Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/1f889b-4445-4770-a95e-f8063230e183/1/tT1dyv8VkDIr61fsPrrvYlBBKVU.mft
File: tT1dyv8VkDIr61fsPrrvYlBBKVU.mft (raw, json)
Hash identifier: XJM+WHDPpTZbt5OsbEEWBIoAI7kenzk7vwLccWx4pZs=
Subject key identifier: 35:C9:9A:A4:F1:6C:8A:77:57:48:14:BA:69:47:14:6D:D2:65:3B:C5
Authority key identifier: B5:3D:5D:CA:FF:15:90:32:2B:EB:57:EC:3E:BA:EF:62:50:41:29:55
Certificate issuer: /CN=b53d5dcaff1590322beb57ec3ebaef6250412955
Certificate serial: 0199FDD8E46017A5174E5032E883BF7B45E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tT1dyv8VkDIr61fsPrrvYlBBKVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/1f889b-4445-4770-a95e-f8063230e183/1/tT1dyv8VkDIr61fsPrrvYlBBKVU.mft
Manifest number: 09A9
Signing time: Sun 19 Oct 2025 19:01:13 +0000
Manifest this update: Sun 19 Oct 2025 19:01:13 +0000
Manifest next update: Mon 20 Oct 2025 19:01:13 +0000
Files and hashes: 1: tT1dyv8VkDIr61fsPrrvYlBBKVU.crl (hash: mlNc/4ouIUytBrc+cF7j4tGDOQqyIDFU9eJFTtI87Gg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/1f889b-4445-4770-a95e-f8063230e183/1/tT1dyv8VkDIr61fsPrrvYlBBKVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/1f889b-4445-4770-a95e-f8063230e183/1/tT1dyv8VkDIr61fsPrrvYlBBKVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tT1dyv8VkDIr61fsPrrvYlBBKVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d8:e4:60:17:a5:17:4e:50:32:e8:83:bf:7b:45:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b53d5dcaff1590322beb57ec3ebaef6250412955
Validity
Not Before: Oct 19 19:01:13 2025 GMT
Not After : Oct 20 19:01:13 2025 GMT
Subject: CN=35c99aa4f16c8a77574814ba6947146dd2653bc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:69:fb:69:3e:0d:a8:6a:4a:98:91:61:93:52:
a4:21:69:2c:c7:19:99:df:8a:42:f7:74:70:41:d9:
57:d4:84:87:01:39:26:4d:db:d9:71:4e:f7:c2:79:
3c:99:b2:e7:58:07:4b:e3:ef:a3:e0:d4:40:b9:92:
7a:67:cd:91:8c:0c:14:eb:92:3a:a6:fa:01:ec:c2:
0f:32:21:e7:2e:ca:20:36:cc:e3:2b:bf:53:74:05:
d8:e6:eb:d9:bb:b3:96:44:96:bf:aa:73:bd:db:3b:
ae:6d:f8:42:33:4e:bf:ae:28:20:03:fc:a8:42:81:
54:e1:64:22:5a:06:3a:c6:1c:27:1c:76:4a:ff:f8:
63:18:2c:ed:ae:c6:cb:9e:aa:62:36:fa:c5:f3:8f:
01:e5:3a:39:66:6a:15:2c:b9:45:3c:fc:ce:45:d6:
dc:c9:3e:a9:3c:e9:f7:34:d0:09:2d:a8:5b:1f:bd:
31:b1:fe:70:50:fb:c2:1f:51:d6:9c:55:12:ed:3c:
91:99:06:1f:48:73:3b:f6:91:4c:c4:07:d2:2c:99:
68:51:0b:c6:11:0f:e0:34:71:69:fe:eb:a7:3e:f2:
9b:7d:c9:20:c3:7e:a3:e8:bf:bc:86:5a:cb:b8:b8:
bc:a5:3d:6a:4d:35:b9:d2:6f:9a:d5:bb:45:26:c5:
8d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:C9:9A:A4:F1:6C:8A:77:57:48:14:BA:69:47:14:6D:D2:65:3B:C5
X509v3 Authority Key Identifier:
keyid:B5:3D:5D:CA:FF:15:90:32:2B:EB:57:EC:3E:BA:EF:62:50:41:29:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tT1dyv8VkDIr61fsPrrvYlBBKVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/1f889b-4445-4770-a95e-f8063230e183/1/tT1dyv8VkDIr61fsPrrvYlBBKVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/1f889b-4445-4770-a95e-f8063230e183/1/tT1dyv8VkDIr61fsPrrvYlBBKVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:22:fd:b1:16:5c:a7:23:c8:75:f2:d7:1f:be:9d:c5:f0:b0:
1c:9e:7b:21:94:c3:ff:44:b8:50:f7:09:e7:b8:fa:86:89:23:
24:5e:05:32:25:ae:28:e2:26:57:1d:15:ed:1d:d9:34:31:b5:
16:19:18:91:94:f5:3d:55:20:56:2b:f8:8e:42:ae:8f:09:6d:
f3:ae:43:06:4f:b3:64:d7:de:45:7e:b3:9b:2b:c6:20:32:0e:
47:d2:1c:08:00:43:8d:86:96:eb:2e:7e:16:9b:73:c4:fb:51:
b9:eb:7e:85:d9:c8:06:74:85:38:ec:f1:a2:d5:09:91:6f:39:
cd:ba:94:96:28:75:1c:ac:b0:a3:f4:93:57:ec:b1:8c:e6:06:
7e:62:25:e6:da:d0:b7:22:79:c1:7f:ae:18:18:d5:d3:17:fd:
d2:a3:e3:3e:8d:b5:ca:3c:38:b0:61:98:29:da:f8:20:ab:b5:
2e:6e:1e:db:e8:5e:f1:71:e7:8f:d2:00:fb:3c:b6:15:e6:96:
2b:78:82:5e:e4:b0:16:81:dd:04:32:4c:4e:9c:e4:2a:12:fa:
16:5c:ab:91:e5:4c:f9:60:99:98:83:34:bd:ef:93:7e:67:ee:
f2:af:03:a3:ec:89:e8:ae:66:59:cc:09:ec:22:6b:40:a4:0e:
1d:8a:0f:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn92ORgF6UXTlAy6IO/e0XoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1M2Q1ZGNhZmYxNTkwMzIyYmViNTdlYzNlYmFlZjYyNTA0
MTI5NTUwHhcNMjUxMDE5MTkwMTEzWhcNMjUxMDIwMTkwMTEzWjAzMTEwLwYDVQQD
EygzNWM5OWFhNGYxNmM4YTc3NTc0ODE0YmE2OTQ3MTQ2ZGQyNjUzYmM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGn7aT4NqGpKmJFhk1KkIWksxxmZ
34pC93RwQdlX1ISHATkmTdvZcU73wnk8mbLnWAdL4++j4NRAuZJ6Z82RjAwU65I6
pvoB7MIPMiHnLsogNszjK79TdAXY5uvZu7OWRJa/qnO92zuubfhCM06/riggA/yo
QoFU4WQiWgY6xhwnHHZK//hjGCztrsbLnqpiNvrF848B5To5ZmoVLLlFPPzORdbc
yT6pPOn3NNAJLahbH70xsf5wUPvCH1HWnFUS7TyRmQYfSHM79pFMxAfSLJloUQvG
EQ/gNHFp/uunPvKbfckgw36j6L+8hlrLuLi8pT1qTTW50m+a1btFJsWNlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDXJmqTxbIp3V0gUumlHFG3SZTvFMB8GA1UdIwQY
MBaAFLU9Xcr/FZAyK+tX7D6672JQQSlVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFQxZHl2OFZrRElyNjFmc1BycnZZbEJCS1ZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy8xZjg4OWItNDQ0NS00NzcwLWE5NWUt
ZjgwNjMyMzBlMTgzLzEvdFQxZHl2OFZrRElyNjFmc1BycnZZbEJCS1ZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy8xZjg4OWItNDQ0NS00NzcwLWE5NWUtZjgwNjMyMzBlMTgz
LzEvdFQxZHl2OFZrRElyNjFmc1BycnZZbEJCS1ZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVyL9sRZc
pyPIdfLXH76dxfCwHJ57IZTD/0S4UPcJ57j6hokjJF4FMiWuKOImVx0V7R3ZNDG1
FhkYkZT1PVUgViv4jkKujwlt865DBk+zZNfeRX6zmyvGIDIOR9IcCABDjYaW6y5+
FptzxPtRuet+hdnIBnSFOOzxotUJkW85zbqUlih1HKywo/STV+yxjOYGfmIl5trQ
tyJ5wX+uGBjV0xf90qPjPo21yjw4sGGYKdr4IKu1Lm4e2+he8XHnj9IA+zy2FeaW
K3iCXuSwFoHdBDJMTpzkKhL6FlyrkeVM+WCZmIM0ve+Tfmfu8q8Do+yJ6K5mWcwJ
7CJrQKQOHYoP7g==
-----END CERTIFICATE-----
Generated at Mon Oct 20 03:41:21 2025 by rpki-client