Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/d4ffc0-a52d-461b-9719-a914e3ce3941/1/9OQPA5eaP05K052pg7Z7p-YhXA0.mft
File: 9OQPA5eaP05K052pg7Z7p-YhXA0.mft (raw, json)
Hash identifier: iCIHt4vwewHrnR7d1vFjb9nAVNsBPQ6wDDz3esiTSbU=
Subject key identifier: DD:95:52:56:96:1C:59:7F:A0:28:54:DE:99:B4:7C:8C:48:95:12:AC
Authority key identifier: F4:E4:0F:03:97:9A:3F:4E:4A:D3:9D:A9:83:B6:7B:A7:E6:21:5C:0D
Certificate issuer: /CN=f4e40f03979a3f4e4ad39da983b67ba7e6215c0d
Certificate serial: 0199FAD7C6E013806307C7935705927E1D16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9OQPA5eaP05K052pg7Z7p-YhXA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/d4ffc0-a52d-461b-9719-a914e3ce3941/1/9OQPA5eaP05K052pg7Z7p-YhXA0.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 05:01:09 +0000
Manifest this update: Sun 19 Oct 2025 05:01:09 +0000
Manifest next update: Mon 20 Oct 2025 05:01:09 +0000
Files and hashes: 1: 9OQPA5eaP05K052pg7Z7p-YhXA0.crl (hash: +N82gyey+3zN9O8TLWOl+3lFwD4xpuSCbcDOLWALH/8=)
2: scYwC-e6lFDetGsqMlwn-CerbGM.roa (hash: zF9JwzHkhXPpsqlzXkaGHeYsm+/OmjpyP3gHhfOOwfo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/d4ffc0-a52d-461b-9719-a914e3ce3941/1/9OQPA5eaP05K052pg7Z7p-YhXA0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/d4ffc0-a52d-461b-9719-a914e3ce3941/1/9OQPA5eaP05K052pg7Z7p-YhXA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9OQPA5eaP05K052pg7Z7p-YhXA0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d7:c6:e0:13:80:63:07:c7:93:57:05:92:7e:1d:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4e40f03979a3f4e4ad39da983b67ba7e6215c0d
Validity
Not Before: Oct 19 05:01:09 2025 GMT
Not After : Oct 20 05:01:09 2025 GMT
Subject: CN=dd955256961c597fa02854de99b47c8c489512ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:b4:26:d8:70:f9:ad:88:ea:83:df:80:f1:bb:
2e:21:f5:27:f9:66:5c:e0:52:a2:e4:31:5d:4a:c4:
04:6e:3e:dd:4b:f3:b1:70:41:0f:9c:4b:7b:f3:ab:
0b:df:d7:b7:6a:ec:52:2a:ea:02:a7:0b:b2:67:13:
38:05:61:a0:f1:ca:dd:8d:09:da:b7:da:74:cd:59:
c8:87:0f:3f:41:32:93:c2:ff:c0:df:4f:11:a0:47:
48:e3:f1:42:de:88:d3:17:8a:93:f2:8a:a9:77:7f:
8b:c9:d7:a6:a4:bc:00:b4:9c:88:2e:85:1d:4b:1e:
90:d8:f0:3c:d2:c3:03:99:98:8f:bf:0d:76:dc:cd:
99:d5:1b:e7:94:bd:25:de:73:e3:d7:45:a0:57:a4:
23:f1:ca:e9:20:c5:0a:35:56:dc:7b:5f:6b:35:64:
58:20:1e:d3:6e:9f:66:68:8d:98:b4:08:36:ea:9b:
01:43:f6:cf:81:d0:1e:8d:d7:1c:08:a4:e2:de:81:
69:5b:fd:28:d9:ca:91:57:f2:ee:ff:8a:e2:54:67:
33:b4:d2:37:46:3a:33:b9:39:47:62:a4:ec:97:d3:
7e:e1:57:2f:17:b6:98:7f:8d:d4:ae:b2:e3:2d:fd:
6a:76:3d:78:61:b6:09:d7:fc:48:73:be:52:aa:17:
96:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:95:52:56:96:1C:59:7F:A0:28:54:DE:99:B4:7C:8C:48:95:12:AC
X509v3 Authority Key Identifier:
keyid:F4:E4:0F:03:97:9A:3F:4E:4A:D3:9D:A9:83:B6:7B:A7:E6:21:5C:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OQPA5eaP05K052pg7Z7p-YhXA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d4ffc0-a52d-461b-9719-a914e3ce3941/1/9OQPA5eaP05K052pg7Z7p-YhXA0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d4ffc0-a52d-461b-9719-a914e3ce3941/1/9OQPA5eaP05K052pg7Z7p-YhXA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:bf:66:ae:c3:d2:04:b6:47:1d:fc:52:bd:b9:17:4e:bd:b4:
68:4f:8c:ff:18:d7:50:25:06:53:b4:20:62:33:38:07:2e:29:
1f:a2:4d:af:0d:08:47:e4:37:17:ac:ff:5b:e3:f0:89:72:18:
1b:de:f9:70:99:72:95:32:92:2b:d4:a5:e3:7a:43:7c:64:f4:
59:82:32:a8:86:c7:85:af:39:34:fc:f3:92:6b:ff:f3:b5:ff:
f1:28:c4:d8:2c:dc:e5:aa:ba:6a:8e:db:70:4f:a3:01:6f:c2:
16:f0:ee:07:2e:dd:00:be:b0:b1:f7:ad:f7:7a:5d:7a:e2:56:
c5:10:48:5e:d9:96:57:a3:18:fe:1b:3b:32:44:d1:dc:1c:e0:
4f:f0:40:99:83:81:41:48:a3:8f:59:f5:80:a1:9b:45:97:cd:
54:91:2d:e7:ba:be:a2:77:60:a0:dd:48:d4:a3:ad:54:85:47:
97:f6:bd:f5:8b:c5:32:95:77:69:e3:99:b9:a8:30:15:71:a6:
06:64:7a:6c:b7:d4:17:8e:e6:ba:d4:1a:67:93:99:01:a3:dd:
64:4a:00:9e:73:60:77:5c:2c:27:41:e2:a2:a5:81:44:96:d4:
17:9c:2f:19:aa:6c:77:70:22:e9:06:d5:e4:74:b8:9a:aa:8a:
4d:45:ec:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn618bgE4BjB8eTVwWSfh0WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0ZTQwZjAzOTc5YTNmNGU0YWQzOWRhOTgzYjY3YmE3ZTYy
MTVjMGQwHhcNMjUxMDE5MDUwMTA5WhcNMjUxMDIwMDUwMTA5WjAzMTEwLwYDVQQD
EyhkZDk1NTI1Njk2MWM1OTdmYTAyODU0ZGU5OWI0N2M4YzQ4OTUxMmFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA17Qm2HD5rYjqg9+A8bsuIfUn+WZc
4FKi5DFdSsQEbj7dS/OxcEEPnEt786sL39e3auxSKuoCpwuyZxM4BWGg8crdjQna
t9p0zVnIhw8/QTKTwv/A308RoEdI4/FC3ojTF4qT8oqpd3+LydempLwAtJyILoUd
Sx6Q2PA80sMDmZiPvw123M2Z1RvnlL0l3nPj10WgV6Qj8crpIMUKNVbce19rNWRY
IB7Tbp9maI2YtAg26psBQ/bPgdAejdccCKTi3oFpW/0o2cqRV/Lu/4riVGcztNI3
RjozuTlHYqTsl9N+4VcvF7aYf43UrrLjLf1qdj14YbYJ1/xIc75SqheWawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN2VUlaWHFl/oChU3pm0fIxIlRKsMB8GA1UdIwQY
MBaAFPTkDwOXmj9OStOdqYO2e6fmIVwNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOU9RUEE1ZWFQMDVLMDUycGc3WjdwLVloWEEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9kNGZmYzAtYTUyZC00NjFiLTk3MTkt
YTkxNGUzY2UzOTQxLzEvOU9RUEE1ZWFQMDVLMDUycGc3WjdwLVloWEEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS9kNGZmYzAtYTUyZC00NjFiLTk3MTktYTkxNGUzY2UzOTQx
LzEvOU9RUEE1ZWFQMDVLMDUycGc3WjdwLVloWEEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbr9mrsPS
BLZHHfxSvbkXTr20aE+M/xjXUCUGU7QgYjM4By4pH6JNrw0IR+Q3F6z/W+PwiXIY
G975cJlylTKSK9Sl43pDfGT0WYIyqIbHha85NPzzkmv/87X/8SjE2Czc5aq6ao7b
cE+jAW/CFvDuBy7dAL6wsfet93pdeuJWxRBIXtmWV6MY/hs7MkTR3BzgT/BAmYOB
QUijj1n1gKGbRZfNVJEt57q+ondgoN1I1KOtVIVHl/a99YvFMpV3aeOZuagwFXGm
BmR6bLfUF47mutQaZ5OZAaPdZEoAnnNgd1wsJ0HioqWBRJbUF5wvGapsd3Ai6QbV
5HS4mqqKTUXsaw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:08:01 2025 by rpki-client