Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/8c5dc7-bf41-4008-9cff-2c69985359c0/1/Ra7T0aGh4oMNQWr6BHuVIg6BQIQ.mft
File: Ra7T0aGh4oMNQWr6BHuVIg6BQIQ.mft (raw, json)
Hash identifier: W+8z4WjQgqXdzUPsjUaIeMBaVJjkCRats/XJqiCpHJs=
Subject key identifier: 04:D8:A2:7C:20:61:64:50:B7:4A:BD:51:1F:A5:D9:38:D6:A3:BA:37
Authority key identifier: 45:AE:D3:D1:A1:A1:E2:83:0D:41:6A:FA:04:7B:95:22:0E:81:40:84
Certificate issuer: /CN=45aed3d1a1a1e2830d416afa047b95220e814084
Certificate serial: 0199FC216166524084CAB83043665FCBEA81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ra7T0aGh4oMNQWr6BHuVIg6BQIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/8c5dc7-bf41-4008-9cff-2c69985359c0/1/Ra7T0aGh4oMNQWr6BHuVIg6BQIQ.mft
Manifest number: 094C
Signing time: Sun 19 Oct 2025 11:01:09 +0000
Manifest this update: Sun 19 Oct 2025 11:01:09 +0000
Manifest next update: Mon 20 Oct 2025 11:01:09 +0000
Files and hashes: 1: 5yM7l9glO5Y_kZZbeV1PY4oF4AI.roa (hash: Zrq7WRCOd9AEwWRm5k4u/56c3wqE+RlRfF9EKNORqJM=)
2: Ra7T0aGh4oMNQWr6BHuVIg6BQIQ.crl (hash: 3FWhKuKZNd3RmtQyJU6iXeHpaD42voWzCoC7Tdc+GPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/8c5dc7-bf41-4008-9cff-2c69985359c0/1/Ra7T0aGh4oMNQWr6BHuVIg6BQIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/8c5dc7-bf41-4008-9cff-2c69985359c0/1/Ra7T0aGh4oMNQWr6BHuVIg6BQIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ra7T0aGh4oMNQWr6BHuVIg6BQIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:61:66:52:40:84:ca:b8:30:43:66:5f:cb:ea:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45aed3d1a1a1e2830d416afa047b95220e814084
Validity
Not Before: Oct 19 11:01:09 2025 GMT
Not After : Oct 20 11:01:09 2025 GMT
Subject: CN=04d8a27c20616450b74abd511fa5d938d6a3ba37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:23:46:44:03:e2:06:b2:7a:a1:a3:f2:9a:17:
8c:89:cd:cb:86:2f:13:41:0b:76:4b:1c:cf:1f:8f:
21:c4:f5:bb:86:06:bb:41:d7:93:18:cf:2f:79:88:
af:d0:71:ad:57:51:78:52:5d:64:f3:4e:45:13:8b:
67:c1:10:bd:1a:28:37:8c:bc:f7:3a:d2:38:5e:ca:
18:89:fd:84:a3:58:1a:02:dc:d8:8a:87:34:49:3f:
10:d2:1a:83:f2:08:26:88:de:42:68:15:79:28:7f:
a5:b1:d5:62:e0:66:f2:b3:0a:09:cf:f5:f2:17:15:
24:94:45:0c:b6:db:21:5f:14:59:ef:6e:96:0c:24:
bc:e1:fd:9a:89:dd:21:80:e0:07:e5:e5:67:58:a2:
73:a6:c4:93:b4:f3:35:ba:95:1d:f4:2a:15:45:45:
4e:a0:e1:2e:aa:99:39:08:fc:e8:d3:8a:84:75:36:
11:2b:52:0c:e6:3c:73:28:c2:44:db:38:60:07:0d:
ad:50:b6:24:50:ba:82:40:ad:71:01:ed:14:cb:c6:
fe:5f:17:72:23:d9:dd:7e:d6:69:f2:40:fe:ec:34:
e4:3d:f7:30:23:38:91:cb:e5:f8:c3:70:65:9a:28:
79:15:07:0b:24:43:05:18:23:d7:cd:2b:b1:ce:2c:
ce:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:D8:A2:7C:20:61:64:50:B7:4A:BD:51:1F:A5:D9:38:D6:A3:BA:37
X509v3 Authority Key Identifier:
keyid:45:AE:D3:D1:A1:A1:E2:83:0D:41:6A:FA:04:7B:95:22:0E:81:40:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ra7T0aGh4oMNQWr6BHuVIg6BQIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/8c5dc7-bf41-4008-9cff-2c69985359c0/1/Ra7T0aGh4oMNQWr6BHuVIg6BQIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/8c5dc7-bf41-4008-9cff-2c69985359c0/1/Ra7T0aGh4oMNQWr6BHuVIg6BQIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:3e:e9:c1:ea:53:eb:00:c4:da:6c:ea:44:17:42:99:26:cd:
a1:76:5b:cc:3a:67:44:eb:6c:8f:19:3e:ce:88:46:07:e5:d0:
f1:7b:cc:db:cd:52:fc:31:25:7c:96:07:5b:34:5a:48:e8:3c:
14:93:1d:3f:f1:2e:3f:a4:17:40:55:b4:bf:76:ec:99:f2:80:
73:39:a6:49:a4:ba:0e:3f:4e:95:54:f8:e5:7f:bd:1c:02:73:
46:7b:50:09:52:6d:5c:5a:bb:ab:09:cf:f1:14:a6:bb:cc:bf:
3e:4e:58:ae:12:c6:c2:6f:a6:2c:5c:93:3f:23:be:2e:2c:4c:
ea:46:d9:9a:7f:ae:0e:b8:91:dd:67:fa:f3:85:85:57:a0:35:
49:b5:42:02:7b:cb:7e:2d:e8:bf:5f:21:e8:1a:a7:92:b7:26:
0a:12:c9:4c:97:a5:b2:1e:31:16:3e:3a:8e:d5:b9:53:23:fe:
61:53:9b:26:b8:7a:b2:57:30:ca:a4:fb:01:c5:91:f1:ed:66:
31:4c:0a:db:19:68:f6:33:9c:5f:94:e7:b6:fc:d5:10:a8:c7:
9b:33:6d:8a:34:0d:88:6b:db:04:68:4a:e4:a3:1a:c3:7b:cf:
bb:4b:e9:19:26:1a:61:94:63:cc:66:e8:6d:87:bf:a0:1d:9c:
51:a3:54:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8IWFmUkCEyrgwQ2Zfy+qBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1YWVkM2QxYTFhMWUyODMwZDQxNmFmYTA0N2I5NTIyMGU4
MTQwODQwHhcNMjUxMDE5MTEwMTA5WhcNMjUxMDIwMTEwMTA5WjAzMTEwLwYDVQQD
EygwNGQ4YTI3YzIwNjE2NDUwYjc0YWJkNTExZmE1ZDkzOGQ2YTNiYTM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqSNGRAPiBrJ6oaPymheMic3Lhi8T
QQt2SxzPH48hxPW7hga7QdeTGM8veYiv0HGtV1F4Ul1k805FE4tnwRC9Gig3jLz3
OtI4XsoYif2Eo1gaAtzYioc0ST8Q0hqD8ggmiN5CaBV5KH+lsdVi4GbyswoJz/Xy
FxUklEUMttshXxRZ726WDCS84f2aid0hgOAH5eVnWKJzpsSTtPM1upUd9CoVRUVO
oOEuqpk5CPzo04qEdTYRK1IM5jxzKMJE2zhgBw2tULYkULqCQK1xAe0Uy8b+Xxdy
I9ndftZp8kD+7DTkPfcwIziRy+X4w3Blmih5FQcLJEMFGCPXzSuxzizOfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFATYonwgYWRQt0q9UR+l2TjWo7o3MB8GA1UdIwQY
MBaAFEWu09GhoeKDDUFq+gR7lSIOgUCEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmE3VDBhR2g0b01OUVdyNkJIdVZJZzZCUUlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS84YzVkYzctYmY0MS00MDA4LTljZmYt
MmM2OTk4NTM1OWMwLzEvUmE3VDBhR2g0b01OUVdyNkJIdVZJZzZCUUlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS84YzVkYzctYmY0MS00MDA4LTljZmYtMmM2OTk4NTM1OWMw
LzEvUmE3VDBhR2g0b01OUVdyNkJIdVZJZzZCUUlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAj7pwepT
6wDE2mzqRBdCmSbNoXZbzDpnROtsjxk+zohGB+XQ8XvM281S/DElfJYHWzRaSOg8
FJMdP/EuP6QXQFW0v3bsmfKAczmmSaS6Dj9OlVT45X+9HAJzRntQCVJtXFq7qwnP
8RSmu8y/Pk5YrhLGwm+mLFyTPyO+LixM6kbZmn+uDriR3Wf684WFV6A1SbVCAnvL
fi3ov18h6BqnkrcmChLJTJelsh4xFj46jtW5UyP+YVObJrh6slcwyqT7AcWR8e1m
MUwK2xlo9jOcX5TntvzVEKjHmzNtijQNiGvbBGhK5KMaw3vPu0vpGSYaYZRjzGbo
bYe/oB2cUaNUdw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:05:43 2025 by rpki-client