Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/10ce73-3d4f-43ef-b685-250a4d777ba6/1/0TAReuHNwt8cWIFuAOVFH4fvs3A.mft
File: 0TAReuHNwt8cWIFuAOVFH4fvs3A.mft (raw, json)
Hash identifier: E7M02n5FSSR2A0pKGIkHtY9zAvf/7z4rvgF6mKZSOU4=
Subject key identifier: CD:10:5E:3D:BF:DA:61:EE:CE:A9:1B:39:D1:9E:C9:3F:3E:DB:23:CB
Authority key identifier: D1:30:11:7A:E1:CD:C2:DF:1C:58:81:6E:00:E5:45:1F:87:EF:B3:70
Certificate issuer: /CN=d130117ae1cdc2df1c58816e00e5451f87efb370
Certificate serial: 0199FFC8371194EC7F89136214D14319227C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0TAReuHNwt8cWIFuAOVFH4fvs3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/10ce73-3d4f-43ef-b685-250a4d777ba6/1/0TAReuHNwt8cWIFuAOVFH4fvs3A.mft
Manifest number: 0771
Signing time: Mon 20 Oct 2025 04:02:15 +0000
Manifest this update: Mon 20 Oct 2025 04:02:15 +0000
Manifest next update: Tue 21 Oct 2025 04:02:15 +0000
Files and hashes: 1: 0TAReuHNwt8cWIFuAOVFH4fvs3A.crl (hash: zogYfKGrtPN76azjvxqr1gb1+tcTJe3n7u85ddp7Ss4=)
2: z_Ej6CoZbrKxrzLQhz11AHSKLRg.roa (hash: UVS5jjAa9OEvk26uuzlwcbiMZWOU5g+RlzuAxXPKfXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/10ce73-3d4f-43ef-b685-250a4d777ba6/1/0TAReuHNwt8cWIFuAOVFH4fvs3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/10ce73-3d4f-43ef-b685-250a4d777ba6/1/0TAReuHNwt8cWIFuAOVFH4fvs3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/0TAReuHNwt8cWIFuAOVFH4fvs3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 04:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:37:11:94:ec:7f:89:13:62:14:d1:43:19:22:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d130117ae1cdc2df1c58816e00e5451f87efb370
Validity
Not Before: Oct 20 04:02:15 2025 GMT
Not After : Oct 21 04:02:15 2025 GMT
Subject: CN=cd105e3dbfda61eecea91b39d19ec93f3edb23cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:52:63:e6:01:ee:55:36:ae:a6:6e:e5:1b:65:
66:b7:f6:b5:2c:3d:f1:0d:e5:93:7a:45:48:4a:3a:
49:03:fa:02:da:df:e6:2e:f2:35:ce:a4:c4:26:b7:
bd:e3:2d:ab:81:25:a2:b9:fb:64:48:5d:64:47:39:
89:67:36:18:53:32:d0:f1:2a:fc:7d:b7:34:4e:59:
4a:b8:ca:46:63:bc:53:62:9d:88:39:ca:ab:c6:37:
15:12:7c:21:a6:d0:5a:e6:56:9c:34:37:8a:8e:8c:
4a:f2:2f:8b:1d:4f:98:94:62:c7:75:f5:94:65:d3:
8d:5b:b7:f0:ae:2d:13:37:d1:f7:5b:6d:de:11:e2:
e0:97:11:d9:3a:2c:c3:b1:85:de:a6:71:10:00:9e:
59:a0:8c:e1:17:82:20:32:cd:f1:bd:0b:b1:cb:01:
b0:97:a6:57:9c:62:ae:3f:0e:30:96:1a:fd:03:d7:
5b:18:8b:76:f4:c4:d2:86:0b:17:42:57:cd:0c:c5:
42:2b:ec:5a:0c:0c:8b:97:c5:c9:be:2b:e3:83:33:
18:e8:87:79:46:5d:10:15:9c:b8:c9:e5:7a:7a:dd:
5d:93:33:37:5f:0b:ca:93:58:77:56:5b:34:49:a4:
86:c6:b1:81:a2:68:f0:5c:f5:d1:7b:c5:1b:63:01:
a9:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:10:5E:3D:BF:DA:61:EE:CE:A9:1B:39:D1:9E:C9:3F:3E:DB:23:CB
X509v3 Authority Key Identifier:
