Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/bce18c-7203-44c9-bec8-df01b4eb25e9/1/ROkQGinJOPhPhgRda-XfSz9Re9E.mft
File: ROkQGinJOPhPhgRda-XfSz9Re9E.mft (raw, json)
Hash identifier: i+Mgj8BdDTxSyDrcXI7t4GUx6yXUfEhRHgZ5oTn70T8=
Subject key identifier: BF:39:6A:62:FC:35:65:83:B0:29:CB:73:0D:1A:6C:26:D6:9E:54:6C
Authority key identifier: 44:E9:10:1A:29:C9:38:F8:4F:86:04:5D:6B:E5:DF:4B:3F:51:7B:D1
Certificate issuer: /CN=44e9101a29c938f84f86045d6be5df4b3f517bd1
Certificate serial: 019A71B8D7B465A077B24AF97D037E5982E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ROkQGinJOPhPhgRda-XfSz9Re9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/bce18c-7203-44c9-bec8-df01b4eb25e9/1/ROkQGinJOPhPhgRda-XfSz9Re9E.mft
Manifest number: 01E9
Signing time: Tue 11 Nov 2025 07:02:10 +0000
Manifest this update: Tue 11 Nov 2025 07:02:10 +0000
Manifest next update: Wed 12 Nov 2025 07:02:10 +0000
Files and hashes: 1: 9Rl0BbPzjGtJ5SxKkQlNSxcKRIA.roa (hash: wlrYCSoZjr9jkjpsQGaOjVzZDExzEHE+3MSzP3WRJC0=)
2: ROkQGinJOPhPhgRda-XfSz9Re9E.crl (hash: KHBz1zu7SpWMMo8PQTnJwltjWWTko+wnG2vDO9AHYvk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/bce18c-7203-44c9-bec8-df01b4eb25e9/1/ROkQGinJOPhPhgRda-XfSz9Re9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/bce18c-7203-44c9-bec8-df01b4eb25e9/1/ROkQGinJOPhPhgRda-XfSz9Re9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/ROkQGinJOPhPhgRda-XfSz9Re9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:d7:b4:65:a0:77:b2:4a:f9:7d:03:7e:59:82:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44e9101a29c938f84f86045d6be5df4b3f517bd1
Validity
Not Before: Nov 11 07:02:10 2025 GMT
Not After : Nov 12 07:02:10 2025 GMT
Subject: CN=bf396a62fc356583b029cb730d1a6c26d69e546c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f9:f2:90:fa:a1:d3:09:ae:7c:50:42:50:79:
15:90:c8:bd:11:0a:f9:28:82:5a:1b:5d:6b:de:bd:
9e:4e:13:21:82:ec:59:e0:db:40:0e:9e:81:1c:48:
46:8b:f7:31:7c:a1:a8:91:22:0b:01:b8:bc:c9:fd:
15:dc:16:aa:c7:c6:d7:e5:f0:db:f4:20:fd:4d:1a:
9e:3b:fb:7d:9f:8e:2c:cc:95:8b:6b:4b:da:34:bb:
ff:2d:e7:00:69:b2:76:59:8a:2f:12:ad:3a:23:bb:
0d:5c:29:75:1e:83:54:0f:d5:30:51:33:3d:2e:c9:
f5:65:9d:eb:da:40:68:2b:af:d0:d8:a7:92:5e:1d:
a7:5f:b5:06:e0:13:12:27:c3:af:87:59:53:ca:c9:
22:18:01:7c:6d:c4:1d:92:61:84:8f:a7:18:f8:f1:
2c:e6:16:cd:53:97:fe:58:d5:1e:5e:a6:c2:14:01:
ff:fb:47:21:e5:cc:58:5e:3f:37:ca:b8:1e:a7:7c:
59:ea:0c:38:59:81:19:8a:89:0e:8a:2a:64:2b:cf:
a3:36:15:42:08:fb:19:7f:17:51:b9:f9:72:01:8e:
ed:c4:ee:d6:b7:f7:38:a1:76:65:18:2b:ae:48:f5:
69:75:81:18:2a:75:59:19:b6:61:d0:aa:fc:df:54:
9d:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:39:6A:62:FC:35:65:83:B0:29:CB:73:0D:1A:6C:26:D6:9E:54:6C
X509v3 Authority Key Identifier:
