Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/3a5258-989d-400b-b7b7-454c93c065a0/1/1O219t5yQ2FIs1pZA38jNBUN2zY.mft
File: 1O219t5yQ2FIs1pZA38jNBUN2zY.mft (raw, json)
Hash identifier: WfvA9qlVsWICruInBusaM/Gnc2G0Qyg7D0qMKV/Y14M=
Subject key identifier: 69:E8:EC:D3:4E:F1:15:FB:DD:FA:1B:28:2E:4B:DF:25:3D:6B:18:C7
Authority key identifier: D4:ED:B5:F6:DE:72:43:61:48:B3:5A:59:03:7F:23:34:15:0D:DB:36
Certificate issuer: /CN=d4edb5f6de72436148b35a59037f2334150ddb36
Certificate serial: 0199FB0EFF56C8C62D7D0AAA89D2DE61A42A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1O219t5yQ2FIs1pZA38jNBUN2zY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/3a5258-989d-400b-b7b7-454c93c065a0/1/1O219t5yQ2FIs1pZA38jNBUN2zY.mft
Manifest number: 1674
Signing time: Sun 19 Oct 2025 06:01:28 +0000
Manifest this update: Sun 19 Oct 2025 06:01:28 +0000
Manifest next update: Mon 20 Oct 2025 06:01:28 +0000
Files and hashes: 1: 1O219t5yQ2FIs1pZA38jNBUN2zY.crl (hash: PM+2jg5hrU5Ux6od6cwpGddcjcDXfa+F/Yie8VHVdpI=)
2: CUxoxoHUFgCcWdXLBL1XTZtblHU.roa (hash: nuVV0ajPUp0XSEkxw4hsRxKF9YmW1aG+8tY3rAw4VUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/3a5258-989d-400b-b7b7-454c93c065a0/1/1O219t5yQ2FIs1pZA38jNBUN2zY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/3a5258-989d-400b-b7b7-454c93c065a0/1/1O219t5yQ2FIs1pZA38jNBUN2zY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1O219t5yQ2FIs1pZA38jNBUN2zY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0e:ff:56:c8:c6:2d:7d:0a:aa:89:d2:de:61:a4:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4edb5f6de72436148b35a59037f2334150ddb36
Validity
Not Before: Oct 19 06:01:28 2025 GMT
Not After : Oct 20 06:01:28 2025 GMT
Subject: CN=69e8ecd34ef115fbddfa1b282e4bdf253d6b18c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a9:bc:0a:a8:f3:0b:37:e7:ec:db:99:e6:48:
51:34:d2:c0:d0:1f:e0:a9:de:b8:9c:3c:3c:0a:eb:
15:36:06:31:73:95:52:3a:fd:d6:76:dd:7a:df:1d:
77:4b:0d:b2:6a:c8:08:96:2a:5e:67:7d:20:90:92:
5d:31:d7:b9:e6:67:89:66:ad:bf:17:35:3d:b0:2e:
d0:5b:86:2a:87:3e:9f:39:de:9e:11:a0:94:69:b8:
b6:b5:89:ae:ee:6d:f1:f1:d1:59:ac:b5:29:08:bd:
7d:34:1d:c0:3e:00:8e:0d:e3:4c:93:ce:ec:32:47:
83:7e:1f:80:3a:41:84:5a:3c:21:8f:3d:90:87:7c:
53:a2:56:e9:f3:6b:c6:d5:b5:ca:23:2a:ae:e7:d9:
0f:96:d0:b6:52:b9:40:89:13:70:58:e0:64:dc:44:
57:48:a7:8f:77:05:c8:1a:6b:65:dd:72:7f:20:70:
d7:99:eb:e9:7c:bb:22:e0:26:b7:e2:93:72:bb:6c:
53:0c:18:bd:df:4e:32:80:93:e9:39:ef:56:c6:b6:
e8:5e:b5:6f:16:13:9a:75:66:70:23:4d:9b:7e:3a:
ae:43:3d:b0:ff:bf:6c:a1:e9:58:62:e7:d4:85:bb:
3a:cf:a5:5d:79:0a:ad:43:db:ef:14:54:3f:07:ef:
fe:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:E8:EC:D3:4E:F1:15:FB:DD:FA:1B:28:2E:4B:DF:25:3D:6B:18:C7
X509v3 Authority Key Identifier:
keyid:D4:ED:B5:F6:DE:72:43:61:48:B3:5A:59:03:7F:23:34:15:0D:DB:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1O219t5yQ2FIs1pZA38jNBUN2zY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3a5258-989d-400b-b7b7-454c93c065a0/1/1O219t5yQ2FIs1pZA38jNBUN2zY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3a5258-989d-400b-b7b7-454c93c065a0/1/1O219t5yQ2FIs1pZA38jNBUN2zY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:5f:ee:e7:f3:a5:22:79:27:4e:eb:f3:a0:f2:d9:26:1b:46:
25:6b:92:86:4b:81:e5:91:c9:b2:ed:ad:10:52:b9:fa:9f:ed:
2a:9e:73:d2:13:d3:f7:09:cc:56:95:f3:72:04:a9:76:fd:e4:
74:a6:3b:34:0c:92:1d:16:cd:06:9d:54:d7:40:a7:8d:43:37:
c4:57:be:ca:99:ad:fa:75:45:e9:13:b5:a3:69:b0:c5:6c:13:
78:3f:6d:19:a1:44:5d:a3:15:cf:35:bc:62:32:11:d4:4e:75:
90:4f:a9:79:5c:19:06:39:02:ec:3f:78:b8:36:24:95:a7:6e:
91:c1:99:81:dc:90:f1:f7:df:1e:d4:76:24:22:52:8b:ba:33:
73:e6:fd:0f:10:fd:1c:74:22:ed:c0:31:6d:7b:55:d7:bf:1c:
ee:0c:82:40:81:d5:d9:3f:95:20:6d:0d:7b:a1:43:0f:4c:dd:
3f:06:ac:61:18:52:42:cc:ce:e6:e3:96:a3:68:3c:93:a6:bd:
98:c6:77:d0:c6:19:96:bf:d0:40:94:2a:47:a8:c1:39:4b:53:
c1:b6:84:57:f2:7c:15:a0:b1:d4:38:5e:47:ef:af:ad:45:d7:
6c:ff:8f:4c:13:0b:9b:40:a2:44:e5:e9:ec:dc:cf:52:68:18:
e8:c9:75:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7Dv9WyMYtfQqqidLeYaQqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0ZWRiNWY2ZGU3MjQzNjE0OGIzNWE1OTAzN2YyMzM0MTUw
ZGRiMzYwHhcNMjUxMDE5MDYwMTI4WhcNMjUxMDIwMDYwMTI4WjAzMTEwLwYDVQQD
Eyg2OWU4ZWNkMzRlZjExNWZiZGRmYTFiMjgyZTRiZGYyNTNkNmIxOGM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0am8CqjzCzfn7NuZ5khRNNLA0B/g
qd64nDw8CusVNgYxc5VSOv3Wdt163x13Sw2yasgIlipeZ30gkJJdMde55meJZq2/
FzU9sC7QW4Yqhz6fOd6eEaCUabi2tYmu7m3x8dFZrLUpCL19NB3APgCODeNMk87s
MkeDfh+AOkGEWjwhjz2Qh3xTolbp82vG1bXKIyqu59kPltC2UrlAiRNwWOBk3ERX
SKePdwXIGmtl3XJ/IHDXmevpfLsi4Ca34pNyu2xTDBi9304ygJPpOe9WxrboXrVv
FhOadWZwI02bfjquQz2w/79soelYYufUhbs6z6VdeQqtQ9vvFFQ/B+/+wwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGno7NNO8RX73fobKC5L3yU9axjHMB8GA1UdIwQY
MBaAFNTttfbeckNhSLNaWQN/IzQVDds2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMU8yMTl0NXlRMkZJczFwWkEzOGpOQlVOMnpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC8zYTUyNTgtOTg5ZC00MDBiLWI3Yjct
NDU0YzkzYzA2NWEwLzEvMU8yMTl0NXlRMkZJczFwWkEzOGpOQlVOMnpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC8zYTUyNTgtOTg5ZC00MDBiLWI3YjctNDU0YzkzYzA2NWEw
LzEvMU8yMTl0NXlRMkZJczFwWkEzOGpOQlVOMnpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQV/u5/Ol
InknTuvzoPLZJhtGJWuShkuB5ZHJsu2tEFK5+p/tKp5z0hPT9wnMVpXzcgSpdv3k
dKY7NAySHRbNBp1U10CnjUM3xFe+ypmt+nVF6RO1o2mwxWwTeD9tGaFEXaMVzzW8
YjIR1E51kE+peVwZBjkC7D94uDYkladukcGZgdyQ8fffHtR2JCJSi7ozc+b9DxD9
HHQi7cAxbXtV178c7gyCQIHV2T+VIG0Ne6FDD0zdPwasYRhSQszO5uOWo2g8k6a9
mMZ30MYZlr/QQJQqR6jBOUtTwbaEV/J8FaCx1DheR++vrUXXbP+PTBMLm0CiROXp
7NzPUmgY6Ml11Q==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:28:17 2025 by rpki-client