Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/94558a-2803-44c2-a772-f94adc1bbd90/1/1aCF65WtVfs6ayR-lngRKhTYGSY.mft
File: 1aCF65WtVfs6ayR-lngRKhTYGSY.mft (raw, json)
Hash identifier: RCXAHxGBdyzrqyJmKj5Eo2cZBbcUVi8Cx4mKW/GBaXI=
Subject key identifier: 4D:EA:E0:4F:EF:04:41:4D:B9:49:2D:C0:13:3C:B9:8F:F5:5B:9E:3F
Authority key identifier: D5:A0:85:EB:95:AD:55:FB:3A:6B:24:7E:96:78:11:2A:14:D8:19:26
Certificate issuer: /CN=d5a085eb95ad55fb3a6b247e9678112a14d81926
Certificate serial: 0199FE46F8466853CFFFFFF085F6120E37B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1aCF65WtVfs6ayR-lngRKhTYGSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/94558a-2803-44c2-a772-f94adc1bbd90/1/1aCF65WtVfs6ayR-lngRKhTYGSY.mft
Manifest number: 08D1
Signing time: Sun 19 Oct 2025 21:01:27 +0000
Manifest this update: Sun 19 Oct 2025 21:01:27 +0000
Manifest next update: Mon 20 Oct 2025 21:01:27 +0000
Files and hashes: 1: 1aCF65WtVfs6ayR-lngRKhTYGSY.crl (hash: Bk++gfQTjWD/ljW3A673S9YHYDqddxPZSb2SxVL+wBQ=)
2: Gfuw2x_T8yQVyP6ui29Llxbnd0A.roa (hash: Gjo+1HCWQtVB1KVlZemBlfNk1FD9JNsAIkXhqPnWnlw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/94558a-2803-44c2-a772-f94adc1bbd90/1/1aCF65WtVfs6ayR-lngRKhTYGSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/94558a-2803-44c2-a772-f94adc1bbd90/1/1aCF65WtVfs6ayR-lngRKhTYGSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1aCF65WtVfs6ayR-lngRKhTYGSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:46:f8:46:68:53:cf:ff:ff:f0:85:f6:12:0e:37:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5a085eb95ad55fb3a6b247e9678112a14d81926
Validity
Not Before: Oct 19 21:01:27 2025 GMT
Not After : Oct 20 21:01:27 2025 GMT
Subject: CN=4deae04fef04414db9492dc0133cb98ff55b9e3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:94:6a:fd:fc:02:6c:ec:13:cc:c7:6a:cd:c0:
9d:ed:12:de:a0:7a:ca:44:52:4f:64:f0:97:ba:b2:
49:b2:24:cc:b9:a2:c7:14:f7:b3:8b:31:79:75:95:
b9:c1:ea:a5:7b:b3:c3:be:13:36:b4:89:9e:c5:03:
d6:eb:b4:a5:f6:32:40:90:bd:a4:3d:ce:38:d0:83:
5d:85:76:6f:a5:14:93:ae:76:42:88:eb:71:89:46:
1a:f1:92:69:21:78:a0:e5:6a:43:c5:ca:8a:83:e8:
2e:22:09:06:55:8e:9c:d9:15:3a:e5:bb:1b:1b:3e:
bf:b0:21:b1:95:7e:60:eb:0c:d9:c5:31:d6:53:84:
8d:47:ff:f0:3d:5a:35:0a:79:27:01:42:c2:4b:11:
2d:6c:47:35:74:9b:b3:ce:f0:02:1e:b6:f2:04:97:
14:ae:90:e9:2b:fb:a7:fe:96:fd:ef:70:f1:88:4c:
ed:58:3f:83:9a:7b:ce:1a:24:9a:76:4d:82:ee:94:
78:8d:8a:0b:7a:76:dd:a4:f0:db:cd:c8:77:10:ee:
05:36:55:84:2b:8e:de:f1:6b:73:38:14:79:8a:f6:
e8:f7:b2:2c:d5:68:bd:f7:5d:57:55:09:9c:b7:94:
83:ed:a9:44:92:9f:83:c3:a9:0d:bb:ee:20:7e:6e:
47:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:EA:E0:4F:EF:04:41:4D:B9:49:2D:C0:13:3C:B9:8F:F5:5B:9E:3F
X509v3 Authority Key Identifier:
keyid:D5:A0:85:EB:95:AD:55:FB:3A:6B:24:7E:96:78:11:2A:14:D8:19:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1aCF65WtVfs6ayR-lngRKhTYGSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/94558a-2803-44c2-a772-f94adc1bbd90/1/1aCF65WtVfs6ayR-lngRKhTYGSY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/94558a-2803-44c2-a772-f94adc1bbd90/1/1aCF65WtVfs6ayR-lngRKhTYGSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
de:7e:6e:bd:68:a3:8a:43:b0:15:8b:b2:96:29:0b:26:27:13:
62:7a:b1:9a:d4:57:6e:5b:72:0f:c7:84:20:fc:44:f8:53:5d:
71:92:c2:b4:60:3f:d9:98:ec:e1:99:ef:18:c5:48:b1:05:58:
69:2d:72:0c:f5:a7:a6:1f:79:aa:c0:6e:bd:62:35:2d:91:8f:
21:46:d4:cc:62:da:83:ba:67:25:54:8a:48:ae:bc:b8:f9:bc:
68:e2:b1:e0:04:5b:cd:2e:15:b0:71:bb:96:c2:1d:b9:ba:9d:
4f:3c:a3:01:f8:af:d9:74:fe:dc:2a:71:7f:61:75:91:93:5b:
15:68:4f:2c:a1:e1:85:2c:d6:15:78:f9:1c:01:42:15:ea:93:
7e:9c:58:d9:35:21:c7:08:70:fd:50:26:12:b7:7b:a5:a7:0a:
3e:09:84:f4:ef:cc:d0:cf:d5:e7:b6:a9:43:0b:bb:4f:6b:ba:
ba:75:6f:d6:84:47:da:3d:31:ea:dd:d5:60:a1:1c:44:8d:35:
dd:05:d2:97:8f:ce:13:e0:80:57:59:80:32:93:f6:97:47:27:
9c:b4:50:94:4a:52:a5:08:62:a9:46:19:c4:3e:6d:a7:00:e9:
c9:56:12:51:5d:c2:da:d6:2e:7c:60:95:9b:15:ac:8b:74:64:
cc:ac:f7:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+RvhGaFPP///whfYSDje4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1YTA4NWViOTVhZDU1ZmIzYTZiMjQ3ZTk2NzgxMTJhMTRk
ODE5MjYwHhcNMjUxMDE5MjEwMTI3WhcNMjUxMDIwMjEwMTI3WjAzMTEwLwYDVQQD
Eyg0ZGVhZTA0ZmVmMDQ0MTRkYjk0OTJkYzAxMzNjYjk4ZmY1NWI5ZTNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi5Rq/fwCbOwTzMdqzcCd7RLeoHrK
RFJPZPCXurJJsiTMuaLHFPezizF5dZW5weqle7PDvhM2tImexQPW67Sl9jJAkL2k
Pc440INdhXZvpRSTrnZCiOtxiUYa8ZJpIXig5WpDxcqKg+guIgkGVY6c2RU65bsb
Gz6/sCGxlX5g6wzZxTHWU4SNR//wPVo1CnknAULCSxEtbEc1dJuzzvACHrbyBJcU
rpDpK/un/pb973DxiEztWD+DmnvOGiSadk2C7pR4jYoLenbdpPDbzch3EO4FNlWE
K47e8WtzOBR5ivbo97Is1Wi9911XVQmct5SD7alEkp+Dw6kNu+4gfm5H/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE3q4E/vBEFNuUktwBM8uY/1W54/MB8GA1UdIwQY
MBaAFNWgheuVrVX7OmskfpZ4ESoU2BkmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWFDRjY1V3RWZnM2YXlSLWxuZ1JLaFRZR1NZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi85NDU1OGEtMjgwMy00NGMyLWE3NzIt
Zjk0YWRjMWJiZDkwLzEvMWFDRjY1V3RWZnM2YXlSLWxuZ1JLaFRZR1NZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi85NDU1OGEtMjgwMy00NGMyLWE3NzItZjk0YWRjMWJiZDkw
LzEvMWFDRjY1V3RWZnM2YXlSLWxuZ1JLaFRZR1NZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3n5uvWij
ikOwFYuylikLJicTYnqxmtRXbltyD8eEIPxE+FNdcZLCtGA/2Zjs4ZnvGMVIsQVY
aS1yDPWnph95qsBuvWI1LZGPIUbUzGLag7pnJVSKSK68uPm8aOKx4ARbzS4VsHG7
lsIdubqdTzyjAfiv2XT+3Cpxf2F1kZNbFWhPLKHhhSzWFXj5HAFCFeqTfpxY2TUh
xwhw/VAmErd7pacKPgmE9O/M0M/V57apQwu7T2u6unVv1oRH2j0x6t3VYKEcRI01
3QXSl4/OE+CAV1mAMpP2l0cnnLRQlEpSpQhiqUYZxD5tpwDpyVYSUV3C2tYufGCV
mxWsi3RkzKz3pQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 06:59:10 2025 by rpki-client