Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/g34Xf3ZmMWbHUZDi0gkzWmquWs4.mft
File: g34Xf3ZmMWbHUZDi0gkzWmquWs4.mft (raw, json)
Hash identifier: ro9GJPX8XTdt9IChZTnKgJVJ5favfPivxesXE6vEeT8=
Subject key identifier: 49:3C:F6:27:1E:10:35:50:8A:09:13:24:72:7C:3A:2E:12:91:8A:3D
Authority key identifier: 83:7E:17:7F:76:66:31:66:C7:51:90:E2:D2:09:33:5A:6A:AE:5A:CE
Certificate issuer: /CN=837e177f76663166c75190e2d209335a6aae5ace
Certificate serial: 0199FC8F4DE39BA1706D7075E30E4AEBE4F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g34Xf3ZmMWbHUZDi0gkzWmquWs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/g34Xf3ZmMWbHUZDi0gkzWmquWs4.mft
Manifest number: 1048
Signing time: Sun 19 Oct 2025 13:01:13 +0000
Manifest this update: Sun 19 Oct 2025 13:01:13 +0000
Manifest next update: Mon 20 Oct 2025 13:01:13 +0000
Files and hashes: 1: g34Xf3ZmMWbHUZDi0gkzWmquWs4.crl (hash: wOLbph7pF0AtjZtHFuTKbaeKcQwERZhV8HVOPRE3ZRA=)
2: q_rL_wFzPAM2YYi3BD5DV-movBM.roa (hash: /Sn84qQYAJwMH4nFNeAxdZuxTOPDKe5EpdIqdCovILg=)
3: rsYfCDwusLsrJbhFacpTz-HDjfU.roa (hash: O6JB/ggb5jt1mvOF+3NkLkH3JGPJ5nijBG0kU9AI6Fo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/g34Xf3ZmMWbHUZDi0gkzWmquWs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/g34Xf3ZmMWbHUZDi0gkzWmquWs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/g34Xf3ZmMWbHUZDi0gkzWmquWs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:4d:e3:9b:a1:70:6d:70:75:e3:0e:4a:eb:e4:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=837e177f76663166c75190e2d209335a6aae5ace
Validity
Not Before: Oct 19 13:01:13 2025 GMT
Not After : Oct 20 13:01:13 2025 GMT
Subject: CN=493cf6271e1035508a091324727c3a2e12918a3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e8:5f:b6:bd:05:5a:5c:a8:4b:ee:e0:95:24:
f2:70:98:c3:f5:4a:99:3e:97:2a:68:51:48:ca:dc:
6a:56:a0:3d:f3:51:bc:22:f4:59:6e:c8:9f:f8:f9:
a1:6f:17:8e:58:e2:46:17:12:d2:d6:b3:f0:a8:d1:
77:80:6b:18:f9:3e:bf:ec:22:80:72:c2:c4:2f:83:
3b:11:19:30:bf:32:74:52:d7:ce:74:db:53:25:ab:
c4:ff:dd:7c:c9:7f:7f:31:49:36:53:a9:2a:e7:0e:
a2:fe:9d:b2:8f:fa:1b:49:63:ec:c9:40:60:50:d7:
57:dc:a0:71:c2:80:98:7a:6d:3b:c8:2c:5a:da:69:
48:cb:6f:29:af:2c:6a:1f:4a:6f:7b:1f:df:a1:0f:
71:5e:2b:95:5f:4c:33:44:2c:2d:d0:5d:8c:8b:76:
cc:df:c0:74:2b:bf:bb:e5:b0:8b:a0:09:fb:1c:4b:
f1:00:5d:40:04:af:97:9f:48:05:f3:8d:54:e1:e9:
55:33:f7:5d:2a:1d:34:7d:af:54:0b:cd:8a:f8:84:
1b:a1:57:44:fb:bd:53:1c:c4:d7:7d:a8:a8:15:61:
16:61:28:38:83:09:e5:97:11:e1:4e:6f:8c:cd:d5:
2c:c5:4f:2e:ea:17:8d:94:3b:00:0f:7f:fd:0a:9a:
56:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:3C:F6:27:1E:10:35:50:8A:09:13:24:72:7C:3A:2E:12:91:8A:3D
X509v3 Authority Key Identifier:
