Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/bd22ce-772c-4f1e-b4aa-85c0d01f9de2/1/0kkXcM6bZjACp5RULZiG0aLOY6s.mft
File: 0kkXcM6bZjACp5RULZiG0aLOY6s.mft (raw, json)
Hash identifier: aVzu1tmLnV3FX+laogBPkPB+gDPqepG1GJE5yJ7MKGA=
Subject key identifier: D2:C5:3E:6F:3C:DA:B4:8E:91:73:D0:C3:F2:8F:68:19:98:80:F3:39
Authority key identifier: D2:49:17:70:CE:9B:66:30:02:A7:94:54:2D:98:86:D1:A2:CE:63:AB
Certificate issuer: /CN=d2491770ce9b663002a794542d9886d1a2ce63ab
Certificate serial: 0199FC58D0E8E6C5913219AF8B86A3D3465D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0kkXcM6bZjACp5RULZiG0aLOY6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/bd22ce-772c-4f1e-b4aa-85c0d01f9de2/1/0kkXcM6bZjACp5RULZiG0aLOY6s.mft
Manifest number: 0945
Signing time: Sun 19 Oct 2025 12:01:43 +0000
Manifest this update: Sun 19 Oct 2025 12:01:43 +0000
Manifest next update: Mon 20 Oct 2025 12:01:43 +0000
Files and hashes: 1: 0kkXcM6bZjACp5RULZiG0aLOY6s.crl (hash: 2ofT/WZpN1ANa4hDUWizw70acBrjcZgzIC1ZP+ngF6c=)
2: tkNgBbUczBhXw3Q7nsd4bFDL5Ko.roa (hash: 2ZBjCKDVEUumVBdfZIcGHq5+w377C2/RlriHj7O796c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/bd22ce-772c-4f1e-b4aa-85c0d01f9de2/1/0kkXcM6bZjACp5RULZiG0aLOY6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/bd22ce-772c-4f1e-b4aa-85c0d01f9de2/1/0kkXcM6bZjACp5RULZiG0aLOY6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/0kkXcM6bZjACp5RULZiG0aLOY6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:d0:e8:e6:c5:91:32:19:af:8b:86:a3:d3:46:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2491770ce9b663002a794542d9886d1a2ce63ab
Validity
Not Before: Oct 19 12:01:43 2025 GMT
Not After : Oct 20 12:01:43 2025 GMT
Subject: CN=d2c53e6f3cdab48e9173d0c3f28f68199880f339
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:93:03:17:91:66:4e:d8:66:b7:77:91:55:20:
c5:c1:45:34:7e:d0:1b:14:55:a8:8c:10:03:5a:4d:
48:75:02:ec:bc:7f:28:8d:72:6a:ad:f0:bc:39:5f:
b0:5f:89:9d:67:92:64:1d:b6:10:ba:ff:1e:f0:38:
17:2a:cc:f0:0b:3c:3f:5d:06:93:ba:89:47:02:5c:
50:d6:03:00:f6:44:4e:95:1a:7d:29:93:4c:82:58:
ec:2c:dc:72:8a:b0:e2:12:63:ae:a5:a0:71:3a:77:
76:9f:df:8c:22:0d:16:82:b9:e5:6c:4c:10:bf:19:
f9:19:fa:3e:eb:fa:16:cf:ad:b5:9a:50:92:2c:2c:
f8:fe:a2:37:e4:b1:01:d4:dc:28:af:85:94:42:53:
3d:c6:ab:54:62:92:2f:42:ff:e1:4e:b8:0a:ff:46:
04:7d:b3:b6:ce:b9:53:d2:5c:16:1f:ae:d2:f4:6e:
e1:28:27:b6:4f:9b:1b:ff:29:6f:f2:ba:ef:e5:64:
ad:0d:7b:02:e4:42:2e:4e:ed:f6:27:b4:e5:d1:4c:
52:ab:2b:b6:c5:1b:5d:18:2f:37:36:79:1d:16:bb:
e0:1b:d3:a8:38:c7:bd:2e:8d:33:75:9f:1a:ce:c4:
b0:90:fe:6d:e3:92:d2:a9:e4:f3:12:74:6c:b5:fe:
b6:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:C5:3E:6F:3C:DA:B4:8E:91:73:D0:C3:F2:8F:68:19:98:80:F3:39
X509v3 Authority Key Identifier:
keyid:D2:49:17:70:CE:9B:66:30:02:A7:94:54:2D:98:86:D1:A2:CE:63:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0kkXcM6bZjACp5RULZiG0aLOY6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/bd22ce-772c-4f1e-b4aa-85c0d01f9de2/1/0kkXcM6bZjACp5RULZiG0aLOY6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/bd22ce-772c-4f1e-b4aa-85c0d01f9de2/1/0kkXcM6bZjACp5RULZiG0aLOY6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:d0:94:19:97:b7:30:7b:17:5b:1d:86:01:63:ee:97:6d:e5:
da:5a:ee:05:d3:6c:5b:02:e8:67:f9:53:be:c7:88:15:09:9b:
88:b8:bc:bd:45:97:3b:e6:ae:4d:5f:bb:8c:45:93:5f:9d:a2:
bd:9a:9d:50:9f:6c:c1:0a:35:dd:57:6f:34:9a:53:3d:dc:c7:
e4:0e:d2:fc:72:92:bf:ce:21:df:df:65:b8:e5:50:2a:26:45:
9c:d8:a9:bd:be:95:b4:b8:95:ea:e5:60:0e:5e:17:63:99:72:
ed:48:af:ad:04:69:47:04:a2:6b:24:ba:2f:e3:db:e3:c5:fa:
0c:2d:81:2b:9e:44:bd:55:cc:a3:ea:bb:72:39:c0:21:6e:7e:
f9:a5:21:51:9a:c7:60:ac:90:4f:0e:50:2a:be:34:79:6c:ba:
67:67:1d:91:11:ab:ce:16:ec:b0:4d:a2:28:0f:0b:3f:f3:6c:
f7:c0:bc:28:0f:62:c0:36:03:83:cd:5b:1a:7e:d7:34:2c:85:
c3:f4:61:be:b8:f0:95:2a:93:b8:04:91:d3:2b:9f:75:59:5e:
d4:6b:31:fe:9f:63:00:6d:65:a8:ff:ec:2f:fc:ce:f0:56:38:
dd:58:09:e2:1d:04:3f:71:2d:26:be:a2:6f:29:76:d1:d2:1b:
68:a5:47:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WNDo5sWRMhmvi4aj00ZdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyNDkxNzcwY2U5YjY2MzAwMmE3OTQ1NDJkOTg4NmQxYTJj
ZTYzYWIwHhcNMjUxMDE5MTIwMTQzWhcNMjUxMDIwMTIwMTQzWjAzMTEwLwYDVQQD
EyhkMmM1M2U2ZjNjZGFiNDhlOTE3M2QwYzNmMjhmNjgxOTk4ODBmMzM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwpMDF5FmTthmt3eRVSDFwUU0ftAb
FFWojBADWk1IdQLsvH8ojXJqrfC8OV+wX4mdZ5JkHbYQuv8e8DgXKszwCzw/XQaT
uolHAlxQ1gMA9kROlRp9KZNMgljsLNxyirDiEmOupaBxOnd2n9+MIg0WgrnlbEwQ
vxn5Gfo+6/oWz621mlCSLCz4/qI35LEB1Nwor4WUQlM9xqtUYpIvQv/hTrgK/0YE
fbO2zrlT0lwWH67S9G7hKCe2T5sb/ylv8rrv5WStDXsC5EIuTu32J7Tl0UxSqyu2
xRtdGC83NnkdFrvgG9OoOMe9Lo0zdZ8azsSwkP5t45LSqeTzEnRstf62xQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNLFPm882rSOkXPQw/KPaBmYgPM5MB8GA1UdIwQY
MBaAFNJJF3DOm2YwAqeUVC2YhtGizmOrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGtrWGNNNmJaakFDcDVSVUxaaUcwYUxPWTZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9iZDIyY2UtNzcyYy00ZjFlLWI0YWEt
ODVjMGQwMWY5ZGUyLzEvMGtrWGNNNmJaakFDcDVSVUxaaUcwYUxPWTZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC9iZDIyY2UtNzcyYy00ZjFlLWI0YWEtODVjMGQwMWY5ZGUy
LzEvMGtrWGNNNmJaakFDcDVSVUxaaUcwYUxPWTZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANdCUGZe3
MHsXWx2GAWPul23l2lruBdNsWwLoZ/lTvseIFQmbiLi8vUWXO+auTV+7jEWTX52i
vZqdUJ9swQo13VdvNJpTPdzH5A7S/HKSv84h399luOVQKiZFnNipvb6VtLiV6uVg
Dl4XY5ly7UivrQRpRwSiayS6L+Pb48X6DC2BK55EvVXMo+q7cjnAIW5++aUhUZrH
YKyQTw5QKr40eWy6Z2cdkRGrzhbssE2iKA8LP/Ns98C8KA9iwDYDg81bGn7XNCyF
w/RhvrjwlSqTuASR0yufdVle1Gsx/p9jAG1lqP/sL/zO8FY43VgJ4h0EP3EtJr6i
byl20dIbaKVHQQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:32 2025 by rpki-client