Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/0ad264-3a50-4563-a35a-0d2bbe58c145/1/Cl9hKRQr0Kncad_UAkif8l9bPvI.mft
File: Cl9hKRQr0Kncad_UAkif8l9bPvI.mft (raw, json)
Hash identifier: P6ywvh6MrcYDMj0e+WZcCTE8iM3Hy7/WlmMCH2/L7R4=
Subject key identifier: 49:9D:B4:DC:15:7A:A1:FF:D7:F2:E2:79:4E:D4:2F:37:43:D5:5A:C7
Authority key identifier: 0A:5F:61:29:14:2B:D0:A9:DC:69:DF:D4:02:48:9F:F2:5F:5B:3E:F2
Certificate issuer: /CN=0a5f6129142bd0a9dc69dfd402489ff25f5b3ef2
Certificate serial: 0199FBEBE6751769A8CC154989A1DC470906
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cl9hKRQr0Kncad_UAkif8l9bPvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/0ad264-3a50-4563-a35a-0d2bbe58c145/1/Cl9hKRQr0Kncad_UAkif8l9bPvI.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 10:02:45 +0000
Manifest this update: Sun 19 Oct 2025 10:02:45 +0000
Manifest next update: Mon 20 Oct 2025 10:02:45 +0000
Files and hashes: 1: Cl9hKRQr0Kncad_UAkif8l9bPvI.crl (hash: TqSk7s3fc/+EHroEMRV4SDoL0iuHSp1Js4IPTewDlZU=)
2: CuosGZsAQa_atOUfAfS4SUVwI3o.roa (hash: Ah8ug2ZnqIvKy7wR+jjWOatqPL6Ooi9wmYyJPajHlvk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/0ad264-3a50-4563-a35a-0d2bbe58c145/1/Cl9hKRQr0Kncad_UAkif8l9bPvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/0ad264-3a50-4563-a35a-0d2bbe58c145/1/Cl9hKRQr0Kncad_UAkif8l9bPvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cl9hKRQr0Kncad_UAkif8l9bPvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:e6:75:17:69:a8:cc:15:49:89:a1:dc:47:09:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a5f6129142bd0a9dc69dfd402489ff25f5b3ef2
Validity
Not Before: Oct 19 10:02:45 2025 GMT
Not After : Oct 20 10:02:45 2025 GMT
Subject: CN=499db4dc157aa1ffd7f2e2794ed42f3743d55ac7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7e:70:91:f3:e1:f7:cb:81:6f:55:ac:95:6b:
1c:33:01:e6:86:7c:a5:36:29:f5:2d:35:72:31:bf:
46:0d:d3:b4:c6:b9:21:50:e4:8e:37:1a:c0:22:a0:
9e:19:25:90:1c:c7:79:3a:b3:53:72:0b:03:dd:7b:
79:a3:39:95:8a:36:46:d2:be:f9:61:e7:d9:9c:9d:
7f:c2:96:69:31:40:40:2a:aa:14:c7:18:a3:9b:d0:
79:8f:55:e9:40:40:a5:32:c7:52:c3:84:30:90:be:
da:28:31:99:cd:27:52:34:63:95:0d:42:e8:01:2c:
8f:cb:cd:29:f3:5b:2b:36:22:b2:0c:31:18:99:d6:
95:50:9e:b0:31:d0:1a:14:1a:7c:5c:e2:d4:16:87:
fa:5e:57:c7:d1:1f:99:3b:1a:cd:84:bf:93:ee:a4:
d4:34:d7:1c:c0:70:f1:d7:6a:ee:79:f9:8b:7a:64:
8a:6e:c5:5b:63:21:2c:f4:ec:4d:11:4c:42:39:cd:
48:24:e2:22:8b:1c:a6:86:36:a3:56:e7:7d:56:70:
06:e4:92:ab:d1:34:c8:f7:44:e0:bc:a5:b4:c1:d4:
02:8f:69:67:91:d2:0a:11:c0:c0:17:8f:a5:13:06:
90:c2:e7:f6:ab:7d:f2:14:93:f8:56:43:3e:40:c0:
21:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:9D:B4:DC:15:7A:A1:FF:D7:F2:E2:79:4E:D4:2F:37:43:D5:5A:C7
X509v3 Authority Key Identifier:
keyid:0A:5F:61:29:14:2B:D0:A9:DC:69:DF:D4:02:48:9F:F2:5F:5B:3E:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cl9hKRQr0Kncad_UAkif8l9bPvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0ad264-3a50-4563-a35a-0d2bbe58c145/1/Cl9hKRQr0Kncad_UAkif8l9bPvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0ad264-3a50-4563-a35a-0d2bbe58c145/1/Cl9hKRQr0Kncad_UAkif8l9bPvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:53:dd:41:09:c7:79:7c:c5:99:31:7a:29:26:c0:c7:5d:8a:
ed:a6:87:aa:fc:c0:d7:d0:93:75:36:84:59:92:ce:63:35:b4:
db:b6:d4:ee:f5:46:2d:e5:cc:1a:2e:de:57:ce:ff:a6:39:b1:
56:21:7d:df:e7:26:f1:03:32:26:21:6d:88:6b:61:89:98:d8:
73:2d:15:e9:9b:7d:ad:20:3a:c5:15:c7:c4:7c:9f:92:85:75:
4a:b8:a0:7b:1d:8b:c3:c5:91:6a:a7:3d:1c:53:44:89:62:a2:
75:43:3b:ea:1b:70:27:a1:a7:a8:2a:89:08:fa:62:3b:41:bd:
53:2b:42:d4:3e:0f:c6:ee:a1:1b:ec:2f:d5:10:58:6e:e0:80:
21:a9:38:8b:54:c4:96:a5:a1:35:be:66:a8:f6:ac:f4:b0:68:
a9:d5:96:9f:ab:0f:81:8a:81:3a:e4:6c:c2:0a:5b:0d:71:e0:
e8:73:07:b2:52:5f:4d:2f:3e:69:66:44:5c:5d:3f:55:c7:1b:
f0:c4:16:16:ba:16:66:40:af:42:86:f7:5a:ef:56:73:15:b8:
fa:d1:7c:04:c9:96:51:1a:3c:11:67:f3:11:47:eb:eb:40:09:
85:1b:17:c6:09:10:e0:21:f8:8c:87:bd:59:d9:b2:25:1e:ec:
29:c6:31:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76+Z1F2mozBVJiaHcRwkGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhNWY2MTI5MTQyYmQwYTlkYzY5ZGZkNDAyNDg5ZmYyNWY1
YjNlZjIwHhcNMjUxMDE5MTAwMjQ1WhcNMjUxMDIwMTAwMjQ1WjAzMTEwLwYDVQQD
Eyg0OTlkYjRkYzE1N2FhMWZmZDdmMmUyNzk0ZWQ0MmYzNzQzZDU1YWM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvX5wkfPh98uBb1WslWscMwHmhnyl
Nin1LTVyMb9GDdO0xrkhUOSONxrAIqCeGSWQHMd5OrNTcgsD3Xt5ozmVijZG0r75
YefZnJ1/wpZpMUBAKqoUxxijm9B5j1XpQEClMsdSw4QwkL7aKDGZzSdSNGOVDULo
ASyPy80p81srNiKyDDEYmdaVUJ6wMdAaFBp8XOLUFof6XlfH0R+ZOxrNhL+T7qTU
NNccwHDx12ruefmLemSKbsVbYyEs9OxNEUxCOc1IJOIiixymhjajVud9VnAG5JKr
0TTI90TgvKW0wdQCj2lnkdIKEcDAF4+lEwaQwuf2q33yFJP4VkM+QMAhhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEmdtNwVeqH/1/LieU7ULzdD1VrHMB8GA1UdIwQY
MBaAFApfYSkUK9Cp3Gnf1AJIn/JfWz7yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2w5aEtSUXIwS25jYWRfVUFraWY4bDliUHZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8wYWQyNjQtM2E1MC00NTYzLWEzNWEt
MGQyYmJlNThjMTQ1LzEvQ2w5aEtSUXIwS25jYWRfVUFraWY4bDliUHZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi8wYWQyNjQtM2E1MC00NTYzLWEzNWEtMGQyYmJlNThjMTQ1
LzEvQ2w5aEtSUXIwS25jYWRfVUFraWY4bDliUHZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAblPdQQnH
eXzFmTF6KSbAx12K7aaHqvzA19CTdTaEWZLOYzW027bU7vVGLeXMGi7eV87/pjmx
ViF93+cm8QMyJiFtiGthiZjYcy0V6Zt9rSA6xRXHxHyfkoV1Srigex2Lw8WRaqc9
HFNEiWKidUM76htwJ6GnqCqJCPpiO0G9UytC1D4Pxu6hG+wv1RBYbuCAIak4i1TE
lqWhNb5mqPas9LBoqdWWn6sPgYqBOuRswgpbDXHg6HMHslJfTS8+aWZEXF0/Vccb
8MQWFroWZkCvQob3Wu9WcxW4+tF8BMmWURo8EWfzEUfr60AJhRsXxgkQ4CH4jIe9
WdmyJR7sKcYxfA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:31:43 2025 by rpki-client