Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/98a8b9-8e99-4db3-b061-e9230e588626/1/rLwtpPrHe7qtKaWYa0EH9THtLj4.mft
File: rLwtpPrHe7qtKaWYa0EH9THtLj4.mft (raw, json)
Hash identifier: emw3QVEhjCh9VOJpVwjaU1JaVVSMMO9l1XPRMLVf1J0=
Subject key identifier: C5:58:FC:9F:62:A7:2A:40:63:A9:8E:E6:E6:9C:2D:51:70:C1:3E:75
Authority key identifier: AC:BC:2D:A4:FA:C7:7B:BA:AD:29:A5:98:6B:41:07:F5:31:ED:2E:3E
Certificate issuer: /CN=acbc2da4fac77bbaad29a5986b4107f531ed2e3e
Certificate serial: 0199FCC63D78F0DBE8292B050B646AA39780
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rLwtpPrHe7qtKaWYa0EH9THtLj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/98a8b9-8e99-4db3-b061-e9230e588626/1/rLwtpPrHe7qtKaWYa0EH9THtLj4.mft
Manifest number: 1598
Signing time: Sun 19 Oct 2025 14:01:14 +0000
Manifest this update: Sun 19 Oct 2025 14:01:14 +0000
Manifest next update: Mon 20 Oct 2025 14:01:14 +0000
Files and hashes: 1: idTCOx8-4Tst-Qoz7K6F7H3dYN4.roa (hash: arkT/3jnb38g6YOrTZp9aafP6pWkmdDHWiUSBAjozQo=)
2: rLwtpPrHe7qtKaWYa0EH9THtLj4.crl (hash: 136ckCl/phGvtcM4aW5R0PYL9iHPQ+l9PXxVYJjWMKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/98a8b9-8e99-4db3-b061-e9230e588626/1/rLwtpPrHe7qtKaWYa0EH9THtLj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/98a8b9-8e99-4db3-b061-e9230e588626/1/rLwtpPrHe7qtKaWYa0EH9THtLj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rLwtpPrHe7qtKaWYa0EH9THtLj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:3d:78:f0:db:e8:29:2b:05:0b:64:6a:a3:97:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acbc2da4fac77bbaad29a5986b4107f531ed2e3e
Validity
Not Before: Oct 19 14:01:14 2025 GMT
Not After : Oct 20 14:01:14 2025 GMT
Subject: CN=c558fc9f62a72a4063a98ee6e69c2d5170c13e75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:68:0d:ca:fd:20:ae:dc:a6:fd:d4:7e:7b:9a:
97:7d:20:67:4b:45:b0:af:8a:74:43:a7:f3:54:4d:
a3:b8:1d:f1:b1:0e:2a:d7:2f:93:04:57:9a:0f:ed:
bc:5e:9d:b9:6f:9f:3d:1f:3c:53:40:45:6b:96:c3:
59:a5:f8:fc:4a:00:0e:c5:54:8e:4f:06:b7:5d:9a:
24:f7:2f:e7:56:b2:68:40:37:14:07:33:3f:ba:66:
c4:bd:4c:31:0f:ab:0a:3a:57:c2:45:2b:88:49:e3:
de:6a:3c:1a:52:13:e8:cb:ee:36:72:43:65:c0:33:
b1:3e:6b:60:39:f0:eb:b8:06:29:df:a8:6e:05:e7:
b2:1b:10:e1:9b:c9:a5:f1:c2:83:97:34:9e:72:42:
f4:80:a1:ef:67:fa:54:12:a9:4e:5b:2c:c1:23:3a:
f8:6a:bd:a6:ff:15:83:78:cd:c3:cb:2e:5e:a0:78:
4c:68:ed:63:f2:6a:5f:08:2d:33:88:a4:47:57:89:
29:ff:01:bc:ca:e6:b7:94:5e:d3:b2:f8:d7:63:b5:
c5:c0:b5:32:f4:64:d8:2a:36:32:e1:b7:ee:9e:43:
bf:12:a5:67:da:49:0e:16:00:fa:1b:df:49:a5:80:
c0:06:9d:e4:f2:dc:18:d0:60:9e:c3:88:04:45:71:
a0:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:58:FC:9F:62:A7:2A:40:63:A9:8E:E6:E6:9C:2D:51:70:C1:3E:75
X509v3 Authority Key Identifier:
keyid:AC:BC:2D:A4:FA:C7:7B:BA:AD:29:A5:98:6B:41:07:F5:31:ED:2E:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rLwtpPrHe7qtKaWYa0EH9THtLj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/98a8b9-8e99-4db3-b061-e9230e588626/1/rLwtpPrHe7qtKaWYa0EH9THtLj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/98a8b9-8e99-4db3-b061-e9230e588626/1/rLwtpPrHe7qtKaWYa0EH9THtLj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:9f:8d:c0:38:5c:1c:98:0a:09:5a:0f:b1:d9:d1:3d:3e:fc:
de:69:48:19:fa:82:be:79:b9:88:ad:3f:e6:10:41:8c:1e:6f:
b1:72:ff:40:d6:80:7e:60:8f:1d:b5:5b:eb:e3:0e:a9:c4:ca:
a5:59:0d:b6:5d:80:81:54:09:fb:a0:0a:e3:1c:45:26:2b:7e:
9c:32:74:77:d6:93:fe:52:da:cb:ac:69:77:84:ed:c2:9f:b4:
12:00:4d:b0:86:93:db:42:d3:4f:fb:0b:6d:5f:4f:dd:02:07:
41:ec:1b:ff:38:46:5f:1f:4c:7c:e3:ba:6a:6e:1e:ba:3e:af:
f4:65:f7:1a:c8:61:94:63:b8:7f:7f:49:40:71:60:b3:84:cd:
7d:94:cb:ee:81:9a:40:5f:54:14:05:da:29:4b:06:69:f4:3c:
23:17:22:84:4a:20:b8:45:c3:0b:06:47:e6:94:21:9d:ac:79:
d2:db:6a:46:57:c4:89:7e:73:7d:13:8d:3d:8d:0e:08:22:7e:
b3:8b:0f:2b:45:de:9e:e7:a0:78:c3:bf:f2:fb:58:6d:4e:f0:
54:78:df:9a:70:0b:82:0f:f0:fa:6b:33:ed:fb:36:ac:dd:46:
08:bc:23:d9:6d:1f:18:1b:ca:af:fa:74:b1:90:76:b5:f0:a3:
47:7f:23:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8xj148NvoKSsFC2Rqo5eAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjYmMyZGE0ZmFjNzdiYmFhZDI5YTU5ODZiNDEwN2Y1MzFl
ZDJlM2UwHhcNMjUxMDE5MTQwMTE0WhcNMjUxMDIwMTQwMTE0WjAzMTEwLwYDVQQD
EyhjNTU4ZmM5ZjYyYTcyYTQwNjNhOThlZTZlNjljMmQ1MTcwYzEzZTc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0WgNyv0grtym/dR+e5qXfSBnS0Ww
r4p0Q6fzVE2juB3xsQ4q1y+TBFeaD+28Xp25b589HzxTQEVrlsNZpfj8SgAOxVSO
Twa3XZok9y/nVrJoQDcUBzM/umbEvUwxD6sKOlfCRSuISePeajwaUhPoy+42ckNl
wDOxPmtgOfDruAYp36huBeeyGxDhm8ml8cKDlzSeckL0gKHvZ/pUEqlOWyzBIzr4
ar2m/xWDeM3Dyy5eoHhMaO1j8mpfCC0ziKRHV4kp/wG8yua3lF7TsvjXY7XFwLUy
9GTYKjYy4bfunkO/EqVn2kkOFgD6G99JpYDABp3k8twY0GCew4gERXGg5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMVY/J9ipypAY6mO5uacLVFwwT51MB8GA1UdIwQY
MBaAFKy8LaT6x3u6rSmlmGtBB/Ux7S4+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckx3dHBQckhlN3F0S2FXWWEwRUg5VEh0TGo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS85OGE4YjktOGU5OS00ZGIzLWIwNjEt
ZTkyMzBlNTg4NjI2LzEvckx3dHBQckhlN3F0S2FXWWEwRUg5VEh0TGo0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS85OGE4YjktOGU5OS00ZGIzLWIwNjEtZTkyMzBlNTg4NjI2
LzEvckx3dHBQckhlN3F0S2FXWWEwRUg5VEh0TGo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0p+NwDhc
HJgKCVoPsdnRPT783mlIGfqCvnm5iK0/5hBBjB5vsXL/QNaAfmCPHbVb6+MOqcTK
pVkNtl2AgVQJ+6AK4xxFJit+nDJ0d9aT/lLay6xpd4Ttwp+0EgBNsIaT20LTT/sL
bV9P3QIHQewb/zhGXx9MfOO6am4euj6v9GX3GshhlGO4f39JQHFgs4TNfZTL7oGa
QF9UFAXaKUsGafQ8IxcihEoguEXDCwZH5pQhnax50ttqRlfEiX5zfRONPY0OCCJ+
s4sPK0XenuegeMO/8vtYbU7wVHjfmnALgg/w+msz7fs2rN1GCLwj2W0fGBvKr/p0
sZB2tfCjR38jXA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:32:40 2025 by rpki-client