Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/d9cb41-1c3b-46ab-a993-3c3e50dda6cc/1/156keuFhy7Pa75d4lzDXDEy6idA.mft
File: 156keuFhy7Pa75d4lzDXDEy6idA.mft (raw, json)
Hash identifier: MCVi7S7UBV7Qx34I08SS5zMjUQqrPsdTLMWIcQgO3vc=
Subject key identifier: E4:00:94:E7:11:1C:BC:5A:A3:45:4C:62:22:EF:CC:49:0C:4D:04:6A
Authority key identifier: D7:9E:A4:7A:E1:61:CB:B3:DA:EF:97:78:97:30:D7:0C:4C:BA:89:D0
Certificate issuer: /CN=d79ea47ae161cbb3daef97789730d70c4cba89d0
Certificate serial: 0199FD345EA4020301910C1ABA7E15790DF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/156keuFhy7Pa75d4lzDXDEy6idA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/d9cb41-1c3b-46ab-a993-3c3e50dda6cc/1/156keuFhy7Pa75d4lzDXDEy6idA.mft
Manifest number: 0D8A
Signing time: Sun 19 Oct 2025 16:01:31 +0000
Manifest this update: Sun 19 Oct 2025 16:01:31 +0000
Manifest next update: Mon 20 Oct 2025 16:01:31 +0000
Files and hashes: 1: 156keuFhy7Pa75d4lzDXDEy6idA.crl (hash: YEJzW2qwEwakKztXnZMHGgj+MDsckrFPo+3+HcieAZM=)
2: BYLPzOMe1DxWdpXNE62DtzO9Fb0.roa (hash: SqdsHTomHrhRooCsvxMkFhbSdd3KRws8NQEmMcUSL9s=)
3: L0_IW031V8glRQi2qCV5oPEf9Ro.roa (hash: AA7xAguXYqxswXW6tTMsC/xh3FPMqVeiLIYHUXm73pU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/d9cb41-1c3b-46ab-a993-3c3e50dda6cc/1/156keuFhy7Pa75d4lzDXDEy6idA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/d9cb41-1c3b-46ab-a993-3c3e50dda6cc/1/156keuFhy7Pa75d4lzDXDEy6idA.mft
rsync://rpki.ripe.net/repository/DEFAULT/156keuFhy7Pa75d4lzDXDEy6idA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:5e:a4:02:03:01:91:0c:1a:ba:7e:15:79:0d:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d79ea47ae161cbb3daef97789730d70c4cba89d0
Validity
Not Before: Oct 19 16:01:31 2025 GMT
Not After : Oct 20 16:01:31 2025 GMT
Subject: CN=e40094e7111cbc5aa3454c6222efcc490c4d046a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:70:31:b4:48:43:2c:b1:9f:a6:70:fc:ca:39:
75:c8:0a:a2:0c:b8:8b:67:dd:d8:1f:f1:9e:de:90:
a9:1b:d7:4b:8a:10:be:24:34:fd:bb:bd:d3:b4:f1:
67:5b:d1:84:9a:7b:cd:0a:ce:1d:58:67:e0:4e:32:
8a:fe:8c:3a:a7:8f:79:34:da:58:75:df:32:89:96:
1f:2a:0a:7e:6f:02:f4:3f:4d:fc:04:19:dc:bc:51:
f7:e9:5b:c7:20:f9:05:66:ca:e8:dc:f1:b1:b9:d9:
fd:15:fd:76:95:d1:1e:6a:a0:97:5e:69:93:8e:2e:
d4:d6:31:48:a4:94:bc:06:26:fd:e9:a9:25:1a:f8:
ca:ec:9e:c3:8e:19:73:66:b5:19:19:2a:06:93:8b:
89:80:70:e3:0f:2d:a2:f1:99:b1:d3:c3:80:8f:56:
89:61:23:1b:3f:f4:c4:25:92:2d:97:07:e8:47:7a:
b5:31:f0:82:64:fb:2b:d3:d5:39:e2:57:a6:9f:df:
78:60:66:88:89:72:6a:de:e8:8e:5a:62:5f:ed:74:
86:bc:70:e2:f7:99:0f:96:bb:d4:12:b0:e5:80:e5:
c4:8a:01:4a:c8:8d:97:f5:4c:17:ca:f8:5a:ce:5b:
af:d5:f5:61:3f:cd:54:d8:ff:39:80:33:4b:28:09:
33:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:00:94:E7:11:1C:BC:5A:A3:45:4C:62:22:EF:CC:49:0C:4D:04:6A
X509v3 Authority Key Identifier:
