Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/sL1o43Dn7CW-yOAUl7ITjZXcbrw.mft
File: sL1o43Dn7CW-yOAUl7ITjZXcbrw.mft (raw, json)
Hash identifier: xFyYBFH3amaq8Gh35jjD2/XDh9Hi4VJe0aXl7jxwFy8=
Subject key identifier: A9:1B:13:A7:6A:0E:D5:98:13:B2:58:38:16:81:07:A6:8D:4E:29:47
Authority key identifier: B0:BD:68:E3:70:E7:EC:25:BE:C8:E0:14:97:B2:13:8D:95:DC:6E:BC
Certificate issuer: /CN=b0bd68e370e7ec25bec8e01497b2138d95dc6ebc
Certificate serial: 0199FD6AF59C38BF33D5D1BF7F60BE391601
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sL1o43Dn7CW-yOAUl7ITjZXcbrw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/sL1o43Dn7CW-yOAUl7ITjZXcbrw.mft
Manifest number: 0DC7
Signing time: Sun 19 Oct 2025 17:01:09 +0000
Manifest this update: Sun 19 Oct 2025 17:01:09 +0000
Manifest next update: Mon 20 Oct 2025 17:01:09 +0000
Files and hashes: 1: WiIPyXHByzAssjj4VKSqXNq3hNo.roa (hash: zCz09ISW2vqCRWl6+kt0e/gaUd26cQmDKkxwLzxkeJQ=)
2: XLNp588BlhjTzq9wL8KooDNiDfQ.roa (hash: yqzj3pa+xK6sQ61wkjeNUDLd0sOcE9ePSDM9S9DIM0g=)
3: sL1o43Dn7CW-yOAUl7ITjZXcbrw.crl (hash: GD2rGmgTdiy6wPqnVr2nKzB361/0RksSz8UWAPrEYZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/sL1o43Dn7CW-yOAUl7ITjZXcbrw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/sL1o43Dn7CW-yOAUl7ITjZXcbrw.mft
rsync://rpki.ripe.net/repository/DEFAULT/sL1o43Dn7CW-yOAUl7ITjZXcbrw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6a:f5:9c:38:bf:33:d5:d1:bf:7f:60:be:39:16:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0bd68e370e7ec25bec8e01497b2138d95dc6ebc
Validity
Not Before: Oct 19 17:01:09 2025 GMT
Not After : Oct 20 17:01:09 2025 GMT
Subject: CN=a91b13a76a0ed59813b25838168107a68d4e2947
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:26:95:4f:ac:ec:6f:e9:bc:9f:d1:a3:cf:be:
4a:dd:b6:8f:91:ca:3b:47:61:cc:67:7a:69:c1:e3:
c0:c7:c7:e7:e4:15:ce:2d:40:d2:b5:ce:b5:56:e4:
42:e6:19:38:46:86:2b:9a:87:2d:21:93:b6:59:ae:
68:21:b4:a4:9b:2a:30:13:12:a4:56:a0:3d:c7:13:
c5:c5:42:38:bd:e1:3b:42:25:24:8a:b7:ad:ab:59:
3f:a8:19:63:84:97:bc:4f:a7:aa:ad:0b:fa:be:27:
9c:87:d6:05:68:a1:76:64:a7:31:2f:fe:49:56:e5:
93:4d:2e:45:b9:c2:ed:2b:a3:62:df:76:83:50:50:
e5:b5:c8:1e:c6:23:40:f4:de:1c:a4:ea:e2:5c:6f:
39:02:8b:90:73:46:55:bf:08:48:4c:68:ad:29:03:
73:6d:a6:c3:7d:cf:a8:74:4a:27:a6:e7:ef:be:46:
2f:88:36:8b:52:6e:f2:6d:a0:6d:aa:a4:6f:f6:36:
9a:9b:5b:6d:b7:77:c5:ee:23:33:c0:3e:f4:de:09:
19:43:82:f8:29:40:c1:fa:77:56:17:99:28:bd:d7:
35:28:c9:28:4d:c6:41:f5:6b:37:ec:87:6e:84:52:
d8:ff:c0:22:a7:8b:dd:cc:99:07:e1:a5:3a:56:ce:
11:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:1B:13:A7:6A:0E:D5:98:13:B2:58:38:16:81:07:A6:8D:4E:29:47
X509v3 Authority Key Identifier:
keyid:B0:BD:68:E3:70:E7:EC:25:BE:C8:E0:14:97:B2:13:8D:95:DC:6E:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sL1o43Dn7CW-yOAUl7ITjZXcbrw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/sL1o43Dn7CW-yOAUl7ITjZXcbrw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/sL1o43Dn7CW-yOAUl7ITjZXcbrw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:e7:39:45:0a:3c:81:81:ae:b4:35:9d:f7:40:db:2f:2c:7d:
98:e3:13:d0:d6:b8:bf:b8:83:17:94:5f:fe:a9:04:b3:ff:9e:
6f:06:a6:cd:7a:58:f4:f0:51:ed:c7:35:2d:7a:e3:16:ce:57:
fd:4e:c8:cc:48:19:2a:32:ce:21:d5:94:29:c8:d2:70:e7:d9:
81:e7:a4:52:77:73:70:a3:20:2d:bc:94:b5:db:12:5f:9b:ba:
8a:74:9b:11:fb:78:63:4d:f9:95:62:67:36:76:2c:0d:d9:6e:
05:ac:84:3a:fd:d9:a2:e1:a6:6b:3e:4e:c7:6d:8b:57:4b:b1:
d6:d4:47:03:06:97:40:6e:a6:c6:53:e6:e1:e4:ee:0b:db:10:
26:c0:fd:9e:3b:56:6e:f6:3b:b7:71:e5:e7:c1:17:fe:b0:a1:
d1:e8:41:b1:c6:58:0d:ee:7c:45:63:72:20:e5:13:df:f9:56:
54:c3:17:e4:7f:8e:b6:36:4e:ad:8e:63:82:d1:af:54:df:32:
00:dd:a1:85:49:28:4e:8d:9e:31:1b:e5:33:5c:9b:07:d9:1a:
15:2c:cd:41:fc:4e:8b:3b:13:35:69:df:de:56:9a:56:f1:78:
6b:eb:b3:e3:35:d7:c0:3b:33:fb:13:27:90:9b:f6:b1:49:b7:
01:c0:e6:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9avWcOL8z1dG/f2C+ORYBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwYmQ2OGUzNzBlN2VjMjViZWM4ZTAxNDk3YjIxMzhkOTVk
YzZlYmMwHhcNMjUxMDE5MTcwMTA5WhcNMjUxMDIwMTcwMTA5WjAzMTEwLwYDVQQD
EyhhOTFiMTNhNzZhMGVkNTk4MTNiMjU4MzgxNjgxMDdhNjhkNGUyOTQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSaVT6zsb+m8n9Gjz75K3baPkco7
R2HMZ3ppwePAx8fn5BXOLUDStc61VuRC5hk4RoYrmoctIZO2Wa5oIbSkmyowExKk
VqA9xxPFxUI4veE7QiUkiretq1k/qBljhJe8T6eqrQv6viech9YFaKF2ZKcxL/5J
VuWTTS5FucLtK6Ni33aDUFDltcgexiNA9N4cpOriXG85AouQc0ZVvwhITGitKQNz
babDfc+odEonpufvvkYviDaLUm7ybaBtqqRv9jaam1ttt3fF7iMzwD703gkZQ4L4
KUDB+ndWF5kovdc1KMkoTcZB9Ws37IduhFLY/8Aip4vdzJkH4aU6Vs4R3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKkbE6dqDtWYE7JYOBaBB6aNTilHMB8GA1UdIwQY
MBaAFLC9aONw5+wlvsjgFJeyE42V3G68MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0wxbzQzRG43Q1cteU9BVWw3SVRqWlhjYnJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9mNGNhMWMtMzVkZC00Y2IxLTg0ZmEt
ODExNWNhZmQzOGNlLzEvc0wxbzQzRG43Q1cteU9BVWw3SVRqWlhjYnJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC9mNGNhMWMtMzVkZC00Y2IxLTg0ZmEtODExNWNhZmQzOGNl
LzEvc0wxbzQzRG43Q1cteU9BVWw3SVRqWlhjYnJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaec5RQo8
gYGutDWd90DbLyx9mOMT0Na4v7iDF5Rf/qkEs/+ebwamzXpY9PBR7cc1LXrjFs5X
/U7IzEgZKjLOIdWUKcjScOfZgeekUndzcKMgLbyUtdsSX5u6inSbEft4Y035lWJn
NnYsDdluBayEOv3ZouGmaz5Ox22LV0ux1tRHAwaXQG6mxlPm4eTuC9sQJsD9njtW
bvY7t3Hl58EX/rCh0ehBscZYDe58RWNyIOUT3/lWVMMX5H+OtjZOrY5jgtGvVN8y
AN2hhUkoTo2eMRvlM1ybB9kaFSzNQfxOizsTNWnf3laaVvF4a+uz4zXXwDsz+xMn
kJv2sUm3AcDmIQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:13:14 2025 by rpki-client