Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/9cff3d-1168-411c-a065-fd725b825291/1/MnVXzyJinQWKURSWWy-d-O9NtpA.mft
File: MnVXzyJinQWKURSWWy-d-O9NtpA.mft (raw, json)
Hash identifier: VQlUuAzGGf1zL80l4WBzrjJlq8LMhXhDUmxW72WQI8s=
Subject key identifier: 0A:24:10:F7:85:93:B9:EE:FB:E9:79:69:2D:BE:69:1C:29:CD:E7:7B
Authority key identifier: 32:75:57:CF:22:62:9D:05:8A:51:14:96:5B:2F:9D:F8:EF:4D:B6:90
Certificate issuer: /CN=327557cf22629d058a5114965b2f9df8ef4db690
Certificate serial: 0199FBEB4C242AEB0F307AC7BA4F84C75B38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MnVXzyJinQWKURSWWy-d-O9NtpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/9cff3d-1168-411c-a065-fd725b825291/1/MnVXzyJinQWKURSWWy-d-O9NtpA.mft
Manifest number: 0DC8
Signing time: Sun 19 Oct 2025 10:02:05 +0000
Manifest this update: Sun 19 Oct 2025 10:02:05 +0000
Manifest next update: Mon 20 Oct 2025 10:02:05 +0000
Files and hashes: 1: MnVXzyJinQWKURSWWy-d-O9NtpA.crl (hash: RU2IP2fjhYo8Y+OZUZaLrv0HFBVEuQI3OCv0UTGdjSw=)
2: hApSbA3jzy_s3iVNvrGjhLhy3rU.roa (hash: 1X2vbtL7wfNX8hGTI4KlZns0bkwGbPIYpWY571Ew9V0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/9cff3d-1168-411c-a065-fd725b825291/1/MnVXzyJinQWKURSWWy-d-O9NtpA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/9cff3d-1168-411c-a065-fd725b825291/1/MnVXzyJinQWKURSWWy-d-O9NtpA.mft
rsync://rpki.ripe.net/repository/DEFAULT/MnVXzyJinQWKURSWWy-d-O9NtpA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:4c:24:2a:eb:0f:30:7a:c7:ba:4f:84:c7:5b:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=327557cf22629d058a5114965b2f9df8ef4db690
Validity
Not Before: Oct 19 10:02:05 2025 GMT
Not After : Oct 20 10:02:05 2025 GMT
Subject: CN=0a2410f78593b9eefbe979692dbe691c29cde77b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b0:aa:5a:99:07:fb:f0:11:cc:80:c1:ab:18:
1e:5e:d3:2c:0f:11:20:a1:9c:7c:07:51:84:75:94:
49:15:0e:cd:6a:a3:0d:c5:08:2c:4f:bc:c2:bd:ac:
f9:9e:f8:b2:af:7d:fa:9d:65:7e:44:bf:58:ff:b7:
6c:b6:6a:64:75:25:ae:3c:a3:89:3b:ff:a0:14:dd:
00:ba:19:5f:c7:b7:81:40:40:91:90:fa:33:7b:d8:
88:8c:25:c9:69:8c:43:69:a2:84:e7:c8:2d:fc:fa:
58:a1:ea:66:10:d0:08:5e:dc:90:92:6b:24:ff:c5:
98:27:23:66:ab:f7:2c:fe:b3:15:b5:05:0d:01:a6:
25:22:fc:d6:0f:07:80:5c:08:9f:9d:4d:f6:25:c6:
27:a6:ea:0c:b3:45:d9:e6:44:50:c9:97:ba:a3:a8:
b2:e8:0a:7a:91:85:e8:8e:f0:3e:37:60:d5:b5:55:
5b:7c:06:f7:c3:66:b1:a9:fa:91:d3:a3:ad:33:39:
23:6d:7c:06:1b:50:88:93:6f:93:eb:ed:bc:7e:7e:
55:85:ec:3d:c7:63:fd:12:50:90:a9:41:e9:d2:11:
2b:9c:9e:c1:20:99:9f:dd:84:a1:36:72:28:e6:b1:
fb:9a:3d:6d:8c:49:33:c2:63:2f:91:51:2f:79:b3:
09:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:24:10:F7:85:93:B9:EE:FB:E9:79:69:2D:BE:69:1C:29:CD:E7:7B
X509v3 Authority Key Identifier:
