
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/14e601-f31a-41bb-93fe-a59e6e9abcc8/1/r1nTUzHJ7-M8lTB2kyWujvVQ_9o.mft
File: r1nTUzHJ7-M8lTB2kyWujvVQ_9o.mft (raw, json)
Hash identifier: iDxabPQ83XB02zIA9870Il9opPujHWZjl3pMmw8ORQE=
Subject key identifier: C7:A7:FD:6C:7C:C4:4B:16:B2:3E:D4:47:7D:CC:A7:89:2F:E4:8E:CF
Authority key identifier: AF:59:D3:53:31:C9:EF:E3:3C:95:30:76:93:25:AE:8E:F5:50:FF:DA
Certificate issuer: /CN=af59d35331c9efe33c9530769325ae8ef550ffda
Certificate serial: 0199FB7C8381DDA75201EF43B463248C3444
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r1nTUzHJ7-M8lTB2kyWujvVQ_9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/14e601-f31a-41bb-93fe-a59e6e9abcc8/1/r1nTUzHJ7-M8lTB2kyWujvVQ_9o.mft
Manifest number: 1516
Signing time: Sun 19 Oct 2025 08:01:05 +0000
Manifest this update: Sun 19 Oct 2025 08:01:05 +0000
Manifest next update: Mon 20 Oct 2025 08:01:05 +0000
Files and hashes: 1: d1cUGJ6v4aRMFVJ8jR6zf61KUZo.roa (hash: w1Q0yU0/JMksdYl+XzfFqraLhxZYw0tN1TBkWQdYmYc=)
2: r1nTUzHJ7-M8lTB2kyWujvVQ_9o.crl (hash: DxEdYDmzIyxVMkK6+NDeF7k+Sc1nkbIabWOls0fYpOk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/14e601-f31a-41bb-93fe-a59e6e9abcc8/1/r1nTUzHJ7-M8lTB2kyWujvVQ_9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/14e601-f31a-41bb-93fe-a59e6e9abcc8/1/r1nTUzHJ7-M8lTB2kyWujvVQ_9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/r1nTUzHJ7-M8lTB2kyWujvVQ_9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:83:81:dd:a7:52:01:ef:43:b4:63:24:8c:34:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af59d35331c9efe33c9530769325ae8ef550ffda
Validity
Not Before: Oct 19 08:01:05 2025 GMT
Not After : Oct 20 08:01:05 2025 GMT
Subject: CN=c7a7fd6c7cc44b16b23ed4477dcca7892fe48ecf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:75:e7:bf:90:5e:a6:f8:40:04:7d:ba:9f:8c:
64:7e:bb:7b:d7:0e:d7:08:da:f3:68:a8:f8:90:e8:
15:da:72:97:12:44:e4:65:84:02:68:bb:e9:04:b3:
0a:62:c5:f7:eb:e0:64:59:85:51:35:f6:6e:6b:b3:
9e:51:7c:28:45:d5:f0:7c:a8:3b:5a:f0:9f:9c:9b:
fb:09:13:b9:56:bf:ec:37:ac:32:23:11:17:b8:d4:
9c:d5:ad:f2:f7:43:b2:8f:d1:d3:dc:72:81:96:b6:
42:66:14:19:c8:96:80:28:85:0e:1d:1d:5b:44:ec:
37:a1:2c:01:5a:3c:e9:7e:e9:92:57:39:3a:65:20:
8a:d1:3a:b0:36:a7:47:72:11:d9:ef:d2:f5:b7:0e:
70:b5:c8:6c:da:5a:39:a0:d3:2c:78:06:b1:e2:15:
70:c9:b4:a7:21:b6:04:18:fd:c0:36:c0:d7:d3:a3:
b0:8a:7c:ab:63:26:2d:a4:58:c8:7a:5d:0e:cf:64:
5c:b0:44:cc:dc:d8:04:f1:18:3a:0c:32:d9:1f:61:
4e:64:aa:02:be:ef:ec:a5:98:b9:2c:a9:5e:2d:b7:
e1:9a:7e:92:56:a1:2f:3b:3f:6d:39:9a:62:98:ea:
0c:43:68:97:82:09:6e:07:fb:54:ee:a8:76:d0:75:
96:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:A7:FD:6C:7C:C4:4B:16:B2:3E:D4:47:7D:CC:A7:89:2F:E4:8E:CF
X509v3 Authority Key Identifier:
