Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/241c18-78da-4b3d-a440-0802d4c7d96d/1/EXdPipmODyrxj3UnnjJlSBNpRIg.mft
File: EXdPipmODyrxj3UnnjJlSBNpRIg.mft (raw, json)
Hash identifier: EwtbpTp+kLhE+3Jd7ELuo43WFPiMa9+7L4mpfZEaSW8=
Subject key identifier: 3A:79:CC:C5:CE:36:A0:A8:17:B7:80:9E:BD:49:12:C5:6D:72:6B:B2
Authority key identifier: 11:77:4F:8A:99:8E:0F:2A:F1:8F:75:27:9E:32:65:48:13:69:44:88
Certificate issuer: /CN=11774f8a998e0f2af18f75279e32654813694488
Certificate serial: 0199FC586E4F4AB9AEA9B80EA81260E47692
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EXdPipmODyrxj3UnnjJlSBNpRIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/241c18-78da-4b3d-a440-0802d4c7d96d/1/EXdPipmODyrxj3UnnjJlSBNpRIg.mft
Manifest number: 0526
Signing time: Sun 19 Oct 2025 12:01:17 +0000
Manifest this update: Sun 19 Oct 2025 12:01:17 +0000
Manifest next update: Mon 20 Oct 2025 12:01:17 +0000
Files and hashes: 1: EXdPipmODyrxj3UnnjJlSBNpRIg.crl (hash: W8Hk5UGkiK24/UalBh8uUJhMNmLG5DzFRCfD+jSfwjg=)
2: lEOnyeTSrhVKx1TLByVlPzDKz8w.roa (hash: n8RWZqmzmommBj8oDYR9O53K32j7DKyp4tQyqLf5eY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/241c18-78da-4b3d-a440-0802d4c7d96d/1/EXdPipmODyrxj3UnnjJlSBNpRIg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/241c18-78da-4b3d-a440-0802d4c7d96d/1/EXdPipmODyrxj3UnnjJlSBNpRIg.mft
rsync://rpki.ripe.net/repository/DEFAULT/EXdPipmODyrxj3UnnjJlSBNpRIg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:6e:4f:4a:b9:ae:a9:b8:0e:a8:12:60:e4:76:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11774f8a998e0f2af18f75279e32654813694488
Validity
Not Before: Oct 19 12:01:17 2025 GMT
Not After : Oct 20 12:01:17 2025 GMT
Subject: CN=3a79ccc5ce36a0a817b7809ebd4912c56d726bb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a5:e0:98:5d:ad:dd:00:c8:87:81:c3:a1:b7:
06:c2:75:fd:f1:db:13:03:1e:4a:42:47:42:d8:e7:
59:ec:ba:30:90:e6:cf:2d:a2:be:64:19:a7:d6:62:
21:9d:36:92:28:58:fe:04:f2:4b:a8:06:32:ba:e9:
05:74:a6:9f:c7:40:7f:4e:f8:8a:61:c3:ba:1a:30:
3c:2c:97:8c:1c:68:3c:1f:a1:23:f2:72:1d:b8:dd:
f7:b9:f5:cb:1d:a9:81:10:7c:6e:cb:69:55:a0:04:
2a:dd:55:c2:b3:33:76:f8:6a:d6:63:10:e1:fd:05:
e3:fe:08:f6:5f:50:a5:81:67:a1:2b:c6:da:12:cb:
dc:dd:d8:0b:bc:78:3e:da:f3:f3:00:7d:47:29:67:
18:2a:ff:50:e1:24:55:f6:18:b6:93:6a:15:71:65:
e4:2e:59:e6:01:af:87:50:3b:da:e9:c3:0e:e8:5e:
b6:98:a1:d6:eb:f8:d4:04:e0:ac:50:29:96:bc:26:
c0:c2:d8:cf:76:20:4a:d1:68:40:82:8d:0b:9c:64:
f4:5e:0a:f1:5f:c7:54:43:30:20:70:d9:9b:79:7c:
af:50:65:f0:7b:93:37:c3:d8:0f:99:6e:05:22:a0:
2e:16:83:cd:ed:85:c7:66:35:19:e7:dc:06:dd:67:
ff:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:79:CC:C5:CE:36:A0:A8:17:B7:80:9E:BD:49:12:C5:6D:72:6B:B2
X509v3 Authority Key Identifier:
keyid:11:77:4F:8A:99:8E:0F:2A:F1:8F:75:27:9E:32:65:48:13:69:44:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EXdPipmODyrxj3UnnjJlSBNpRIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/241c18-78da-4b3d-a440-0802d4c7d96d/1/EXdPipmODyrxj3UnnjJlSBNpRIg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/241c18-78da-4b3d-a440-0802d4c7d96d/1/EXdPipmODyrxj3UnnjJlSBNpRIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:3c:f2:b7:ad:3b:08:59:c3:c7:15:d3:b3:49:5a:5a:30:d3:
18:07:e6:25:b2:27:6a:71:6d:a1:f9:b2:65:1e:6a:b8:ef:af:
00:13:5f:d1:b9:3a:e8:e9:f1:b1:bb:a0:3e:b2:5c:d9:9c:be:
23:a7:42:6d:cb:e6:c0:fb:be:b0:63:87:b1:a9:ac:6b:03:bc:
a1:ff:f1:9b:c2:f0:e7:6d:66:2c:be:55:bc:db:ba:f1:ea:2d:
9b:ee:4c:3e:8a:87:37:e1:05:29:fc:bc:9e:06:3c:b6:8d:96:
cd:0a:90:1b:0a:53:17:a5:32:08:98:61:92:9a:5f:98:89:00:
50:37:8d:11:34:6d:77:ca:ec:8b:6a:05:f0:7f:ce:79:fe:ac:
9a:dd:e1:ff:9a:d3:20:d9:fd:13:2f:5e:46:f4:46:63:12:c5:
9f:e9:aa:c9:79:a0:1e:7f:87:58:b8:51:d2:7e:6f:66:bf:38:
e5:7c:a7:dc:f6:76:2e:70:77:a8:97:7b:0c:93:de:23:95:7b:
4c:46:fb:37:83:f0:d4:9a:8b:b1:58:cd:a3:53:34:de:4e:ac:
df:5c:fc:92:31:c6:95:aa:1e:6b:8a:87:eb:a4:cd:8f:d0:7e:
82:56:bf:ff:71:f0:14:8d:e4:4b:ba:db:b6:d1:92:7f:06:3b:
b0:7b:83:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WG5PSrmuqbgOqBJg5HaSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExNzc0ZjhhOTk4ZTBmMmFmMThmNzUyNzllMzI2NTQ4MTM2
OTQ0ODgwHhcNMjUxMDE5MTIwMTE3WhcNMjUxMDIwMTIwMTE3WjAzMTEwLwYDVQQD
EygzYTc5Y2NjNWNlMzZhMGE4MTdiNzgwOWViZDQ5MTJjNTZkNzI2YmIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6XgmF2t3QDIh4HDobcGwnX98dsT
Ax5KQkdC2OdZ7LowkObPLaK+ZBmn1mIhnTaSKFj+BPJLqAYyuukFdKafx0B/TviK
YcO6GjA8LJeMHGg8H6Ej8nIduN33ufXLHamBEHxuy2lVoAQq3VXCszN2+GrWYxDh
/QXj/gj2X1ClgWehK8baEsvc3dgLvHg+2vPzAH1HKWcYKv9Q4SRV9hi2k2oVcWXk
LlnmAa+HUDva6cMO6F62mKHW6/jUBOCsUCmWvCbAwtjPdiBK0WhAgo0LnGT0Xgrx
X8dUQzAgcNmbeXyvUGXwe5M3w9gPmW4FIqAuFoPN7YXHZjUZ59wG3Wf/xwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDp5zMXONqCoF7eAnr1JEsVtcmuyMB8GA1UdIwQY
MBaAFBF3T4qZjg8q8Y91J54yZUgTaUSIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVhkUGlwbU9EeXJ4ajNVbm5qSmxTQk5wUklnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi8yNDFjMTgtNzhkYS00YjNkLWE0NDAt
MDgwMmQ0YzdkOTZkLzEvRVhkUGlwbU9EeXJ4ajNVbm5qSmxTQk5wUklnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi8yNDFjMTgtNzhkYS00YjNkLWE0NDAtMDgwMmQ0YzdkOTZk
LzEvRVhkUGlwbU9EeXJ4ajNVbm5qSmxTQk5wUklnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASTzyt607
CFnDxxXTs0laWjDTGAfmJbInanFtofmyZR5quO+vABNf0bk66OnxsbugPrJc2Zy+
I6dCbcvmwPu+sGOHsamsawO8of/xm8Lw521mLL5VvNu68eotm+5MPoqHN+EFKfy8
ngY8to2WzQqQGwpTF6UyCJhhkppfmIkAUDeNETRtd8rsi2oF8H/Oef6smt3h/5rT
INn9Ey9eRvRGYxLFn+mqyXmgHn+HWLhR0n5vZr845Xyn3PZ2LnB3qJd7DJPeI5V7
TEb7N4Pw1JqLsVjNo1M03k6s31z8kjHGlaoea4qH66TNj9B+gla//3HwFI3kS7rb
ttGSfwY7sHuD9A==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:20:16 2025 by rpki-client