Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/1P9RiRrUTBZt7roTFZZsmh2DkJc.mft
File: 1P9RiRrUTBZt7roTFZZsmh2DkJc.mft (raw, json)
Hash identifier: V1MECnygimZ4o50U6fHhufghlfmVfP6m7t4lpQp79xY=
Subject key identifier: 1D:AE:B9:77:1A:78:4D:68:2C:96:16:97:D3:7C:37:FF:56:AF:D6:8E
Authority key identifier: D4:FF:51:89:1A:D4:4C:16:6D:EE:BA:13:15:96:6C:9A:1D:83:90:97
Certificate issuer: /CN=d4ff51891ad44c166deeba1315966c9a1d839097
Certificate serial: 019A54C075077DF5559F2A08849A58751F33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1P9RiRrUTBZt7roTFZZsmh2DkJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/1P9RiRrUTBZt7roTFZZsmh2DkJc.mft
Manifest number: 039B
Signing time: Wed 05 Nov 2025 16:01:30 +0000
Manifest this update: Wed 05 Nov 2025 16:01:30 +0000
Manifest next update: Thu 06 Nov 2025 16:01:30 +0000
Files and hashes: 1: 1P9RiRrUTBZt7roTFZZsmh2DkJc.crl (hash: vJifo+sQg96mXUHxiZPcYccJsYPjPJCKnN+5ap3Sqxc=)
2: EoE17t8PTfrUuXfL9C5ZkqxDhJ8.roa (hash: sAVxmU6pnEn88UNK22PTFUDf8gXcyDueVttcLFRxFqg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/1P9RiRrUTBZt7roTFZZsmh2DkJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/1P9RiRrUTBZt7roTFZZsmh2DkJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1P9RiRrUTBZt7roTFZZsmh2DkJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:c0:75:07:7d:f5:55:9f:2a:08:84:9a:58:75:1f:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4ff51891ad44c166deeba1315966c9a1d839097
Validity
Not Before: Nov 5 16:01:30 2025 GMT
Not After : Nov 6 16:01:30 2025 GMT
Subject: CN=1daeb9771a784d682c961697d37c37ff56afd68e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:85:4d:12:c3:8e:12:03:03:6e:4f:51:7b:26:
60:23:6a:3a:56:90:fd:c4:51:a9:af:26:1a:60:2f:
bf:91:3d:b7:2a:3a:42:ca:e1:ea:de:1c:25:7c:98:
70:9c:e4:6b:fa:98:dd:70:c8:2c:78:33:74:d2:60:
50:f1:75:56:ef:9d:e3:86:6b:8c:21:ad:71:30:28:
83:2b:fd:c4:95:19:7d:d4:ae:6e:ad:81:26:9c:48:
56:14:5f:c4:68:c4:55:0b:dc:79:fc:f2:c9:8e:0b:
20:81:6a:3a:2f:0d:2d:42:a7:86:90:fd:7c:b2:00:
2f:fd:55:9c:00:0e:cf:e7:c8:d8:6f:14:26:ef:54:
ed:74:cb:9b:46:5f:ab:25:ad:37:0e:15:9d:5c:12:
69:fd:78:50:c6:5f:e7:55:d1:fe:e2:76:2a:12:23:
d0:6c:bc:8c:e3:9a:94:c1:19:8c:75:26:03:e8:2e:
65:99:25:b6:d3:e9:fb:c0:38:78:00:fc:6a:f1:bb:
3a:2a:38:da:97:a9:e7:6c:7d:83:98:d3:9d:d5:04:
51:c3:06:0c:f0:c1:3c:c4:54:92:34:43:1c:77:bd:
9b:de:bc:05:e2:88:74:38:4d:4a:0c:f8:ca:d3:68:
18:3b:51:7f:d6:6f:21:55:35:5f:29:f7:d6:78:7c:
85:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:AE:B9:77:1A:78:4D:68:2C:96:16:97:D3:7C:37:FF:56:AF:D6:8E
X509v3 Authority Key Identifier:
