Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/e50c70-0a70-45ac-9ad4-326764a68cfb/1/24P1T0UTHZIHwhWgmKKmvNb_BQs.mft
File: 24P1T0UTHZIHwhWgmKKmvNb_BQs.mft (raw, json)
Hash identifier: COEB5Bc6e9d6WaSqDNsVwMwr4E0R+GQ3FrN6xJtIZ2M=
Subject key identifier: BB:54:D9:8E:80:4A:68:95:B5:58:3D:C0:91:CA:3F:B8:E6:6B:51:8A
Authority key identifier: DB:83:F5:4F:45:13:1D:92:07:C2:15:A0:98:A2:A6:BC:D6:FF:05:0B
Certificate issuer: /CN=db83f54f45131d9207c215a098a2a6bcd6ff050b
Certificate serial: 0199FC8F17EFD0700724C7BBF7A82CE5ADF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/24P1T0UTHZIHwhWgmKKmvNb_BQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/e50c70-0a70-45ac-9ad4-326764a68cfb/1/24P1T0UTHZIHwhWgmKKmvNb_BQs.mft
Manifest number: 0DDC
Signing time: Sun 19 Oct 2025 13:01:00 +0000
Manifest this update: Sun 19 Oct 2025 13:01:00 +0000
Manifest next update: Mon 20 Oct 2025 13:01:00 +0000
Files and hashes: 1: 24P1T0UTHZIHwhWgmKKmvNb_BQs.crl (hash: LMuzRvrsgmJWA0WvT+yHL4ju16/b2trgJF4lHSds8g4=)
2: Qfno-jAugdwOIbQTtdk6Qt14vp0.roa (hash: K+5ZvY56wsKUyUpWT9EX8Ty0xGLLwMy0SXranx21Z8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/e50c70-0a70-45ac-9ad4-326764a68cfb/1/24P1T0UTHZIHwhWgmKKmvNb_BQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/e50c70-0a70-45ac-9ad4-326764a68cfb/1/24P1T0UTHZIHwhWgmKKmvNb_BQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/24P1T0UTHZIHwhWgmKKmvNb_BQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:17:ef:d0:70:07:24:c7:bb:f7:a8:2c:e5:ad:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db83f54f45131d9207c215a098a2a6bcd6ff050b
Validity
Not Before: Oct 19 13:01:00 2025 GMT
Not After : Oct 20 13:01:00 2025 GMT
Subject: CN=bb54d98e804a6895b5583dc091ca3fb8e66b518a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:6a:36:58:34:f6:07:d9:eb:05:7a:69:87:bc:
37:a2:d5:90:f5:9e:f8:86:10:e3:67:ff:1a:1f:8e:
9e:56:50:e0:48:e8:c0:75:93:2e:7c:21:c6:cb:a4:
af:b7:82:50:d6:e8:13:cd:0d:22:f9:6c:6d:da:ed:
df:e7:33:fd:9e:6b:6c:80:e1:f0:af:05:28:1b:40:
67:5f:71:14:50:e1:31:bf:ff:a9:e6:6f:88:df:d2:
f7:0a:bf:d0:bf:6c:17:2d:4c:0f:e9:4b:32:fd:ae:
78:a9:48:1a:26:80:88:5d:3d:75:93:74:bd:d3:cd:
98:30:eb:1f:88:c2:f0:33:69:02:0f:00:e7:e3:71:
97:5e:e2:93:8f:01:df:09:8d:13:e7:b9:0d:2a:5f:
a9:4d:85:12:b4:da:91:a7:d5:31:7d:e3:91:ce:64:
43:7b:32:c0:7f:fa:95:50:8f:ad:69:46:d2:af:14:
cf:eb:29:7d:c8:37:34:48:17:32:01:0d:ab:4b:64:
6e:94:8e:76:43:dc:4c:a9:53:9d:35:a3:62:d3:2e:
97:98:2c:0c:b2:ee:50:99:0f:6f:b7:9a:83:ea:4f:
5a:b1:7f:df:f5:91:b4:02:4f:5a:5c:d9:3e:ed:10:
03:01:35:37:e9:30:a3:b5:61:35:44:77:e4:05:20:
0d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:54:D9:8E:80:4A:68:95:B5:58:3D:C0:91:CA:3F:B8:E6:6B:51:8A
X509v3 Authority Key Identifier:
keyid:DB:83:F5:4F:45:13:1D:92:07:C2:15:A0:98:A2:A6:BC:D6:FF:05:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/24P1T0UTHZIHwhWgmKKmvNb_BQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e50c70-0a70-45ac-9ad4-326764a68cfb/1/24P1T0UTHZIHwhWgmKKmvNb_BQs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e50c70-0a70-45ac-9ad4-326764a68cfb/1/24P1T0UTHZIHwhWgmKKmvNb_BQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:ae:06:6d:87:4f:bb:a2:58:7f:30:d9:90:f3:e6:f7:5b:85:
8d:85:9e:96:c7:3c:15:5b:b0:3c:3f:56:50:b3:d5:90:10:38:
85:23:4e:b5:8d:d0:d3:13:b7:60:95:28:4a:af:d1:5a:3f:2e:
10:5e:56:cd:b1:6d:f2:f9:9a:88:fb:0c:f5:42:22:03:73:70:
a3:2e:f4:fd:51:1f:48:5d:d4:ac:eb:d8:70:af:d6:c8:44:e5:
34:31:6f:3c:0d:2a:a8:93:4f:bb:ba:dc:55:fc:68:d1:51:8a:
e6:32:c3:32:c3:06:2d:4d:00:29:9f:32:e0:32:25:d9:0c:78:
04:f8:02:5c:bf:b5:91:8c:22:8f:00:f0:12:33:5b:e8:34:72:
87:87:69:a5:36:7f:9d:f2:6a:9d:39:b2:67:a8:04:32:0a:7c:
ee:4b:e8:f6:0b:c0:9d:37:40:ba:79:b2:e9:65:06:3c:4f:68:
ad:51:72:86:2e:2b:60:bb:0d:9a:ea:31:5b:b8:9b:fe:fc:ad:
9c:d2:7d:13:c6:da:61:60:4e:fb:35:e7:94:7c:35:38:cb:56:
b8:99:d4:67:aa:d0:74:38:16:8c:ca:30:98:cc:77:57:6d:78:
f8:90:f3:5d:2f:d7:0e:f0:59:f3:65:5c:05:e6:6c:1c:c0:c4:
72:9b:3c:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8jxfv0HAHJMe796gs5a35MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiODNmNTRmNDUxMzFkOTIwN2MyMTVhMDk4YTJhNmJjZDZm
ZjA1MGIwHhcNMjUxMDE5MTMwMTAwWhcNMjUxMDIwMTMwMTAwWjAzMTEwLwYDVQQD
EyhiYjU0ZDk4ZTgwNGE2ODk1YjU1ODNkYzA5MWNhM2ZiOGU2NmI1MThhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx2o2WDT2B9nrBXpph7w3otWQ9Z74
hhDjZ/8aH46eVlDgSOjAdZMufCHGy6Svt4JQ1ugTzQ0i+Wxt2u3f5zP9nmtsgOHw
rwUoG0BnX3EUUOExv/+p5m+I39L3Cr/Qv2wXLUwP6Usy/a54qUgaJoCIXT11k3S9
082YMOsfiMLwM2kCDwDn43GXXuKTjwHfCY0T57kNKl+pTYUStNqRp9UxfeORzmRD
ezLAf/qVUI+taUbSrxTP6yl9yDc0SBcyAQ2rS2RulI52Q9xMqVOdNaNi0y6XmCwM
su5QmQ9vt5qD6k9asX/f9ZG0Ak9aXNk+7RADATU36TCjtWE1RHfkBSANFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLtU2Y6ASmiVtVg9wJHKP7jma1GKMB8GA1UdIwQY
MBaAFNuD9U9FEx2SB8IVoJiiprzW/wULMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjRQMVQwVVRIWklId2hXZ21LS212TmJfQlFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9lNTBjNzAtMGE3MC00NWFjLTlhZDQt
MzI2NzY0YTY4Y2ZiLzEvMjRQMVQwVVRIWklId2hXZ21LS212TmJfQlFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy9lNTBjNzAtMGE3MC00NWFjLTlhZDQtMzI2NzY0YTY4Y2Zi
LzEvMjRQMVQwVVRIWklId2hXZ21LS212TmJfQlFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgq4GbYdP
u6JYfzDZkPPm91uFjYWelsc8FVuwPD9WULPVkBA4hSNOtY3Q0xO3YJUoSq/RWj8u
EF5WzbFt8vmaiPsM9UIiA3Nwoy70/VEfSF3UrOvYcK/WyETlNDFvPA0qqJNPu7rc
Vfxo0VGK5jLDMsMGLU0AKZ8y4DIl2Qx4BPgCXL+1kYwijwDwEjNb6DRyh4dppTZ/
nfJqnTmyZ6gEMgp87kvo9gvAnTdAunmy6WUGPE9orVFyhi4rYLsNmuoxW7ib/vyt
nNJ9E8baYWBO+zXnlHw1OMtWuJnUZ6rQdDgWjMowmMx3V214+JDzXS/XDvBZ82Vc
BeZsHMDEcps8gQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:07:12 2025 by rpki-client