Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.mft
File: 1n8Sg7Yw5YjLA5umUrkCmdcajng.mft (raw, json)
Hash identifier: SIsBZgABnUDjp7zUJbnrZczLzIFm0fTBANxYaUpfkiA=
Subject key identifier: 9D:9E:E2:A0:31:27:E7:99:7E:F4:1E:92:08:D6:D5:36:92:99:B5:BB
Authority key identifier: D6:7F:12:83:B6:30:E5:88:CB:03:9B:A6:52:B9:02:99:D7:1A:8E:78
Certificate issuer: /CN=d67f1283b630e588cb039ba652b90299d71a8e78
Certificate serial: 0199FA69E3AF0E02FD63DB40D2D95F810199
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1n8Sg7Yw5YjLA5umUrkCmdcajng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.mft
Manifest number: 07DF
Signing time: Sun 19 Oct 2025 03:01:07 +0000
Manifest this update: Sun 19 Oct 2025 03:01:07 +0000
Manifest next update: Mon 20 Oct 2025 03:01:07 +0000
Files and hashes: 1: 1n8Sg7Yw5YjLA5umUrkCmdcajng.crl (hash: U/q2/UqTwCXwekpkyA7fhfCrbnEaIVXRNifr718iagQ=)
2: Wl7dfPBMjzt7d3ARPHZzvBDvCz4.roa (hash: YXn3MdI9fbwK137bu2N/c5GjDCAVC9bePDhOy7NGC2E=)
3: ricnvXRyxBIr6uz7wJxhUxO5eB8.roa (hash: OF8ZMoVg6J5N7Pqa2nI+KUupYU9mKGD+TotlcQVJhhw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.mft
rsync://rpki.ripe.net/repository/DEFAULT/1n8Sg7Yw5YjLA5umUrkCmdcajng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 03:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:69:e3:af:0e:02:fd:63:db:40:d2:d9:5f:81:01:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d67f1283b630e588cb039ba652b90299d71a8e78
Validity
Not Before: Oct 19 03:01:07 2025 GMT
Not After : Oct 20 03:01:07 2025 GMT
Subject: CN=9d9ee2a03127e7997ef41e9208d6d5369299b5bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:82:0a:24:7f:d5:58:1c:e6:9d:2e:c9:9d:bd:
b2:54:5d:31:5e:6e:19:11:ac:7d:76:52:f8:d7:f4:
0a:9e:50:b6:91:65:f7:3a:47:2f:e8:c8:2e:03:b6:
f0:6b:ce:9f:34:51:6a:e7:b5:76:f1:bc:b2:2d:16:
f7:de:9f:68:81:6d:48:dc:f3:46:0d:d1:35:2b:31:
6b:bd:95:67:f6:24:ff:de:d4:cc:67:ce:04:ec:73:
b6:66:7c:97:44:4a:27:14:2a:e5:84:e6:58:48:fb:
0b:7a:f2:a3:5b:19:a9:44:20:71:e2:7a:76:0c:a6:
94:0d:eb:bd:45:c5:25:29:2a:b0:b9:fa:4a:95:28:
82:29:9d:b0:c1:56:26:86:61:a0:f8:28:22:42:64:
30:54:6b:c4:8d:95:39:34:db:b1:0a:ba:d3:20:f7:
d4:eb:cc:7a:29:75:15:58:2d:2b:68:17:84:9f:ca:
c7:94:32:d2:ef:d7:76:4f:9e:5e:f2:3e:37:35:8c:
d1:c7:f5:5f:ff:2b:50:95:2f:50:8d:e7:31:37:7a:
6e:0d:61:01:c2:2d:00:03:fb:a1:e7:1e:97:16:f0:
3d:eb:2f:b1:a7:52:fd:52:f4:a3:e8:e5:89:fe:ae:
88:8a:6d:cd:a0:b4:5b:7e:43:21:f0:97:18:14:b3:
d5:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:9E:E2:A0:31:27:E7:99:7E:F4:1E:92:08:D6:D5:36:92:99:B5:BB
X509v3 Authority Key Identifier:
keyid:D6:7F:12:83:B6:30:E5:88:CB:03:9B:A6:52:B9:02:99:D7:1A:8E:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1n8Sg7Yw5YjLA5umUrkCmdcajng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:82:9a:e2:79:e3:65:30:0b:94:32:76:f4:f2:86:0a:b5:38:
b2:76:ad:35:59:da:f6:77:a1:a2:24:39:2b:b4:f9:6c:e2:10:
c2:2d:e5:78:bd:34:79:6a:9f:e8:b7:ab:1f:61:72:bf:b1:81:
2c:c1:02:71:2b:0b:1e:da:67:1d:26:fc:de:dc:a6:fc:2f:5e:
c8:c7:4e:b6:e3:3b:a5:a3:2d:e0:37:ad:4c:32:b1:d0:79:c7:
e1:fb:c3:de:7c:41:49:fc:f1:0e:11:45:74:6b:16:7f:25:a9:
09:58:35:cd:41:12:24:c2:82:b8:b3:74:27:a3:da:8a:8e:2d:
1e:31:16:f7:09:1d:2d:de:a4:7e:be:f9:e2:9c:94:9c:dc:96:
92:29:04:c7:c1:bc:39:25:25:2f:f8:06:2c:e1:81:f4:c8:a7:
4a:af:7d:d2:ee:b4:38:8e:3b:32:c4:79:4b:42:48:40:e5:a3:
e1:58:3e:8c:4e:ad:dc:e7:d6:bd:d5:d0:cc:45:95:2c:be:b5:
98:53:f4:94:a9:10:02:01:91:19:98:18:b0:bd:ce:c6:fc:76:
84:b1:cf:74:31:25:9d:5e:08:46:93:0c:f7:69:b3:ea:94:44:
20:e7:e3:ae:17:3e:b8:32:dd:55:64:be:35:d3:c3:12:82:d3:
c8:8f:e6:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn6aeOvDgL9Y9tA0tlfgQGZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2N2YxMjgzYjYzMGU1ODhjYjAzOWJhNjUyYjkwMjk5ZDcx
YThlNzgwHhcNMjUxMDE5MDMwMTA3WhcNMjUxMDIwMDMwMTA3WjAzMTEwLwYDVQQD
Eyg5ZDllZTJhMDMxMjdlNzk5N2VmNDFlOTIwOGQ2ZDUzNjkyOTliNWJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyoIKJH/VWBzmnS7Jnb2yVF0xXm4Z
Eax9dlL41/QKnlC2kWX3Okcv6MguA7bwa86fNFFq57V28byyLRb33p9ogW1I3PNG
DdE1KzFrvZVn9iT/3tTMZ84E7HO2ZnyXREonFCrlhOZYSPsLevKjWxmpRCBx4np2
DKaUDeu9RcUlKSqwufpKlSiCKZ2wwVYmhmGg+CgiQmQwVGvEjZU5NNuxCrrTIPfU
68x6KXUVWC0raBeEn8rHlDLS79d2T55e8j43NYzRx/Vf/ytQlS9QjecxN3puDWEB
wi0AA/uh5x6XFvA96y+xp1L9UvSj6OWJ/q6Iim3NoLRbfkMh8JcYFLPVnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ2e4qAxJ+eZfvQekgjW1TaSmbW7MB8GA1UdIwQY
MBaAFNZ/EoO2MOWIywObplK5ApnXGo54MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMW44U2c3WXc1WWpMQTV1bVVya0NtZGNham5nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8yYTg2MGMtMTAwNS00NDIzLTk1YmQt
MzA3OWQ1ODhhYTk5LzEvMW44U2c3WXc1WWpMQTV1bVVya0NtZGNham5nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8yYTg2MGMtMTAwNS00NDIzLTk1YmQtMzA3OWQ1ODhhYTk5
LzEvMW44U2c3WXc1WWpMQTV1bVVya0NtZGNham5nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArYKa4nnj
ZTALlDJ29PKGCrU4snatNVna9nehoiQ5K7T5bOIQwi3leL00eWqf6LerH2Fyv7GB
LMECcSsLHtpnHSb83tym/C9eyMdOtuM7paMt4DetTDKx0HnH4fvD3nxBSfzxDhFF
dGsWfyWpCVg1zUESJMKCuLN0J6Paio4tHjEW9wkdLd6kfr754pyUnNyWkikEx8G8
OSUlL/gGLOGB9MinSq990u60OI47MsR5S0JIQOWj4Vg+jE6t3OfWvdXQzEWVLL61
mFP0lKkQAgGRGZgYsL3Oxvx2hLHPdDElnV4IRpMM92mz6pREIOfjrhc+uDLdVWS+
NdPDEoLTyI/mOQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:01:17 2025 by rpki-client