Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/1fD0usX5pQIvwty8Sj20zGsRZkQ.mft
File: 1fD0usX5pQIvwty8Sj20zGsRZkQ.mft (raw, json)
Hash identifier: XjRJJadhWTNHbDFlisl0usij5rPSwqIlLlgSZ/2HtBI=
Subject key identifier: BE:00:16:B3:88:A6:61:63:FC:94:6C:CA:DD:A1:6C:CD:D2:F2:50:92
Authority key identifier: D5:F0:F4:BA:C5:F9:A5:02:2F:C2:DC:BC:4A:3D:B4:CC:6B:11:66:44
Certificate issuer: /CN=d5f0f4bac5f9a5022fc2dcbc4a3db4cc6b116644
Certificate serial: 019A52D20D5BECCE75172B8EAC8D4F57477B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1fD0usX5pQIvwty8Sj20zGsRZkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/1fD0usX5pQIvwty8Sj20zGsRZkQ.mft
Manifest number: 15F6
Signing time: Wed 05 Nov 2025 07:01:28 +0000
Manifest this update: Wed 05 Nov 2025 07:01:28 +0000
Manifest next update: Thu 06 Nov 2025 07:01:28 +0000
Files and hashes: 1: 1fD0usX5pQIvwty8Sj20zGsRZkQ.crl (hash: 1k4Itco6y+DMr1tbaTOzC31j95+0wFJ9fEhUJYk1cFM=)
2: nuwLQIg-lK2envR_t0a0TNPRBGQ.roa (hash: 6zkhxyKXAGxELCe57hpSnoaGWnhmysqwWNpKa980lyo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/1fD0usX5pQIvwty8Sj20zGsRZkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/1fD0usX5pQIvwty8Sj20zGsRZkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1fD0usX5pQIvwty8Sj20zGsRZkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d2:0d:5b:ec:ce:75:17:2b:8e:ac:8d:4f:57:47:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5f0f4bac5f9a5022fc2dcbc4a3db4cc6b116644
Validity
Not Before: Nov 5 07:01:28 2025 GMT
Not After : Nov 6 07:01:28 2025 GMT
Subject: CN=be0016b388a66163fc946ccadda16ccdd2f25092
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:4c:9c:68:ac:d1:78:30:e3:e0:87:56:30:48:
0b:6f:8d:be:dd:c3:43:e3:c6:76:a4:37:7f:47:31:
36:22:96:29:64:89:11:de:ea:90:af:46:ce:8b:c4:
d9:5c:ca:63:56:a6:3d:ec:86:9c:81:cc:7b:60:65:
0b:7f:42:f0:42:01:e8:9c:a8:f9:51:d8:32:74:61:
51:f7:4d:53:04:64:28:3e:3e:1a:bb:27:bd:98:72:
29:57:af:5e:08:46:8f:f8:9e:15:9e:cd:48:2a:25:
12:87:99:5c:59:6f:eb:d8:77:4e:d6:1c:05:44:43:
05:58:0c:e2:c7:9e:cf:88:0f:b9:d9:da:3f:cc:51:
95:9b:09:83:41:be:a7:94:50:c4:a3:bd:c8:71:ef:
7f:65:dd:b2:6c:5e:a6:cd:04:cd:10:73:0a:96:b3:
2c:4b:68:b8:80:2a:ba:dd:be:e3:91:5c:d2:af:fc:
d5:04:53:fb:8a:07:a5:2f:77:71:23:32:57:5e:ad:
1a:b4:3d:9b:07:d9:8f:37:c9:b1:e8:e8:5b:2c:3f:
cd:77:1e:13:52:38:2b:94:af:03:b1:08:9a:bf:e5:
8e:73:81:e2:49:4c:44:4a:75:f9:e6:e6:de:ef:49:
b5:15:1e:62:ac:95:40:1f:06:6e:5a:67:54:57:20:
14:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:00:16:B3:88:A6:61:63:FC:94:6C:CA:DD:A1:6C:CD:D2:F2:50:92
X509v3 Authority Key Identifier:
keyid:D5:F0:F4:BA:C5:F9:A5:02:2F:C2:DC:BC:4A:3D:B4:CC:6B:11:66:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fD0usX5pQIvwty8Sj20zGsRZkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/1fD0usX5pQIvwty8Sj20zGsRZkQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/1fD0usX5pQIvwty8Sj20zGsRZkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:e4:0b:99:dd:fd:63:01:a9:2b:09:bb:91:37:d4:7d:bf:79:
91:8e:98:4b:14:a2:61:a0:bf:33:11:7f:9b:45:9c:1b:73:58:
fa:37:a8:e9:1e:ec:f1:5d:4b:46:68:1b:28:6b:8b:92:9d:ec:
38:e1:15:59:c6:53:0a:67:63:b0:8f:aa:98:e6:ba:11:6c:e1:
2d:c7:82:e0:18:23:96:49:8b:89:fd:b9:08:29:2d:39:40:1d:
58:47:79:d9:7f:30:d6:09:5a:4c:18:54:25:78:ed:ed:cd:45:
37:e1:a8:79:84:16:6c:6d:7a:be:7c:3d:35:f1:43:03:40:36:
db:43:3e:a2:cf:6f:67:ec:e1:b4:72:68:9d:ff:75:c0:99:b7:
42:f0:7e:1c:c1:e9:06:96:3d:29:2f:34:dc:f1:72:76:3c:c2:
15:90:bf:7f:4d:a4:64:72:3c:48:81:89:78:ca:c9:ac:53:db:
f7:38:32:b1:3b:7f:7c:a7:a0:83:e4:53:9f:0d:60:d6:c0:3e:
4a:37:81:19:54:98:4f:34:ad:8f:6d:3b:d9:ea:0d:b4:9c:73:
88:10:91:b5:51:3e:fd:52:d7:bd:f2:11:de:e4:57:24:b9:c6:
7c:fb:b1:fb:38:e5:db:ff:eb:f1:fc:1b:a4:cf:9a:7c:15:ed:
d2:3f:23:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpS0g1b7M51FyuOrI1PV0d7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1ZjBmNGJhYzVmOWE1MDIyZmMyZGNiYzRhM2RiNGNjNmIx
MTY2NDQwHhcNMjUxMTA1MDcwMTI4WhcNMjUxMTA2MDcwMTI4WjAzMTEwLwYDVQQD
EyhiZTAwMTZiMzg4YTY2MTYzZmM5NDZjY2FkZGExNmNjZGQyZjI1MDkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzUycaKzReDDj4IdWMEgLb42+3cND
48Z2pDd/RzE2IpYpZIkR3uqQr0bOi8TZXMpjVqY97Iacgcx7YGULf0LwQgHonKj5
UdgydGFR901TBGQoPj4auye9mHIpV69eCEaP+J4Vns1IKiUSh5lcWW/r2HdO1hwF
REMFWAzix57PiA+52do/zFGVmwmDQb6nlFDEo73Ice9/Zd2ybF6mzQTNEHMKlrMs
S2i4gCq63b7jkVzSr/zVBFP7igelL3dxIzJXXq0atD2bB9mPN8mx6OhbLD/Ndx4T
UjgrlK8DsQiav+WOc4HiSUxESnX55ube70m1FR5irJVAHwZuWmdUVyAUXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL4AFrOIpmFj/JRsyt2hbM3S8lCSMB8GA1UdIwQY
MBaAFNXw9LrF+aUCL8LcvEo9tMxrEWZEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWZEMHVzWDVwUUl2d3R5OFNqMjB6R3NSWmtRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9hNmQ1NzItMzA0My00ZDE5LTkxNDAt
OTkyNTQxZmRlYmVhLzEvMWZEMHVzWDVwUUl2d3R5OFNqMjB6R3NSWmtRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy9hNmQ1NzItMzA0My00ZDE5LTkxNDAtOTkyNTQxZmRlYmVh
LzEvMWZEMHVzWDVwUUl2d3R5OFNqMjB6R3NSWmtRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkuQLmd39
YwGpKwm7kTfUfb95kY6YSxSiYaC/MxF/m0WcG3NY+jeo6R7s8V1LRmgbKGuLkp3s
OOEVWcZTCmdjsI+qmOa6EWzhLceC4BgjlkmLif25CCktOUAdWEd52X8w1glaTBhU
JXjt7c1FN+GoeYQWbG16vnw9NfFDA0A220M+os9vZ+zhtHJonf91wJm3QvB+HMHp
BpY9KS803PFydjzCFZC/f02kZHI8SIGJeMrJrFPb9zgysTt/fKegg+RTnw1g1sA+
SjeBGVSYTzStj2072eoNtJxziBCRtVE+/VLXvfIR3uRXJLnGfPux+zjl2//r8fwb
pM+afBXt0j8jiQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 08:24:33 2025 by rpki-client