Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/75e36c-db1f-483e-b0ef-229051879b74/1/ril1GgrIGmVxkFRupHgM2GFA3J8.mft
File: ril1GgrIGmVxkFRupHgM2GFA3J8.mft (raw, json)
Hash identifier: VIlZHO0CwtrTIl2dw0tMgxpnh061NPm98Rc+PbsKFzw=
Subject key identifier: 97:21:B3:E2:BA:D0:E8:FF:92:9F:DD:6D:BC:B0:CA:66:89:61:22:4F
Authority key identifier: AE:29:75:1A:0A:C8:1A:65:71:90:54:6E:A4:78:0C:D8:61:40:DC:9F
Certificate issuer: /CN=ae29751a0ac81a657190546ea4780cd86140dc9f
Certificate serial: 019A1BE28BA2CF95FD9451BCDF4D6F3C7D20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ril1GgrIGmVxkFRupHgM2GFA3J8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/75e36c-db1f-483e-b0ef-229051879b74/1/ril1GgrIGmVxkFRupHgM2GFA3J8.mft
Manifest number: 16F5
Signing time: Sat 25 Oct 2025 15:00:22 +0000
Manifest this update: Sat 25 Oct 2025 15:00:22 +0000
Manifest next update: Sun 26 Oct 2025 15:00:22 +0000
Files and hashes: 1: Pn8xyEax8dTf2X7jJobPQxh-9Fg.roa (hash: HTtYaWmG4vFsBggg1bZWXxDw9HN8LeHTNamhfWYt0+s=)
2: TzCEbM_FX1C8Etsgv1SpL73BfwY.roa (hash: 0+du4/EByKMALnvia/65AUVyk52kmBip6bBqdirNoQM=)
3: ril1GgrIGmVxkFRupHgM2GFA3J8.crl (hash: +z6naIxeeLme+F2TJrKAV7X2vDDl/5f6oeGpP/MfC5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/75e36c-db1f-483e-b0ef-229051879b74/1/ril1GgrIGmVxkFRupHgM2GFA3J8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/75e36c-db1f-483e-b0ef-229051879b74/1/ril1GgrIGmVxkFRupHgM2GFA3J8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ril1GgrIGmVxkFRupHgM2GFA3J8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 11:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1b:e2:8b:a2:cf:95:fd:94:51:bc:df:4d:6f:3c:7d:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae29751a0ac81a657190546ea4780cd86140dc9f
Validity
Not Before: Oct 25 15:00:22 2025 GMT
Not After : Oct 26 15:00:22 2025 GMT
Subject: CN=9721b3e2bad0e8ff929fdd6dbcb0ca668961224f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:44:21:06:0b:b3:c0:9a:4a:d0:f7:ff:45:da:
e0:26:7f:83:43:7b:da:04:aa:9f:c5:a1:85:fb:1e:
52:db:cd:57:dd:b7:55:d3:9d:2a:cf:64:72:89:9b:
f0:e2:5f:2e:30:7f:07:d0:e1:b4:aa:eb:72:38:d2:
56:da:7e:f7:be:36:80:87:0e:86:cf:44:fc:23:cd:
47:db:ba:09:10:f7:b5:9a:85:c2:c1:d4:03:a7:fa:
b7:9b:bc:04:7b:cd:ca:75:30:93:d6:52:68:a5:71:
c0:23:00:7c:da:e5:5d:8e:35:74:c5:54:87:0e:22:
32:c1:88:9c:e1:8c:7e:03:22:bc:92:08:a7:28:2b:
f8:61:c2:76:7a:b7:f7:cf:39:fa:f6:67:6e:3c:f1:
1b:67:fb:1b:35:7c:89:90:03:d7:59:fb:59:32:e5:
32:d6:a2:6b:3c:a7:a8:f0:58:b3:e4:53:85:0b:73:
d1:d1:85:1b:5c:90:03:39:88:ca:a6:db:7f:44:08:
b5:bc:df:ae:2f:a0:97:aa:e3:50:bf:46:39:ca:48:
18:8a:e8:50:bb:98:95:af:e9:43:50:08:10:46:ce:
c2:a2:47:5e:93:bb:5c:eb:5b:cd:3c:54:99:6d:f4:
60:82:80:6c:13:a4:79:37:39:fb:82:34:26:a1:2f:
a0:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:21:B3:E2:BA:D0:E8:FF:92:9F:DD:6D:BC:B0:CA:66:89:61:22:4F
X509v3 Authority Key Identifier:
keyid:AE:29:75:1A:0A:C8:1A:65:71:90:54:6E:A4:78:0C:D8:61:40:DC:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ril1GgrIGmVxkFRupHgM2GFA3J8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/75e36c-db1f-483e-b0ef-229051879b74/1/ril1GgrIGmVxkFRupHgM2GFA3J8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/75e36c-db1f-483e-b0ef-229051879b74/1/ril1GgrIGmVxkFRupHgM2GFA3J8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:6f:4e:d7:af:da:ca:36:80:7f:ff:05:c5:5d:e3:ef:49:02:
9a:4e:6b:8d:34:78:ae:5e:95:b6:d5:51:ef:79:2f:9e:be:1e:
06:51:ac:f3:68:e3:34:91:b0:c3:b1:64:ed:9e:aa:cf:35:41:
a8:1d:24:68:15:0e:5a:b2:47:a4:d6:0d:b3:8c:ee:d0:a9:ce:
eb:67:d9:06:c7:0d:36:94:cb:02:94:16:c5:1d:7f:a2:b0:4d:
3e:4d:b2:49:84:ca:c7:24:4f:0f:2b:2d:bb:0a:00:64:0a:dc:
26:10:6c:38:da:2e:e6:4d:e4:9e:ce:52:4c:b2:a3:f0:85:51:
b7:de:3f:b7:6c:d2:b5:73:d1:74:64:78:09:54:9d:49:f0:4d:
e3:d2:50:6a:02:c4:5c:17:dd:d7:f5:a2:86:65:c7:d9:b9:9b:
fb:6f:95:34:dc:00:c7:33:1f:3e:85:8d:4a:59:1d:a4:3d:b9:
f3:0d:66:ba:51:c1:44:2a:0d:3f:2b:b9:11:7a:e1:12:f1:40:
7b:61:bd:82:32:76:45:7d:6a:a7:f7:35:61:e7:e1:bc:45:71:
3b:22:7d:2b:6a:c7:99:a1:1d:18:ea:52:94:33:c4:11:ac:7b:
60:fa:f2:f7:17:4b:2f:c1:73:73:2f:18:10:bf:31:88:a6:32:
7f:75:af:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 20:06:10 2025 by rpki-client