Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/44c42c-1e68-4aab-839d-9593e3a43725/1/mQxLs441zXAyDreRUgxsrTSksnE.mft
File: mQxLs441zXAyDreRUgxsrTSksnE.mft (raw, json)
Hash identifier: TfO8V34YZHVqeywRUbdTNqnhineAyqfOkKRdW77/QXA=
Subject key identifier: 54:54:C6:44:ED:DF:B7:23:01:A6:3F:BA:C1:E1:C8:20:77:AF:DA:85
Authority key identifier: 99:0C:4B:B3:8E:35:CD:70:32:0E:B7:91:52:0C:6C:AD:34:A4:B2:71
Certificate issuer: /CN=990c4bb38e35cd70320eb791520c6cad34a4b271
Certificate serial: 0199FAD8296F0FA2E57294253774CCF6AB93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mQxLs441zXAyDreRUgxsrTSksnE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/44c42c-1e68-4aab-839d-9593e3a43725/1/mQxLs441zXAyDreRUgxsrTSksnE.mft
Manifest number: 1375
Signing time: Sun 19 Oct 2025 05:01:34 +0000
Manifest this update: Sun 19 Oct 2025 05:01:34 +0000
Manifest next update: Mon 20 Oct 2025 05:01:34 +0000
Files and hashes: 1: JtxbWq9ormth5LcKwN5vG4Q3apo.roa (hash: lQXeYw4zv4cIzlRUFSI2nS9Q4llqbkuImnCVCQNKPmM=)
2: mQxLs441zXAyDreRUgxsrTSksnE.crl (hash: 1TpORKlD/IT3QgjSQqRFsb2csYzi7/QnWzlXr27HNxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/44c42c-1e68-4aab-839d-9593e3a43725/1/mQxLs441zXAyDreRUgxsrTSksnE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/44c42c-1e68-4aab-839d-9593e3a43725/1/mQxLs441zXAyDreRUgxsrTSksnE.mft
rsync://rpki.ripe.net/repository/DEFAULT/mQxLs441zXAyDreRUgxsrTSksnE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d8:29:6f:0f:a2:e5:72:94:25:37:74:cc:f6:ab:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=990c4bb38e35cd70320eb791520c6cad34a4b271
Validity
Not Before: Oct 19 05:01:34 2025 GMT
Not After : Oct 20 05:01:34 2025 GMT
Subject: CN=5454c644eddfb72301a63fbac1e1c82077afda85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:f0:2e:0c:9a:28:3d:a5:f0:b8:01:32:5d:ea:
37:b0:fc:b4:cb:29:82:ba:a6:ba:a5:8e:d4:90:4c:
63:f3:97:c3:25:01:a3:fd:ee:33:0c:7b:01:ee:79:
94:5c:ee:65:a4:20:f7:93:d5:ce:f6:5c:db:a7:fe:
c2:41:64:6a:93:39:8c:95:28:b3:8f:df:ff:e0:0a:
bc:82:14:1e:ac:b8:0d:8e:88:fe:91:f4:92:0c:5c:
4d:47:fd:03:54:cd:13:b7:4f:d7:a9:57:8c:dd:38:
43:8e:1f:00:6c:3e:36:79:44:f9:70:80:32:bf:68:
d1:c9:da:f9:51:ff:8f:f2:5f:33:15:9c:78:8a:d1:
de:2b:fc:43:37:ec:9a:50:23:0b:60:9b:8e:33:6e:
be:c8:8b:f4:e2:e8:6c:9f:63:38:91:24:1d:20:28:
0b:7c:24:4f:9a:89:61:68:0f:c5:1b:27:11:83:01:
b7:bc:85:c8:d8:5d:bd:6d:67:6d:e3:02:57:e8:26:
ff:b4:99:1e:08:21:15:8b:c4:ed:3b:cd:13:e3:fd:
99:3f:07:db:19:f1:a9:d8:67:17:a6:f7:fd:2d:ea:
76:ec:92:f1:12:2b:b1:ce:fc:c2:ee:94:fb:6b:a8:
88:4c:6e:93:6e:16:64:35:cb:23:fe:b6:ac:1d:c9:
5b:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:54:C6:44:ED:DF:B7:23:01:A6:3F:BA:C1:E1:C8:20:77:AF:DA:85
X509v3 Authority Key Identifier:
