Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/d377cd-e36f-4cb9-825b-c02334be128c/1/rZr63kGDroAEjWuEgY7sRvaA-iY.mft
File: rZr63kGDroAEjWuEgY7sRvaA-iY.mft (raw, json)
Hash identifier: 8iw21LSTfse4fmiUaqMmTI0SNsvF/80c4RwDuAsqLSo=
Subject key identifier: C1:72:17:93:E4:4F:77:C0:01:FE:31:38:BB:0E:EF:BA:EB:7C:2D:E6
Authority key identifier: AD:9A:FA:DE:41:83:AE:80:04:8D:6B:84:81:8E:EC:46:F6:80:FA:26
Certificate issuer: /CN=ad9afade4183ae80048d6b84818eec46f680fa26
Certificate serial: 0199FDDA1D41202CEA2902FCE142C1B59233
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rZr63kGDroAEjWuEgY7sRvaA-iY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/d377cd-e36f-4cb9-825b-c02334be128c/1/rZr63kGDroAEjWuEgY7sRvaA-iY.mft
Manifest number: 1516
Signing time: Sun 19 Oct 2025 19:02:33 +0000
Manifest this update: Sun 19 Oct 2025 19:02:33 +0000
Manifest next update: Mon 20 Oct 2025 19:02:33 +0000
Files and hashes: 1: dHcu1Xe1bMDTNim9SJl30JSk4hI.roa (hash: qRzLbHq22DmrTaMRCm+OCQCo4sWL5SJUeqY8R0TqngI=)
2: g1AtdX4-A4stQRdXTWV50haWr_U.roa (hash: SfjbeTWsFCpHADmiaD0ANERB3vzQ++Aj8Swnoj6lsUI=)
3: rZr63kGDroAEjWuEgY7sRvaA-iY.crl (hash: 3bHwxKY65L06ohvJ4O/Xgln8T3BcoaTQOjlouMhotrE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/d377cd-e36f-4cb9-825b-c02334be128c/1/rZr63kGDroAEjWuEgY7sRvaA-iY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/d377cd-e36f-4cb9-825b-c02334be128c/1/rZr63kGDroAEjWuEgY7sRvaA-iY.mft
rsync://rpki.ripe.net/repository/DEFAULT/rZr63kGDroAEjWuEgY7sRvaA-iY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:1d:41:20:2c:ea:29:02:fc:e1:42:c1:b5:92:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad9afade4183ae80048d6b84818eec46f680fa26
Validity
Not Before: Oct 19 19:02:33 2025 GMT
Not After : Oct 20 19:02:33 2025 GMT
Subject: CN=c1721793e44f77c001fe3138bb0eefbaeb7c2de6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:80:5f:f7:59:32:1a:13:46:da:6a:f5:af:5f:
29:c2:3f:f8:3a:87:54:a6:98:b6:5b:e8:a8:f4:2f:
85:8a:3c:a4:f7:3b:40:7d:11:d1:cf:c0:0c:62:f9:
8b:b6:d0:11:16:e9:ae:0d:94:ab:68:63:84:4f:a2:
b1:b7:a1:54:6e:b7:24:cf:a4:a6:b1:bb:98:66:88:
f4:58:f3:11:6a:1d:82:bc:a8:5e:5e:21:c8:6f:db:
ca:0a:6e:68:68:06:e4:21:d9:56:e2:bb:3b:ef:cb:
3e:a3:f4:4b:e7:23:a2:6a:41:12:61:74:e2:4a:4d:
e8:40:a1:bb:9d:73:1b:7f:b0:7f:30:3d:89:09:b4:
b2:43:64:c0:d5:ad:17:38:d1:df:b1:7c:fb:b9:2f:
5c:03:2c:13:c5:dd:04:b6:5e:58:97:75:d3:37:29:
ce:3a:d8:4d:16:55:d1:3b:bd:5d:91:99:5e:f9:98:
91:7d:94:53:e4:9e:ed:bb:30:c3:9f:cf:92:7a:b3:
dc:23:20:5b:70:d5:3b:45:15:f4:97:a2:25:67:6b:
a3:6c:5e:8b:f3:d9:18:35:f8:c6:9e:6d:57:12:22:
96:58:a9:e2:c1:39:71:f1:62:75:3d:d7:a3:82:3e:
af:69:16:f7:00:a4:dd:24:b1:9e:6b:05:cd:09:92:
8f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:72:17:93:E4:4F:77:C0:01:FE:31:38:BB:0E:EF:BA:EB:7C:2D:E6
X509v3 Authority Key Identifier:
keyid:AD:9A:FA:DE:41:83:AE:80:04:8D:6B:84:81:8E:EC:46:F6:80:FA:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rZr63kGDroAEjWuEgY7sRvaA-iY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/d377cd-e36f-4cb9-825b-c02334be128c/1/rZr63kGDroAEjWuEgY7sRvaA-iY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/d377cd-e36f-4cb9-825b-c02334be128c/1/rZr63kGDroAEjWuEgY7sRvaA-iY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:41:ce:89:02:9d:de:50:3f:86:65:0a:2b:af:ef:3f:4a:b3:
57:26:0d:b7:2d:d1:15:59:53:9a:34:a9:63:d5:9c:62:dc:44:
6c:1e:2e:14:a2:1a:a6:ab:9b:c4:17:c2:22:44:a5:96:cb:3b:
7a:7a:1a:83:cf:a8:cb:5c:a7:4c:9a:b8:36:cb:9f:21:9c:60:
bb:79:53:9a:52:59:f3:2e:84:77:a6:3a:1e:8d:a7:06:d6:e0:
9c:03:18:50:f2:84:4d:b3:17:a2:aa:0c:89:65:bb:7d:e9:ad:
3c:36:ad:e6:60:e9:8c:6b:3a:34:0f:d8:d0:bc:16:eb:9f:55:
05:21:ad:bf:e3:b1:39:2e:46:77:67:ab:a5:e3:43:20:0e:fb:
c2:a4:79:5c:80:98:66:8c:75:69:c0:e4:78:ab:c5:dc:f3:1a:
47:fe:ba:8c:bc:75:07:3d:36:2b:26:96:54:d9:e1:59:85:cb:
17:ba:cb:10:47:77:6c:9c:24:7d:d4:09:e2:e4:ed:bd:47:f9:
d6:51:a6:cc:61:d9:9b:19:1b:49:23:00:7b:78:b8:6e:97:b5:
b7:86:e3:c0:1c:be:80:ca:89:7e:db:8d:92:f5:05:2b:18:49:
20:33:8e:bf:d3:43:b9:8e:90:86:62:e4:d4:c5:4e:d9:6b:57:
d3:6f:c8:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn92h1BICzqKQL84ULBtZIzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkOWFmYWRlNDE4M2FlODAwNDhkNmI4NDgxOGVlYzQ2ZjY4
MGZhMjYwHhcNMjUxMDE5MTkwMjMzWhcNMjUxMDIwMTkwMjMzWjAzMTEwLwYDVQQD
EyhjMTcyMTc5M2U0NGY3N2MwMDFmZTMxMzhiYjBlZWZiYWViN2MyZGU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0YBf91kyGhNG2mr1r18pwj/4OodU
ppi2W+io9C+Fijyk9ztAfRHRz8AMYvmLttARFumuDZSraGOET6Kxt6FUbrckz6Sm
sbuYZoj0WPMRah2CvKheXiHIb9vKCm5oaAbkIdlW4rs778s+o/RL5yOiakESYXTi
Sk3oQKG7nXMbf7B/MD2JCbSyQ2TA1a0XONHfsXz7uS9cAywTxd0Etl5Yl3XTNynO
OthNFlXRO71dkZle+ZiRfZRT5J7tuzDDn8+SerPcIyBbcNU7RRX0l6IlZ2ujbF6L
89kYNfjGnm1XEiKWWKniwTlx8WJ1Pdejgj6vaRb3AKTdJLGeawXNCZKPcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMFyF5PkT3fAAf4xOLsO77rrfC3mMB8GA1UdIwQY
MBaAFK2a+t5Bg66ABI1rhIGO7Eb2gPomMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclpyNjNrR0Ryb0FFald1RWdZN3NSdmFBLWlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9kMzc3Y2QtZTM2Zi00Y2I5LTgyNWIt
YzAyMzM0YmUxMjhjLzEvclpyNjNrR0Ryb0FFald1RWdZN3NSdmFBLWlZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS9kMzc3Y2QtZTM2Zi00Y2I5LTgyNWItYzAyMzM0YmUxMjhj
LzEvclpyNjNrR0Ryb0FFald1RWdZN3NSdmFBLWlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArUHOiQKd
3lA/hmUKK6/vP0qzVyYNty3RFVlTmjSpY9WcYtxEbB4uFKIapqubxBfCIkSllss7
enoag8+oy1ynTJq4NsufIZxgu3lTmlJZ8y6Ed6Y6Ho2nBtbgnAMYUPKETbMXoqoM
iWW7femtPDat5mDpjGs6NA/Y0LwW659VBSGtv+OxOS5Gd2erpeNDIA77wqR5XICY
Zox1acDkeKvF3PMaR/66jLx1Bz02KyaWVNnhWYXLF7rLEEd3bJwkfdQJ4uTtvUf5
1lGmzGHZmxkbSSMAe3i4bpe1t4bjwBy+gMqJftuNkvUFKxhJIDOOv9NDuY6QhmLk
1MVO2WtX02/IOQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:44:25 2025 by rpki-client