keyid:AF:59:D3:53:31:C9:EF:E3:3C:95:30:76:93:25:AE:8E:F5:50:FF:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r1nTUzHJ7-M8lTB2kyWujvVQ_9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/14e601-f31a-41bb-93fe-a59e6e9abcc8/1/r1nTUzHJ7-M8lTB2kyWujvVQ_9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/14e601-f31a-41bb-93fe-a59e6e9abcc8/1/r1nTUzHJ7-M8lTB2kyWujvVQ_9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:b6:32:0e:a1:ee:86:92:4b:fc:4c:c8:9b:d9:04:f0:a3:74:
80:47:e5:a3:c2:d6:0c:d3:e7:ee:b1:01:b2:30:8a:f9:ba:2b:
4d:ee:52:58:8f:6d:8c:4e:9d:5c:6a:6d:bb:74:f2:18:15:11:
85:07:16:32:fb:e9:b8:29:77:8a:30:6c:47:8d:5e:70:27:90:
21:d5:cf:cb:e0:58:25:61:cc:3e:8b:ef:de:57:2a:f2:9a:40:
75:14:64:65:68:70:3b:a8:9d:3c:61:a8:36:a8:cd:68:2f:82:
85:fb:1b:66:6c:83:84:94:fe:ce:15:1f:cf:6a:c4:b0:44:20:
53:72:0c:dc:72:89:29:15:c7:b1:d2:05:f1:8d:cc:5e:cf:c7:
c1:71:15:5c:3a:35:cb:92:2a:a5:ce:ee:7c:6c:a0:26:8d:9f:
63:3a:61:12:56:79:34:6b:72:cc:ea:80:c8:7a:9a:e6:ed:68:
1b:f1:9c:18:39:bc:7a:82:7d:4b:e4:89:e1:c6:f6:18:82:c1:
76:fb:b3:61:0a:84:0b:7e:95:31:95:2e:c1:cf:d3:df:d6:37:
04:4a:eb:cd:e9:0d:28:d2:0a:d1:52:92:18:87:0d:5c:d2:93:
d8:63:35:3d:7f:b4:17:5d:88:f6:8d:0c:f6:ff:24:ef:cc:1a:
70:0c:cc:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7fIOB3adSAe9DtGMkjDREMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmNTlkMzUzMzFjOWVmZTMzYzk1MzA3NjkzMjVhZThlZjU1
MGZmZGEwHhcNMjUxMDE5MDgwMTA1WhcNMjUxMDIwMDgwMTA1WjAzMTEwLwYDVQQD
EyhjN2E3ZmQ2YzdjYzQ0YjE2YjIzZWQ0NDc3ZGNjYTc4OTJmZTQ4ZWNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+XXnv5BepvhABH26n4xkfrt71w7X
CNrzaKj4kOgV2nKXEkTkZYQCaLvpBLMKYsX36+BkWYVRNfZua7OeUXwoRdXwfKg7
WvCfnJv7CRO5Vr/sN6wyIxEXuNSc1a3y90Oyj9HT3HKBlrZCZhQZyJaAKIUOHR1b
ROw3oSwBWjzpfumSVzk6ZSCK0TqwNqdHchHZ79L1tw5wtchs2lo5oNMseAax4hVw
ybSnIbYEGP3ANsDX06OwinyrYyYtpFjIel0Oz2RcsETM3NgE8Rg6DDLZH2FOZKoC
vu/spZi5LKleLbfhmn6SVqEvOz9tOZpimOoMQ2iXggluB/tU7qh20HWWlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMen/Wx8xEsWsj7UR33Mp4kv5I7PMB8GA1UdIwQY
MBaAFK9Z01Mxye/jPJUwdpMlro71UP/aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjFuVFV6SEo3LU04bFRCMmt5V3VqdlZRXzlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS8xNGU2MDEtZjMxYS00MWJiLTkzZmUt
YTU5ZTZlOWFiY2M4LzEvcjFuVFV6SEo3LU04bFRCMmt5V3VqdlZRXzlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS8xNGU2MDEtZjMxYS00MWJiLTkzZmUtYTU5ZTZlOWFiY2M4
LzEvcjFuVFV6SEo3LU04bFRCMmt5V3VqdlZRXzlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQbYyDqHu
hpJL/EzIm9kE8KN0gEflo8LWDNPn7rEBsjCK+borTe5SWI9tjE6dXGptu3TyGBUR
hQcWMvvpuCl3ijBsR41ecCeQIdXPy+BYJWHMPovv3lcq8ppAdRRkZWhwO6idPGGo
NqjNaC+ChfsbZmyDhJT+zhUfz2rEsEQgU3IM3HKJKRXHsdIF8Y3MXs/HwXEVXDo1
y5Iqpc7ufGygJo2fYzphElZ5NGtyzOqAyHqa5u1oG/GcGDm8eoJ9S+SJ4cb2GILB
dvuzYQqEC36VMZUuwc/T39Y3BErrzekNKNIK0VKSGIcNXNKT2GM1PX+0F12I9o0M
9v8k78wacAzMxQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:18:51 2025 by rpki-client