keyid:83:7E:17:7F:76:66:31:66:C7:51:90:E2:D2:09:33:5A:6A:AE:5A:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g34Xf3ZmMWbHUZDi0gkzWmquWs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/g34Xf3ZmMWbHUZDi0gkzWmquWs4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/g34Xf3ZmMWbHUZDi0gkzWmquWs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:18:81:42:49:61:bf:f6:5a:af:6b:50:c3:7f:4a:88:61:2f:
12:f3:ff:82:1d:70:11:fb:e2:d7:09:95:70:49:d5:c3:b5:c1:
26:cb:85:bf:68:ff:d5:53:20:6e:45:e5:b6:0f:9b:d7:f6:cd:
c1:79:30:9d:c9:ae:22:3a:0c:19:d1:d5:e0:98:69:c3:69:ac:
4c:95:dc:df:90:1c:d2:bb:a9:2d:50:7e:71:fd:2c:8b:49:96:
27:ca:e7:f9:3a:3e:4f:41:22:50:e6:8b:c2:f2:20:bf:99:1a:
6e:19:34:70:e6:7c:d9:f7:92:e7:4e:1c:6a:9b:5a:77:71:30:
d3:e6:b9:30:3d:47:1c:aa:fb:89:26:a2:08:86:1b:30:e0:29:
98:c8:8e:96:81:f2:7a:6f:d8:ad:43:ac:f4:fc:2e:3e:d1:8e:
2c:25:c6:55:5a:1e:d7:1a:d8:ce:90:3b:3c:b3:b1:18:ea:a5:
17:fe:d2:9c:36:86:8b:95:89:97:68:9c:b1:b0:ab:0d:11:5d:
8e:a4:03:c2:41:f4:d9:94:ec:3f:bd:21:48:8e:c8:a8:62:b9:
cc:13:c0:28:c1:3c:95:22:e2:a0:31:c1:21:15:a2:bf:75:24:
ab:a7:38:ba:74:05:8d:d0:55:fd:97:80:b0:0b:d2:b2:78:ea:
30:5b:25:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8j03jm6FwbXB14w5K6+T3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzN2UxNzdmNzY2NjMxNjZjNzUxOTBlMmQyMDkzMzVhNmFh
ZTVhY2UwHhcNMjUxMDE5MTMwMTEzWhcNMjUxMDIwMTMwMTEzWjAzMTEwLwYDVQQD
Eyg0OTNjZjYyNzFlMTAzNTUwOGEwOTEzMjQ3MjdjM2EyZTEyOTE4YTNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+hftr0FWlyoS+7glSTycJjD9UqZ
PpcqaFFIytxqVqA981G8IvRZbsif+PmhbxeOWOJGFxLS1rPwqNF3gGsY+T6/7CKA
csLEL4M7ERkwvzJ0UtfOdNtTJavE/918yX9/MUk2U6kq5w6i/p2yj/obSWPsyUBg
UNdX3KBxwoCYem07yCxa2mlIy28pryxqH0pvex/foQ9xXiuVX0wzRCwt0F2Mi3bM
38B0K7+75bCLoAn7HEvxAF1ABK+Xn0gF841U4elVM/ddKh00fa9UC82K+IQboVdE
+71THMTXfaioFWEWYSg4gwnllxHhTm+MzdUsxU8u6heNlDsAD3/9CppWTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEk89iceEDVQigkTJHJ8Oi4SkYo9MB8GA1UdIwQY
MBaAFIN+F392ZjFmx1GQ4tIJM1pqrlrOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzM0WGYzWm1NV2JIVVpEaTBna3pXbXF1V3M0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My83MGMxOWYtMjljYS00YjYyLWFjNjIt
OGJhNzY4MDIyNzYzLzEvZzM0WGYzWm1NV2JIVVpEaTBna3pXbXF1V3M0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My83MGMxOWYtMjljYS00YjYyLWFjNjItOGJhNzY4MDIyNzYz
LzEvZzM0WGYzWm1NV2JIVVpEaTBna3pXbXF1V3M0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtRiBQklh
v/Zar2tQw39KiGEvEvP/gh1wEfvi1wmVcEnVw7XBJsuFv2j/1VMgbkXltg+b1/bN
wXkwncmuIjoMGdHV4Jhpw2msTJXc35Ac0rupLVB+cf0si0mWJ8rn+To+T0EiUOaL
wvIgv5kabhk0cOZ82feS504captad3Ew0+a5MD1HHKr7iSaiCIYbMOApmMiOloHy
em/YrUOs9PwuPtGOLCXGVVoe1xrYzpA7PLOxGOqlF/7SnDaGi5WJl2icsbCrDRFd
jqQDwkH02ZTsP70hSI7IqGK5zBPAKME8lSLioDHBIRWiv3Ukq6c4unQFjdBV/ZeA
sAvSsnjqMFslbg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:43:49 2025 by rpki-client