keyid:44:E9:10:1A:29:C9:38:F8:4F:86:04:5D:6B:E5:DF:4B:3F:51:7B:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ROkQGinJOPhPhgRda-XfSz9Re9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/bce18c-7203-44c9-bec8-df01b4eb25e9/1/ROkQGinJOPhPhgRda-XfSz9Re9E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/bce18c-7203-44c9-bec8-df01b4eb25e9/1/ROkQGinJOPhPhgRda-XfSz9Re9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:f7:60:4c:64:eb:55:36:0a:f3:04:e1:d3:d8:b2:89:32:64:
c5:57:e2:53:dc:a2:98:c6:12:aa:6f:15:43:06:4c:e6:da:dd:
0b:05:d4:f8:70:9e:07:cb:a9:13:3d:0e:50:99:e0:5e:f0:5b:
db:26:d1:0e:0e:5e:d2:8b:d5:40:ba:54:9a:63:e0:3a:79:5f:
56:4a:1c:2e:9b:df:20:39:19:88:e1:71:77:67:9c:29:7d:bc:
d8:29:c3:c9:02:2b:70:20:ec:e6:05:98:11:75:3c:c7:64:4e:
be:94:9f:b3:f2:9a:0d:92:2a:96:da:15:4a:83:cb:9a:71:d9:
a8:79:8b:ea:59:12:b2:9d:67:c3:e3:1b:a4:5d:85:58:90:38:
21:9d:2a:64:3a:14:6d:b9:6d:13:9a:ef:94:44:1c:36:3b:14:
91:f0:ca:ec:31:1f:80:da:5e:6b:3c:d5:ab:34:8d:b9:cd:ed:
29:eb:32:9c:bc:5c:b9:ca:23:b4:46:2c:71:07:19:86:e0:4e:
45:92:4c:fe:53:d0:40:60:f1:54:ce:71:d9:b8:d3:56:f0:76:
51:ca:a5:4d:e6:54:b6:0d:7c:71:82:5f:e4:f3:d8:83:fe:3e:
a4:83:6e:06:56:62:08:87:cb:9d:5a:eb:63:cb:16:12:35:24:
37:ce:3f:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuNe0ZaB3skr5fQN+WYLoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0ZTkxMDFhMjljOTM4Zjg0Zjg2MDQ1ZDZiZTVkZjRiM2Y1
MTdiZDEwHhcNMjUxMTExMDcwMjEwWhcNMjUxMTEyMDcwMjEwWjAzMTEwLwYDVQQD
EyhiZjM5NmE2MmZjMzU2NTgzYjAyOWNiNzMwZDFhNmMyNmQ2OWU1NDZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmfnykPqh0wmufFBCUHkVkMi9EQr5
KIJaG11r3r2eThMhguxZ4NtADp6BHEhGi/cxfKGokSILAbi8yf0V3Baqx8bX5fDb
9CD9TRqeO/t9n44szJWLa0vaNLv/LecAabJ2WYovEq06I7sNXCl1HoNUD9UwUTM9
Lsn1ZZ3r2kBoK6/Q2KeSXh2nX7UG4BMSJ8Ovh1lTyskiGAF8bcQdkmGEj6cY+PEs
5hbNU5f+WNUeXqbCFAH/+0ch5cxYXj83yrgep3xZ6gw4WYEZiokOiipkK8+jNhVC
CPsZfxdRuflyAY7txO7Wt/c4oXZlGCuuSPVpdYEYKnVZGbZh0Kr831SdvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL85amL8NWWDsCnLcw0abCbWnlRsMB8GA1UdIwQY
MBaAFETpEBopyTj4T4YEXWvl30s/UXvRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUk9rUUdpbkpPUGhQaGdSZGEtWGZTejlSZTlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9iY2UxOGMtNzIwMy00NGM5LWJlYzgt
ZGYwMWI0ZWIyNWU5LzEvUk9rUUdpbkpPUGhQaGdSZGEtWGZTejlSZTlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS9iY2UxOGMtNzIwMy00NGM5LWJlYzgtZGYwMWI0ZWIyNWU5
LzEvUk9rUUdpbkpPUGhQaGdSZGEtWGZTejlSZTlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAfdgTGTr
VTYK8wTh09iyiTJkxVfiU9yimMYSqm8VQwZM5trdCwXU+HCeB8upEz0OUJngXvBb
2ybRDg5e0ovVQLpUmmPgOnlfVkocLpvfIDkZiOFxd2ecKX282CnDyQIrcCDs5gWY
EXU8x2ROvpSfs/KaDZIqltoVSoPLmnHZqHmL6lkSsp1nw+MbpF2FWJA4IZ0qZDoU
bbltE5rvlEQcNjsUkfDK7DEfgNpeazzVqzSNuc3tKesynLxcucojtEYscQcZhuBO
RZJM/lPQQGDxVM5x2bjTVvB2UcqlTeZUtg18cYJf5PPYg/4+pINuBlZiCIfLnVrr
Y8sWEjUkN84/0g==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:44:27 2025 by rpki-client