keyid:D7:9E:A4:7A:E1:61:CB:B3:DA:EF:97:78:97:30:D7:0C:4C:BA:89:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/156keuFhy7Pa75d4lzDXDEy6idA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d9cb41-1c3b-46ab-a993-3c3e50dda6cc/1/156keuFhy7Pa75d4lzDXDEy6idA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d9cb41-1c3b-46ab-a993-3c3e50dda6cc/1/156keuFhy7Pa75d4lzDXDEy6idA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:09:53:f0:e0:58:9f:e7:8c:56:0a:98:5e:c3:54:2e:b4:3e:
8f:a7:14:70:38:3d:06:d4:18:d9:39:4c:6a:46:bc:b9:04:16:
9b:4b:85:db:70:45:35:f8:22:70:3e:43:af:3e:43:64:df:85:
fe:cb:f7:9c:15:92:f1:28:49:ec:66:79:f4:cd:36:67:57:8b:
85:b6:85:16:e2:a0:fe:e9:49:7a:b9:e6:9d:3b:a0:57:da:5e:
31:44:ae:3f:60:f6:3b:5f:9d:8c:9a:35:2b:10:12:f2:f6:6f:
cc:9d:5c:55:b4:3d:39:83:59:ed:cf:2b:51:9e:cf:01:f1:39:
6a:24:e3:13:87:fe:bb:78:fd:3f:50:b6:46:8f:f0:ea:86:71:
c1:04:ac:87:07:4f:ac:4a:9d:95:a9:42:14:35:47:6a:ec:e8:
b6:93:60:35:79:82:aa:8d:15:47:84:1e:cd:e3:63:36:e9:1f:
8b:87:3d:8a:96:80:0d:f0:83:23:35:65:30:5b:a8:88:02:b2:
76:4b:10:88:ea:7c:d5:0e:18:c2:24:91:7e:07:c5:d3:99:b1:
f4:08:e9:ae:9f:cf:5a:bb:6b:fe:46:b5:3a:fd:60:46:9a:e5:
02:41:77:30:77:d3:97:b0:9a:f9:89:3e:8c:18:23:d9:8a:fc:
51:af:34:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9NF6kAgMBkQwaun4VeQ35MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3OWVhNDdhZTE2MWNiYjNkYWVmOTc3ODk3MzBkNzBjNGNi
YTg5ZDAwHhcNMjUxMDE5MTYwMTMxWhcNMjUxMDIwMTYwMTMxWjAzMTEwLwYDVQQD
EyhlNDAwOTRlNzExMWNiYzVhYTM0NTRjNjIyMmVmY2M0OTBjNGQwNDZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXAxtEhDLLGfpnD8yjl1yAqiDLiL
Z93YH/Ge3pCpG9dLihC+JDT9u73TtPFnW9GEmnvNCs4dWGfgTjKK/ow6p495NNpY
dd8yiZYfKgp+bwL0P038BBncvFH36VvHIPkFZsro3PGxudn9Ff12ldEeaqCXXmmT
ji7U1jFIpJS8Bib96aklGvjK7J7DjhlzZrUZGSoGk4uJgHDjDy2i8Zmx08OAj1aJ
YSMbP/TEJZItlwfoR3q1MfCCZPsr09U54lemn994YGaIiXJq3uiOWmJf7XSGvHDi
95kPlrvUErDlgOXEigFKyI2X9UwXyvhazluv1fVhP81U2P85gDNLKAkz0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOQAlOcRHLxao0VMYiLvzEkMTQRqMB8GA1UdIwQY
MBaAFNeepHrhYcuz2u+XeJcw1wxMuonQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTU2a2V1Rmh5N1BhNzVkNGx6RFhERXk2aWRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9kOWNiNDEtMWMzYi00NmFiLWE5OTMt
M2MzZTUwZGRhNmNjLzEvMTU2a2V1Rmh5N1BhNzVkNGx6RFhERXk2aWRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi9kOWNiNDEtMWMzYi00NmFiLWE5OTMtM2MzZTUwZGRhNmNj
LzEvMTU2a2V1Rmh5N1BhNzVkNGx6RFhERXk2aWRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqQlT8OBY
n+eMVgqYXsNULrQ+j6cUcDg9BtQY2TlMaka8uQQWm0uF23BFNfgicD5Drz5DZN+F
/sv3nBWS8ShJ7GZ59M02Z1eLhbaFFuKg/ulJernmnTugV9peMUSuP2D2O1+djJo1
KxAS8vZvzJ1cVbQ9OYNZ7c8rUZ7PAfE5aiTjE4f+u3j9P1C2Ro/w6oZxwQSshwdP
rEqdlalCFDVHauzotpNgNXmCqo0VR4QezeNjNukfi4c9ipaADfCDIzVlMFuoiAKy
dksQiOp81Q4YwiSRfgfF05mx9Ajprp/PWrtr/ka1Ov1gRprlAkF3MHfTl7Ca+Yk+
jBgj2Yr8Ua80Qw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:44:11 2025 by rpki-client