Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/d3bfe6-78b5-437b-98e9-b914159ba8ad/1/1-nC0LXr2rXgiKzDwXyt5E_gGNXA.mft
File: 1-nC0LXr2rXgiKzDwXyt5E_gGNXA.mft (raw, json)
Hash identifier: lrejwujg1nNSHTG21GNShg3hiM//wofRX4Ef0soYom4=
Subject key identifier: BC:6E:75:E5:1F:07:E6:D9:5B:2B:A4:15:70:BA:FF:D2:A8:92:CB:91
Authority key identifier: FA:70:B4:2D:7A:F6:AD:78:22:2B:30:F0:5F:2B:79:13:F8:06:35:70
Certificate issuer: /CN=fa70b42d7af6ad78222b30f05f2b7913f8063570
Certificate serial: 0199FDD8DDF247B999745646A0917F6460CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-nC0LXr2rXgiKzDwXyt5E_gGNXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/d3bfe6-78b5-437b-98e9-b914159ba8ad/1/1-nC0LXr2rXgiKzDwXyt5E_gGNXA.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 19:01:12 +0000
Manifest this update: Sun 19 Oct 2025 19:01:12 +0000
Manifest next update: Mon 20 Oct 2025 19:01:12 +0000
Files and hashes: 1: 1-nC0LXr2rXgiKzDwXyt5E_gGNXA.crl (hash: wegSRpPf9SWtzuGvnO49kCRPW1hKI60mGbbKNya2wPQ=)
2: KK6CnYNVLgkO9qFyFOT9UGvXJYI.roa (hash: ZHlrP8V5BtXECEdhL9eJuVBZKLMvwmVQC0U5b4cXw08=)
3: o5N_jAG9g_aL4MkwpX9OBq0Dy-k.roa (hash: M8ydZ1fG/pikMq2g2Lj2Oo2CSVv2VUo2aqU5TzG0PFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/d3bfe6-78b5-437b-98e9-b914159ba8ad/1/1-nC0LXr2rXgiKzDwXyt5E_gGNXA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/d3bfe6-78b5-437b-98e9-b914159ba8ad/1/1-nC0LXr2rXgiKzDwXyt5E_gGNXA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-nC0LXr2rXgiKzDwXyt5E_gGNXA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d8:dd:f2:47:b9:99:74:56:46:a0:91:7f:64:60:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa70b42d7af6ad78222b30f05f2b7913f8063570
Validity
Not Before: Oct 19 19:01:12 2025 GMT
Not After : Oct 20 19:01:12 2025 GMT
Subject: CN=bc6e75e51f07e6d95b2ba41570baffd2a892cb91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ba:ef:0f:36:65:ac:5b:d8:54:93:2a:b5:f2:
20:e1:02:e6:8d:bb:5f:4e:2a:a3:15:e3:34:74:b3:
61:37:f5:48:fb:19:92:c1:35:3b:15:1e:56:fd:71:
50:91:8d:86:66:66:b2:1e:25:97:3a:a9:fd:e0:0b:
61:7d:60:ee:e8:66:5f:a5:19:8f:58:e2:1a:14:93:
11:15:84:42:c3:11:d9:d9:b8:b3:12:b2:f9:12:aa:
88:ec:7e:d0:33:a9:00:93:4a:7d:bc:6d:69:a5:4b:
5a:90:a5:1b:db:94:dc:c1:63:b2:6f:e2:d2:ea:d4:
70:ac:0c:93:ee:e6:d2:89:76:10:ce:78:44:52:56:
e9:c2:73:dd:93:81:67:a1:77:60:71:d1:3b:c1:84:
9a:c7:c4:54:2d:75:d1:96:18:b4:80:f2:2e:78:ff:
43:6c:d3:b2:7b:47:0b:11:39:2c:ff:76:a7:93:99:
ff:2e:a1:d9:36:2c:5b:10:6f:9c:ae:92:70:36:c3:
41:51:bb:03:a8:56:7b:98:18:1e:47:13:ae:d3:ef:
3a:f9:b5:58:78:5b:93:f1:3a:ed:26:76:73:49:97:
50:fe:6c:4a:73:c3:19:54:57:29:a2:89:f0:ce:1f:
8b:92:01:99:39:78:7d:e1:40:73:ec:a8:b9:90:ee:
0c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:6E:75:E5:1F:07:E6:D9:5B:2B:A4:15:70:BA:FF:D2:A8:92:CB:91
X509v3 Authority Key Identifier:
keyid:FA:70:B4:2D:7A:F6:AD:78:22:2B:30:F0:5F:2B:79:13:F8:06:35:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-nC0LXr2rXgiKzDwXyt5E_gGNXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d3bfe6-78b5-437b-98e9-b914159ba8ad/1/1-nC0LXr2rXgiKzDwXyt5E_gGNXA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d3bfe6-78b5-437b-98e9-b914159ba8ad/1/1-nC0LXr2rXgiKzDwXyt5E_gGNXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:73:f5:8c:c8:41:8f:31:b9:c0:32:1a:54:52:c7:74:3a:1b:
26:4d:82:32:36:42:e6:91:df:07:2f:1e:d6:a1:a3:48:f2:15:
bc:f0:ae:ac:de:d6:b4:69:64:44:b1:3b:d3:9c:23:5d:d4:f8:
3c:a3:45:4f:32:a0:fb:dc:50:31:de:1d:13:ff:cd:6b:42:e6:
80:cc:b3:eb:70:83:e6:41:30:d8:5c:96:0b:50:9a:42:ad:4e:
b7:29:27:97:99:ec:5e:9c:ae:c5:11:2a:fd:c9:bf:61:1e:24:
4f:f9:e1:f0:7f:fa:d6:88:f1:2b:9b:c4:6f:bd:e5:11:e2:79:
6e:c8:4b:8e:61:d0:93:3c:b9:45:49:37:24:0d:01:ec:5e:be:
c5:29:9a:bb:fa:9d:62:25:dd:75:d2:e3:f4:30:e8:1a:ed:c0:
5b:5a:ae:a1:ac:31:aa:a7:f4:43:23:d4:18:dd:98:d3:e4:cb:
a0:c0:13:8c:ab:28:d1:57:d7:c6:44:ff:6d:62:46:9e:7b:29:
cb:3f:7d:16:fb:ed:02:87:1a:fa:6d:01:a0:06:93:78:1e:f6:
fa:8e:2b:96:c7:19:76:64:d4:e0:88:7f:3a:96:8e:fe:01:69:
b8:d1:df:ac:b5:91:04:01:f9:63:8b:fc:41:fe:cd:ea:1d:83:
b9:59:1d:94
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZn92N3yR7mZdFZGoJF/ZGDOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhNzBiNDJkN2FmNmFkNzgyMjJiMzBmMDVmMmI3OTEzZjgw
NjM1NzAwHhcNMjUxMDE5MTkwMTEyWhcNMjUxMDIwMTkwMTEyWjAzMTEwLwYDVQQD
EyhiYzZlNzVlNTFmMDdlNmQ5NWIyYmE0MTU3MGJhZmZkMmE4OTJjYjkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw7rvDzZlrFvYVJMqtfIg4QLmjbtf
TiqjFeM0dLNhN/VI+xmSwTU7FR5W/XFQkY2GZmayHiWXOqn94AthfWDu6GZfpRmP
WOIaFJMRFYRCwxHZ2bizErL5EqqI7H7QM6kAk0p9vG1ppUtakKUb25TcwWOyb+LS
6tRwrAyT7ubSiXYQznhEUlbpwnPdk4FnoXdgcdE7wYSax8RULXXRlhi0gPIueP9D
bNOye0cLETks/3ank5n/LqHZNixbEG+crpJwNsNBUbsDqFZ7mBgeRxOu0+86+bVY
eFuT8TrtJnZzSZdQ/mxKc8MZVFcpoonwzh+LkgGZOXh94UBz7Ki5kO4M1QIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFLxudeUfB+bZWyukFXC6/9KoksuRMB8GA1UdIwQY
MBaAFPpwtC169q14Iisw8F8reRP4BjVwMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1uQzBMWHIyclhnaUt6RHdYeXQ1RV9nR05YQS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmEvZDNiZmU2LTc4YjUtNDM3Yi05OGU5
LWI5MTQxNTliYThhZC8xLzEtbkMwTFhyMnJYZ2lLekR3WHl0NUVfZ0dOWEEubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzZhL2QzYmZlNi03OGI1LTQzN2ItOThlOS1iOTE0MTU5YmE4
YWQvMS8xLW5DMExYcjJyWGdpS3pEd1h5dDVFX2dHTlhBLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAy3P1
jMhBjzG5wDIaVFLHdDobJk2CMjZC5pHfBy8e1qGjSPIVvPCurN7WtGlkRLE705wj
XdT4PKNFTzKg+9xQMd4dE//Na0LmgMyz63CD5kEw2FyWC1CaQq1Otyknl5nsXpyu
xREq/cm/YR4kT/nh8H/61ojxK5vEb73lEeJ5bshLjmHQkzy5RUk3JA0B7F6+xSma
u/qdYiXdddLj9DDoGu3AW1quoawxqqf0QyPUGN2Y0+TLoMATjKso0VfXxkT/bWJG
nnspyz99FvvtAoca+m0BoAaTeB72+o4rlscZdmTU4Ih/OpaO/gFpuNHfrLWRBAH5
Y4v8Qf7N6h2DuVkdlA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 22:29:58 2025 by rpki-client