Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/aa9d4e-1226-40e7-a9c1-469d3a51d47d/1/1H5iy_X-8zd_nnzVhVj0Ti7qm84.mft
File: 1H5iy_X-8zd_nnzVhVj0Ti7qm84.mft (raw, json)
Hash identifier: 2EFu3WBkKtzOfDtqHtiGJinJlVN9G5RR0l+VLXY2+2g=
Subject key identifier: D9:A9:10:1F:28:43:6F:F7:C5:C6:22:B1:1D:2E:E3:CA:FD:B9:36:24
Authority key identifier: D4:7E:62:CB:F5:FE:F3:37:7F:9E:7C:D5:85:58:F4:4E:2E:EA:9B:CE
Certificate issuer: /CN=d47e62cbf5fef3377f9e7cd58558f44e2eea9bce
Certificate serial: 0199FC58904F5BE59A9DE50258FD21F65C87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1H5iy_X-8zd_nnzVhVj0Ti7qm84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/aa9d4e-1226-40e7-a9c1-469d3a51d47d/1/1H5iy_X-8zd_nnzVhVj0Ti7qm84.mft
Manifest number: 0675
Signing time: Sun 19 Oct 2025 12:01:26 +0000
Manifest this update: Sun 19 Oct 2025 12:01:26 +0000
Manifest next update: Mon 20 Oct 2025 12:01:26 +0000
Files and hashes: 1: 0Z-rzxBLOWIfSfgExnNziFjknFI.roa (hash: WIPxFrkjwE/aiN3DpBiUfgIiKOHJkBOTh5tGpO+hM/Q=)
2: 1H5iy_X-8zd_nnzVhVj0Ti7qm84.crl (hash: gf4HzTkgFyNjlRBXUs/qbAwidLZKEfauDEOuhgrWUiI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/aa9d4e-1226-40e7-a9c1-469d3a51d47d/1/1H5iy_X-8zd_nnzVhVj0Ti7qm84.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/aa9d4e-1226-40e7-a9c1-469d3a51d47d/1/1H5iy_X-8zd_nnzVhVj0Ti7qm84.mft
rsync://rpki.ripe.net/repository/DEFAULT/1H5iy_X-8zd_nnzVhVj0Ti7qm84.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:90:4f:5b:e5:9a:9d:e5:02:58:fd:21:f6:5c:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d47e62cbf5fef3377f9e7cd58558f44e2eea9bce
Validity
Not Before: Oct 19 12:01:26 2025 GMT
Not After : Oct 20 12:01:26 2025 GMT
Subject: CN=d9a9101f28436ff7c5c622b11d2ee3cafdb93624
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:bf:62:4f:97:30:62:9d:e7:c3:d6:5f:c2:14:
23:76:71:27:72:e6:27:e6:dd:e7:6c:e6:e7:c9:09:
e5:7d:c3:d0:3a:54:98:05:d4:1b:be:35:12:b4:29:
7e:ae:d2:14:c1:fb:63:0d:9c:1d:1b:91:68:44:3a:
da:94:e2:68:23:d3:58:9a:44:f3:7c:f7:5c:29:f4:
58:7f:0a:fd:8b:c6:c2:6b:dc:ee:77:f0:b4:22:fa:
f2:56:8c:12:78:90:b3:ab:67:1d:06:cd:93:29:a2:
21:2f:c5:f8:b1:d2:41:9e:45:d1:a4:5c:fb:cf:09:
ea:14:69:2f:37:24:c5:ca:6b:a6:7b:0a:cd:79:96:
25:87:8f:05:af:2e:f2:67:05:b5:ed:3d:66:b9:3e:
9c:b0:96:af:f9:fe:48:24:4f:75:25:85:2b:ff:ff:
63:c9:3a:76:d4:a2:b8:06:4f:a6:28:5e:c2:cc:38:
e7:5d:70:d1:20:b3:3b:1b:df:d5:c4:f6:49:67:2e:
4d:ab:be:db:6f:64:67:40:1b:23:4f:5c:be:fe:9c:
68:be:34:67:31:a3:4a:f6:e0:77:45:5c:7a:d9:ec:
4e:d4:e1:e9:01:f6:fc:ec:8d:30:0f:0e:25:71:d1:
51:97:c4:5c:cc:b3:72:5c:85:90:e5:c2:b0:77:34:
de:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:A9:10:1F:28:43:6F:F7:C5:C6:22:B1:1D:2E:E3:CA:FD:B9:36:24
X509v3 Authority Key Identifier:
keyid:D4:7E:62:CB:F5:FE:F3:37:7F:9E:7C:D5:85:58:F4:4E:2E:EA:9B:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1H5iy_X-8zd_nnzVhVj0Ti7qm84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/aa9d4e-1226-40e7-a9c1-469d3a51d47d/1/1H5iy_X-8zd_nnzVhVj0Ti7qm84.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/aa9d4e-1226-40e7-a9c1-469d3a51d47d/1/1H5iy_X-8zd_nnzVhVj0Ti7qm84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:28:bc:99:9e:70:e4:60:a9:20:d6:2c:1c:4a:47:b6:95:57:
e7:a9:80:00:f2:42:69:dc:1b:6a:59:a8:5a:dc:ff:bd:69:1e:
3e:e4:b2:df:0a:12:e5:d0:ee:7d:cb:11:a8:dd:26:3d:c6:37:
9e:e3:25:9c:62:8e:13:9c:73:40:5f:e3:0e:a7:4a:c3:fd:0f:
0c:24:e0:2e:46:84:a3:35:4f:b1:ef:2e:f4:6b:ed:a5:cc:63:
7b:e7:9b:09:8b:d5:9c:41:99:70:02:70:85:b1:3c:4e:df:1b:
7d:c5:38:85:b4:b1:fa:5b:37:39:8d:7f:57:1d:16:5f:2b:55:
32:25:98:60:0d:29:b3:a4:d6:6a:19:b2:cc:b7:6c:ea:ed:3d:
85:14:d6:93:ad:03:7d:fd:dd:cb:c1:74:a6:0e:e1:95:77:c3:
52:25:cb:64:22:c0:72:b7:10:34:95:6c:a4:7b:3a:87:17:f4:
be:84:ef:f7:5f:87:85:32:67:b4:ac:55:fa:e4:c5:50:73:a7:
a3:b7:91:86:f7:a9:01:63:10:74:3d:7f:b4:3d:fd:e1:bd:97:
60:fd:ae:01:e0:d9:cc:02:48:fb:b3:12:2f:f5:7c:40:d6:f1:
5f:ad:00:6b:d6:d0:54:3d:18:40:e8:15:6e:c0:1c:b5:d7:a8:
33:11:d7:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WJBPW+WaneUCWP0h9lyHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0N2U2MmNiZjVmZWYzMzc3ZjllN2NkNTg1NThmNDRlMmVl
YTliY2UwHhcNMjUxMDE5MTIwMTI2WhcNMjUxMDIwMTIwMTI2WjAzMTEwLwYDVQQD
EyhkOWE5MTAxZjI4NDM2ZmY3YzVjNjIyYjExZDJlZTNjYWZkYjkzNjI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxb9iT5cwYp3nw9ZfwhQjdnEncuYn
5t3nbObnyQnlfcPQOlSYBdQbvjUStCl+rtIUwftjDZwdG5FoRDralOJoI9NYmkTz
fPdcKfRYfwr9i8bCa9zud/C0IvryVowSeJCzq2cdBs2TKaIhL8X4sdJBnkXRpFz7
zwnqFGkvNyTFymumewrNeZYlh48Fry7yZwW17T1muT6csJav+f5IJE91JYUr//9j
yTp21KK4Bk+mKF7CzDjnXXDRILM7G9/VxPZJZy5Nq77bb2RnQBsjT1y+/pxovjRn
MaNK9uB3RVx62exO1OHpAfb87I0wDw4lcdFRl8RczLNyXIWQ5cKwdzTejwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNmpEB8oQ2/3xcYisR0u48r9uTYkMB8GA1UdIwQY
MBaAFNR+Ysv1/vM3f5581YVY9E4u6pvOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUg1aXlfWC04emRfbm56VmhWajBUaTdxbTg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9hYTlkNGUtMTIyNi00MGU3LWE5YzEt
NDY5ZDNhNTFkNDdkLzEvMUg1aXlfWC04emRfbm56VmhWajBUaTdxbTg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS9hYTlkNGUtMTIyNi00MGU3LWE5YzEtNDY5ZDNhNTFkNDdk
LzEvMUg1aXlfWC04emRfbm56VmhWajBUaTdxbTg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALii8mZ5w
5GCpINYsHEpHtpVX56mAAPJCadwbalmoWtz/vWkePuSy3woS5dDufcsRqN0mPcY3
nuMlnGKOE5xzQF/jDqdKw/0PDCTgLkaEozVPse8u9Gvtpcxje+ebCYvVnEGZcAJw
hbE8Tt8bfcU4hbSx+ls3OY1/Vx0WXytVMiWYYA0ps6TWahmyzLds6u09hRTWk60D
ff3dy8F0pg7hlXfDUiXLZCLAcrcQNJVspHs6hxf0voTv91+HhTJntKxV+uTFUHOn
o7eRhvepAWMQdD1/tD394b2XYP2uAeDZzAJI+7MSL/V8QNbxX60Aa9bQVD0YQOgV
bsActdeoMxHXzA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:37:52 2025 by rpki-client