Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/1-545C9y9la-rSl_4xO2e_ENoe9E.mft
File: 1-545C9y9la-rSl_4xO2e_ENoe9E.mft (raw, json)
Hash identifier: 2PkGMzDdoV3QjzulwnnOHiR7vXzAKdlZ43rOZhIcwrA=
Subject key identifier: 25:E6:12:1A:19:F8:F7:5B:12:83:EC:F1:68:79:E1:CF:26:CE:78:55
Authority key identifier: FB:9E:39:0B:DC:BD:95:AF:AB:4A:5F:F8:C4:ED:9E:FC:43:68:7B:D1
Certificate issuer: /CN=fb9e390bdcbd95afab4a5ff8c4ed9efc43687bd1
Certificate serial: 0199FE473E04F56A986F300A95C9CDCE9ECA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-545C9y9la-rSl_4xO2e_ENoe9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/1-545C9y9la-rSl_4xO2e_ENoe9E.mft
Manifest number: 1033
Signing time: Sun 19 Oct 2025 21:01:45 +0000
Manifest this update: Sun 19 Oct 2025 21:01:45 +0000
Manifest next update: Mon 20 Oct 2025 21:01:45 +0000
Files and hashes: 1: 1-545C9y9la-rSl_4xO2e_ENoe9E.crl (hash: /FSNewjJAsVgL+C8m4oWopyRb5DX8F5QQNtf0rreS98=)
2: AQyWHoTpIoD9YkmssqSGTmtU3kY.roa (hash: gQkpbE3OwjFrYUS2/tIcrYz4PZ/Z8nNnk27GBtk07kI=)
3: n9QbbxtHUjuRXoqW5WKf1TIqSDE.roa (hash: VlEMVs5cMOSULcZyXmypke2XQns+4ddKAif1EvT7d+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/1-545C9y9la-rSl_4xO2e_ENoe9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/1-545C9y9la-rSl_4xO2e_ENoe9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-545C9y9la-rSl_4xO2e_ENoe9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:47:3e:04:f5:6a:98:6f:30:0a:95:c9:cd:ce:9e:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb9e390bdcbd95afab4a5ff8c4ed9efc43687bd1
Validity
Not Before: Oct 19 21:01:45 2025 GMT
Not After : Oct 20 21:01:45 2025 GMT
Subject: CN=25e6121a19f8f75b1283ecf16879e1cf26ce7855
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:05:15:87:51:03:45:b8:f9:ee:b9:0e:82:6e:
33:53:ac:e5:01:9b:0a:94:53:96:0c:b8:fd:1f:39:
a1:ac:9d:f7:3d:42:6d:65:56:d7:d3:5b:a9:9f:cd:
78:46:81:cf:d7:fb:44:76:1f:4a:dc:19:1b:0d:79:
80:5a:7b:17:3b:ed:68:48:fb:07:06:d8:af:6c:17:
6e:71:89:98:08:f4:48:14:3c:14:cb:f4:cf:0c:68:
b4:69:36:61:49:79:c3:54:cf:1c:05:f5:35:05:be:
c7:e4:ae:56:1e:85:30:4c:19:7d:0f:bb:38:29:50:
0f:d6:13:69:69:b7:1e:72:56:6c:b0:99:91:9f:86:
ec:8e:86:de:63:fa:21:83:10:40:55:cd:c4:dc:d7:
cc:92:d1:ae:6a:12:3d:8c:40:83:85:bc:db:6e:69:
38:36:73:65:0e:99:e2:9d:af:03:88:2a:e3:30:5b:
80:bd:bd:a8:d9:3e:f8:e4:37:51:9a:fd:45:be:4e:
31:26:7b:1d:7b:a3:b6:15:77:0f:41:46:cd:a3:45:
65:7a:7b:48:20:d5:9e:25:de:ff:e0:a7:64:f4:ee:
da:5f:4e:4f:cb:ae:0d:c7:0b:13:8e:4e:43:99:35:
d0:1c:7f:21:2d:fb:78:49:b6:26:11:c6:28:23:8b:
1f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:E6:12:1A:19:F8:F7:5B:12:83:EC:F1:68:79:E1:CF:26:CE:78:55
X509v3 Authority Key Identifier:
