Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/1-s2QGroNNrZWz5jgwCkX46qiibQ.mft
File: 1-s2QGroNNrZWz5jgwCkX46qiibQ.mft (raw, json)
Hash identifier: 0RkbhAI5c73Wu282Yd9cH3oK2BgDIUE7m1JeBEDtDG0=
Subject key identifier: 64:70:AE:F9:53:36:CD:A4:8A:FF:8E:AC:85:CA:BE:9E:EA:12:34:48
Authority key identifier: FA:CD:90:1A:BA:0D:36:B6:56:CF:98:E0:C0:29:17:E3:AA:A2:89:B4
Certificate issuer: /CN=facd901aba0d36b656cf98e0c02917e3aaa289b4
Certificate serial: 0199FCC659C31821961A4C8BAFD01644CFDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-s2QGroNNrZWz5jgwCkX46qiibQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/1-s2QGroNNrZWz5jgwCkX46qiibQ.mft
Manifest number: 0744
Signing time: Sun 19 Oct 2025 14:01:21 +0000
Manifest this update: Sun 19 Oct 2025 14:01:21 +0000
Manifest next update: Mon 20 Oct 2025 14:01:21 +0000
Files and hashes: 1: 1-s2QGroNNrZWz5jgwCkX46qiibQ.crl (hash: 04tzNeYoRNvwaJWk03FjFqeiUW9oAO6MDgOxCfHGYmU=)
2: wSUCaZlDq8tA-HMBau3EJ93tyfU.roa (hash: yMgrf3IwtSaiP9aq+f/a8xegEvYBFlBB7iCkJrEJ6kA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/1-s2QGroNNrZWz5jgwCkX46qiibQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/1-s2QGroNNrZWz5jgwCkX46qiibQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-s2QGroNNrZWz5jgwCkX46qiibQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 14:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:59:c3:18:21:96:1a:4c:8b:af:d0:16:44:cf:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=facd901aba0d36b656cf98e0c02917e3aaa289b4
Validity
Not Before: Oct 19 14:01:21 2025 GMT
Not After : Oct 20 14:01:21 2025 GMT
Subject: CN=6470aef95336cda48aff8eac85cabe9eea123448
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:73:b0:76:58:2f:78:dc:29:81:56:5a:20:ef:
05:39:45:35:91:ca:11:88:74:4a:22:ef:b1:e5:d4:
8b:d6:3a:47:52:12:ae:52:91:19:b7:a4:46:24:7f:
b2:1c:d1:43:84:e0:d9:24:a3:a7:25:61:26:87:b4:
a9:cd:e6:af:f7:c7:e7:e6:07:48:9a:d3:9e:ed:ae:
78:b1:01:04:68:bd:9a:33:5d:2a:85:d1:72:e5:71:
c0:cb:44:da:85:2f:a0:9e:5a:92:82:b4:8e:d5:02:
6a:06:36:28:00:90:f9:2a:3a:0d:1c:e6:0b:96:d2:
83:1a:e5:19:eb:54:16:c0:f5:c9:e3:4e:a7:f7:52:
74:f8:ac:03:ad:ed:e4:90:53:f5:e6:fd:57:0c:f7:
0b:1f:85:5f:06:bf:5a:b7:94:d2:08:cc:b9:6a:2e:
99:ff:c1:34:d7:20:b3:73:dd:42:63:bb:06:e7:4d:
51:d2:eb:6b:7c:ad:2a:3d:2b:cc:10:35:d7:3c:92:
3f:a4:79:5a:5f:35:c1:ac:be:34:db:71:20:ab:8a:
52:c6:ce:03:2c:d7:b3:a5:f1:da:24:71:f2:99:38:
1c:bd:2a:3b:5a:d5:45:fc:5e:43:f7:35:5c:43:c1:
ad:91:8f:db:20:20:55:6f:f0:62:bc:bc:37:df:6c:
af:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:70:AE:F9:53:36:CD:A4:8A:FF:8E:AC:85:CA:BE:9E:EA:12:34:48
X509v3 Authority Key Identifier:
keyid:FA:CD:90:1A:BA:0D:36:B6:56:CF:98:E0:C0:29:17:E3:AA:A2:89:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-s2QGroNNrZWz5jgwCkX46qiibQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/1-s2QGroNNrZWz5jgwCkX46qiibQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/1-s2QGroNNrZWz5jgwCkX46qiibQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:ce:9c:f4:c7:b7:47:a4:df:89:9a:0b:7e:4e:8d:0b:cf:b9:
dd:b4:c3:26:c7:c4:f7:8d:3b:fb:31:bf:59:e6:8c:32:bf:49:
9a:bf:08:e6:e3:41:b6:f8:6f:72:c7:27:08:4a:50:f8:28:00:
8b:99:e8:c9:43:d7:94:b9:ff:95:37:d8:42:81:29:59:7f:1c:
09:b6:11:81:7c:93:8f:f1:28:86:24:db:30:a2:ec:c8:17:8a:
0a:89:a4:e5:af:b0:40:21:be:e4:fc:e3:fd:cf:08:16:60:df:
d1:90:a5:8c:b7:66:69:c7:9b:fe:ac:d3:2a:c7:2d:d5:a2:8f:
35:82:9e:be:70:7a:63:b1:79:4a:f1:0f:62:48:07:32:a5:44:
cd:c4:9a:dd:b7:cf:9d:c3:45:d2:00:43:d7:4d:35:84:51:e1:
ea:6d:72:52:eb:75:53:dc:bb:c4:15:a9:af:1d:e3:11:cc:46:
73:76:37:bb:91:da:b3:68:55:a0:f5:40:4c:df:46:cf:4f:a2:
7b:2b:c1:a7:8e:93:d1:ad:1d:04:48:5d:25:f8:2a:f9:02:47:
ca:68:00:dd:ce:e6:dd:55:3d:9f:54:f1:58:9d:9d:35:09:81:
5b:c0:4e:cf:53:fe:65:eb:28:d7:03:cc:b9:63:74:0f:db:18:
62:f4:95:a6
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZn8xlnDGCGWGkyLr9AWRM/fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhY2Q5MDFhYmEwZDM2YjY1NmNmOThlMGMwMjkxN2UzYWFh
Mjg5YjQwHhcNMjUxMDE5MTQwMTIxWhcNMjUxMDIwMTQwMTIxWjAzMTEwLwYDVQQD
Eyg2NDcwYWVmOTUzMzZjZGE0OGFmZjhlYWM4NWNhYmU5ZWVhMTIzNDQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA03OwdlgveNwpgVZaIO8FOUU1kcoR
iHRKIu+x5dSL1jpHUhKuUpEZt6RGJH+yHNFDhODZJKOnJWEmh7Spzeav98fn5gdI
mtOe7a54sQEEaL2aM10qhdFy5XHAy0TahS+gnlqSgrSO1QJqBjYoAJD5KjoNHOYL
ltKDGuUZ61QWwPXJ406n91J0+KwDre3kkFP15v1XDPcLH4VfBr9at5TSCMy5ai6Z
/8E01yCzc91CY7sG501R0utrfK0qPSvMEDXXPJI/pHlaXzXBrL4023Egq4pSxs4D
LNezpfHaJHHymTgcvSo7WtVF/F5D9zVcQ8GtkY/bICBVb/BivLw332yvEQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFGRwrvlTNs2kiv+OrIXKvp7qEjRIMB8GA1UdIwQY
MBaAFPrNkBq6DTa2Vs+Y4MApF+Oqoom0MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1zMlFHcm9OTnJaV3o1amd3Q2tYNDZxaWliUS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjEvYTUyNmNhLTM3OWUtNDk1ZC04ZjE1
LTAwZmUwNWMyYmZjNi8xLzEtczJRR3JvTk5yWld6NWpnd0NrWDQ2cWlpYlEubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2IxL2E1MjZjYS0zNzllLTQ5NWQtOGYxNS0wMGZlMDVjMmJm
YzYvMS8xLXMyUUdyb05OclpXejVqZ3dDa1g0NnFpaWJRLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGs6c
9Me3R6TfiZoLfk6NC8+53bTDJsfE9407+zG/WeaMMr9Jmr8I5uNBtvhvcscnCEpQ
+CgAi5noyUPXlLn/lTfYQoEpWX8cCbYRgXyTj/EohiTbMKLsyBeKComk5a+wQCG+
5Pzj/c8IFmDf0ZCljLdmaceb/qzTKsct1aKPNYKevnB6Y7F5SvEPYkgHMqVEzcSa
3bfPncNF0gBD1001hFHh6m1yUut1U9y7xBWprx3jEcxGc3Y3u5Has2hVoPVATN9G
z0+ieyvBp46T0a0dBEhdJfgq+QJHymgA3c7m3VU9n1TxWJ2dNQmBW8BOz1P+Zeso
1wPMuWN0D9sYYvSVpg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:28:47 2025 by rpki-client