Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/bf4793-0c84-422c-9b8e-260de6cbf456/1/1GRmfDSn27AvBTC85ILRGtQkh70.mft
File: 1GRmfDSn27AvBTC85ILRGtQkh70.mft (raw, json)
Hash identifier: ih19ADuZUvbNkES9aFAVc0t9cw908D87ennpAOHn+6Y=
Subject key identifier: 60:34:DB:D1:DB:CA:DF:2D:38:BD:38:98:99:27:6A:A0:6A:A0:02:EC
Authority key identifier: D4:64:66:7C:34:A7:DB:B0:2F:05:30:BC:E4:82:D1:1A:D4:24:87:BD
Certificate issuer: /CN=d464667c34a7dbb02f0530bce482d11ad42487bd
Certificate serial: 0199FC8F2B47BD783DDF540BA29A58025B1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1GRmfDSn27AvBTC85ILRGtQkh70.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/bf4793-0c84-422c-9b8e-260de6cbf456/1/1GRmfDSn27AvBTC85ILRGtQkh70.mft
Manifest number: 09CD
Signing time: Sun 19 Oct 2025 13:01:05 +0000
Manifest this update: Sun 19 Oct 2025 13:01:05 +0000
Manifest next update: Mon 20 Oct 2025 13:01:05 +0000
Files and hashes: 1: 1GRmfDSn27AvBTC85ILRGtQkh70.crl (hash: IcVwiFcmbBAuKaGtNAPzZqjJg7Ic4V0ayajbnyXX0qw=)
2: ngLzTXL9yL8qZxP4JODs6i0oJzI.roa (hash: D6+JXEaHb1tO3mpKT7yT9VZcfkQ3PmJxwgv/yQik0ys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/bf4793-0c84-422c-9b8e-260de6cbf456/1/1GRmfDSn27AvBTC85ILRGtQkh70.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/bf4793-0c84-422c-9b8e-260de6cbf456/1/1GRmfDSn27AvBTC85ILRGtQkh70.mft
rsync://rpki.ripe.net/repository/DEFAULT/1GRmfDSn27AvBTC85ILRGtQkh70.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:2b:47:bd:78:3d:df:54:0b:a2:9a:58:02:5b:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d464667c34a7dbb02f0530bce482d11ad42487bd
Validity
Not Before: Oct 19 13:01:05 2025 GMT
Not After : Oct 20 13:01:05 2025 GMT
Subject: CN=6034dbd1dbcadf2d38bd389899276aa06aa002ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ed:8e:91:df:5c:1c:a5:c7:8b:52:fc:4c:9d:
93:cc:10:8c:2c:ea:56:e7:fc:2a:4d:4f:b7:1c:92:
3f:a1:38:12:b7:7c:ec:77:5e:15:26:29:83:a9:c7:
a2:11:5d:9b:f0:01:ca:18:bc:a7:61:96:b9:96:ee:
a9:31:e1:80:6b:66:a9:50:fe:61:cc:35:ec:b5:ca:
f4:9f:2c:e8:71:82:97:af:30:e2:d6:2f:83:89:8e:
b1:64:24:77:7f:1a:80:70:24:11:4d:51:ef:49:c4:
08:5c:41:f4:d7:f8:29:16:83:80:86:02:1a:0c:eb:
4e:f3:d1:38:52:a3:24:97:cd:ca:c8:e9:54:90:21:
e3:9a:72:f1:b7:c3:f0:a7:ef:3c:c0:e9:ed:76:95:
c0:f6:44:7b:8f:4e:22:34:a5:b3:03:2b:79:70:2c:
46:2d:4f:38:23:2f:2f:cc:da:38:e6:16:92:18:79:
23:54:38:f5:c6:51:97:82:3a:b5:22:f1:e2:63:6a:
b8:c3:ff:24:b1:3a:cd:6d:2e:a7:1f:cf:ed:66:b1:
0e:30:64:57:b0:f1:27:18:a5:42:4e:4d:8e:d5:c9:
e6:4d:90:fd:06:4e:8d:c6:17:05:3d:cc:4e:d5:ce:
5c:b8:94:36:e8:f0:d8:6a:44:5a:6f:70:3d:d1:67:
33:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:34:DB:D1:DB:CA:DF:2D:38:BD:38:98:99:27:6A:A0:6A:A0:02:EC
X509v3 Authority Key Identifier:
keyid:D4:64:66:7C:34:A7:DB:B0:2F:05:30:BC:E4:82:D1:1A:D4:24:87:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1GRmfDSn27AvBTC85ILRGtQkh70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bf4793-0c84-422c-9b8e-260de6cbf456/1/1GRmfDSn27AvBTC85ILRGtQkh70.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bf4793-0c84-422c-9b8e-260de6cbf456/1/1GRmfDSn27AvBTC85ILRGtQkh70.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:10:27:fd:82:ee:62:5f:f3:ea:c5:ae:00:0e:f9:83:17:3c:
8d:54:5e:30:d7:05:1b:9b:dd:63:04:e1:be:b7:b6:1c:a0:1c:
89:4b:e2:7d:8c:eb:96:08:04:14:4f:8a:2c:c6:c2:1d:78:95:
dd:c3:99:f6:65:ab:b2:6b:e9:15:36:a4:ea:19:26:d0:4c:fd:
aa:bd:89:88:15:fc:de:79:21:89:97:d0:ad:d8:6b:c6:6f:61:
20:87:a6:8e:bd:62:8d:ef:60:98:e4:3c:cc:1e:9d:ff:60:2d:
1a:a7:21:04:d0:07:0d:8f:c3:03:23:10:0b:94:fe:d8:c1:e0:
76:21:ad:d2:d1:27:2c:20:53:56:43:7b:e4:75:dc:5f:52:3c:
ae:38:ed:e4:4f:df:07:49:c8:1e:a4:94:ec:77:42:6d:62:b8:
fb:be:f8:d0:c9:42:c6:17:71:31:85:ca:95:2e:53:5d:92:19:
74:7d:ad:7e:a6:62:2a:69:41:1e:21:ed:6d:97:f4:2c:52:fd:
ab:ce:26:9a:93:e5:d6:60:7a:e8:df:b9:1d:49:9f:06:c5:76:
57:1f:6e:c1:1f:aa:d8:7e:9e:20:c1:ee:c0:13:aa:3d:7f:f8:
33:e4:7f:f0:ed:2a:56:39:a6:7d:71:bf:d9:5b:94:c8:9e:8e:
5b:2d:8b:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8jytHvXg931QLoppYAlsfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0NjQ2NjdjMzRhN2RiYjAyZjA1MzBiY2U0ODJkMTFhZDQy
NDg3YmQwHhcNMjUxMDE5MTMwMTA1WhcNMjUxMDIwMTMwMTA1WjAzMTEwLwYDVQQD
Eyg2MDM0ZGJkMWRiY2FkZjJkMzhiZDM4OTg5OTI3NmFhMDZhYTAwMmVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApe2Okd9cHKXHi1L8TJ2TzBCMLOpW
5/wqTU+3HJI/oTgSt3zsd14VJimDqceiEV2b8AHKGLynYZa5lu6pMeGAa2apUP5h
zDXstcr0nyzocYKXrzDi1i+DiY6xZCR3fxqAcCQRTVHvScQIXEH01/gpFoOAhgIa
DOtO89E4UqMkl83KyOlUkCHjmnLxt8Pwp+88wOntdpXA9kR7j04iNKWzAyt5cCxG
LU84Iy8vzNo45haSGHkjVDj1xlGXgjq1IvHiY2q4w/8ksTrNbS6nH8/tZrEOMGRX
sPEnGKVCTk2O1cnmTZD9Bk6NxhcFPcxO1c5cuJQ26PDYakRab3A90WczQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGA029Hbyt8tOL04mJknaqBqoALsMB8GA1UdIwQY
MBaAFNRkZnw0p9uwLwUwvOSC0RrUJIe9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUdSbWZEU24yN0F2QlRDODVJTFJHdFFraDcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9iZjQ3OTMtMGM4NC00MjJjLTliOGUt
MjYwZGU2Y2JmNDU2LzEvMUdSbWZEU24yN0F2QlRDODVJTFJHdFFraDcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi9iZjQ3OTMtMGM4NC00MjJjLTliOGUtMjYwZGU2Y2JmNDU2
LzEvMUdSbWZEU24yN0F2QlRDODVJTFJHdFFraDcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADxAn/YLu
Yl/z6sWuAA75gxc8jVReMNcFG5vdYwThvre2HKAciUvifYzrlggEFE+KLMbCHXiV
3cOZ9mWrsmvpFTak6hkm0Ez9qr2JiBX83nkhiZfQrdhrxm9hIIemjr1ije9gmOQ8
zB6d/2AtGqchBNAHDY/DAyMQC5T+2MHgdiGt0tEnLCBTVkN75HXcX1I8rjjt5E/f
B0nIHqSU7HdCbWK4+7740MlCxhdxMYXKlS5TXZIZdH2tfqZiKmlBHiHtbZf0LFL9
q84mmpPl1mB66N+5HUmfBsV2Vx9uwR+q2H6eIMHuwBOqPX/4M+R/8O0qVjmmfXG/
2VuUyJ6OWy2LXA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:49:26 2025 by rpki-client