keyid:D4:FF:51:89:1A:D4:4C:16:6D:EE:BA:13:15:96:6C:9A:1D:83:90:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1P9RiRrUTBZt7roTFZZsmh2DkJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/1P9RiRrUTBZt7roTFZZsmh2DkJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/1P9RiRrUTBZt7roTFZZsmh2DkJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:8a:53:7f:31:b3:a4:dd:3e:c3:88:22:7e:e9:e8:f1:0b:ba:
a7:7c:da:c4:ee:bd:fa:53:70:ab:f1:cd:c6:1e:69:cf:c4:78:
d4:52:8f:68:b4:af:ce:19:3f:9a:91:52:54:30:e6:7e:3c:7f:
dc:cb:fb:d0:e8:f8:fd:d0:92:00:3f:89:35:f2:42:f3:4d:39:
e4:b0:ff:37:d9:64:2e:00:94:04:07:81:0e:1a:27:6c:11:0d:
7f:3c:86:11:9c:73:db:9a:7f:18:4b:f9:6d:31:f3:ff:92:b5:
c9:2d:83:d9:91:79:75:9b:c4:9f:2c:bd:19:2d:46:cf:08:79:
2f:a9:28:7f:2e:43:99:8f:02:b9:ef:54:81:fc:58:fa:61:ee:
83:41:8c:f3:9d:ca:4b:9d:ab:7b:29:b1:89:2f:c2:d1:6c:ed:
42:1c:a4:ec:4b:af:8e:4e:3d:d3:bf:97:de:bb:15:46:e7:69:
6b:85:83:9a:2f:07:10:33:fe:81:a1:24:26:40:f7:0f:47:39:
04:7c:9d:ff:26:81:67:43:a6:ef:ea:47:a6:c2:63:93:0b:d7:
d7:28:79:0c:8e:d4:2a:01:60:4b:e9:f7:7f:26:10:7b:ea:b6:
d0:47:1c:e5:a6:63:48:10:98:b3:f7:b3:ff:db:44:28:08:f7:
eb:4a:e1:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpUwHUHffVVnyoIhJpYdR8zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0ZmY1MTg5MWFkNDRjMTY2ZGVlYmExMzE1OTY2YzlhMWQ4
MzkwOTcwHhcNMjUxMTA1MTYwMTMwWhcNMjUxMTA2MTYwMTMwWjAzMTEwLwYDVQQD
EygxZGFlYjk3NzFhNzg0ZDY4MmM5NjE2OTdkMzdjMzdmZjU2YWZkNjhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYVNEsOOEgMDbk9ReyZgI2o6VpD9
xFGpryYaYC+/kT23KjpCyuHq3hwlfJhwnORr+pjdcMgseDN00mBQ8XVW753jhmuM
Ia1xMCiDK/3ElRl91K5urYEmnEhWFF/EaMRVC9x5/PLJjgsggWo6Lw0tQqeGkP18
sgAv/VWcAA7P58jYbxQm71TtdMubRl+rJa03DhWdXBJp/XhQxl/nVdH+4nYqEiPQ
bLyM45qUwRmMdSYD6C5lmSW20+n7wDh4APxq8bs6Kjjal6nnbH2DmNOd1QRRwwYM
8ME8xFSSNEMcd72b3rwF4oh0OE1KDPjK02gYO1F/1m8hVTVfKffWeHyFhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB2uuXcaeE1oLJYWl9N8N/9Wr9aOMB8GA1UdIwQY
MBaAFNT/UYka1EwWbe66ExWWbJodg5CXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVA5UmlSclVUQlp0N3JvVEZaWnNtaDJEa0pjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8xOTk1ZTAtZjQ1MC00OTU4LThhMmQt
Y2E4MGJhZGQ3OWJmLzEvMVA5UmlSclVUQlp0N3JvVEZaWnNtaDJEa0pjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC8xOTk1ZTAtZjQ1MC00OTU4LThhMmQtY2E4MGJhZGQ3OWJm
LzEvMVA5UmlSclVUQlp0N3JvVEZaWnNtaDJEa0pjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnopTfzGz
pN0+w4gifuno8Qu6p3zaxO69+lNwq/HNxh5pz8R41FKPaLSvzhk/mpFSVDDmfjx/
3Mv70Oj4/dCSAD+JNfJC80055LD/N9lkLgCUBAeBDhonbBENfzyGEZxz25p/GEv5
bTHz/5K1yS2D2ZF5dZvEnyy9GS1Gzwh5L6kofy5DmY8Cue9UgfxY+mHug0GM853K
S52reymxiS/C0WztQhyk7Euvjk4907+X3rsVRudpa4WDmi8HEDP+gaEkJkD3D0c5
BHyd/yaBZ0Om7+pHpsJjkwvX1yh5DI7UKgFgS+n3fyYQe+q20Ecc5aZjSBCYs/ez
/9tEKAj360rhnw==
-----END CERTIFICATE-----
Generated at Wed Nov 5 19:48:45 2025 by rpki-client