Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7fed52-d043-453b-8dd1-cf1997c0250d/1/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.mft
File: rJfrlnQ4_8TrZmM92MA1AYk2Z_c.mft (raw, json)
Hash identifier: r3GaQ/f/FjeivdQ2pIlTDqzljafA2ghHAtBUTYGDvOQ=
Subject key identifier: E3:D2:77:1A:81:68:AB:E2:C4:AC:32:78:2E:C6:9E:B1:B3:66:FE:F8
Authority key identifier: AC:97:EB:96:74:38:FF:C4:EB:66:63:3D:D8:C0:35:01:89:36:67:F7
Certificate issuer: /CN=ac97eb967438ffc4eb66633dd8c03501893667f7
Certificate serial: 0199FEEB8D8845EDD6120FC263BCF342D7CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7fed52-d043-453b-8dd1-cf1997c0250d/1/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.mft
Manifest number: 0A18
Signing time: Mon 20 Oct 2025 00:01:14 +0000
Manifest this update: Mon 20 Oct 2025 00:01:14 +0000
Manifest next update: Tue 21 Oct 2025 00:01:14 +0000
Files and hashes: 1: rJfrlnQ4_8TrZmM92MA1AYk2Z_c.crl (hash: NDHdoiNJrPYbhEN5pV2KakZmFjjFxAb9ABqEUAMZTK0=)
2: sZ5FQpagRRLFHDrCpC-6uU_GQt4.roa (hash: R0iOrEjpTafz2w87NNGxT/0GFxwmG8GgeDCdte91gUA=)
3: uIQg-k4QoyqXWfTy_MZ6BVQABQM.roa (hash: Cx2jyvv/VKruIg91hf3AtutnP6nMOk9qU6tmjgX9EqQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7fed52-d043-453b-8dd1-cf1997c0250d/1/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/7fed52-d043-453b-8dd1-cf1997c0250d/1/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.mft
rsync://rpki.ripe.net/repository/DEFAULT/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:eb:8d:88:45:ed:d6:12:0f:c2:63:bc:f3:42:d7:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac97eb967438ffc4eb66633dd8c03501893667f7
Validity
Not Before: Oct 20 00:01:14 2025 GMT
Not After : Oct 21 00:01:14 2025 GMT
Subject: CN=e3d2771a8168abe2c4ac32782ec69eb1b366fef8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:00:a2:33:7c:8f:53:af:38:4d:7b:48:11:7a:
fc:a2:9b:f3:69:dd:8f:ed:5f:fb:8e:d5:eb:5d:5f:
5b:65:30:57:cf:50:88:2a:69:cf:d0:fe:b4:10:5d:
2a:37:b1:11:43:73:cc:e7:b2:27:cb:f1:fe:00:44:
87:43:e8:b9:b3:1f:de:df:34:09:6f:7f:2b:7a:38:
f6:c2:81:8d:5d:92:cd:5f:94:9a:29:53:6b:96:9a:
b1:ae:ff:30:7e:2e:4f:db:31:bf:9a:e5:fe:95:11:
5d:06:10:3f:5f:9a:4a:3b:92:fb:6c:53:ae:ab:fc:
9b:38:19:74:77:50:6f:ed:e0:50:5c:bb:82:d3:90:
58:de:22:75:bf:92:d9:ff:44:12:93:8a:9a:6d:b0:
d6:33:37:a3:83:a2:3c:29:18:fa:96:1f:f4:30:6c:
9d:4d:29:fa:40:cb:2e:e1:a7:21:75:1d:91:53:4e:
22:84:db:90:78:6d:62:a8:80:f3:3d:22:25:56:4d:
17:f6:64:85:10:35:8f:d6:04:32:ec:d7:ab:7a:63:
82:71:d1:21:dd:60:52:c8:b3:cb:19:92:ff:b5:7d:
d9:60:ee:8a:59:2d:5a:2c:ab:c9:25:05:21:4c:e9:
2f:16:58:c8:39:2d:d5:4c:c4:31:af:01:bd:28:46:
fa:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:D2:77:1A:81:68:AB:E2:C4:AC:32:78:2E:C6:9E:B1:B3:66:FE:F8
X509v3 Authority Key Identifier:
keyid:AC:97:EB:96:74:38:FF:C4:EB:66:63:3D:D8:C0:35:01:89:36:67:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7fed52-d043-453b-8dd1-cf1997c0250d/1/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7fed52-d043-453b-8dd1-cf1997c0250d/1/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:7a:80:3d:ff:45:d1:51:34:8c:b6:86:04:06:08:c4:e8:ca:
39:dc:c3:e7:ff:94:ab:34:87:58:89:63:6e:99:88:a3:92:e1:
e5:54:63:11:e8:80:07:d8:16:39:26:cb:d5:b9:4b:a7:41:ee:
d6:ff:04:24:a3:6a:2d:b1:2b:1b:dc:89:cb:39:3b:9c:da:87:
4a:fc:8f:f1:89:b0:ff:58:6b:bb:59:9d:47:ac:b9:51:15:a5:
c7:25:7c:d9:da:11:09:84:0e:41:b4:b0:d8:2a:79:80:19:4a:
aa:88:10:84:2f:ee:82:01:e6:b6:b1:5b:d5:67:eb:67:a4:a1:
1d:e3:96:4d:5f:e5:fa:d2:ba:dd:a7:ec:af:45:a7:b5:14:39:
56:7a:22:f0:9f:72:c0:59:43:8c:81:43:00:d8:ed:f9:1c:2f:
d9:04:f6:25:b4:69:b0:93:51:7c:79:65:14:15:a9:0f:d0:69:
ca:14:96:cb:36:e4:f6:9f:56:9e:29:c8:b3:f1:dc:c9:36:9d:
b4:e8:fb:96:19:14:db:a0:74:31:59:49:71:3e:84:66:fb:7f:
78:cb:15:60:ca:b5:29:36:fa:a0:bb:a3:57:53:bf:b5:b8:22:
bb:10:56:d3:dd:5e:10:15:69:4a:95:96:65:f7:69:5e:c6:72:
43:6c:83:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+642IRe3WEg/CY7zzQtfLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjOTdlYjk2NzQzOGZmYzRlYjY2NjMzZGQ4YzAzNTAxODkz
NjY3ZjcwHhcNMjUxMDIwMDAwMTE0WhcNMjUxMDIxMDAwMTE0WjAzMTEwLwYDVQQD
EyhlM2QyNzcxYTgxNjhhYmUyYzRhYzMyNzgyZWM2OWViMWIzNjZmZWY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1wCiM3yPU684TXtIEXr8opvzad2P
7V/7jtXrXV9bZTBXz1CIKmnP0P60EF0qN7ERQ3PM57Iny/H+AESHQ+i5sx/e3zQJ
b38rejj2woGNXZLNX5SaKVNrlpqxrv8wfi5P2zG/muX+lRFdBhA/X5pKO5L7bFOu
q/ybOBl0d1Bv7eBQXLuC05BY3iJ1v5LZ/0QSk4qabbDWMzejg6I8KRj6lh/0MGyd
TSn6QMsu4achdR2RU04ihNuQeG1iqIDzPSIlVk0X9mSFEDWP1gQy7NeremOCcdEh
3WBSyLPLGZL/tX3ZYO6KWS1aLKvJJQUhTOkvFljIOS3VTMQxrwG9KEb68QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOPSdxqBaKvixKwyeC7GnrGzZv74MB8GA1UdIwQY
MBaAFKyX65Z0OP/E62ZjPdjANQGJNmf3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckpmcmxuUTRfOFRyWm1NOTJNQTFBWWsyWl9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS83ZmVkNTItZDA0My00NTNiLThkZDEt
Y2YxOTk3YzAyNTBkLzEvckpmcmxuUTRfOFRyWm1NOTJNQTFBWWsyWl9jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS83ZmVkNTItZDA0My00NTNiLThkZDEtY2YxOTk3YzAyNTBk
LzEvckpmcmxuUTRfOFRyWm1NOTJNQTFBWWsyWl9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdXqAPf9F
0VE0jLaGBAYIxOjKOdzD5/+UqzSHWIljbpmIo5Lh5VRjEeiAB9gWOSbL1blLp0Hu
1v8EJKNqLbErG9yJyzk7nNqHSvyP8Ymw/1hru1mdR6y5URWlxyV82doRCYQOQbSw
2Cp5gBlKqogQhC/uggHmtrFb1WfrZ6ShHeOWTV/l+tK63afsr0WntRQ5Vnoi8J9y
wFlDjIFDANjt+Rwv2QT2JbRpsJNRfHllFBWpD9BpyhSWyzbk9p9WninIs/HcyTad
tOj7lhkU26B0MVlJcT6EZvt/eMsVYMq1KTb6oLujV1O/tbgiuxBW091eEBVpSpWW
ZfdpXsZyQ2yDkA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 09:26:05 2025 by rpki-client