Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/361c57-ea42-47e2-a68f-ec967b511d7f/1/1-PvIQVghSG6P4IYLW-w-koO4A4U.mft
File: 1-PvIQVghSG6P4IYLW-w-koO4A4U.mft (raw, json)
Hash identifier: 5SMTZyhV3jFcQcVL9s43uAv8uHqr25rZK9OouY3X27g=
Subject key identifier: F0:98:9E:AF:BA:73:81:6B:BC:58:F1:4E:1D:70:2C:21:1B:A6:6B:37
Authority key identifier: F8:FB:C8:41:58:21:48:6E:8F:E0:86:0B:5B:EC:3E:92:83:B8:03:85
Certificate issuer: /CN=f8fbc8415821486e8fe0860b5bec3e9283b80385
Certificate serial: 0199FEB4F78BE43E7BB6FA8E1FBA56E12AB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-PvIQVghSG6P4IYLW-w-koO4A4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/361c57-ea42-47e2-a68f-ec967b511d7f/1/1-PvIQVghSG6P4IYLW-w-koO4A4U.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 23:01:36 +0000
Manifest this update: Sun 19 Oct 2025 23:01:36 +0000
Manifest next update: Mon 20 Oct 2025 23:01:36 +0000
Files and hashes: 1: 1-PvIQVghSG6P4IYLW-w-koO4A4U.crl (hash: TBuMRcaglb17e5/6XYAcoCzTVarQ5xoAR0HFx7GPj2U=)
2: Dn9PJQBV1DBDQ0-rgh6HR3KDZu0.roa (hash: gZf47H7ZNPeHNBxmm1n+mb7mTaHE9Uiqqc+N1w8TQc8=)
3: rkGv9bkZwGnroE2E1JMq5CMdQAQ.roa (hash: DQuQsqAZ9ADD7G7O8fgD2/H25auaCw74dHGUBLobCk0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/361c57-ea42-47e2-a68f-ec967b511d7f/1/1-PvIQVghSG6P4IYLW-w-koO4A4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/361c57-ea42-47e2-a68f-ec967b511d7f/1/1-PvIQVghSG6P4IYLW-w-koO4A4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-PvIQVghSG6P4IYLW-w-koO4A4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 23:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b4:f7:8b:e4:3e:7b:b6:fa:8e:1f:ba:56:e1:2a:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8fbc8415821486e8fe0860b5bec3e9283b80385
Validity
Not Before: Oct 19 23:01:36 2025 GMT
Not After : Oct 20 23:01:36 2025 GMT
Subject: CN=f0989eafba73816bbc58f14e1d702c211ba66b37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f9:86:0c:21:4c:b0:93:e2:69:ad:ee:70:9e:
3c:63:41:b2:51:a5:13:09:25:0c:90:e7:61:76:0f:
c6:11:6f:7c:a0:09:45:7d:f6:48:4d:41:0c:ee:00:
4e:ab:c4:a7:07:1f:ed:a8:a9:38:85:a4:29:6e:2b:
f7:c5:4d:16:24:e2:cc:a2:a5:ba:96:b5:26:98:27:
1e:c0:34:8e:0b:4a:7e:fa:13:dc:f7:09:5d:1b:2b:
56:63:5c:4c:b1:0a:5c:7a:54:d2:62:ce:75:3c:d3:
76:7a:d6:38:4f:da:b4:99:e0:04:23:eb:d6:7e:6e:
c6:45:a1:3c:ac:70:81:7e:f1:a2:8a:2c:ec:34:d6:
5b:8a:79:a2:f8:b0:3b:64:22:3b:9b:12:72:db:d8:
a9:f8:c5:ec:0a:cf:20:60:58:08:0d:fc:65:f9:74:
9e:13:01:81:e4:83:5d:a8:fd:c5:91:8c:5b:ea:16:
c7:52:22:ec:8c:70:d6:39:52:e7:4e:45:0d:e4:80:
f9:5a:49:1b:b1:7e:2a:7e:80:c0:1a:03:e2:27:7d:
9e:bb:d6:10:f8:0b:85:bb:41:75:f0:0b:86:b5:0b:
1a:3b:1e:67:66:3c:82:b0:b3:fe:8a:d6:96:33:74:
ea:57:2d:48:98:a2:08:1e:7a:9d:4d:4c:71:67:83:
0c:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:98:9E:AF:BA:73:81:6B:BC:58:F1:4E:1D:70:2C:21:1B:A6:6B:37
X509v3 Authority Key Identifier:
keyid:F8:FB:C8:41:58:21:48:6E:8F:E0:86:0B:5B:EC:3E:92:83:B8:03:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-PvIQVghSG6P4IYLW-w-koO4A4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/361c57-ea42-47e2-a68f-ec967b511d7f/1/1-PvIQVghSG6P4IYLW-w-koO4A4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/361c57-ea42-47e2-a68f-ec967b511d7f/1/1-PvIQVghSG6P4IYLW-w-koO4A4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:04:84:a7:0c:81:9a:a5:ab:f1:8a:30:d7:54:d8:0a:40:08:
df:77:2f:78:7d:49:6f:d6:12:e5:35:f3:03:61:49:4f:53:b1:
dd:80:5d:6d:df:a1:2c:ff:89:1e:ea:c1:09:d5:2b:ed:42:be:
2d:3a:66:3d:27:2d:1a:ee:ee:70:13:7f:c4:8e:3f:bb:25:08:
b1:d5:e5:47:f9:1d:d6:2a:ff:6d:4a:e8:c5:37:aa:27:00:07:
67:9e:54:f7:7e:b3:60:ce:e5:fb:d5:85:e7:e8:d1:19:85:bb:
7c:6f:80:41:23:11:ad:bd:3c:a0:96:33:d1:8d:7f:aa:7a:8e:
7d:b4:45:a4:0d:c0:d0:c1:29:9f:06:ea:dc:dd:9c:cc:19:40:
ce:91:ba:97:2e:44:9b:27:e4:19:41:43:2d:f8:fd:08:cb:4d:
08:c5:81:ae:62:f8:d6:64:e9:82:6a:3f:17:61:26:48:ad:1e:
4d:f0:4d:bb:21:51:2d:7b:20:70:4b:9f:3f:8a:ca:61:92:84:
b6:da:db:f0:7b:59:f7:d7:e3:56:c3:95:a3:88:2f:a0:df:d6:
c9:0b:70:c4:12:cd:b8:1f:03:89:61:c4:2c:71:30:49:fe:6f:
43:31:fb:99:e2:b5:ce:fa:d1:25:d9:ec:64:35:ff:6c:d6:af:
b3:2b:df:02
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZn+tPeL5D57tvqOH7pW4Sq0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4ZmJjODQxNTgyMTQ4NmU4ZmUwODYwYjViZWMzZTkyODNi
ODAzODUwHhcNMjUxMDE5MjMwMTM2WhcNMjUxMDIwMjMwMTM2WjAzMTEwLwYDVQQD
EyhmMDk4OWVhZmJhNzM4MTZiYmM1OGYxNGUxZDcwMmMyMTFiYTY2YjM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0fmGDCFMsJPiaa3ucJ48Y0GyUaUT
CSUMkOdhdg/GEW98oAlFffZITUEM7gBOq8SnBx/tqKk4haQpbiv3xU0WJOLMoqW6
lrUmmCcewDSOC0p++hPc9wldGytWY1xMsQpcelTSYs51PNN2etY4T9q0meAEI+vW
fm7GRaE8rHCBfvGiiizsNNZbinmi+LA7ZCI7mxJy29ip+MXsCs8gYFgIDfxl+XSe
EwGB5INdqP3FkYxb6hbHUiLsjHDWOVLnTkUN5ID5WkkbsX4qfoDAGgPiJ32eu9YQ
+AuFu0F18AuGtQsaOx5nZjyCsLP+itaWM3TqVy1ImKIIHnqdTUxxZ4MMjQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFPCYnq+6c4FrvFjxTh1wLCEbpms3MB8GA1UdIwQY
MBaAFPj7yEFYIUhuj+CGC1vsPpKDuAOFMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1QdklRVmdoU0c2UDRJWUxXLXcta29PNEE0VS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGEvMzYxYzU3LWVhNDItNDdlMi1hNjhm
LWVjOTY3YjUxMWQ3Zi8xLzEtUHZJUVZnaFNHNlA0SVlMVy13LWtvTzRBNFUubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzBhLzM2MWM1Ny1lYTQyLTQ3ZTItYTY4Zi1lYzk2N2I1MTFk
N2YvMS8xLVB2SVFWZ2hTRzZQNElZTFctdy1rb080QTRVLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHwSE
pwyBmqWr8Yow11TYCkAI33cveH1Jb9YS5TXzA2FJT1Ox3YBdbd+hLP+JHurBCdUr
7UK+LTpmPSctGu7ucBN/xI4/uyUIsdXlR/kd1ir/bUroxTeqJwAHZ55U936zYM7l
+9WF5+jRGYW7fG+AQSMRrb08oJYz0Y1/qnqOfbRFpA3A0MEpnwbq3N2czBlAzpG6
ly5EmyfkGUFDLfj9CMtNCMWBrmL41mTpgmo/F2EmSK0eTfBNuyFRLXsgcEufP4rK
YZKEttrb8HtZ99fjVsOVo4gvoN/WyQtwxBLNuB8DiWHELHEwSf5vQzH7meK1zvrR
JdnsZDX/bNavsyvfAg==
-----END CERTIFICATE-----
Generated at Mon Oct 20 09:21:50 2025 by rpki-client