Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/45c53d-aba9-42f7-8496-7cce34fe6b5d/1/bQmekI59iHniTR7eCdgSz0at4sw.mft
File: bQmekI59iHniTR7eCdgSz0at4sw.mft (raw, json)
Hash identifier: wj47YF4mSf8mQrt7Wcbz1kIPkdfOOM3O/VIP6rz0ovM=
Subject key identifier: E2:50:F0:70:70:19:11:FC:CA:E4:BA:A5:5F:A2:EA:03:AC:88:31:49
Authority key identifier: 6D:09:9E:90:8E:7D:88:79:E2:4D:1E:DE:09:D8:12:CF:46:AD:E2:CC
Certificate issuer: /CN=6d099e908e7d8879e24d1ede09d812cf46ade2cc
Certificate serial: 0199FC58627DBFD379F7D152FFF1A431A986
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bQmekI59iHniTR7eCdgSz0at4sw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/45c53d-aba9-42f7-8496-7cce34fe6b5d/1/bQmekI59iHniTR7eCdgSz0at4sw.mft
Manifest number: 05DE
Signing time: Sun 19 Oct 2025 12:01:14 +0000
Manifest this update: Sun 19 Oct 2025 12:01:14 +0000
Manifest next update: Mon 20 Oct 2025 12:01:14 +0000
Files and hashes: 1: bQmekI59iHniTR7eCdgSz0at4sw.crl (hash: 4C0BRI+chjfRJVJXvVsMz5H6HLYOSrWDXAXMMvH+VEA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/45c53d-aba9-42f7-8496-7cce34fe6b5d/1/bQmekI59iHniTR7eCdgSz0at4sw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/45c53d-aba9-42f7-8496-7cce34fe6b5d/1/bQmekI59iHniTR7eCdgSz0at4sw.mft
rsync://rpki.ripe.net/repository/DEFAULT/bQmekI59iHniTR7eCdgSz0at4sw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:62:7d:bf:d3:79:f7:d1:52:ff:f1:a4:31:a9:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d099e908e7d8879e24d1ede09d812cf46ade2cc
Validity
Not Before: Oct 19 12:01:14 2025 GMT
Not After : Oct 20 12:01:14 2025 GMT
Subject: CN=e250f070701911fccae4baa55fa2ea03ac883149
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a9:29:33:81:41:66:82:0f:62:9a:1b:ef:1f:
ed:94:48:02:58:a9:1a:81:9d:a8:de:a8:44:47:86:
3f:15:4c:51:e4:2c:cd:ef:b1:c2:6d:90:51:d4:c9:
98:71:70:f6:6d:1c:7c:45:07:4d:cf:09:2c:3e:e5:
10:05:56:55:79:ca:10:f5:12:b4:d1:80:da:1c:66:
fb:67:4e:ea:b9:2e:6e:0f:41:cf:a8:00:e6:a9:ae:
f1:c5:d7:62:27:b1:d4:12:d1:8e:bd:19:50:3c:71:
f0:53:65:9e:86:7a:b1:3c:78:20:5a:78:a9:d0:5c:
08:b4:14:a5:34:a8:a4:90:78:b0:0c:8e:cd:0e:ef:
4e:42:84:7f:4b:c0:d8:6e:f8:32:c1:f6:63:b2:52:
42:02:86:ca:02:aa:c1:97:54:fb:77:e3:1e:3e:c4:
7b:c7:5f:e4:46:b8:38:00:49:35:69:f4:8a:f4:a6:
d0:af:60:03:cd:c7:5a:ca:fa:65:a1:52:d8:4e:36:
f9:36:3a:fa:7d:ae:a3:4f:7d:f2:3b:dd:0e:3f:43:
f9:e3:c0:54:ff:ef:18:15:fb:4f:8f:3f:80:8e:b6:
ee:47:78:8c:5b:38:3f:22:7d:c5:dd:90:39:b3:c9:
cf:25:03:2a:51:19:a2:6a:8a:4c:81:02:ba:db:8f:
01:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:50:F0:70:70:19:11:FC:CA:E4:BA:A5:5F:A2:EA:03:AC:88:31:49
X509v3 Authority Key Identifier:
