DA:41:B3:42:28:23:1B:DD:95:0F:DD:C2:93
Authority key identifier: 68:8E:71:3B:07:C7:9F:97:B4:7E:9F:03:21:76:8B:09:48:8B:7A:03
Certificate issuer: /CN=688e713b07c79f97b47e9f0321768b09488b7a03
Certificate serial: 019A722662DFE266904378BF416442B70579
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aI5xOwfHn5e0fp8DIXaLCUiLegM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/0ebeb9-31a8-4550-8396-695f4a927610/1/aI5xOwfHn5e0fp8DIXaLCUiLegM.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 09:01:49 +0000
Manifest this update: Tue 11 Nov 2025 09:01:49 +0000
Manifest next update: Wed 12 Nov 2025 09:01:49 +0000
Files and hashes: 1: aI5xOwfHn5e0fp8DIXaLCUiLegM.crl (hash: 1yym/d9KtPLhd9pS2PDdHVUN4I3NwI1b5wRAbIIdZhE=)
2: eKt0iVcZQR9s-wKnsCaLnRBWxb0.roa (hash: r1viPmPOoL4VlPRT69GWy0bXH2hVoJ6TviDvQ+6ZdW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/0ebeb9-31a8-4550-8396-695f4a927610/1/aI5xOwfHn5e0fp8DIXaLCUiLegM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/0ebeb9-31a8-4550-8396-695f4a927610/1/aI5xOwfHn5e0fp8DIXaLCUiLegM.mft
rsync://rpki.ripe.net/repository/DEFAULT/aI5xOwfHn5e0fp8DIXaLCUiLegM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:62:df:e2:66:90:43:78:bf:41:64:42:b7:05:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=688e713b07c79f97b47e9f0321768b09488b7a03
Validity
Not Before: Nov 11 09:01:49 2025 GMT
Not After : Nov 12 09:01:49 2025 GMT
Subject: CN=0fb25943e6e00cda41b34228231bdd950fddc293
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:24:b0:c6:13:37:4f:05:4d:a5:53:14:56:d4:
8b:85:a3:db:37:2a:1f:ee:ae:79:b6:b7:30:8a:69:
f2:87:e3:f2:f7:7a:23:6b:71:3f:55:a8:65:2b:f2:
88:38:c0:0b:ac:65:d4:52:f3:80:9b:5e:22:a1:2d:
f4:3d:91:00:69:1c:7f:c6:30:fe:ec:5e:06:62:04:
3e:3f:29:bc:87:5c:a8:56:bb:12:c0:72:c8:b7:e2:
b6:a8:ac:2f:15:7c:35:a7:0c:df:4d:80:38:1a:22:
39:95:25:07:e8:3a:6b:c6:10:c6:54:eb:23:ac:ff:
59:63:af:99:73:5f:ee:29:63:69:fb:f2:80:75:ab:
9b:58:af:31:59:86:b5:43:dd:17:ed:d2:ab:46:6b:
90:a6:3d:a2:b8:f5:b3:b0:9c:ad:cb:9f:3f:82:6c:
3d:09:5b:50:57:a2:a7:84:05:f4:37:8b:13:90:03:
91:d2:bf:6b:f7:eb:85:7c:8b:d0:cb:7b:bc:2d:de:
73:b0:ab:d9:50:35:cb:35:4a:4d:fc:a2:d3:c9:56:
68:2c:6e:7c:6a:f5:d5:d8:0c:6e:2d:2f:21:d7:ba:
5c:63:bb:1b:bf:85:ea:39:53:7e:53:81:96:ff:29:
b6:0c:bb:b0:14:10:4a:10:99:ff:9f:cb:6e:e3:12:
b3:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:B2:59:43:E6:E0:0C:DA:41:B3:42:28:23:1B:DD:95:0F:DD:C2:93
X509v3 Authority Key Identifier:
keyid:68:8E:71:3B:07:C7:9F:97:B4:7E:9F:03:21:76:8B:09:48:8B:7A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aI5xOwfHn5e0fp8DIXaLCUiLegM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/0ebeb9-31a8-4550-8396-695f4a927610/1/aI5xOwfHn5e0fp8DIXaLCUiLegM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/0ebeb9-31a8-4550-8396-695f4a927610/1/aI5xOwfHn5e0fp8DIXaLCUiLegM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:e3:9b:0f:bf:b0:50:92:b5:bf:53:e5:39:5e:d8:5d:ac:6c:
77:7a:de:3a:6d:76:3e:dd:3c:a0:e6:1e:14:a9:7c:3f:a3:fd:
e7:7c:10:53:c6:6e:13:01:6f:25:d9:65:1b:50:0e:ca:65:43:
71:b4:a6:d2:2a:22:ef:30:ef:bd:98:3f:74:d7:9a:8b:50:50:
50:c6:58:79:65:3f:3b:2f:8b:9c:e8:52:73:83:2c:91:fa:58:
54:aa:09:77:a0:8e:3e:eb:da:89:79:d4:2a:bc:19:a3:ef:9e:
26:42:13:c1:96:20:12:42:97:8d:79:06:7c:ae:fa:64:11:b7:
b1:b1:bc:34:bf:a4:1a:60:31:b6:5a:72:2a:bd:e2:ec:11:74:
01:7f:dc:aa:32:a1:72:8c:d6:68:b3:16:7c:61:b8:e3:4a:dc:
48:22:a7:7f:af:86:ba:f0:79:d6:96:a5:14:49:d7:38:f9:39:
f6:26:eb:5f:e9:0e:23:f9:ba:e8:94:06:86:c7:30:5f:07:f0:
5d:8a:1b:0f:41:cb:54:f9:95:83:c0:df:92:53:62:34:bb:e4:
4f:a2:30:e9:ea:10:bb:8b:cc:a2:44:f8:81:6e:d3:65:d4:0f:
fd:96:fc:d2:40:53:23:ff:00:4c:3a:6b:81:a0:bf:a8:79:a5:
dc:40:f5:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJmLf4maQQ3i/QWRCtwV5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4OGU3MTNiMDdjNzlmOTdiNDdlOWYwMzIxNzY4YjA5NDg4
YjdhMDMwHhcNMjUxMTExMDkwMTQ5WhcNMjUxMTEyMDkwMTQ5WjAzMTEwLwYDVQQD
EygwZmIyNTk0M2U2ZTAwY2RhNDFiMzQyMjgyMzFiZGQ5NTBmZGRjMjkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzCSwxhM3TwVNpVMUVtSLhaPbNyof
7q55trcwimnyh+Py93oja3E/VahlK/KIOMALrGXUUvOAm14ioS30PZEAaRx/xjD+
7F4GYgQ+Pym8h1yoVrsSwHLIt+K2qKwvFXw1pwzfTYA4GiI5lSUH6DprxhDGVOsj
rP9ZY6+Zc1/uKWNp+/KAdaubWK8xWYa1Q90X7dKrRmuQpj2iuPWzsJyty58/gmw9
CVtQV6KnhAX0N4sTkAOR0r9r9+uFfIvQy3u8Ld5zsKvZUDXLNUpN/KLTyVZoLG58
avXV2AxuLS8h17pcY7sbv4XqOVN+U4GW/ym2DLuwFBBKEJn/n8tu4xKz3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA+yWUPm4AzaQbNCKCMb3ZUP3cKTMB8GA1UdIwQY
MBaAFGiOcTsHx5+XtH6fAyF2iwlIi3oDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUk1eE93ZkhuNWUwZnA4RElYYUxDVWlMZWdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy8wZWJlYjktMzFhOC00NTUwLTgzOTYt
Njk1ZjRhOTI3NjEwLzEvYUk1eE93ZkhuNWUwZnA4RElYYUxDVWlMZWdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy8wZWJlYjktMzFhOC00NTUwLTgzOTYtNjk1ZjRhOTI3NjEw
LzEvYUk1eE93ZkhuNWUwZnA4RElYYUxDVWlMZWdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP+ObD7+w
UJK1v1PlOV7YXaxsd3reOm12Pt08oOYeFKl8P6P953wQU8ZuEwFvJdllG1AOymVD
cbSm0ioi7zDvvZg/dNeai1BQUMZYeWU/Oy+LnOhSc4MskfpYVKoJd6COPuvaiXnU
KrwZo++eJkITwZYgEkKXjXkGfK76ZBG3sbG8NL+kGmAxtlpyKr3i7BF0AX/cqjKh
cozWaLMWfGG440rcSCKnf6+GuvB51palFEnXOPk59ibrX+kOI/m66JQGhscwXwfw
XYobD0HLVPmVg8DfklNiNLvkT6Iw6eoQu4vMokT4gW7TZdQP/Zb80kBTI/8ATDpr
gaC/qHml3ED1AA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 16:48:43 2025 by rpki-client