keyid:99:0C:4B:B3:8E:35:CD:70:32:0E:B7:91:52:0C:6C:AD:34:A4:B2:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mQxLs441zXAyDreRUgxsrTSksnE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/44c42c-1e68-4aab-839d-9593e3a43725/1/mQxLs441zXAyDreRUgxsrTSksnE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/44c42c-1e68-4aab-839d-9593e3a43725/1/mQxLs441zXAyDreRUgxsrTSksnE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:2a:9f:e7:ad:6a:2f:c4:a5:89:de:ad:c9:d6:ee:f0:aa:68:
ee:b5:cc:00:82:0a:6a:7e:58:da:84:eb:a4:b2:16:97:2d:0c:
4d:4a:08:a6:cf:a6:4e:dd:91:98:10:cc:ca:58:72:3a:e2:84:
14:59:bb:c4:db:73:ea:80:34:e9:57:f9:eb:e1:b4:37:1a:da:
91:da:7a:de:5e:7b:a4:a0:37:1d:ba:b1:d9:36:0b:b6:bb:be:
29:94:53:a3:92:19:c6:4c:f0:51:01:d2:98:3d:5d:ef:56:c5:
f1:7a:96:30:e5:bb:d7:39:e8:91:14:5b:89:f6:d5:95:b0:4b:
fa:07:44:de:4f:3e:ad:ff:20:60:14:88:48:13:5d:5e:2b:e8:
97:06:5c:4f:7c:f2:f8:27:04:f7:f3:21:fa:b1:b7:68:bd:11:
ff:6f:7a:16:23:94:35:8b:7e:bd:7e:c8:e6:3e:ee:cf:13:d2:
82:34:87:68:e4:d4:b8:8c:95:b6:44:13:eb:67:20:d3:c9:7f:
a1:e3:51:4a:2b:91:0b:69:e8:01:ea:27:29:47:d0:f3:5a:9d:
94:03:b3:5a:0f:90:d1:04:00:25:52:07:98:4a:25:14:6b:c8:
f9:04:5c:f6:53:57:d5:5e:53:0b:40:72:0d:09:f0:01:ca:87:
e5:7c:c9:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn62ClvD6LlcpQlN3TM9quTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5MGM0YmIzOGUzNWNkNzAzMjBlYjc5MTUyMGM2Y2FkMzRh
NGIyNzEwHhcNMjUxMDE5MDUwMTM0WhcNMjUxMDIwMDUwMTM0WjAzMTEwLwYDVQQD
Eyg1NDU0YzY0NGVkZGZiNzIzMDFhNjNmYmFjMWUxYzgyMDc3YWZkYTg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAifAuDJooPaXwuAEyXeo3sPy0yymC
uqa6pY7UkExj85fDJQGj/e4zDHsB7nmUXO5lpCD3k9XO9lzbp/7CQWRqkzmMlSiz
j9//4Aq8ghQerLgNjoj+kfSSDFxNR/0DVM0Tt0/XqVeM3ThDjh8AbD42eUT5cIAy
v2jRydr5Uf+P8l8zFZx4itHeK/xDN+yaUCMLYJuOM26+yIv04uhsn2M4kSQdICgL
fCRPmolhaA/FGycRgwG3vIXI2F29bWdt4wJX6Cb/tJkeCCEVi8TtO80T4/2ZPwfb
GfGp2GcXpvf9Lep27JLxEiuxzvzC7pT7a6iITG6TbhZkNcsj/rasHclb7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFRUxkTt37cjAaY/usHhyCB3r9qFMB8GA1UdIwQY
MBaAFJkMS7OONc1wMg63kVIMbK00pLJxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVF4THM0NDF6WEF5RHJlUlVneHNyVFNrc25FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi80NGM0MmMtMWU2OC00YWFiLTgzOWQt
OTU5M2UzYTQzNzI1LzEvbVF4THM0NDF6WEF5RHJlUlVneHNyVFNrc25FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi80NGM0MmMtMWU2OC00YWFiLTgzOWQtOTU5M2UzYTQzNzI1
LzEvbVF4THM0NDF6WEF5RHJlUlVneHNyVFNrc25FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHSqf561q
L8Slid6tydbu8Kpo7rXMAIIKan5Y2oTrpLIWly0MTUoIps+mTt2RmBDMylhyOuKE
FFm7xNtz6oA06Vf56+G0Nxrakdp63l57pKA3Hbqx2TYLtru+KZRTo5IZxkzwUQHS
mD1d71bF8XqWMOW71znokRRbifbVlbBL+gdE3k8+rf8gYBSISBNdXivolwZcT3zy
+CcE9/Mh+rG3aL0R/296FiOUNYt+vX7I5j7uzxPSgjSHaOTUuIyVtkQT62cg08l/
oeNRSiuRC2noAeonKUfQ81qdlAOzWg+Q0QQAJVIHmEolFGvI+QRc9lNX1V5TC0By
DQnwAcqH5XzJ1w==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:20 2025 by rpki-client