Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/974816-f2e7-4f8a-86c9-f6f2c5850b51/1/dM1ajbKkgrSTFrdXO4pPh09uuxU.mft
File: dM1ajbKkgrSTFrdXO4pPh09uuxU.mft (raw, json)
Hash identifier: JjmfFOKHLR+p+TlCIba/XfXSCf3ybOBG8pHWmM5ry1Q=
Subject key identifier: F1:74:8B:D8:3B:0D:15:C2:03:44:A2:02:80:46:18:D3:14:C7:F6:DC
Authority key identifier: 74:CD:5A:8D:B2:A4:82:B4:93:16:B7:57:3B:8A:4F:87:4F:6E:BB:15
Certificate issuer: /CN=74cd5a8db2a482b49316b7573b8a4f874f6ebb15
Certificate serial: 0199FFC8051DA122398F73569891D8C234DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dM1ajbKkgrSTFrdXO4pPh09uuxU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/974816-f2e7-4f8a-86c9-f6f2c5850b51/1/dM1ajbKkgrSTFrdXO4pPh09uuxU.mft
Manifest number: 16E2
Signing time: Mon 20 Oct 2025 04:02:02 +0000
Manifest this update: Mon 20 Oct 2025 04:02:02 +0000
Manifest next update: Tue 21 Oct 2025 04:02:02 +0000
Files and hashes: 1: dM1ajbKkgrSTFrdXO4pPh09uuxU.crl (hash: vYeyfoh/3xnRjnBYJB8eY45Nv2lz/eQZ4r4yodU9/+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/974816-f2e7-4f8a-86c9-f6f2c5850b51/1/dM1ajbKkgrSTFrdXO4pPh09uuxU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/974816-f2e7-4f8a-86c9-f6f2c5850b51/1/dM1ajbKkgrSTFrdXO4pPh09uuxU.mft
rsync://rpki.ripe.net/repository/DEFAULT/dM1ajbKkgrSTFrdXO4pPh09uuxU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:05:1d:a1:22:39:8f:73:56:98:91:d8:c2:34:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74cd5a8db2a482b49316b7573b8a4f874f6ebb15
Validity
Not Before: Oct 20 04:02:02 2025 GMT
Not After : Oct 21 04:02:02 2025 GMT
Subject: CN=f1748bd83b0d15c20344a202804618d314c7f6dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c9:ae:0e:2b:63:c4:77:b3:af:4e:8e:ca:32:
73:22:29:d1:8c:73:d3:5e:1a:ef:6b:cd:d0:3a:c5:
57:4e:29:69:bd:fd:f9:8d:c7:15:54:f5:1f:4c:18:
cc:e8:49:60:c1:6f:08:03:c1:1e:28:1d:09:05:8c:
0d:cb:9f:ad:44:01:3b:48:8c:af:2c:35:bb:d0:19:
98:a3:b0:ef:31:47:07:3f:de:d6:0c:7b:51:66:da:
53:1c:fd:9c:f8:8f:ca:18:5b:2c:27:f2:74:2a:8b:
eb:d4:7a:8a:0e:f7:1c:8b:8a:b5:b8:61:f7:28:4a:
d5:7c:4a:4d:5b:0f:12:68:c3:a4:2c:cc:e8:0f:a9:
64:a3:8d:eb:78:c4:b9:08:94:65:11:66:ef:3c:97:
8a:e8:f3:38:1b:d2:de:93:b9:36:e0:89:66:7f:08:
18:ea:98:c0:ef:64:9f:44:14:e3:6b:dd:15:a6:7d:
02:6d:f6:71:28:44:b4:1f:84:5e:7d:33:5a:8b:b6:
2c:d8:6b:79:66:89:15:3c:2a:c5:ed:8c:a7:4d:97:
e6:d0:b1:a7:28:7b:8a:62:20:7c:16:dc:6f:50:3b:
e8:70:f2:4b:1b:9d:7a:50:9f:39:e8:01:fa:2c:52:
7c:ee:31:8d:27:cd:55:57:70:cf:39:70:71:e5:54:
7b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:74:8B:D8:3B:0D:15:C2:03:44:A2:02:80:46:18:D3:14:C7:F6:DC
X509v3 Authority Key Identifier:
keyid:74:CD:5A:8D:B2:A4:82:B4:93:16:B7:57:3B:8A:4F:87:4F:6E:BB:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dM1ajbKkgrSTFrdXO4pPh09uuxU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/974816-f2e7-4f8a-86c9-f6f2c5850b51/1/dM1ajbKkgrSTFrdXO4pPh09uuxU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/974816-f2e7-4f8a-86c9-f6f2c5850b51/1/dM1ajbKkgrSTFrdXO4pPh09uuxU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:b4:f0:49:52:ed:5d:64:78:87:7e:fa:47:f5:c3:e7:8a:ee:
68:30:a3:85:af:12:2f:5f:a5:99:a1:ee:63:bd:d4:d2:1b:82:
2a:e3:a5:6c:a6:a6:b4:5e:62:7f:8a:07:b6:50:4b:f2:72:97:
67:37:a0:ae:c6:4d:b7:f5:bb:d0:13:a6:c6:db:08:93:c6:24:
5f:d2:79:77:02:55:98:93:53:18:d7:38:19:22:57:62:46:a5:
d7:5c:7d:3f:7e:90:1e:dd:d6:7c:98:a5:5b:42:d6:b8:bc:40:
7d:8a:ad:0f:19:ef:0f:8d:a8:77:d5:8a:86:2b:68:6d:84:85:
80:9b:92:26:2a:9b:a6:30:a7:01:53:a3:b9:04:3c:76:14:11:
4b:87:0c:8e:cb:59:53:be:a9:e9:cf:5d:da:6f:de:d2:1b:83:
29:af:46:fd:a4:aa:7c:a7:d0:99:7e:13:78:26:2c:44:82:3d:
6d:7c:ed:f5:46:c6:50:83:2e:18:57:ad:1e:eb:14:06:6d:06:
8f:c3:01:ad:41:5f:1b:d2:76:36:42:e2:e5:f4:a0:50:b5:ba:
41:7f:d0:3d:d0:86:cc:95:ca:af:27:ec:86:67:fe:29:16:67:
54:c8:23:0e:80:d4:16:af:bf:80:76:44:5b:2a:27:0e:62:42:
ce:a4:8e:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/yAUdoSI5j3NWmJHYwjTaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0Y2Q1YThkYjJhNDgyYjQ5MzE2Yjc1NzNiOGE0Zjg3NGY2
ZWJiMTUwHhcNMjUxMDIwMDQwMjAyWhcNMjUxMDIxMDQwMjAyWjAzMTEwLwYDVQQD
EyhmMTc0OGJkODNiMGQxNWMyMDM0NGEyMDI4MDQ2MThkMzE0YzdmNmRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8muDitjxHezr06OyjJzIinRjHPT
Xhrva83QOsVXTilpvf35jccVVPUfTBjM6ElgwW8IA8EeKB0JBYwNy5+tRAE7SIyv
LDW70BmYo7DvMUcHP97WDHtRZtpTHP2c+I/KGFssJ/J0Kovr1HqKDvcci4q1uGH3
KErVfEpNWw8SaMOkLMzoD6lko43reMS5CJRlEWbvPJeK6PM4G9Lek7k24IlmfwgY
6pjA72SfRBTja90Vpn0CbfZxKES0H4RefTNai7Ys2Gt5ZokVPCrF7YynTZfm0LGn
KHuKYiB8FtxvUDvocPJLG516UJ856AH6LFJ87jGNJ81VV3DPOXBx5VR73wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPF0i9g7DRXCA0SiAoBGGNMUx/bcMB8GA1UdIwQY
MBaAFHTNWo2ypIK0kxa3VzuKT4dPbrsVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZE0xYWpiS2tnclNURnJkWE80cFBoMDl1dXhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC85NzQ4MTYtZjJlNy00ZjhhLTg2Yzkt
ZjZmMmM1ODUwYjUxLzEvZE0xYWpiS2tnclNURnJkWE80cFBoMDl1dXhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC85NzQ4MTYtZjJlNy00ZjhhLTg2YzktZjZmMmM1ODUwYjUx
LzEvZE0xYWpiS2tnclNURnJkWE80cFBoMDl1dXhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC7TwSVLt
XWR4h376R/XD54ruaDCjha8SL1+lmaHuY73U0huCKuOlbKamtF5if4oHtlBL8nKX
ZzegrsZNt/W70BOmxtsIk8YkX9J5dwJVmJNTGNc4GSJXYkal11x9P36QHt3WfJil
W0LWuLxAfYqtDxnvD42od9WKhitobYSFgJuSJiqbpjCnAVOjuQQ8dhQRS4cMjstZ
U76p6c9d2m/e0huDKa9G/aSqfKfQmX4TeCYsRII9bXzt9UbGUIMuGFetHusUBm0G
j8MBrUFfG9J2NkLi5fSgULW6QX/QPdCGzJXKryfshmf+KRZnVMgjDoDUFq+/gHZE
WyonDmJCzqSOww==
-----END CERTIFICATE-----
Generated at Mon Oct 20 09:11:49 2025 by rpki-client