Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/dc8d00-f2c4-4991-989e-43d19dc3f138/1/1-v3j2ZJau-IPw8bZGEx99nBH-54.mft
File: 1-v3j2ZJau-IPw8bZGEx99nBH-54.mft (raw, json)
Hash identifier: TeLREv3gpVJWgv+IzWsLw547y4p/vhaMMkE6fwf2IlQ=
Subject key identifier: E5:2C:F3:9E:34:24:F4:F1:EA:E2:EE:8F:CF:8B:AC:84:86:71:AD:0C
Authority key identifier: FA:FD:E3:D9:92:5A:BB:E2:0F:C3:C6:D9:18:4C:7D:F6:70:47:FB:9E
Certificate issuer: /CN=fafde3d9925abbe20fc3c6d9184c7df67047fb9e
Certificate serial: 0199FAA0FE327E305B8AA4A23563F6B9380E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-v3j2ZJau-IPw8bZGEx99nBH-54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/dc8d00-f2c4-4991-989e-43d19dc3f138/1/1-v3j2ZJau-IPw8bZGEx99nBH-54.mft
Manifest number: 34
Signing time: Sun 19 Oct 2025 04:01:18 +0000
Manifest this update: Sun 19 Oct 2025 04:01:18 +0000
Manifest next update: Mon 20 Oct 2025 04:01:18 +0000
Files and hashes: 1: 1-v3j2ZJau-IPw8bZGEx99nBH-54.crl (hash: beY6XLBWb4+5+/LZi3Ncmri3naJfhJ392yaxDNPbjlE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/dc8d00-f2c4-4991-989e-43d19dc3f138/1/1-v3j2ZJau-IPw8bZGEx99nBH-54.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/dc8d00-f2c4-4991-989e-43d19dc3f138/1/1-v3j2ZJau-IPw8bZGEx99nBH-54.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-v3j2ZJau-IPw8bZGEx99nBH-54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 04:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:a0:fe:32:7e:30:5b:8a:a4:a2:35:63:f6:b9:38:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fafde3d9925abbe20fc3c6d9184c7df67047fb9e
Validity
Not Before: Oct 19 04:01:18 2025 GMT
Not After : Oct 20 04:01:18 2025 GMT
Subject: CN=e52cf39e3424f4f1eae2ee8fcf8bac848671ad0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:aa:d9:b0:be:14:d7:e3:22:dd:2b:f9:f8:96:
3c:c6:34:22:ec:a8:af:bf:a6:d6:4d:06:7b:26:de:
63:a5:a2:a6:2c:d0:0c:7b:c9:23:d9:55:22:e1:6b:
29:96:3a:20:47:74:2a:cb:61:03:cb:b8:c5:24:f1:
3f:2b:99:4a:a4:cb:38:f2:64:b8:d5:a0:fb:57:d7:
22:83:4d:5a:b6:33:4a:cd:c7:02:ae:c1:bc:96:bd:
ee:bf:26:16:2d:7d:b8:83:2a:6d:42:9d:63:1c:8e:
fc:44:b0:8c:01:7f:30:ca:c6:46:4f:fe:13:cb:57:
c6:55:bf:cf:b5:de:1e:e0:1c:1c:c5:96:25:b7:9d:
65:ee:7f:08:b1:1f:5a:47:b8:28:5b:15:9c:81:b2:
c9:ff:5a:4e:23:d3:0d:0c:0e:41:83:c7:96:1f:b5:
32:cb:4e:c3:79:01:de:9a:d9:2e:c6:58:53:62:03:
b6:17:a9:46:87:3d:10:8f:81:c3:0a:10:2e:32:c6:
c2:84:95:89:7d:30:42:fd:db:2f:45:5e:be:f3:61:
9e:6d:08:6b:c4:18:4b:fc:a6:4d:9a:5d:85:f5:6a:
06:46:60:9f:41:9d:d0:19:b2:e0:b7:22:be:b0:00:
56:f0:03:0b:c6:6f:f8:e7:0a:7b:af:1f:fa:04:ec:
6f:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:2C:F3:9E:34:24:F4:F1:EA:E2:EE:8F:CF:8B:AC:84:86:71:AD:0C
X509v3 Authority Key Identifier:
keyid:FA:FD:E3:D9:92:5A:BB:E2:0F:C3:C6:D9:18:4C:7D:F6:70:47:FB:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-v3j2ZJau-IPw8bZGEx99nBH-54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/dc8d00-f2c4-4991-989e-43d19dc3f138/1/1-v3j2ZJau-IPw8bZGEx99nBH-54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/dc8d00-f2c4-4991-989e-43d19dc3f138/1/1-v3j2ZJau-IPw8bZGEx99nBH-54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:50:f9:35:3a:e9:17:af:96:21:90:9e:ef:4f:ef:0d:95:d1:
42:80:31:d2:f5:9a:81:b6:a7:5e:3f:f8:8c:30:34:4b:23:ae:
52:21:02:c9:36:eb:4b:33:a2:cc:6f:0b:97:af:11:47:61:96:
91:04:d0:84:d9:4e:d7:91:ad:09:ac:f6:21:31:bd:8a:b2:80:
a6:66:51:61:dd:39:25:64:f0:70:62:38:c2:e7:f6:7b:c6:3e:
7f:d9:83:75:5c:41:3d:59:fa:ab:5e:4d:60:30:68:da:ff:72:
be:4e:5c:2b:4c:89:98:9b:e7:99:85:f0:1c:6b:0c:af:f2:fa:
1d:35:23:e2:76:6c:62:89:11:33:25:76:f9:4b:3d:79:f3:c6:
b4:b2:0f:d0:69:11:e3:1e:55:67:40:98:21:05:96:55:1e:28:
82:4a:d1:df:a0:87:bd:1f:e9:68:3a:86:53:98:a0:23:0e:31:
1d:bb:67:94:d6:73:53:0d:8e:93:57:35:6d:05:7a:0a:25:3c:
12:33:95:e8:77:91:3d:e0:48:c1:9e:c9:c0:65:60:a9:da:76:
fa:9e:c1:5d:b2:4f:35:90:9d:86:cc:c3:23:9b:b9:cd:69:18:
f8:57:90:b1:d9:40:2c:9d:d8:3d:2d:a0:2b:28:6a:fa:83:d0:
7d:0f:1b:9e
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZn6oP4yfjBbiqSiNWP2uTgOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhZmRlM2Q5OTI1YWJiZTIwZmMzYzZkOTE4NGM3ZGY2NzA0
N2ZiOWUwHhcNMjUxMDE5MDQwMTE4WhcNMjUxMDIwMDQwMTE4WjAzMTEwLwYDVQQD
EyhlNTJjZjM5ZTM0MjRmNGYxZWFlMmVlOGZjZjhiYWM4NDg2NzFhZDBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw6rZsL4U1+Mi3Sv5+JY8xjQi7Kiv
v6bWTQZ7Jt5jpaKmLNAMe8kj2VUi4WspljogR3Qqy2EDy7jFJPE/K5lKpMs48mS4
1aD7V9cig01atjNKzccCrsG8lr3uvyYWLX24gyptQp1jHI78RLCMAX8wysZGT/4T
y1fGVb/Ptd4e4BwcxZYlt51l7n8IsR9aR7goWxWcgbLJ/1pOI9MNDA5Bg8eWH7Uy
y07DeQHemtkuxlhTYgO2F6lGhz0Qj4HDChAuMsbChJWJfTBC/dsvRV6+82GebQhr
xBhL/KZNml2F9WoGRmCfQZ3QGbLgtyK+sABW8AMLxm/45wp7rx/6BOxvvwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFOUs8540JPTx6uLuj8+LrISGca0MMB8GA1UdIwQY
MBaAFPr949mSWrviD8PG2RhMffZwR/ueMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS12M2oyWkphdS1JUHc4YlpHRXg5OW5CSC01NC5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDgvZGM4ZDAwLWYyYzQtNDk5MS05ODll
LTQzZDE5ZGMzZjEzOC8xLzEtdjNqMlpKYXUtSVB3OGJaR0V4OTluQkgtNTQubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzA4L2RjOGQwMC1mMmM0LTQ5OTEtOTg5ZS00M2QxOWRjM2Yx
MzgvMS8xLXYzajJaSmF1LUlQdzhiWkdFeDk5bkJILTU0LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIVD5
NTrpF6+WIZCe70/vDZXRQoAx0vWagbanXj/4jDA0SyOuUiECyTbrSzOizG8Ll68R
R2GWkQTQhNlO15GtCaz2ITG9irKApmZRYd05JWTwcGI4wuf2e8Y+f9mDdVxBPVn6
q15NYDBo2v9yvk5cK0yJmJvnmYXwHGsMr/L6HTUj4nZsYokRMyV2+Us9efPGtLIP
0GkR4x5VZ0CYIQWWVR4ogkrR36CHvR/paDqGU5igIw4xHbtnlNZzUw2Ok1c1bQV6
CiU8EjOV6HeRPeBIwZ7JwGVgqdp2+p7BXbJPNZCdhszDI5u5zWkY+FeQsdlALJ3Y
PS2gKyhq+oPQfQ8bng==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:04:50 2025 by rpki-client