Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/1b55cf-be94-49ad-9eb8-9db3d44c6d2f/1/1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.mft
File: 1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.mft (raw, json)
Hash identifier: NikdjwVfC3zayuFDHKoIpH3NBTGWHsql2TZ0imk3JL8=
Subject key identifier: BF:07:C3:A9:A6:7D:AE:FB:E0:EF:63:B7:E7:54:D9:B2:D2:05:19:61
Authority key identifier: F8:CA:A7:97:B9:00:FC:35:5F:C2:41:24:67:75:1E:EB:2C:1C:64:BE
Certificate issuer: /CN=f8caa797b900fc355fc2412467751eeb2c1c64be
Certificate serial: 0199FC58D51FB3A3477411BFD2C0AE091C2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/1b55cf-be94-49ad-9eb8-9db3d44c6d2f/1/1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.mft
Manifest number: 120F
Signing time: Sun 19 Oct 2025 12:01:44 +0000
Manifest this update: Sun 19 Oct 2025 12:01:44 +0000
Manifest next update: Mon 20 Oct 2025 12:01:44 +0000
Files and hashes: 1: 1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.crl (hash: AXDtKcayD8COt+JEolHHVm4OEOFKb2kTTh+v1lQKJzE=)
2: hFyZQJl9hpSR8MJm5zkkVJyeSKs.roa (hash: dBm/3kMdhPMhsMOkCigtCWUETZQaJ96SgQ6JbE9wZAg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/1b55cf-be94-49ad-9eb8-9db3d44c6d2f/1/1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/1b55cf-be94-49ad-9eb8-9db3d44c6d2f/1/1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:d5:1f:b3:a3:47:74:11:bf:d2:c0:ae:09:1c:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8caa797b900fc355fc2412467751eeb2c1c64be
Validity
Not Before: Oct 19 12:01:44 2025 GMT
Not After : Oct 20 12:01:44 2025 GMT
Subject: CN=bf07c3a9a67daefbe0ef63b7e754d9b2d2051961
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:fe:b6:8f:22:8f:d9:21:87:77:03:f0:e0:d3:
e4:a5:ea:42:88:4f:e7:5d:88:24:54:68:73:ad:18:
a6:18:58:40:7b:d0:09:93:c0:e6:1c:88:ce:27:ff:
43:f1:33:7e:84:5f:1e:cc:99:36:36:db:18:d3:c2:
e4:b5:68:21:31:d9:61:65:1a:7f:b9:fc:12:6a:ea:
68:62:cf:1f:d9:23:a6:12:67:32:cc:0f:1b:9c:85:
b7:19:b6:f4:02:ff:a9:51:d6:51:8f:0b:87:80:27:
80:c6:0b:eb:b3:0a:8e:d8:78:47:26:13:9c:09:48:
f3:78:26:c5:08:3c:25:36:e6:df:41:7a:6a:cb:7f:
53:bd:dd:c9:59:dd:01:02:a2:a8:73:f6:18:2d:6b:
9c:8c:7c:1a:f2:2d:65:c2:c9:ac:a0:85:1c:22:73:
4f:b7:46:14:a3:47:08:42:93:8d:73:c5:0a:4f:e9:
d4:b1:da:05:a2:58:c4:c9:fd:44:e5:ab:14:e4:92:
92:e9:ad:79:da:5c:2e:1f:b3:50:2d:31:bd:84:a5:
5d:d0:69:27:95:c9:23:a9:94:1a:7e:af:7f:95:28:
1d:b9:6d:da:45:c8:cd:6e:1b:c0:9b:08:52:12:c9:
2d:92:3c:4f:cc:eb:e0:3f:d1:b5:8e:3b:1f:1c:71:
a4:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:07:C3:A9:A6:7D:AE:FB:E0:EF:63:B7:E7:54:D9:B2:D2:05:19:61
X509v3 Authority Key Identifier:
keyid:F8:CA:A7:97:B9:00:FC:35:5F:C2:41:24:67:75:1E:EB:2C:1C:64:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/1b55cf-be94-49ad-9eb8-9db3d44c6d2f/1/1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/1b55cf-be94-49ad-9eb8-9db3d44c6d2f/1/1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:f0:3b:72:54:f7:34:10:71:15:fe:cd:88:b7:4c:ab:8a:7d:
e5:24:5a:95:d6:5e:ee:ec:eb:10:92:b1:75:1f:6c:0c:ce:47:
d6:cd:0a:08:80:88:d1:09:da:cd:c9:0e:f7:79:8f:0d:1c:fd:
68:c5:6a:d5:62:34:47:d5:6c:db:9e:e1:0d:77:3a:8a:3a:6d:
53:9f:b8:a0:99:5b:63:53:de:f1:ab:ed:a6:32:61:1d:c9:39:
f7:7f:10:7b:66:a7:fe:89:52:8e:33:d6:2a:04:fb:5f:7c:d1:
59:16:10:33:c7:a8:22:f9:bc:2d:a1:e4:42:c3:1d:06:b5:ac:
b2:18:94:07:f7:46:4a:72:6a:7f:b3:df:2c:4f:cb:03:8a:2b:
7c:94:37:9d:48:f6:1b:0a:b6:45:57:29:6a:fa:5e:2f:c3:74:
a2:17:a8:dc:15:fc:a7:df:91:86:1a:86:b4:51:67:c0:3d:5b:
25:6a:f5:c2:00:62:43:ba:c5:dd:86:41:6c:37:21:f3:71:cd:
47:c5:4c:fb:cf:34:b0:07:3a:75:ba:0e:f3:42:21:28:1a:db:
b9:ef:23:25:ea:87:e5:76:74:9f:44:21:9f:be:3b:af:fd:43:
52:a3:2b:2e:a9:73:92:9a:42:b4:fc:0b:39:cb:43:60:0b:0e:
c1:ed:49:88
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZn8WNUfs6NHdBG/0sCuCRwqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4Y2FhNzk3YjkwMGZjMzU1ZmMyNDEyNDY3NzUxZWViMmMx
YzY0YmUwHhcNMjUxMDE5MTIwMTQ0WhcNMjUxMDIwMTIwMTQ0WjAzMTEwLwYDVQQD
EyhiZjA3YzNhOWE2N2RhZWZiZTBlZjYzYjdlNzU0ZDliMmQyMDUxOTYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyf62jyKP2SGHdwPw4NPkpepCiE/n
XYgkVGhzrRimGFhAe9AJk8DmHIjOJ/9D8TN+hF8ezJk2NtsY08LktWghMdlhZRp/
ufwSaupoYs8f2SOmEmcyzA8bnIW3Gbb0Av+pUdZRjwuHgCeAxgvrswqO2HhHJhOc
CUjzeCbFCDwlNubfQXpqy39Tvd3JWd0BAqKoc/YYLWucjHwa8i1lwsmsoIUcInNP
t0YUo0cIQpONc8UKT+nUsdoFoljEyf1E5asU5JKS6a152lwuH7NQLTG9hKVd0Gkn
lckjqZQafq9/lSgduW3aRcjNbhvAmwhSEsktkjxPzOvgP9G1jjsfHHGkPQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFL8Hw6mmfa774O9jt+dU2bLSBRlhMB8GA1UdIwQY
MBaAFPjKp5e5APw1X8JBJGd1HussHGS+MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1NcW5sN2tBX0RWZndrRWtaM1VlNnl3Y1pMNC5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDcvMWI1NWNmLWJlOTQtNDlhZC05ZWI4
LTlkYjNkNDRjNmQyZi8xLzEtTXFubDdrQV9EVmZ3a0VrWjNVZTZ5d2NaTDQubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzQ3LzFiNTVjZi1iZTk0LTQ5YWQtOWViOC05ZGIzZDQ0YzZk
MmYvMS8xLU1xbmw3a0FfRFZmd2tFa1ozVWU2eXdjWkw0LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsfA7
clT3NBBxFf7NiLdMq4p95SRaldZe7uzrEJKxdR9sDM5H1s0KCICI0QnazckO93mP
DRz9aMVq1WI0R9Vs257hDXc6ijptU5+4oJlbY1Pe8avtpjJhHck5938Qe2an/olS
jjPWKgT7X3zRWRYQM8eoIvm8LaHkQsMdBrWsshiUB/dGSnJqf7PfLE/LA4orfJQ3
nUj2Gwq2RVcpavpeL8N0oheo3BX8p9+RhhqGtFFnwD1bJWr1wgBiQ7rF3YZBbDch
83HNR8VM+880sAc6dboO80IhKBrbue8jJeqH5XZ0n0Qhn747r/1DUqMrLqlzkppC
tPwLOctDYAsOwe1JiA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:08:19 2025 by rpki-client