Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.mft
File: C28enwlQ5POcnF_uP4aKJOs2HvE.mft (raw, json)
Hash identifier: Cux/PKxIWhCm660lPpd/mKMCOV2tjRosAe68aWMuUd4=
Subject key identifier: 6F:F9:53:7A:C8:DD:73:85:4B:3B:51:08:3E:D1:4C:57:AE:96:72:AB
Authority key identifier: 0B:6F:1E:9F:09:50:E4:F3:9C:9C:5F:EE:3F:86:8A:24:EB:36:1E:F1
Certificate issuer: /CN=0b6f1e9f0950e4f39c9c5fee3f868a24eb361ef1
Certificate serial: 0199FC590BD5CF94CD497CB552DB82C3CA41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C28enwlQ5POcnF_uP4aKJOs2HvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.mft
Manifest number: 0977
Signing time: Sun 19 Oct 2025 12:01:57 +0000
Manifest this update: Sun 19 Oct 2025 12:01:57 +0000
Manifest next update: Mon 20 Oct 2025 12:01:57 +0000
Files and hashes: 1: 9T-K1Qm3b8gpXgz9zJRHreyTvgM.roa (hash: dWSzFCZcssBKJcBODdxFw6oV27vvhXKSqLYxiGBOtGQ=)
2: C28enwlQ5POcnF_uP4aKJOs2HvE.crl (hash: XNDAqtdPGWRzMgO1pDgQJP1+mpNyor+5OI5S9nl/RWQ=)
3: hEhkAm4wvhKI8lm4TouQ913BI64.roa (hash: QBQPmns85EKoDttpiWLYZhYuUsat9iVL0D6w2NFPGj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/C28enwlQ5POcnF_uP4aKJOs2HvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:59:0b:d5:cf:94:cd:49:7c:b5:52:db:82:c3:ca:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b6f1e9f0950e4f39c9c5fee3f868a24eb361ef1
Validity
Not Before: Oct 19 12:01:57 2025 GMT
Not After : Oct 20 12:01:57 2025 GMT
Subject: CN=6ff9537ac8dd73854b3b51083ed14c57ae9672ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ba:5f:e9:0f:1b:74:94:b7:f4:10:73:89:2b:
a2:11:cc:84:2e:80:52:1e:fd:05:c8:bd:3c:c5:d0:
08:ce:0a:37:04:91:45:d2:0d:b8:fb:24:65:fa:d4:
78:e3:67:ca:44:04:3f:26:ab:a1:39:16:69:39:9b:
72:fa:55:6f:0b:fb:db:26:50:4d:39:0b:5c:89:ac:
13:68:80:7d:55:d1:48:07:6a:ca:32:c9:92:69:52:
7a:f2:6b:16:84:39:e3:56:60:13:d2:ba:ef:04:1e:
85:8d:54:e2:b9:60:16:bb:16:b2:4a:34:42:a7:05:
c6:d1:dc:d3:8c:0b:44:94:a8:c4:6b:a5:57:fa:7c:
0a:b5:cf:1b:61:f6:62:28:c4:38:9d:76:80:e9:39:
55:0f:84:1d:e1:d7:12:51:f4:ed:b8:6f:bb:e5:6c:
f5:85:7c:8f:74:5d:e1:58:86:83:43:27:c4:73:76:
48:55:3d:24:a9:4b:d5:dd:3d:df:29:ca:9b:a8:55:
5d:e3:9a:8d:e0:79:c5:7d:9c:69:fe:b0:65:ac:f9:
0c:f4:d7:e1:59:29:10:d0:81:14:ed:30:15:ad:8e:
f8:9e:cc:11:bc:2a:ee:53:af:48:63:db:15:b2:89:
b8:b4:22:41:0a:d4:63:34:9e:5c:81:2d:b0:51:3c:
23:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:F9:53:7A:C8:DD:73:85:4B:3B:51:08:3E:D1:4C:57:AE:96:72:AB
X509v3 Authority Key Identifier:
keyid:0B:6F:1E:9F:09:50:E4:F3:9C:9C:5F:EE:3F:86:8A:24:EB:36:1E:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C28enwlQ5POcnF_uP4aKJOs2HvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:29:01:5c:1f:78:4b:f6:4e:af:92:d7:cc:78:f3:4d:d9:ef:
23:3e:56:ae:35:9b:87:41:1c:4c:ec:6d:e5:64:5a:13:a8:2d:
84:01:e5:94:b3:70:ed:83:b8:76:02:0c:21:f3:a2:54:b1:ce:
c5:db:d7:2c:79:bc:e9:51:70:03:8d:b1:8d:0e:a5:18:63:24:
72:cd:3b:23:07:44:98:9d:d5:78:07:5f:fb:a4:eb:21:db:6a:
74:1d:c8:a6:b4:fe:3d:6f:6c:d9:e8:4c:83:66:ae:10:92:e2:
d3:86:ce:6a:c1:b1:e4:24:60:aa:2f:c4:c6:72:8a:c8:aa:83:
f8:fc:fd:66:01:9c:4a:84:4b:26:65:64:e0:72:e4:b1:59:43:
a6:0f:88:48:5f:dd:b5:c9:02:33:3b:cb:ff:0c:d1:5c:f5:ed:
fc:73:d5:df:6d:01:8c:53:96:85:a1:cb:86:d1:a6:b6:64:63:
34:0a:31:df:b7:c2:0d:ea:c6:a0:3a:20:b0:b6:bf:21:5e:1c:
80:f2:fa:41:9b:7c:b5:14:9c:07:d8:5a:9d:60:58:58:b7:3c:
78:f9:be:a6:34:44:a8:4d:d9:39:d6:44:01:0d:6c:b8:5c:62:
92:b3:26:2d:a9:1c:a3:b6:5f:3a:2f:df:56:24:57:24:ac:c0:
8b:e6:22:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WQvVz5TNSXy1UtuCw8pBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiNmYxZTlmMDk1MGU0ZjM5YzljNWZlZTNmODY4YTI0ZWIz
NjFlZjEwHhcNMjUxMDE5MTIwMTU3WhcNMjUxMDIwMTIwMTU3WjAzMTEwLwYDVQQD
Eyg2ZmY5NTM3YWM4ZGQ3Mzg1NGIzYjUxMDgzZWQxNGM1N2FlOTY3MmFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvLpf6Q8bdJS39BBziSuiEcyELoBS
Hv0FyL08xdAIzgo3BJFF0g24+yRl+tR442fKRAQ/JquhORZpOZty+lVvC/vbJlBN
OQtciawTaIB9VdFIB2rKMsmSaVJ68msWhDnjVmAT0rrvBB6FjVTiuWAWuxaySjRC
pwXG0dzTjAtElKjEa6VX+nwKtc8bYfZiKMQ4nXaA6TlVD4Qd4dcSUfTtuG+75Wz1
hXyPdF3hWIaDQyfEc3ZIVT0kqUvV3T3fKcqbqFVd45qN4HnFfZxp/rBlrPkM9Nfh
WSkQ0IEU7TAVrY74nswRvCruU69IY9sVsom4tCJBCtRjNJ5cgS2wUTwj5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG/5U3rI3XOFSztRCD7RTFeulnKrMB8GA1UdIwQY
MBaAFAtvHp8JUOTznJxf7j+GiiTrNh7xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzI4ZW53bFE1UE9jbkZfdVA0YUtKT3MySHZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9lNjliZDMtMjE1ZS00NDIyLTkxNzAt
MDgxYmNiYWM0ZGFmLzEvQzI4ZW53bFE1UE9jbkZfdVA0YUtKT3MySHZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS9lNjliZDMtMjE1ZS00NDIyLTkxNzAtMDgxYmNiYWM0ZGFm
LzEvQzI4ZW53bFE1UE9jbkZfdVA0YUtKT3MySHZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARSkBXB94
S/ZOr5LXzHjzTdnvIz5WrjWbh0EcTOxt5WRaE6gthAHllLNw7YO4dgIMIfOiVLHO
xdvXLHm86VFwA42xjQ6lGGMkcs07IwdEmJ3VeAdf+6TrIdtqdB3IprT+PW9s2ehM
g2auEJLi04bOasGx5CRgqi/ExnKKyKqD+Pz9ZgGcSoRLJmVk4HLksVlDpg+ISF/d
tckCMzvL/wzRXPXt/HPV320BjFOWhaHLhtGmtmRjNAox37fCDerGoDogsLa/IV4c
gPL6QZt8tRScB9hanWBYWLc8ePm+pjREqE3ZOdZEAQ1suFxikrMmLakco7ZfOi/f
ViRXJKzAi+Yixw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:54:13 2025 by rpki-client