Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/cdc995-9a91-4ec1-aede-f6e0f7d17440/1/1-RA4k_wx6dlNJlq6kMx91XvCN2c.mft
File: 1-RA4k_wx6dlNJlq6kMx91XvCN2c.mft (raw, json)
Hash identifier: uy4wofBtHwrjvphbKPHn81M7xdQwioKYl2ujmiqmojU=
Subject key identifier: 98:40:66:2F:31:97:45:5E:32:A0:D7:BB:7E:B6:7D:F3:C8:2B:D0:D6
Authority key identifier: F9:10:38:93:FC:31:E9:D9:4D:26:5A:BA:90:CC:7D:D5:7B:C2:37:67
Certificate issuer: /CN=f9103893fc31e9d94d265aba90cc7dd57bc23767
Certificate serial: 0199FB7C9FD7A71099A6ACF4F034058EB4D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-RA4k_wx6dlNJlq6kMx91XvCN2c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/cdc995-9a91-4ec1-aede-f6e0f7d17440/1/1-RA4k_wx6dlNJlq6kMx91XvCN2c.mft
Manifest number: 10A1
Signing time: Sun 19 Oct 2025 08:01:12 +0000
Manifest this update: Sun 19 Oct 2025 08:01:12 +0000
Manifest next update: Mon 20 Oct 2025 08:01:12 +0000
Files and hashes: 1: 1-RA4k_wx6dlNJlq6kMx91XvCN2c.crl (hash: g9KDkWk3ERBdRa8hf2FhIagVF3iuUTLOC5xTC990eRk=)
2: avTxB4xZJ7VdV5I2AVFP0VDdbT4.roa (hash: bTeIBIORZ+OkOR+FlYPPZ72JZn7A9KzpF9twp78JJjo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/cdc995-9a91-4ec1-aede-f6e0f7d17440/1/1-RA4k_wx6dlNJlq6kMx91XvCN2c.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/cdc995-9a91-4ec1-aede-f6e0f7d17440/1/1-RA4k_wx6dlNJlq6kMx91XvCN2c.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-RA4k_wx6dlNJlq6kMx91XvCN2c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:9f:d7:a7:10:99:a6:ac:f4:f0:34:05:8e:b4:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9103893fc31e9d94d265aba90cc7dd57bc23767
Validity
Not Before: Oct 19 08:01:12 2025 GMT
Not After : Oct 20 08:01:12 2025 GMT
Subject: CN=9840662f3197455e32a0d7bb7eb67df3c82bd0d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:5a:a1:37:a3:9c:77:5e:39:37:c0:e2:bd:b1:
4c:94:5a:ad:c1:13:2c:1b:fb:47:ba:61:fa:c2:c2:
96:5f:32:2f:b3:b5:9e:37:1f:79:95:8e:82:85:80:
ee:ca:c3:ee:03:89:60:eb:83:ad:d7:19:ee:c0:19:
49:29:5e:cc:f0:0d:6b:d4:9a:f9:0c:49:d9:26:8f:
be:05:5b:97:54:8b:77:27:a8:86:b7:71:53:62:82:
d0:7b:65:9e:06:28:4f:42:44:83:bc:13:b8:e8:04:
64:e4:5b:8c:4f:f3:27:b6:06:68:f1:43:cf:5d:e5:
e6:8f:6c:9a:70:ed:0a:02:7a:c6:20:eb:52:f6:97:
d9:dc:e3:03:58:bb:dd:22:01:f2:93:9b:19:a5:05:
57:63:12:f5:3d:01:0c:a9:28:b3:50:6d:f8:c5:8a:
fe:18:82:ba:31:82:b9:18:11:7c:e9:ff:02:39:ec:
1c:83:60:42:3d:b4:a0:45:5c:6e:c8:ef:e0:11:86:
e2:6d:e6:37:00:c9:3f:51:99:50:83:eb:4c:5a:d1:
8e:ff:00:f1:e4:c8:94:5e:df:1a:11:ba:94:ec:0f:
f9:43:f1:1c:42:29:21:7f:0d:66:a1:52:a4:6e:92:
c4:45:8f:de:95:bb:9f:96:e8:2c:9d:01:06:3e:84:
2d:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:40:66:2F:31:97:45:5E:32:A0:D7:BB:7E:B6:7D:F3:C8:2B:D0:D6
X509v3 Authority Key Identifier:
keyid:F9:10:38:93:FC:31:E9:D9:4D:26:5A:BA:90:CC:7D:D5:7B:C2:37:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-RA4k_wx6dlNJlq6kMx91XvCN2c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/cdc995-9a91-4ec1-aede-f6e0f7d17440/1/1-RA4k_wx6dlNJlq6kMx91XvCN2c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/cdc995-9a91-4ec1-aede-f6e0f7d17440/1/1-RA4k_wx6dlNJlq6kMx91XvCN2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:b7:c3:55:80:a8:c3:34:60:01:53:64:29:52:1e:34:fc:2d:
7f:58:90:56:1c:0b:d3:d0:a3:18:35:80:5d:8e:20:fa:1a:6b:
1a:7b:08:97:74:9e:86:42:ba:17:29:6f:35:fc:a1:1f:2d:b9:
19:8f:46:b6:3a:aa:0f:85:83:b6:93:59:cd:ef:8a:c6:b9:52:
32:7c:02:09:91:93:e6:be:10:a7:61:1b:c5:9b:2e:3a:80:0b:
58:d6:b5:f5:49:c6:4a:75:64:80:b2:5e:31:97:41:79:09:4b:
ca:c6:a1:06:9b:72:48:f0:00:27:cf:1f:c8:1b:ca:d1:61:ee:
be:89:5f:01:bd:92:c8:8b:56:c1:af:73:5c:2f:a0:4d:f9:11:
ec:71:3c:82:70:77:6a:73:71:51:90:f6:03:48:86:15:b8:61:
5d:95:bc:9c:93:08:e3:cd:6b:88:de:2c:97:2a:60:1f:8c:75:
f1:88:b5:3b:a6:d6:b4:cd:26:10:04:b8:0c:4f:95:a4:38:69:
25:5d:f3:f3:0e:00:be:83:37:2d:aa:ee:f7:26:14:e4:ea:7d:
ff:d5:3c:98:88:23:08:21:e5:c0:bd:14:42:ee:80:24:c3:d3:
16:a5:0c:67:4d:0c:7b:47:cc:7e:74:74:76:86:77:74:f7:8b:
6d:d5:6b:3b
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZn7fJ/XpxCZpqz08DQFjrTZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5MTAzODkzZmMzMWU5ZDk0ZDI2NWFiYTkwY2M3ZGQ1N2Jj
MjM3NjcwHhcNMjUxMDE5MDgwMTEyWhcNMjUxMDIwMDgwMTEyWjAzMTEwLwYDVQQD
Eyg5ODQwNjYyZjMxOTc0NTVlMzJhMGQ3YmI3ZWI2N2RmM2M4MmJkMGQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8lqhN6Ocd145N8DivbFMlFqtwRMs
G/tHumH6wsKWXzIvs7WeNx95lY6ChYDuysPuA4lg64Ot1xnuwBlJKV7M8A1r1Jr5
DEnZJo++BVuXVIt3J6iGt3FTYoLQe2WeBihPQkSDvBO46ARk5FuMT/MntgZo8UPP
XeXmj2yacO0KAnrGIOtS9pfZ3OMDWLvdIgHyk5sZpQVXYxL1PQEMqSizUG34xYr+
GIK6MYK5GBF86f8COewcg2BCPbSgRVxuyO/gEYbibeY3AMk/UZlQg+tMWtGO/wDx
5MiUXt8aEbqU7A/5Q/EcQikhfw1moVKkbpLERY/elbuflugsnQEGPoQtIwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFJhAZi8xl0VeMqDXu362ffPIK9DWMB8GA1UdIwQY
MBaAFPkQOJP8MenZTSZaupDMfdV7wjdnMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1SQTRrX3d4NmRsTkpscTZrTXg5MVh2Q04yYy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTgvY2RjOTk1LTlhOTEtNGVjMS1hZWRl
LWY2ZTBmN2QxNzQ0MC8xLzEtUkE0a193eDZkbE5KbHE2a014OTFYdkNOMmMubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzk4L2NkYzk5NS05YTkxLTRlYzEtYWVkZS1mNmUwZjdkMTc0
NDAvMS8xLVJBNGtfd3g2ZGxOSmxxNmtNeDkxWHZDTjJjLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAILfD
VYCowzRgAVNkKVIeNPwtf1iQVhwL09CjGDWAXY4g+hprGnsIl3SehkK6FylvNfyh
Hy25GY9GtjqqD4WDtpNZze+KxrlSMnwCCZGT5r4Qp2EbxZsuOoALWNa19UnGSnVk
gLJeMZdBeQlLysahBptySPAAJ88fyBvK0WHuvolfAb2SyItWwa9zXC+gTfkR7HE8
gnB3anNxUZD2A0iGFbhhXZW8nJMI481riN4slypgH4x18Yi1O6bWtM0mEAS4DE+V
pDhpJV3z8w4AvoM3Laru9yYU5Op9/9U8mIgjCCHlwL0UQu6AJMPTFqUMZ00Me0fM
fnR0doZ3dPeLbdVrOw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:06:09 2025 by rpki-client