keyid:D1:30:11:7A:E1:CD:C2:DF:1C:58:81:6E:00:E5:45:1F:87:EF:B3:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0TAReuHNwt8cWIFuAOVFH4fvs3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/10ce73-3d4f-43ef-b685-250a4d777ba6/1/0TAReuHNwt8cWIFuAOVFH4fvs3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/10ce73-3d4f-43ef-b685-250a4d777ba6/1/0TAReuHNwt8cWIFuAOVFH4fvs3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:b2:c5:fc:8a:21:b3:20:c0:f0:9e:db:7b:ba:c7:e1:8e:20:
f9:c8:73:05:c5:95:81:e9:30:da:2e:5d:d9:b8:cd:11:31:82:
57:01:f2:77:3a:d8:dc:74:38:22:04:ce:b0:bd:55:70:a2:f4:
72:61:d1:50:2c:e2:a6:df:af:a2:d7:70:d2:6a:fd:d4:3d:97:
9d:8c:8b:f1:97:db:a1:bb:19:42:32:e6:04:00:72:ae:17:0d:
2e:88:32:06:a0:11:23:c3:b0:04:50:bb:08:20:e2:c3:20:ee:
cc:15:69:c8:da:ea:35:91:21:b6:68:45:81:20:c9:f2:0c:5e:
14:8b:a8:cd:13:b5:93:11:9e:3d:3f:44:c6:c3:05:b1:3f:27:
44:f8:13:07:cf:73:a5:c9:08:1b:7a:9a:ac:c2:06:74:e1:ca:
00:5f:a7:5b:ba:3c:84:22:17:30:50:a5:3a:ab:b9:03:11:15:
c8:2d:86:2a:eb:2c:4a:57:54:85:76:57:75:df:b7:b4:3f:4e:
ca:d3:99:2a:50:52:55:a9:06:6d:a2:8d:f6:5a:fd:13:dd:00:
b7:32:a2:65:7f:5e:fd:57:8c:12:ed:14:02:35:04:95:74:a2:
d5:e5:02:52:cf:d3:ea:59:55:f2:d8:79:5b:83:ee:7f:41:66:
df:a3:11:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/yDcRlOx/iRNiFNFDGSJ8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxMzAxMTdhZTFjZGMyZGYxYzU4ODE2ZTAwZTU0NTFmODdl
ZmIzNzAwHhcNMjUxMDIwMDQwMjE1WhcNMjUxMDIxMDQwMjE1WjAzMTEwLwYDVQQD
EyhjZDEwNWUzZGJmZGE2MWVlY2VhOTFiMzlkMTllYzkzZjNlZGIyM2NiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFJj5gHuVTaupm7lG2Vmt/a1LD3x
DeWTekVISjpJA/oC2t/mLvI1zqTEJre94y2rgSWiuftkSF1kRzmJZzYYUzLQ8Sr8
fbc0TllKuMpGY7xTYp2IOcqrxjcVEnwhptBa5lacNDeKjoxK8i+LHU+YlGLHdfWU
ZdONW7fwri0TN9H3W23eEeLglxHZOizDsYXepnEQAJ5ZoIzhF4IgMs3xvQuxywGw
l6ZXnGKuPw4wlhr9A9dbGIt29MTShgsXQlfNDMVCK+xaDAyLl8XJvivjgzMY6Id5
Rl0QFZy4yeV6et1dkzM3XwvKk1h3Vls0SaSGxrGBomjwXPXRe8UbYwGpjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM0QXj2/2mHuzqkbOdGeyT8+2yPLMB8GA1UdIwQY
MBaAFNEwEXrhzcLfHFiBbgDlRR+H77NwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFRBUmV1SE53dDhjV0lGdUFPVkZINGZ2czNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS8xMGNlNzMtM2Q0Zi00M2VmLWI2ODUt
MjUwYTRkNzc3YmE2LzEvMFRBUmV1SE53dDhjV0lGdUFPVkZINGZ2czNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS8xMGNlNzMtM2Q0Zi00M2VmLWI2ODUtMjUwYTRkNzc3YmE2
LzEvMFRBUmV1SE53dDhjV0lGdUFPVkZINGZ2czNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACrLF/Ioh
syDA8J7be7rH4Y4g+chzBcWVgekw2i5d2bjNETGCVwHydzrY3HQ4IgTOsL1VcKL0
cmHRUCzipt+votdw0mr91D2XnYyL8ZfbobsZQjLmBAByrhcNLogyBqARI8OwBFC7
CCDiwyDuzBVpyNrqNZEhtmhFgSDJ8gxeFIuozRO1kxGePT9ExsMFsT8nRPgTB89z
pckIG3qarMIGdOHKAF+nW7o8hCIXMFClOqu5AxEVyC2GKussSldUhXZXdd+3tD9O
ytOZKlBSVakGbaKN9lr9E90AtzKiZX9e/VeMEu0UAjUElXSi1eUCUs/T6llV8th5
W4Puf0Fm36MRbQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 12:40:34 2025 by rpki-client