Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/995e4f-cd42-4dc9-ae24-0ec12cfce421/1/1-ddGm-DZxLqInT4gJq2K3ELDz1M.mft
File: 1-ddGm-DZxLqInT4gJq2K3ELDz1M.mft (raw, json)
Hash identifier: s0uXVWBu+FHrq2mU4Rt8ZIBXB34zknDZ1kf56BGP1Lo=
Subject key identifier: B9:04:EA:01:C0:83:23:5A:85:8F:43:F3:85:0B:C4:B6:C2:3D:F9:4C
Authority key identifier: F9:D7:46:9B:E0:D9:C4:BA:88:9D:3E:20:26:AD:8A:DC:42:C3:CF:53
Certificate issuer: /CN=f9d7469be0d9c4ba889d3e2026ad8adc42c3cf53
Certificate serial: 0199FB7C6CFDDA7237807F609C8BA3EACF2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-ddGm-DZxLqInT4gJq2K3ELDz1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/995e4f-cd42-4dc9-ae24-0ec12cfce421/1/1-ddGm-DZxLqInT4gJq2K3ELDz1M.mft
Manifest number: 0E0A
Signing time: Sun 19 Oct 2025 08:00:59 +0000
Manifest this update: Sun 19 Oct 2025 08:00:59 +0000
Manifest next update: Mon 20 Oct 2025 08:00:59 +0000
Files and hashes: 1: 1-ddGm-DZxLqInT4gJq2K3ELDz1M.crl (hash: tMp44inghHPoeZeLrsdHrUDUgmVKrLUf9AkgEoJWt9o=)
2: hSQntvd9v3MOWIssEgGbLB1SW7w.roa (hash: n6KLHzcpdLpUHWf9UFnS7ncqlbroso3meC9DViXUm1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/995e4f-cd42-4dc9-ae24-0ec12cfce421/1/1-ddGm-DZxLqInT4gJq2K3ELDz1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/995e4f-cd42-4dc9-ae24-0ec12cfce421/1/1-ddGm-DZxLqInT4gJq2K3ELDz1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-ddGm-DZxLqInT4gJq2K3ELDz1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:6c:fd:da:72:37:80:7f:60:9c:8b:a3:ea:cf:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9d7469be0d9c4ba889d3e2026ad8adc42c3cf53
Validity
Not Before: Oct 19 08:00:59 2025 GMT
Not After : Oct 20 08:00:59 2025 GMT
Subject: CN=b904ea01c083235a858f43f3850bc4b6c23df94c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:61:8b:1a:b1:3d:89:8e:c8:41:90:a4:61:dd:
f2:30:e4:ff:df:d3:0a:c7:f7:3b:da:1a:46:d8:82:
c1:3a:f3:46:77:1c:bd:53:33:fa:c7:6d:91:01:3c:
a8:90:79:bd:23:d2:c4:c3:0d:ed:59:c6:bc:d9:94:
23:74:38:77:ac:9e:f1:67:d5:30:4b:46:a6:c6:c0:
2b:a8:2f:b4:4d:c1:0a:95:e8:75:89:4b:b7:51:ce:
4f:1c:82:ce:78:a5:c8:9b:17:7d:54:f9:52:8b:f2:
6d:e9:81:8b:90:2b:20:55:8b:df:fb:5f:ae:97:2c:
ae:0c:5e:ba:e2:2d:21:c4:0a:06:62:9c:22:c0:74:
f9:bf:bc:0e:3e:9a:44:7f:0b:20:6c:fb:04:b1:19:
44:fc:22:56:b0:2f:91:29:f9:95:cc:0e:5a:c5:41:
18:e8:86:f1:8c:a4:79:c4:0e:47:d2:ff:05:e4:8a:
9d:86:a3:f8:9b:ad:53:97:7b:7d:3f:5a:a3:da:ab:
a9:fb:d7:7e:26:a8:6c:23:c4:eb:94:c9:d8:ff:b9:
3f:e7:ac:ca:fc:1d:d8:a4:85:eb:0b:bb:af:f4:6b:
3a:59:78:5c:0c:33:9b:82:44:e5:5b:73:5a:e1:c4:
c9:34:5e:f8:f7:a1:68:14:03:ff:1a:4d:9f:2c:3e:
72:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:04:EA:01:C0:83:23:5A:85:8F:43:F3:85:0B:C4:B6:C2:3D:F9:4C
X509v3 Authority Key Identifier:
keyid:F9:D7:46:9B:E0:D9:C4:BA:88:9D:3E:20:26:AD:8A:DC:42:C3:CF:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ddGm-DZxLqInT4gJq2K3ELDz1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/995e4f-cd42-4dc9-ae24-0ec12cfce421/1/1-ddGm-DZxLqInT4gJq2K3ELDz1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/995e4f-cd42-4dc9-ae24-0ec12cfce421/1/1-ddGm-DZxLqInT4gJq2K3ELDz1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:30:d4:bc:4f:0a:d2:f3:4c:8e:cd:32:f9:97:e2:f9:3b:fc:
11:d2:60:5a:cc:7d:7f:13:18:c5:5d:b7:0a:db:45:39:04:c9:
20:a5:2b:80:1f:31:fc:ff:26:f2:29:27:50:c5:72:90:05:48:
ac:0a:65:46:c8:b1:5e:1f:17:df:96:89:2e:87:e1:52:99:9b:
e8:f2:0a:b0:2f:ea:96:8a:29:07:5c:56:8b:12:ca:fd:d2:64:
c6:61:8f:d9:77:45:55:44:ee:4d:75:20:a6:a5:fa:4b:41:c3:
84:c3:0b:58:8d:55:94:f7:57:e6:66:c8:e5:02:a4:01:97:46:
88:3c:c3:26:7a:48:75:22:45:82:17:c0:a6:5f:df:9b:00:67:
2a:bd:8d:37:96:ca:15:fa:73:d5:da:00:87:6e:c6:c6:2b:4a:
db:d7:6f:e2:41:a8:7f:e8:f1:db:87:08:cf:39:e8:e2:3a:83:
db:23:14:ea:d0:df:58:38:67:71:89:03:84:09:eb:a9:ba:49:
65:f4:49:2d:59:cb:9b:11:62:4c:56:62:e0:c3:2e:c2:a3:f9:
03:a7:54:fb:c9:3c:23:94:73:c8:21:49:6b:32:99:13:b3:81:
7b:3c:5e:75:74:67:1e:e4:bc:a0:d8:f1:79:ef:17:2f:e7:fa:
fa:de:ef:1b
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZn7fGz92nI3gH9gnIuj6s8vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5ZDc0NjliZTBkOWM0YmE4ODlkM2UyMDI2YWQ4YWRjNDJj
M2NmNTMwHhcNMjUxMDE5MDgwMDU5WhcNMjUxMDIwMDgwMDU5WjAzMTEwLwYDVQQD
EyhiOTA0ZWEwMWMwODMyMzVhODU4ZjQzZjM4NTBiYzRiNmMyM2RmOTRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmGLGrE9iY7IQZCkYd3yMOT/39MK
x/c72hpG2ILBOvNGdxy9UzP6x22RATyokHm9I9LEww3tWca82ZQjdDh3rJ7xZ9Uw
S0amxsArqC+0TcEKleh1iUu3Uc5PHILOeKXImxd9VPlSi/Jt6YGLkCsgVYvf+1+u
lyyuDF664i0hxAoGYpwiwHT5v7wOPppEfwsgbPsEsRlE/CJWsC+RKfmVzA5axUEY
6IbxjKR5xA5H0v8F5IqdhqP4m61Tl3t9P1qj2qup+9d+JqhsI8TrlMnY/7k/56zK
/B3YpIXrC7uv9Gs6WXhcDDObgkTlW3Na4cTJNF7496FoFAP/Gk2fLD5ygwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFLkE6gHAgyNahY9D84ULxLbCPflMMB8GA1UdIwQY
MBaAFPnXRpvg2cS6iJ0+ICatitxCw89TMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1kZEdtLURaeExxSW5UNGdKcTJLM0VMRHoxTS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODUvOTk1ZTRmLWNkNDItNGRjOS1hZTI0
LTBlYzEyY2ZjZTQyMS8xLzEtZGRHbS1EWnhMcUluVDRnSnEySzNFTER6MU0ubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzg1Lzk5NWU0Zi1jZDQyLTRkYzktYWUyNC0wZWMxMmNmY2U0
MjEvMS8xLWRkR20tRFp4THFJblQ0Z0pxMkszRUxEejFNLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaTDU
vE8K0vNMjs0y+Zfi+Tv8EdJgWsx9fxMYxV23CttFOQTJIKUrgB8x/P8m8iknUMVy
kAVIrAplRsixXh8X35aJLofhUpmb6PIKsC/qloopB1xWixLK/dJkxmGP2XdFVUTu
TXUgpqX6S0HDhMMLWI1VlPdX5mbI5QKkAZdGiDzDJnpIdSJFghfApl/fmwBnKr2N
N5bKFfpz1doAh27GxitK29dv4kGof+jx24cIzzno4jqD2yMU6tDfWDhncYkDhAnr
qbpJZfRJLVnLmxFiTFZi4MMuwqP5A6dU+8k8I5RzyCFJazKZE7OBezxedXRnHuS8
oNjxee8XL+f6+t7vGw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:18:37 2025 by rpki-client