keyid:32:75:57:CF:22:62:9D:05:8A:51:14:96:5B:2F:9D:F8:EF:4D:B6:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MnVXzyJinQWKURSWWy-d-O9NtpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/9cff3d-1168-411c-a065-fd725b825291/1/MnVXzyJinQWKURSWWy-d-O9NtpA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/9cff3d-1168-411c-a065-fd725b825291/1/MnVXzyJinQWKURSWWy-d-O9NtpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:93:df:b6:af:5a:67:b7:dd:76:3b:ec:19:27:5a:b1:c6:ab:
fe:d2:1b:76:6f:03:47:a1:f2:de:df:4b:f3:16:ac:59:6b:bd:
54:2d:f6:b9:28:9e:44:40:91:78:4d:ee:ee:b0:ce:29:b6:11:
a6:df:a2:4c:6e:69:71:fb:69:f5:91:d2:34:67:5c:9a:f4:93:
6a:85:80:fc:06:49:53:97:fb:7b:2d:6c:6d:90:a8:33:f1:fb:
02:21:e1:e2:63:a8:ca:5b:f0:44:77:34:f3:b0:9e:3f:ec:3e:
6c:09:7e:51:21:95:0f:68:5d:a4:05:67:d6:f8:28:01:6f:53:
98:63:ea:81:39:3e:ff:0b:3c:79:cd:ed:48:0f:5f:c0:0f:26:
35:43:a5:24:ad:da:27:34:a7:16:67:33:48:34:9b:35:4d:83:
db:fc:98:3d:07:82:a1:a2:25:c5:64:d2:b4:70:56:15:32:c7:
81:17:4a:e6:3c:f6:1e:91:2b:77:e1:b2:86:cf:f1:75:67:d8:
e9:12:db:68:fd:89:59:68:77:c4:f7:f0:d3:3d:c4:35:e9:a2:
5a:51:63:7b:f4:22:07:f4:46:c0:a1:8d:2c:38:2d:8c:27:69:
7f:f0:34:89:56:32:17:8d:fe:d0:69:d9:d5:d7:6b:76:46:2a:
f6:af:9c:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn760wkKusPMHrHuk+Ex1s4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyNzU1N2NmMjI2MjlkMDU4YTUxMTQ5NjViMmY5ZGY4ZWY0
ZGI2OTAwHhcNMjUxMDE5MTAwMjA1WhcNMjUxMDIwMTAwMjA1WjAzMTEwLwYDVQQD
EygwYTI0MTBmNzg1OTNiOWVlZmJlOTc5NjkyZGJlNjkxYzI5Y2RlNzdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0bCqWpkH+/ARzIDBqxgeXtMsDxEg
oZx8B1GEdZRJFQ7NaqMNxQgsT7zCvaz5nviyr336nWV+RL9Y/7dstmpkdSWuPKOJ
O/+gFN0Auhlfx7eBQECRkPoze9iIjCXJaYxDaaKE58gt/PpYoepmENAIXtyQkmsk
/8WYJyNmq/cs/rMVtQUNAaYlIvzWDweAXAifnU32JcYnpuoMs0XZ5kRQyZe6o6iy
6Ap6kYXojvA+N2DVtVVbfAb3w2axqfqR06OtMzkjbXwGG1CIk2+T6+28fn5Vhew9
x2P9ElCQqUHp0hErnJ7BIJmf3YShNnIo5rH7mj1tjEkzwmMvkVEvebMJewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAokEPeFk7nu++l5aS2+aRwpzed7MB8GA1UdIwQY
MBaAFDJ1V88iYp0FilEUllsvnfjvTbaQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTW5WWHp5SmluUVdLVVJTV1d5LWQtTzlOdHBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC85Y2ZmM2QtMTE2OC00MTFjLWEwNjUt
ZmQ3MjViODI1MjkxLzEvTW5WWHp5SmluUVdLVVJTV1d5LWQtTzlOdHBBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC85Y2ZmM2QtMTE2OC00MTFjLWEwNjUtZmQ3MjViODI1Mjkx
LzEvTW5WWHp5SmluUVdLVVJTV1d5LWQtTzlOdHBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ5Pftq9a
Z7fddjvsGSdascar/tIbdm8DR6Hy3t9L8xasWWu9VC32uSieRECReE3u7rDOKbYR
pt+iTG5pcftp9ZHSNGdcmvSTaoWA/AZJU5f7ey1sbZCoM/H7AiHh4mOoylvwRHc0
87CeP+w+bAl+USGVD2hdpAVn1vgoAW9TmGPqgTk+/ws8ec3tSA9fwA8mNUOlJK3a
JzSnFmczSDSbNU2D2/yYPQeCoaIlxWTStHBWFTLHgRdK5jz2HpErd+Gyhs/xdWfY
6RLbaP2JWWh3xPfw0z3ENemiWlFje/QiB/RGwKGNLDgtjCdpf/A0iVYyF43+0GnZ
1ddrdkYq9q+cVg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:10 2025 by rpki-client