Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/f75596-7790-432c-88cd-333e53cfa021/1/tE-FORdNAL-ov95JBD9IXDpYdSU.mft
File: tE-FORdNAL-ov95JBD9IXDpYdSU.mft (raw, json)
Hash identifier: cLYKordtg1nFW56kVvSgJIAZrg4jbQMyrZa3dHGd7bs=
Subject key identifier: AE:8E:6E:E9:47:05:3B:64:A7:02:81:9E:22:AD:F8:1B:55:DB:FE:30
Authority key identifier: B4:4F:85:39:17:4D:00:BF:A8:BF:DE:49:04:3F:48:5C:3A:58:75:25
Certificate issuer: /CN=b44f8539174d00bfa8bfde49043f485c3a587525
Certificate serial: 0199FDDA1E68475B232BF037F98274EFAC96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tE-FORdNAL-ov95JBD9IXDpYdSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/f75596-7790-432c-88cd-333e53cfa021/1/tE-FORdNAL-ov95JBD9IXDpYdSU.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 19:02:34 +0000
Manifest this update: Sun 19 Oct 2025 19:02:34 +0000
Manifest next update: Mon 20 Oct 2025 19:02:34 +0000
Files and hashes: 1: tE-FORdNAL-ov95JBD9IXDpYdSU.crl (hash: uVsXdTfgcRYO9lYl9JCdkq+CA1bAVBqG/1zg4aME9hc=)
2: xUV-1OBQ9tZ_Xv0-wwfyT7s6w0s.roa (hash: kyqwYkE6bzY0EYwjT0bnHVarYHy1IZctjgwIpdkE7zI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/f75596-7790-432c-88cd-333e53cfa021/1/tE-FORdNAL-ov95JBD9IXDpYdSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/f75596-7790-432c-88cd-333e53cfa021/1/tE-FORdNAL-ov95JBD9IXDpYdSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tE-FORdNAL-ov95JBD9IXDpYdSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:1e:68:47:5b:23:2b:f0:37:f9:82:74:ef:ac:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b44f8539174d00bfa8bfde49043f485c3a587525
Validity
Not Before: Oct 19 19:02:34 2025 GMT
Not After : Oct 20 19:02:34 2025 GMT
Subject: CN=ae8e6ee947053b64a702819e22adf81b55dbfe30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:1e:b1:4d:a4:7a:04:4d:7e:60:9e:fe:07:10:
8f:7b:dc:97:45:a2:c5:ae:92:95:82:f9:af:ee:ae:
fe:0f:f7:43:d3:56:c2:1a:f1:92:02:69:d9:d7:57:
15:b7:be:5b:a9:f1:f1:60:67:58:c6:df:13:0a:22:
86:a9:72:bd:92:b4:ec:93:da:a8:c9:8b:8d:16:4e:
29:8d:d7:cd:20:d9:9b:09:4c:59:53:6d:c9:a5:39:
76:5a:b5:c9:db:e5:d6:6c:5d:b0:db:e1:7e:0e:81:
0f:fc:e3:31:36:0d:a4:44:30:77:6f:c0:d1:df:b8:
99:e0:f1:6e:37:fa:0b:29:58:e2:f3:bb:c2:53:20:
22:4d:4b:91:a5:f8:21:59:78:7a:b4:09:41:d8:d0:
45:b3:01:e9:7a:76:7e:c4:fe:0d:9b:e5:70:77:ce:
c3:df:6f:a1:96:c1:ad:da:f1:bd:29:87:68:54:7e:
60:41:81:f4:f1:28:cc:be:bc:af:d5:a1:4c:f6:31:
83:48:13:71:59:57:4b:b0:ef:4a:24:cf:e4:7a:10:
f9:34:d8:5c:a8:f1:f5:78:e8:7d:4b:c6:c5:f8:78:
28:3e:13:94:9f:de:e2:4b:f2:07:af:58:75:06:f8:
f5:04:3a:50:f5:fd:2f:09:0d:f5:9b:55:e2:0b:31:
91:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:8E:6E:E9:47:05:3B:64:A7:02:81:9E:22:AD:F8:1B:55:DB:FE:30
X509v3 Authority Key Identifier:
keyid:B4:4F:85:39:17:4D:00:BF:A8:BF:DE:49:04:3F:48:5C:3A:58:75:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tE-FORdNAL-ov95JBD9IXDpYdSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f75596-7790-432c-88cd-333e53cfa021/1/tE-FORdNAL-ov95JBD9IXDpYdSU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f75596-7790-432c-88cd-333e53cfa021/1/tE-FORdNAL-ov95JBD9IXDpYdSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:6a:1a:17:4b:0a:23:e1:a2:69:ac:bd:0b:1e:88:10:e7:ac:
f8:06:a1:09:06:9c:66:64:f3:61:55:b2:b8:44:95:63:80:a1:
f9:02:49:18:22:5a:76:e5:95:70:f4:56:b8:bf:49:90:f1:89:
39:81:d5:ba:ac:31:7d:3c:c9:99:ff:4f:65:33:f7:9e:0a:07:
01:bc:59:04:37:7c:72:e2:0f:9b:5d:12:e9:4d:d1:04:c4:a8:
91:22:a6:35:db:c9:58:ed:d7:80:9b:fc:6c:b7:9d:b2:d7:1b:
3b:f5:05:57:95:93:9c:de:09:f8:58:29:0f:cf:f9:c3:3b:b5:
34:56:32:5c:c5:2a:99:cf:5a:76:20:51:a7:34:49:9e:58:83:
78:31:36:3a:73:50:23:b9:48:1f:49:38:25:b7:49:09:8c:8c:
6f:20:bc:47:4f:52:72:28:b0:13:1d:d7:99:75:4f:81:36:f7:
45:cf:7c:b4:4b:ff:24:dc:c3:b2:f3:d1:ad:e0:14:58:05:31:
68:2f:d0:1f:79:89:d2:8a:e0:47:e0:72:0d:97:61:9a:59:16:
ca:33:72:da:67:93:fa:bb:13:2c:a1:2a:30:cd:37:b8:a6:e3:
ab:b0:a1:1f:7f:bd:70:8a:c7:0e:66:18:9b:19:90:f3:f7:4d:
66:72:da:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn92h5oR1sjK/A3+YJ076yWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0NGY4NTM5MTc0ZDAwYmZhOGJmZGU0OTA0M2Y0ODVjM2E1
ODc1MjUwHhcNMjUxMDE5MTkwMjM0WhcNMjUxMDIwMTkwMjM0WjAzMTEwLwYDVQQD
EyhhZThlNmVlOTQ3MDUzYjY0YTcwMjgxOWUyMmFkZjgxYjU1ZGJmZTMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsx6xTaR6BE1+YJ7+BxCPe9yXRaLF
rpKVgvmv7q7+D/dD01bCGvGSAmnZ11cVt75bqfHxYGdYxt8TCiKGqXK9krTsk9qo
yYuNFk4pjdfNINmbCUxZU23JpTl2WrXJ2+XWbF2w2+F+DoEP/OMxNg2kRDB3b8DR
37iZ4PFuN/oLKVji87vCUyAiTUuRpfghWXh6tAlB2NBFswHpenZ+xP4Nm+Vwd87D
32+hlsGt2vG9KYdoVH5gQYH08SjMvryv1aFM9jGDSBNxWVdLsO9KJM/kehD5NNhc
qPH1eOh9S8bF+HgoPhOUn97iS/IHr1h1Bvj1BDpQ9f0vCQ31m1XiCzGRuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK6ObulHBTtkpwKBniKt+BtV2/4wMB8GA1UdIwQY
MBaAFLRPhTkXTQC/qL/eSQQ/SFw6WHUlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEUtRk9SZE5BTC1vdjk1SkJEOUlYRHBZZFNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9mNzU1OTYtNzc5MC00MzJjLTg4Y2Qt
MzMzZTUzY2ZhMDIxLzEvdEUtRk9SZE5BTC1vdjk1SkJEOUlYRHBZZFNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9mNzU1OTYtNzc5MC00MzJjLTg4Y2QtMzMzZTUzY2ZhMDIx
LzEvdEUtRk9SZE5BTC1vdjk1SkJEOUlYRHBZZFNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATGoaF0sK
I+Giaay9Cx6IEOes+AahCQacZmTzYVWyuESVY4Ch+QJJGCJaduWVcPRWuL9JkPGJ
OYHVuqwxfTzJmf9PZTP3ngoHAbxZBDd8cuIPm10S6U3RBMSokSKmNdvJWO3XgJv8
bLedstcbO/UFV5WTnN4J+FgpD8/5wzu1NFYyXMUqmc9adiBRpzRJnliDeDE2OnNQ
I7lIH0k4JbdJCYyMbyC8R09SciiwEx3XmXVPgTb3Rc98tEv/JNzDsvPRreAUWAUx
aC/QH3mJ0orgR+ByDZdhmlkWyjNy2meT+rsTLKEqMM03uKbjq7ChH3+9cIrHDmYY
mxmQ8/dNZnLaKw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:54:35 2025 by rpki-client