
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/1d4b2c-945d-4f39-b233-3e6b7025b65e/1/IeQhptlumdY_fPtJnKcRfIIwTqo.mft
File: IeQhptlumdY_fPtJnKcRfIIwTqo.mft (raw, json)
Hash identifier: HIB9FmQzdxhL3QV48V4PpU9Z3bc5jGgeC3DrCa/PLdQ=
Subject key identifier: D9:C1:89:06:49:C2:DE:6F:70:40:65:38:66:FE:CB:C0:2A:17:C6:02
Authority key identifier: 21:E4:21:A6:D9:6E:99:D6:3F:7C:FB:49:9C:A7:11:7C:82:30:4E:AA
Certificate issuer: /CN=21e421a6d96e99d63f7cfb499ca7117c82304eaa
Certificate serial: 0199FD6B690FE84660B0F2D47BF0A44C7020
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IeQhptlumdY_fPtJnKcRfIIwTqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/1d4b2c-945d-4f39-b233-3e6b7025b65e/1/IeQhptlumdY_fPtJnKcRfIIwTqo.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 17:01:38 +0000
Manifest this update: Sun 19 Oct 2025 17:01:38 +0000
Manifest next update: Mon 20 Oct 2025 17:01:38 +0000
Files and hashes: 1: 1-6OkkXT7C4FLfpQRzLeEPIkuUNA.roa (hash: D8MJaVpCwQ0fVODdot0Xw5y5hbPJWv55WnQMX0Z/dxE=)
2: IeQhptlumdY_fPtJnKcRfIIwTqo.crl (hash: cY54/QoUVpVtzo4MjPcqnB5vm5XXnGO7YemmqTghkT4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/1d4b2c-945d-4f39-b233-3e6b7025b65e/1/IeQhptlumdY_fPtJnKcRfIIwTqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/1d4b2c-945d-4f39-b233-3e6b7025b65e/1/IeQhptlumdY_fPtJnKcRfIIwTqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/IeQhptlumdY_fPtJnKcRfIIwTqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:69:0f:e8:46:60:b0:f2:d4:7b:f0:a4:4c:70:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21e421a6d96e99d63f7cfb499ca7117c82304eaa
Validity
Not Before: Oct 19 17:01:38 2025 GMT
Not After : Oct 20 17:01:38 2025 GMT
Subject: CN=d9c1890649c2de6f7040653866fecbc02a17c602
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9e:8b:91:13:f5:39:15:d0:05:5e:d9:ef:5e:
ee:1a:35:67:76:1c:94:da:d0:c7:56:35:ea:b2:9d:
68:ca:0b:4f:5c:1e:70:f9:36:55:77:95:bb:4d:bb:
6e:4c:14:66:72:7f:53:fa:8b:bf:f0:b3:f2:98:6e:
6e:5f:60:01:da:15:21:09:d0:27:dc:68:0d:4b:7d:
f9:b5:6b:91:e1:7b:2f:aa:5e:7d:d4:15:b8:ae:d4:
77:fd:2a:57:81:7a:da:8f:d3:d7:a0:00:3e:96:37:
5a:ae:b4:a0:fd:c5:9e:72:ae:e7:51:a5:1a:17:34:
f7:9b:d8:95:e8:7e:e9:5a:47:50:21:86:0d:06:87:
02:7f:5e:34:26:a9:cd:2e:bc:b1:3a:41:79:d6:4a:
9b:24:eb:cc:b8:15:d6:f6:db:1a:fe:59:08:c1:07:
ae:03:1e:80:5e:a0:bd:29:60:cc:1d:91:f0:79:91:
41:79:1b:ea:12:46:ed:16:c3:21:e3:59:1a:45:8a:
91:f3:ec:ad:7f:8a:78:b8:15:df:b0:fe:72:22:35:
ed:40:44:39:80:5f:c2:eb:60:69:67:84:1a:59:e4:
89:b9:38:5a:95:31:00:50:c5:d6:10:a0:49:20:aa:
62:45:2c:8f:da:ff:9a:ff:f8:cb:87:07:36:20:ff:
d2:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:C1:89:06:49:C2:DE:6F:70:40:65:38:66:FE:CB:C0:2A:17:C6:02
X509v3 Authority Key Identifier:
keyid:21:E4:21:A6:D9:6E:99:D6:3F:7C:FB:49:9C:A7:11:7C:82:30:4E:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IeQhptlumdY_fPtJnKcRfIIwTqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1d4b2c-945d-4f39-b233-3e6b7025b65e/1/IeQhptlumdY_fPtJnKcRfIIwTqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1d4b2c-945d-4f39-b233-3e6b7025b65e/1/IeQhptlumdY_fPtJnKcRfIIwTqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:7b:94:dd:cf:eb:f9:89:82:d0:64:cf:2d:5b:00:16:e9:7e:
81:23:80:3a:a2:2f:b1:d8:55:28:da:cf:51:72:62:94:af:e8:
91:fc:38:af:62:9c:47:fc:0f:59:82:40:0b:61:8d:a9:ca:d1:
97:8f:07:a1:b2:f0:e6:8f:8e:62:ed:f0:68:67:45:d6:f3:bb:
96:35:4c:8c:46:94:cf:63:95:54:a1:0e:e2:bb:02:38:6a:6a:
43:d7:aa:f2:50:59:0f:7b:31:3e:7c:0b:b7:ba:30:11:f4:fe:
cf:60:c5:16:d9:f2:49:8c:1e:e6:5c:0f:bf:65:b0:56:d2:a8:
db:6b:50:5d:b6:d9:4b:5e:b0:31:cc:97:79:f4:76:2f:2e:e1:
48:cd:60:8e:99:34:4f:f0:e3:c1:4b:be:07:21:d1:1c:c9:36:
0b:3e:84:9e:f7:91:55:2d:bb:f5:81:76:8c:45:8a:eb:f2:b8:
2c:c2:ac:0f:1c:d3:61:e4:e2:cd:89:da:ae:1e:72:d0:59:bc:
95:08:49:f3:00:a6:6b:17:0b:81:ec:ba:3d:66:a2:97:75:59:
e1:8b:3f:65:2e:21:f5:1b:6f:45:8e:41:c5:3b:cc:a8:1a:cf:
6c:ce:34:64:91:a4:98:d8:a7:e0:db:24:8a:5c:10:4b:e6:80:
a6:9d:3b:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9a2kP6EZgsPLUe/CkTHAgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxZTQyMWE2ZDk2ZTk5ZDYzZjdjZmI0OTljYTcxMTdjODIz
MDRlYWEwHhcNMjUxMDE5MTcwMTM4WhcNMjUxMDIwMTcwMTM4WjAzMTEwLwYDVQQD
EyhkOWMxODkwNjQ5YzJkZTZmNzA0MDY1Mzg2NmZlY2JjMDJhMTdjNjAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw56LkRP1ORXQBV7Z717uGjVndhyU
2tDHVjXqsp1oygtPXB5w+TZVd5W7TbtuTBRmcn9T+ou/8LPymG5uX2AB2hUhCdAn
3GgNS335tWuR4Xsvql591BW4rtR3/SpXgXraj9PXoAA+ljdarrSg/cWecq7nUaUa
FzT3m9iV6H7pWkdQIYYNBocCf140JqnNLryxOkF51kqbJOvMuBXW9tsa/lkIwQeu
Ax6AXqC9KWDMHZHweZFBeRvqEkbtFsMh41kaRYqR8+ytf4p4uBXfsP5yIjXtQEQ5
gF/C62BpZ4QaWeSJuThalTEAUMXWEKBJIKpiRSyP2v+a//jLhwc2IP/SvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNnBiQZJwt5vcEBlOGb+y8AqF8YCMB8GA1UdIwQY
MBaAFCHkIabZbpnWP3z7SZynEXyCME6qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWVRaHB0bHVtZFlfZlB0Sm5LY1JmSUl3VHFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny8xZDRiMmMtOTQ1ZC00ZjM5LWIyMzMt
M2U2YjcwMjViNjVlLzEvSWVRaHB0bHVtZFlfZlB0Sm5LY1JmSUl3VHFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny8xZDRiMmMtOTQ1ZC00ZjM5LWIyMzMtM2U2YjcwMjViNjVl
LzEvSWVRaHB0bHVtZFlfZlB0Sm5LY1JmSUl3VHFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq3uU3c/r
+YmC0GTPLVsAFul+gSOAOqIvsdhVKNrPUXJilK/okfw4r2KcR/wPWYJAC2GNqcrR
l48HobLw5o+OYu3waGdF1vO7ljVMjEaUz2OVVKEO4rsCOGpqQ9eq8lBZD3sxPnwL
t7owEfT+z2DFFtnySYwe5lwPv2WwVtKo22tQXbbZS16wMcyXefR2Ly7hSM1gjpk0
T/DjwUu+ByHRHMk2Cz6EnveRVS279YF2jEWK6/K4LMKsDxzTYeTizYnarh5y0Fm8
lQhJ8wCmaxcLgey6PWail3VZ4Ys/ZS4h9RtvRY5BxTvMqBrPbM40ZJGkmNin4Nsk
ilwQS+aApp07vA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:11:44 2025 by rpki-client