keyid:FB:9E:39:0B:DC:BD:95:AF:AB:4A:5F:F8:C4:ED:9E:FC:43:68:7B:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-545C9y9la-rSl_4xO2e_ENoe9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/1-545C9y9la-rSl_4xO2e_ENoe9E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/1-545C9y9la-rSl_4xO2e_ENoe9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:e0:d0:4e:34:34:e2:27:56:47:16:b0:ee:e7:a5:8e:8a:97:
5f:5f:da:05:08:c7:47:18:89:f7:3d:52:00:36:e1:09:36:df:
ed:0b:ba:6a:1e:a9:4c:27:80:44:d1:0a:13:b5:af:b1:e3:06:
fb:8f:ae:2e:22:89:ec:5d:e6:17:7c:3e:d9:1b:ca:87:df:7b:
1d:d0:5b:5a:08:68:6b:7a:4d:82:48:8a:b8:ad:92:3f:a1:3a:
95:7d:22:d4:a6:12:de:d6:2c:97:86:b3:0f:47:79:29:3b:39:
ca:b7:5f:7e:9d:38:b2:6c:21:60:8f:88:fb:69:57:da:5c:9f:
0d:80:af:ca:ad:2d:2b:ff:d8:64:cb:dd:06:f3:b5:74:0c:e2:
24:31:61:d8:de:00:76:26:64:10:d2:1f:aa:31:0d:c5:a8:6a:
80:28:94:07:9a:57:ad:00:6f:da:96:14:d3:a5:a8:70:07:65:
ab:40:2d:d7:49:62:23:af:d1:4e:6f:1a:55:1b:03:26:1c:27:
a3:77:c9:11:34:fb:65:61:d8:37:c7:d5:13:b5:41:dc:4b:38:
aa:25:6d:6d:ba:26:5a:f6:6d:d7:74:07:d5:f4:b4:12:98:9e:
2f:62:ad:64:68:93:54:48:f0:36:ec:9e:6e:ce:b9:5e:e7:47:
cf:b9:01:a8
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZn+Rz4E9WqYbzAKlcnNzp7KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiOWUzOTBiZGNiZDk1YWZhYjRhNWZmOGM0ZWQ5ZWZjNDM2
ODdiZDEwHhcNMjUxMDE5MjEwMTQ1WhcNMjUxMDIwMjEwMTQ1WjAzMTEwLwYDVQQD
EygyNWU2MTIxYTE5ZjhmNzViMTI4M2VjZjE2ODc5ZTFjZjI2Y2U3ODU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3gUVh1EDRbj57rkOgm4zU6zlAZsK
lFOWDLj9HzmhrJ33PUJtZVbX01upn814RoHP1/tEdh9K3BkbDXmAWnsXO+1oSPsH
BtivbBducYmYCPRIFDwUy/TPDGi0aTZhSXnDVM8cBfU1Bb7H5K5WHoUwTBl9D7s4
KVAP1hNpabceclZssJmRn4bsjobeY/ohgxBAVc3E3NfMktGuahI9jECDhbzbbmk4
NnNlDpnina8DiCrjMFuAvb2o2T745DdRmv1Fvk4xJnsde6O2FXcPQUbNo0VlentI
INWeJd7/4Kdk9O7aX05Py64NxwsTjk5DmTXQHH8hLft4SbYmEcYoI4sfZwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFCXmEhoZ+PdbEoPs8Wh54c8mznhVMB8GA1UdIwQY
MBaAFPueOQvcvZWvq0pf+MTtnvxDaHvRMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS01NDVDOXk5bGEtclNsXzR4TzJlX0VOb2U5RS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjQvZDkwMmNhLWNkZjMtNGYyOS1iMjMy
LTcyNDI2ZDkyNjAxYi8xLzEtNTQ1Qzl5OWxhLXJTbF80eE8yZV9FTm9lOUUubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzI0L2Q5MDJjYS1jZGYzLTRmMjktYjIzMi03MjQyNmQ5MjYw
MWIvMS8xLTU0NUM5eTlsYS1yU2xfNHhPMmVfRU5vZTlFLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh+DQ
TjQ04idWRxaw7ueljoqXX1/aBQjHRxiJ9z1SADbhCTbf7Qu6ah6pTCeARNEKE7Wv
seMG+4+uLiKJ7F3mF3w+2RvKh997HdBbWghoa3pNgkiKuK2SP6E6lX0i1KYS3tYs
l4azD0d5KTs5yrdffp04smwhYI+I+2lX2lyfDYCvyq0tK//YZMvdBvO1dAziJDFh
2N4AdiZkENIfqjENxahqgCiUB5pXrQBv2pYU06WocAdlq0At10liI6/RTm8aVRsD
Jhwno3fJETT7ZWHYN8fVE7VB3Es4qiVtbbomWvZt13QH1fS0EpieL2KtZGiTVEjw
Nuyebs65XudHz7kBqA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 22:25:44 2025 by rpki-client