
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/b68421-99b1-485e-b217-d3adc7449391/1/dW-6RmNNIrk9sb9G7FqNZl5i2sc.mft
File: dW-6RmNNIrk9sb9G7FqNZl5i2sc.mft (raw, json)
Hash identifier: OlBKb0CdgEreUCsN+DL/L85kDNwZVdNCC78yvymoRh0=
Subject key identifier: 7B:7C:EF:C1:89:28:4C:DD:D1:37:EA:CB:23:DB:2F:B2:BA:41:97:F6
Authority key identifier: 75:6F:BA:46:63:4D:22:B9:3D:B1:BF:46:EC:5A:8D:66:5E:62:DA:C7
Certificate issuer: /CN=756fba46634d22b93db1bf46ec5a8d665e62dac7
Certificate serial: 0199FCFD568B1795A5834C9ADBE2FB286470
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dW-6RmNNIrk9sb9G7FqNZl5i2sc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/b68421-99b1-485e-b217-d3adc7449391/1/dW-6RmNNIrk9sb9G7FqNZl5i2sc.mft
Manifest number: 0B4D
Signing time: Sun 19 Oct 2025 15:01:25 +0000
Manifest this update: Sun 19 Oct 2025 15:01:25 +0000
Manifest next update: Mon 20 Oct 2025 15:01:25 +0000
Files and hashes: 1: Zeibnx0jQfHrKCngsBYyNBtyCY8.roa (hash: 1tTIgh7rGioAClAEx5jMHBx5r9sM7mmraGPRQnv9pR0=)
2: dW-6RmNNIrk9sb9G7FqNZl5i2sc.crl (hash: 35I7bxTsdlP2+8V9+OMMjaGIZQExoy8/z1vjMZdEHw8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/b68421-99b1-485e-b217-d3adc7449391/1/dW-6RmNNIrk9sb9G7FqNZl5i2sc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/b68421-99b1-485e-b217-d3adc7449391/1/dW-6RmNNIrk9sb9G7FqNZl5i2sc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dW-6RmNNIrk9sb9G7FqNZl5i2sc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:56:8b:17:95:a5:83:4c:9a:db:e2:fb:28:64:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=756fba46634d22b93db1bf46ec5a8d665e62dac7
Validity
Not Before: Oct 19 15:01:25 2025 GMT
Not After : Oct 20 15:01:25 2025 GMT
Subject: CN=7b7cefc189284cddd137eacb23db2fb2ba4197f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b2:10:34:09:64:8d:5c:e8:e3:8b:db:ad:c9:
ef:af:09:23:a5:3b:57:03:8c:c3:2c:30:b8:4e:a6:
76:6e:3f:44:6d:fa:44:ef:1e:1e:c1:e7:ad:a2:43:
23:1a:4a:cb:ed:ba:fb:6b:ed:8b:3c:04:28:9b:d7:
09:b6:9e:fa:0b:c3:17:9e:f0:7e:e3:2f:c1:af:45:
34:78:cb:be:f1:c3:e5:8c:ff:d0:86:57:4e:6a:07:
ed:27:48:65:7f:e7:30:4e:44:c0:c2:e8:dd:72:8e:
d1:98:73:17:41:24:a8:44:5c:61:cd:80:7d:4b:f8:
1d:e2:a2:25:31:df:13:e5:24:0a:f3:98:f3:b2:66:
e8:fb:ff:bc:03:21:8d:4c:7c:1a:fa:ef:a1:92:20:
13:75:ab:df:8e:47:49:d4:e7:05:de:c0:53:87:77:
20:6e:fe:c0:24:d2:de:7f:7a:4a:e4:58:71:76:fc:
fb:de:d3:5b:0c:3c:3a:7c:b7:99:2a:e3:dd:17:c3:
9a:b1:d4:90:5d:d8:5d:22:69:e0:87:11:a7:97:81:
0f:0e:c1:23:73:23:44:3a:28:05:13:f8:8c:1f:5f:
64:4c:89:75:f8:31:46:70:6c:59:73:96:0e:9a:e3:
cb:18:8d:67:43:25:58:94:7b:79:1c:5e:da:88:f1:
2e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:7C:EF:C1:89:28:4C:DD:D1:37:EA:CB:23:DB:2F:B2:BA:41:97:F6
X509v3 Authority Key Identifier:
keyid:75:6F:BA:46:63:4D:22:B9:3D:B1:BF:46:EC:5A:8D:66:5E:62:DA:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dW-6RmNNIrk9sb9G7FqNZl5i2sc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b68421-99b1-485e-b217-d3adc7449391/1/dW-6RmNNIrk9sb9G7FqNZl5i2sc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b68421-99b1-485e-b217-d3adc7449391/1/dW-6RmNNIrk9sb9G7FqNZl5i2sc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:dd:b5:61:22:12:f2:16:bc:e8:1b:16:d1:1c:fd:c2:86:35:
27:54:dd:f4:74:34:1c:a7:f8:d0:6d:17:c7:70:68:28:b5:83:
84:92:b0:eb:c6:83:f3:89:26:3d:3f:04:37:d1:62:ef:4c:bc:
9f:92:2b:0b:31:f4:10:89:54:34:96:ad:c1:da:de:22:e4:aa:
86:18:34:9f:68:9d:15:3f:dc:19:52:a0:e2:7d:7e:ce:4a:b7:
38:19:9c:d2:2f:2d:e1:4c:55:f0:45:86:46:dd:db:76:a4:6c:
fd:98:f2:89:61:92:4b:5d:af:b6:48:4c:f4:53:23:fe:4c:53:
52:8f:ff:8c:6e:d4:f4:91:8d:5d:36:6d:b7:fd:0f:c4:17:32:
68:09:a7:f2:3c:ef:f0:47:d0:fc:9a:4f:5a:38:08:83:24:63:
c8:81:75:7d:3b:92:22:b4:4b:aa:a1:9e:a0:22:dd:89:1d:f8:
4d:23:5d:11:2b:5e:c2:09:9f:a3:c1:66:1f:eb:6a:01:42:7a:
ae:71:99:e1:b6:7b:aa:32:13:1b:62:bb:36:58:18:7a:d5:dc:
31:59:6e:27:90:1f:ca:d7:e3:a7:0b:62:4d:29:40:ea:f3:a0:
5d:a3:3f:53:8d:22:a2:94:9a:2d:13:81:6b:a8:5d:ab:02:e1:
3b:e9:e4:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8/VaLF5Wlg0ya2+L7KGRwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1NmZiYTQ2NjM0ZDIyYjkzZGIxYmY0NmVjNWE4ZDY2NWU2
MmRhYzcwHhcNMjUxMDE5MTUwMTI1WhcNMjUxMDIwMTUwMTI1WjAzMTEwLwYDVQQD
Eyg3YjdjZWZjMTg5Mjg0Y2RkZDEzN2VhY2IyM2RiMmZiMmJhNDE5N2Y2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmbIQNAlkjVzo44vbrcnvrwkjpTtX
A4zDLDC4TqZ2bj9EbfpE7x4eweetokMjGkrL7br7a+2LPAQom9cJtp76C8MXnvB+
4y/Br0U0eMu+8cPljP/QhldOagftJ0hlf+cwTkTAwujdco7RmHMXQSSoRFxhzYB9
S/gd4qIlMd8T5SQK85jzsmbo+/+8AyGNTHwa+u+hkiATdavfjkdJ1OcF3sBTh3cg
bv7AJNLef3pK5Fhxdvz73tNbDDw6fLeZKuPdF8OasdSQXdhdImnghxGnl4EPDsEj
cyNEOigFE/iMH19kTIl1+DFGcGxZc5YOmuPLGI1nQyVYlHt5HF7aiPEuXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHt878GJKEzd0TfqyyPbL7K6QZf2MB8GA1UdIwQY
MBaAFHVvukZjTSK5PbG/RuxajWZeYtrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFctNlJtTk5Jcms5c2I5RzdGcU5abDVpMnNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9iNjg0MjEtOTliMS00ODVlLWIyMTct
ZDNhZGM3NDQ5MzkxLzEvZFctNlJtTk5Jcms5c2I5RzdGcU5abDVpMnNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi9iNjg0MjEtOTliMS00ODVlLWIyMTctZDNhZGM3NDQ5Mzkx
LzEvZFctNlJtTk5Jcms5c2I5RzdGcU5abDVpMnNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs921YSIS
8ha86BsW0Rz9woY1J1Td9HQ0HKf40G0Xx3BoKLWDhJKw68aD84kmPT8EN9Fi70y8
n5IrCzH0EIlUNJatwdreIuSqhhg0n2idFT/cGVKg4n1+zkq3OBmc0i8t4UxV8EWG
Rt3bdqRs/ZjyiWGSS12vtkhM9FMj/kxTUo//jG7U9JGNXTZtt/0PxBcyaAmn8jzv
8EfQ/JpPWjgIgyRjyIF1fTuSIrRLqqGeoCLdiR34TSNdEStewgmfo8FmH+tqAUJ6
rnGZ4bZ7qjITG2K7NlgYetXcMVluJ5AfytfjpwtiTSlA6vOgXaM/U40iopSaLROB
a6hdqwLhO+nkTw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:40:48 2025 by rpki-client