Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/cd4af6-b742-4cdc-b3a0-67a87d8a3b9b/1/1P3VliZ9VvfOVuv67IajJwj-3gA.mft
File: 1P3VliZ9VvfOVuv67IajJwj-3gA.mft (raw, json)
Hash identifier: E2Bthbb9K7ZsKKygvuhk+SoFZHATOUMAFt7ZS0qFYmw=
Subject key identifier: 6E:B5:82:60:41:38:0D:23:CE:0C:E5:4F:29:84:09:FF:69:70:CF:B7
Authority key identifier: D4:FD:D5:96:26:7D:56:F7:CE:56:EB:FA:EC:86:A3:27:08:FE:DE:00
Certificate issuer: /CN=d4fdd596267d56f7ce56ebfaec86a32708fede00
Certificate serial: 0199FBEBA67CA1AD1A4D425F60052A46BD00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1P3VliZ9VvfOVuv67IajJwj-3gA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/cd4af6-b742-4cdc-b3a0-67a87d8a3b9b/1/1P3VliZ9VvfOVuv67IajJwj-3gA.mft
Manifest number: 16E8
Signing time: Sun 19 Oct 2025 10:02:28 +0000
Manifest this update: Sun 19 Oct 2025 10:02:28 +0000
Manifest next update: Mon 20 Oct 2025 10:02:28 +0000
Files and hashes: 1: 1P3VliZ9VvfOVuv67IajJwj-3gA.crl (hash: GgkSvYTHfsKiJJzFfUV373clHy/G3qCh9pCkO0lqZAs=)
2: kXAoycjFnk5ToJYqqTkBxzOraGU.roa (hash: +7rp8yWmgsLGmzgq1w+1h/kN+7iJKvOfloIbj12Qykg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/cd4af6-b742-4cdc-b3a0-67a87d8a3b9b/1/1P3VliZ9VvfOVuv67IajJwj-3gA.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/cd4af6-b742-4cdc-b3a0-67a87d8a3b9b/1/1P3VliZ9VvfOVuv67IajJwj-3gA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1P3VliZ9VvfOVuv67IajJwj-3gA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:a6:7c:a1:ad:1a:4d:42:5f:60:05:2a:46:bd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4fdd596267d56f7ce56ebfaec86a32708fede00
Validity
Not Before: Oct 19 10:02:28 2025 GMT
Not After : Oct 20 10:02:28 2025 GMT
Subject: CN=6eb5826041380d23ce0ce54f298409ff6970cfb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:e1:93:44:c0:dd:80:0d:4f:f2:32:f0:4b:0d:
6f:18:a9:77:78:2f:7d:a2:3b:d9:9a:67:48:1a:cc:
5a:ca:d7:46:8e:a7:54:d3:27:8d:83:ec:7b:e9:2e:
99:2b:08:33:60:97:07:79:8e:85:0c:94:34:24:d5:
91:a8:93:9d:e0:ff:a6:b6:67:15:06:5c:74:6e:b2:
f7:64:7b:e6:c5:79:fe:f3:72:2e:03:01:88:af:ea:
3a:7d:29:de:aa:64:28:b7:7e:46:d9:1e:55:ed:28:
e7:46:0e:78:c0:18:ae:02:44:f4:ed:17:e3:dc:1f:
71:73:d8:e7:6e:b4:83:23:41:29:c9:de:e4:32:75:
61:95:00:53:45:94:66:af:3a:38:7f:ed:62:d5:09:
01:fb:f3:02:f8:05:12:97:a4:94:80:14:70:f4:50:
31:7b:1e:1a:e5:cf:40:72:c7:22:86:f3:c6:9d:1b:
c4:58:66:b7:8e:23:e3:9e:75:ea:42:34:cb:7a:cb:
b6:e3:9d:0c:2e:74:e3:0b:d3:7d:6a:cc:f4:0e:df:
e0:fc:cc:91:42:08:99:d7:79:90:65:76:42:f5:b6:
6e:58:ec:20:d2:5f:0d:5a:3b:b7:1d:9f:34:d1:a6:
95:b5:7b:12:90:4f:f1:7b:a3:84:d9:a5:90:86:b3:
19:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:B5:82:60:41:38:0D:23:CE:0C:E5:4F:29:84:09:FF:69:70:CF:B7
X509v3 Authority Key Identifier:
keyid:D4:FD:D5:96:26:7D:56:F7:CE:56:EB:FA:EC:86:A3:27:08:FE:DE:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1P3VliZ9VvfOVuv67IajJwj-3gA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/cd4af6-b742-4cdc-b3a0-67a87d8a3b9b/1/1P3VliZ9VvfOVuv67IajJwj-3gA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/cd4af6-b742-4cdc-b3a0-67a87d8a3b9b/1/1P3VliZ9VvfOVuv67IajJwj-3gA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:52:e2:e8:7f:17:8a:59:7f:52:90:53:81:5f:32:e1:32:55:
df:cf:61:25:87:b1:cb:80:4a:de:40:ec:78:22:f9:4b:8a:38:
d9:16:94:56:c0:ca:51:a6:27:49:2c:37:38:98:f0:d1:45:f5:
9a:e1:47:37:31:d5:81:71:4b:cb:f7:a3:29:e5:86:3e:92:b4:
57:fd:43:db:67:5c:f6:6f:3a:18:93:ef:6b:a4:c9:cc:c8:b3:
58:2e:bc:41:de:45:98:8f:32:ce:08:ec:04:b1:13:b9:b9:ce:
54:5f:b5:18:92:88:75:4b:42:73:fa:f2:e9:92:30:7c:cc:fc:
dd:48:d2:cd:7e:e7:5b:ed:95:40:e3:42:c2:50:f2:bb:ad:a9:
f2:6e:e9:be:bf:a4:f6:ae:24:49:8b:9c:97:36:f2:f8:62:a3:
56:5c:07:57:1e:e7:91:94:9a:17:df:80:eb:2d:f0:32:65:04:
92:67:b4:ce:37:03:89:38:ec:3a:8f:b1:9d:82:08:96:91:b5:
7b:85:1d:8f:bb:b3:a7:8e:be:f8:a6:41:08:16:aa:ba:79:4e:
20:4d:56:68:4a:4f:93:30:ef:a5:55:97:f2:f8:44:1c:2a:73:
59:70:ab:53:56:55:21:71:5b:9c:96:c7:ac:6b:2d:44:5f:d8:
b7:6e:ec:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn766Z8oa0aTUJfYAUqRr0AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0ZmRkNTk2MjY3ZDU2ZjdjZTU2ZWJmYWVjODZhMzI3MDhm
ZWRlMDAwHhcNMjUxMDE5MTAwMjI4WhcNMjUxMDIwMTAwMjI4WjAzMTEwLwYDVQQD
Eyg2ZWI1ODI2MDQxMzgwZDIzY2UwY2U1NGYyOTg0MDlmZjY5NzBjZmI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2OGTRMDdgA1P8jLwSw1vGKl3eC99
ojvZmmdIGsxaytdGjqdU0yeNg+x76S6ZKwgzYJcHeY6FDJQ0JNWRqJOd4P+mtmcV
Blx0brL3ZHvmxXn+83IuAwGIr+o6fSneqmQot35G2R5V7SjnRg54wBiuAkT07Rfj
3B9xc9jnbrSDI0Epyd7kMnVhlQBTRZRmrzo4f+1i1QkB+/MC+AUSl6SUgBRw9FAx
ex4a5c9AcscihvPGnRvEWGa3jiPjnnXqQjTLesu2450MLnTjC9N9asz0Dt/g/MyR
QgiZ13mQZXZC9bZuWOwg0l8NWju3HZ800aaVtXsSkE/xe6OE2aWQhrMZfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG61gmBBOA0jzgzlTymECf9pcM+3MB8GA1UdIwQY
MBaAFNT91ZYmfVb3zlbr+uyGoycI/t4AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVAzVmxpWjlWdmZPVnV2NjdJYWpKd2otM2dBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9jZDRhZjYtYjc0Mi00Y2RjLWIzYTAt
NjdhODdkOGEzYjliLzEvMVAzVmxpWjlWdmZPVnV2NjdJYWpKd2otM2dBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS9jZDRhZjYtYjc0Mi00Y2RjLWIzYTAtNjdhODdkOGEzYjli
LzEvMVAzVmxpWjlWdmZPVnV2NjdJYWpKd2otM2dBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk1Li6H8X
ill/UpBTgV8y4TJV389hJYexy4BK3kDseCL5S4o42RaUVsDKUaYnSSw3OJjw0UX1
muFHNzHVgXFLy/ejKeWGPpK0V/1D22dc9m86GJPva6TJzMizWC68Qd5FmI8yzgjs
BLETubnOVF+1GJKIdUtCc/ry6ZIwfMz83UjSzX7nW+2VQONCwlDyu62p8m7pvr+k
9q4kSYuclzby+GKjVlwHVx7nkZSaF9+A6y3wMmUEkme0zjcDiTjsOo+xnYIIlpG1
e4Udj7uzp46++KZBCBaqunlOIE1WaEpPkzDvpVWX8vhEHCpzWXCrU1ZVIXFbnJbH
rGstRF/Yt27skg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:01:08 2025 by rpki-client