Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/b82285-969f-4c2f-a04c-7d3c3351492c/1/1u7ifzwsXJ7FeArNorbrBAptJaE.mft
File: 1u7ifzwsXJ7FeArNorbrBAptJaE.mft (raw, json)
Hash identifier: NkhS8G7/TYJNoog26k35hty5gt7SuPS4XAlfo1zUhWc=
Subject key identifier: 7B:71:D1:5A:69:2F:B4:06:6E:CB:E9:EE:B1:BF:53:A7:C0:9F:1D:11
Authority key identifier: D6:EE:E2:7F:3C:2C:5C:9E:C5:78:0A:CD:A2:B6:EB:04:0A:6D:25:A1
Certificate issuer: /CN=d6eee27f3c2c5c9ec5780acda2b6eb040a6d25a1
Certificate serial: 019A01481FF3299D497625D6B18CA7A048FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1u7ifzwsXJ7FeArNorbrBAptJaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/b82285-969f-4c2f-a04c-7d3c3351492c/1/1u7ifzwsXJ7FeArNorbrBAptJaE.mft
Manifest number: 14CA
Signing time: Mon 20 Oct 2025 11:01:34 +0000
Manifest this update: Mon 20 Oct 2025 11:01:34 +0000
Manifest next update: Tue 21 Oct 2025 11:01:34 +0000
Files and hashes: 1: 1u7ifzwsXJ7FeArNorbrBAptJaE.crl (hash: cE0dBFW8Em6wVR9AubQVa1pYFsGhSpc1QMLmY152TvE=)
2: pBQcYACEJFgZkwBTNup11LKnTk8.roa (hash: Y8ti6NLIY+LJpCwKrSvXBDtmqYcWgUzXZKj2i28mql4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/b82285-969f-4c2f-a04c-7d3c3351492c/1/1u7ifzwsXJ7FeArNorbrBAptJaE.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/b82285-969f-4c2f-a04c-7d3c3351492c/1/1u7ifzwsXJ7FeArNorbrBAptJaE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1u7ifzwsXJ7FeArNorbrBAptJaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 11:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:48:1f:f3:29:9d:49:76:25:d6:b1:8c:a7:a0:48:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6eee27f3c2c5c9ec5780acda2b6eb040a6d25a1
Validity
Not Before: Oct 20 11:01:34 2025 GMT
Not After : Oct 21 11:01:34 2025 GMT
Subject: CN=7b71d15a692fb4066ecbe9eeb1bf53a7c09f1d11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:17:4b:39:2a:7d:1f:5a:bd:2f:9e:9f:99:56:
89:f4:6f:f8:b1:ca:af:58:7d:09:58:43:8c:0b:14:
71:89:5b:bb:e3:29:46:00:4d:32:31:7a:93:8c:ff:
bf:d8:f9:8b:9c:c8:f6:88:ed:8d:1f:00:fe:3b:cb:
1d:ed:dd:44:9a:56:e4:55:c2:f2:33:5e:a8:da:e7:
b2:8f:14:54:58:14:d2:d5:b4:9b:d1:b2:25:42:ac:
a4:81:8f:42:d7:e7:c1:86:7a:4f:b5:02:eb:93:59:
46:cb:9f:b1:5d:01:01:9d:7e:81:de:82:78:5d:5d:
8e:77:99:bc:3a:2a:d3:be:8b:46:56:b1:e6:f6:8f:
5b:ac:5f:ed:67:97:2f:05:96:94:eb:81:c0:62:a2:
3f:81:75:0e:13:d4:94:6b:af:cf:aa:bf:48:f7:33:
f6:dc:59:a9:13:8b:4f:8d:ed:d2:b0:36:c8:bc:b9:
07:80:8d:6b:51:d0:13:91:64:4f:c7:96:3b:dd:03:
16:4b:83:f3:17:77:17:b5:f8:3e:96:4d:87:2e:1b:
14:1d:9c:38:72:90:8f:eb:01:5f:57:be:0a:1e:c1:
8b:d7:a7:88:f8:1b:69:45:f9:03:fb:24:ef:05:36:
5c:71:6c:eb:a8:66:76:8b:a2:10:bb:18:34:2e:9e:
9a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:71:D1:5A:69:2F:B4:06:6E:CB:E9:EE:B1:BF:53:A7:C0:9F:1D:11
X509v3 Authority Key Identifier:
keyid:D6:EE:E2:7F:3C:2C:5C:9E:C5:78:0A:CD:A2:B6:EB:04:0A:6D:25:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1u7ifzwsXJ7FeArNorbrBAptJaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b82285-969f-4c2f-a04c-7d3c3351492c/1/1u7ifzwsXJ7FeArNorbrBAptJaE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b82285-969f-4c2f-a04c-7d3c3351492c/1/1u7ifzwsXJ7FeArNorbrBAptJaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:69:f6:e6:39:b1:5a:3c:28:f2:b0:2d:75:ef:47:4c:e0:3e:
2b:a2:3a:06:68:40:10:2d:33:da:73:f9:12:9f:66:e9:7d:3e:
2d:b2:1c:6e:2b:97:a9:76:92:83:91:95:8f:7f:b6:15:8c:1c:
24:29:c7:09:c3:b1:20:2b:2a:2b:22:9c:f4:d3:fe:38:50:eb:
df:6e:1f:66:90:6c:69:86:f8:f9:87:aa:3c:2a:0b:a5:62:d2:
21:72:93:af:27:13:52:60:cd:a2:c6:22:27:70:c6:96:35:b7:
c0:89:b3:60:22:5f:ad:6a:11:98:1b:09:62:b5:50:16:e0:3e:
94:e6:e0:20:2c:5b:f4:16:51:94:d6:47:3f:e0:e5:e4:23:aa:
c2:50:c8:47:8e:09:fa:30:51:c3:da:ed:24:4e:75:71:1a:f3:
6a:8b:00:e7:71:57:5b:11:a2:a5:94:dd:99:3c:34:86:be:f2:
b0:8e:85:f9:63:5d:e4:7e:3a:6c:f3:9b:dd:e9:23:78:9d:4d:
79:95:97:c7:f9:f8:9d:51:f6:8d:82:bf:77:21:e5:c5:e1:fa:
c5:94:3a:fd:b5:1c:17:ae:f7:88:04:7b:dd:8d:3a:2d:fd:a2:
0e:90:c0:3e:a8:43:69:6c:fb:f5:67:06:f2:df:74:6d:94:69:
de:03:ae:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoBSB/zKZ1JdiXWsYynoEj9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2ZWVlMjdmM2MyYzVjOWVjNTc4MGFjZGEyYjZlYjA0MGE2
ZDI1YTEwHhcNMjUxMDIwMTEwMTM0WhcNMjUxMDIxMTEwMTM0WjAzMTEwLwYDVQQD
Eyg3YjcxZDE1YTY5MmZiNDA2NmVjYmU5ZWViMWJmNTNhN2MwOWYxZDExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2RdLOSp9H1q9L56fmVaJ9G/4scqv
WH0JWEOMCxRxiVu74ylGAE0yMXqTjP+/2PmLnMj2iO2NHwD+O8sd7d1EmlbkVcLy
M16o2ueyjxRUWBTS1bSb0bIlQqykgY9C1+fBhnpPtQLrk1lGy5+xXQEBnX6B3oJ4
XV2Od5m8OirTvotGVrHm9o9brF/tZ5cvBZaU64HAYqI/gXUOE9SUa6/Pqr9I9zP2
3FmpE4tPje3SsDbIvLkHgI1rUdATkWRPx5Y73QMWS4PzF3cXtfg+lk2HLhsUHZw4
cpCP6wFfV74KHsGL16eI+BtpRfkD+yTvBTZccWzrqGZ2i6IQuxg0Lp6aswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHtx0VppL7QGbsvp7rG/U6fAnx0RMB8GA1UdIwQY
MBaAFNbu4n88LFyexXgKzaK26wQKbSWhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXU3aWZ6d3NYSjdGZUFyTm9yYnJCQXB0SmFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy9iODIyODUtOTY5Zi00YzJmLWEwNGMt
N2QzYzMzNTE0OTJjLzEvMXU3aWZ6d3NYSjdGZUFyTm9yYnJCQXB0SmFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy9iODIyODUtOTY5Zi00YzJmLWEwNGMtN2QzYzMzNTE0OTJj
LzEvMXU3aWZ6d3NYSjdGZUFyTm9yYnJCQXB0SmFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPmn25jmx
Wjwo8rAtde9HTOA+K6I6BmhAEC0z2nP5Ep9m6X0+LbIcbiuXqXaSg5GVj3+2FYwc
JCnHCcOxICsqKyKc9NP+OFDr324fZpBsaYb4+YeqPCoLpWLSIXKTrycTUmDNosYi
J3DGljW3wImzYCJfrWoRmBsJYrVQFuA+lObgICxb9BZRlNZHP+Dl5COqwlDIR44J
+jBRw9rtJE51cRrzaosA53FXWxGipZTdmTw0hr7ysI6F+WNd5H46bPOb3ekjeJ1N
eZWXx/n4nVH2jYK/dyHlxeH6xZQ6/bUcF673iAR73Y06Lf2iDpDAPqhDaWz79WcG
8t90bZRp3gOu1g==
-----END CERTIFICATE-----
Generated at Mon Oct 20 17:36:48 2025 by rpki-client