Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/435f8SPqfS6DzidSDJh9A35knQM.mft
File: 435f8SPqfS6DzidSDJh9A35knQM.mft (raw, json)
Hash identifier: lZ7EhYcQRsRB3iEArcBzLJqPm6Mpd41Mstrs85jRfCY=
Subject key identifier: E3:C1:2D:3A:B3:30:3B:C8:03:71:15:81:6A:A1:2F:BB:C6:89:59:CA
Authority key identifier: E3:7E:5F:F1:23:EA:7D:2E:83:CE:27:52:0C:98:7D:03:7E:64:9D:03
Certificate issuer: /CN=e37e5ff123ea7d2e83ce27520c987d037e649d03
Certificate serial: 0199FC8F88DAAFDD07F684C096898FC9D40C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/435f8SPqfS6DzidSDJh9A35knQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/435f8SPqfS6DzidSDJh9A35knQM.mft
Manifest number: 1185
Signing time: Sun 19 Oct 2025 13:01:29 +0000
Manifest this update: Sun 19 Oct 2025 13:01:29 +0000
Manifest next update: Mon 20 Oct 2025 13:01:29 +0000
Files and hashes: 1: 435f8SPqfS6DzidSDJh9A35knQM.crl (hash: w1bm9AxDnI1pZTUyUVzSg4P0BTc7Pign6obRSLCZl0k=)
2: tCjXyqFlakOJKQogp8h2votSD1A.roa (hash: m/O4S6Sl2dQY6fRE2qRWrRG8qwZhPhRAmDPSjwX0exE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/435f8SPqfS6DzidSDJh9A35knQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/435f8SPqfS6DzidSDJh9A35knQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/435f8SPqfS6DzidSDJh9A35knQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:88:da:af:dd:07:f6:84:c0:96:89:8f:c9:d4:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e37e5ff123ea7d2e83ce27520c987d037e649d03
Validity
Not Before: Oct 19 13:01:29 2025 GMT
Not After : Oct 20 13:01:29 2025 GMT
Subject: CN=e3c12d3ab3303bc8037115816aa12fbbc68959ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d5:20:56:07:6d:f4:0e:59:3f:11:8e:0c:b3:
1b:ca:27:9a:a3:ed:ef:77:bb:77:82:88:f5:77:6d:
74:24:30:7c:c0:1a:c3:16:cc:41:d7:47:f2:6d:31:
5f:6e:fa:95:4b:60:0e:a8:dd:d8:31:d1:97:8b:bc:
4d:13:81:d5:7b:23:80:59:2b:0e:4f:31:ea:3e:df:
62:c8:7a:c0:18:c9:a1:ee:2e:78:cf:56:4a:73:f2:
12:21:7f:53:b7:44:39:12:d9:5e:6a:36:e4:8b:7b:
8b:37:d2:d8:2c:19:93:2f:f0:84:24:ac:75:1d:6e:
2e:38:21:48:8d:1f:bc:e0:89:13:05:b3:ae:bc:07:
31:7a:a4:66:c6:b3:03:16:d4:a6:a9:82:5f:8d:d0:
04:a2:c9:68:07:19:06:93:18:60:4d:b1:6d:0a:87:
ae:88:2c:c1:d6:1b:cc:39:27:8f:b0:8d:64:31:b1:
cf:a9:91:23:9d:6d:48:34:48:eb:ec:67:35:6a:4a:
eb:24:2a:33:94:00:e6:ea:29:49:3a:41:79:c0:9e:
fb:3a:40:d4:08:b7:47:e9:d3:37:34:7f:bd:21:87:
aa:45:c5:3f:ae:e8:a2:06:88:2a:11:a9:e5:7b:3f:
a5:b8:dc:52:e2:69:7b:2a:f6:6f:23:d3:da:f5:a1:
0c:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:C1:2D:3A:B3:30:3B:C8:03:71:15:81:6A:A1:2F:BB:C6:89:59:CA
X509v3 Authority Key Identifier:
keyid:E3:7E:5F:F1:23:EA:7D:2E:83:CE:27:52:0C:98:7D:03:7E:64:9D:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/435f8SPqfS6DzidSDJh9A35knQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/435f8SPqfS6DzidSDJh9A35knQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/435f8SPqfS6DzidSDJh9A35knQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:b4:e8:be:37:2c:47:2c:6c:a0:b4:5f:68:39:45:72:54:8d:
3f:86:01:01:54:40:9e:85:ac:aa:77:e4:38:1e:c0:6a:d7:9e:
b0:8a:56:27:84:64:19:31:19:06:76:66:6b:e1:92:cf:51:e2:
63:1a:5d:46:a3:f5:a5:73:e4:ec:fc:0e:4c:81:3b:ab:76:e8:
3e:44:41:d2:dd:bc:49:85:28:5d:ba:7a:22:96:8e:3b:4e:ce:
37:85:76:85:3e:16:43:44:51:61:61:5f:cd:d5:e0:77:47:40:
90:29:73:c3:9e:d6:37:29:1c:94:4e:b9:23:e6:f0:56:c3:a0:
32:90:d3:b5:25:30:82:52:d4:94:09:77:81:45:72:da:5b:b2:
75:21:12:43:65:c6:64:91:c6:aa:00:61:1c:af:a7:75:0d:a3:
b3:48:ee:81:bf:a9:35:fd:07:13:ee:60:07:db:54:62:15:bd:
54:da:a6:a5:d0:ab:ba:d6:55:b8:cb:c8:ae:19:c1:4f:ff:bc:
76:4d:fe:15:3a:47:6c:1c:a5:ec:a8:4c:f0:7e:3a:e4:f5:12:
67:b9:0f:17:0c:36:cc:ee:8f:0a:1e:ea:7b:60:cb:6d:47:49:
65:de:98:1d:3d:a9:2e:ee:75:9f:8d:86:ec:3d:2b:22:71:0b:
41:5a:d0:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8j4jar90H9oTAlomPydQMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzN2U1ZmYxMjNlYTdkMmU4M2NlMjc1MjBjOTg3ZDAzN2U2
NDlkMDMwHhcNMjUxMDE5MTMwMTI5WhcNMjUxMDIwMTMwMTI5WjAzMTEwLwYDVQQD
EyhlM2MxMmQzYWIzMzAzYmM4MDM3MTE1ODE2YWExMmZiYmM2ODk1OWNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAztUgVgdt9A5ZPxGODLMbyieao+3v
d7t3goj1d210JDB8wBrDFsxB10fybTFfbvqVS2AOqN3YMdGXi7xNE4HVeyOAWSsO
TzHqPt9iyHrAGMmh7i54z1ZKc/ISIX9Tt0Q5Etleajbki3uLN9LYLBmTL/CEJKx1
HW4uOCFIjR+84IkTBbOuvAcxeqRmxrMDFtSmqYJfjdAEosloBxkGkxhgTbFtCoeu
iCzB1hvMOSePsI1kMbHPqZEjnW1INEjr7Gc1akrrJCozlADm6ilJOkF5wJ77OkDU
CLdH6dM3NH+9IYeqRcU/ruiiBogqEanlez+luNxS4ml7KvZvI9Pa9aEMKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOPBLTqzMDvIA3EVgWqhL7vGiVnKMB8GA1UdIwQY
MBaAFON+X/Ej6n0ug84nUgyYfQN+ZJ0DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDM1ZjhTUHFmUzZEemlkU0RKaDlBMzVrblFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9kZmMxMGMtZjg4OS00NTVhLTgyYTAt
YjMwNDA4OTQ4Y2NlLzEvNDM1ZjhTUHFmUzZEemlkU0RKaDlBMzVrblFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS9kZmMxMGMtZjg4OS00NTVhLTgyYTAtYjMwNDA4OTQ4Y2Nl
LzEvNDM1ZjhTUHFmUzZEemlkU0RKaDlBMzVrblFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOLTovjcs
RyxsoLRfaDlFclSNP4YBAVRAnoWsqnfkOB7AateesIpWJ4RkGTEZBnZma+GSz1Hi
YxpdRqP1pXPk7PwOTIE7q3boPkRB0t28SYUoXbp6IpaOO07ON4V2hT4WQ0RRYWFf
zdXgd0dAkClzw57WNykclE65I+bwVsOgMpDTtSUwglLUlAl3gUVy2luydSESQ2XG
ZJHGqgBhHK+ndQ2js0jugb+pNf0HE+5gB9tUYhW9VNqmpdCrutZVuMvIrhnBT/+8
dk3+FTpHbByl7KhM8H465PUSZ7kPFww2zO6PCh7qe2DLbUdJZd6YHT2pLu51n42G
7D0rInELQVrQyA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:22 2025 by rpki-client