keyid:6D:09:9E:90:8E:7D:88:79:E2:4D:1E:DE:09:D8:12:CF:46:AD:E2:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQmekI59iHniTR7eCdgSz0at4sw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/45c53d-aba9-42f7-8496-7cce34fe6b5d/1/bQmekI59iHniTR7eCdgSz0at4sw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/45c53d-aba9-42f7-8496-7cce34fe6b5d/1/bQmekI59iHniTR7eCdgSz0at4sw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:97:da:de:a5:e9:14:6a:ad:34:86:e8:5f:b9:40:02:e7:b7:
39:45:c2:2b:41:cf:b3:11:bf:a2:25:83:2a:89:7c:1b:4b:73:
c3:84:b5:1c:8f:6b:d4:ed:d8:12:31:c8:a9:36:df:ee:6f:ca:
3f:11:1b:c2:3f:e5:62:d4:25:2a:ae:48:44:fc:4b:f4:03:40:
de:71:d5:ce:17:29:8f:37:a7:85:06:42:bf:1a:e2:29:93:d8:
42:1a:2d:f3:78:e0:f1:02:e2:d8:30:7c:14:4a:04:af:c3:34:
ac:18:41:ff:68:d3:b9:bf:81:69:5d:a7:24:16:4a:ed:e9:91:
3e:25:ee:90:6c:ee:0a:f5:5c:a1:6c:06:8f:1b:c7:f1:0c:7e:
5d:01:a0:74:75:b8:5e:0b:c2:1b:62:33:b8:2f:84:c0:2a:c7:
66:bd:66:8d:9c:da:27:cd:08:19:84:6c:63:4a:76:6c:c9:e4:
4f:81:3d:72:dd:a1:ec:84:72:b7:71:ea:d1:c8:e1:67:cc:ec:
4f:05:a3:62:2b:f6:5b:96:18:31:c5:2b:d8:f9:91:cc:c2:88:
37:c1:2f:db:52:70:dd:85:b9:9f:ea:8d:7c:60:f0:be:27:04:
ac:00:5b:79:df:6d:77:9f:22:43:c0:8c:c5:be:98:b9:86:fc:
0b:9e:65:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WGJ9v9N599FS//GkMamGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkMDk5ZTkwOGU3ZDg4NzllMjRkMWVkZTA5ZDgxMmNmNDZh
ZGUyY2MwHhcNMjUxMDE5MTIwMTE0WhcNMjUxMDIwMTIwMTE0WjAzMTEwLwYDVQQD
EyhlMjUwZjA3MDcwMTkxMWZjY2FlNGJhYTU1ZmEyZWEwM2FjODgzMTQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwakpM4FBZoIPYpob7x/tlEgCWKka
gZ2o3qhER4Y/FUxR5CzN77HCbZBR1MmYcXD2bRx8RQdNzwksPuUQBVZVecoQ9RK0
0YDaHGb7Z07quS5uD0HPqADmqa7xxddiJ7HUEtGOvRlQPHHwU2WehnqxPHggWnip
0FwItBSlNKikkHiwDI7NDu9OQoR/S8DYbvgywfZjslJCAobKAqrBl1T7d+MePsR7
x1/kRrg4AEk1afSK9KbQr2ADzcdayvploVLYTjb5Njr6fa6jT33yO90OP0P548BU
/+8YFftPjz+AjrbuR3iMWzg/In3F3ZA5s8nPJQMqURmiaopMgQK6248BzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOJQ8HBwGRH8yuS6pV+i6gOsiDFJMB8GA1UdIwQY
MBaAFG0JnpCOfYh54k0e3gnYEs9GreLMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlFtZWtJNTlpSG5pVFI3ZUNkZ1N6MGF0NHN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi80NWM1M2QtYWJhOS00MmY3LTg0OTYt
N2NjZTM0ZmU2YjVkLzEvYlFtZWtJNTlpSG5pVFI3ZUNkZ1N6MGF0NHN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi80NWM1M2QtYWJhOS00MmY3LTg0OTYtN2NjZTM0ZmU2YjVk
LzEvYlFtZWtJNTlpSG5pVFI3ZUNkZ1N6MGF0NHN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMpfa3qXp
FGqtNIboX7lAAue3OUXCK0HPsxG/oiWDKol8G0tzw4S1HI9r1O3YEjHIqTbf7m/K
PxEbwj/lYtQlKq5IRPxL9ANA3nHVzhcpjzenhQZCvxriKZPYQhot83jg8QLi2DB8
FEoEr8M0rBhB/2jTub+BaV2nJBZK7emRPiXukGzuCvVcoWwGjxvH8Qx+XQGgdHW4
XgvCG2IzuC+EwCrHZr1mjZzaJ80IGYRsY0p2bMnkT4E9ct2h7IRyt3Hq0cjhZ8zs
TwWjYiv2W5YYMcUr2PmRzMKIN8Ev21Jw3YW5n+qNfGDwvicErABbed9td58iQ8CM
xb6YuYb8C55lqQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:07:00 2025 by rpki-client