Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b70490-fcae-48ec-9249-beba754add57/1/_m1KNjQMPa2HoDkh0PiP9lFiiXo.mft
File: _m1KNjQMPa2HoDkh0PiP9lFiiXo.mft (raw, json)
Hash identifier: yjerr0flNv8ZkBe+B3OwCNFfpA/bxeYsccJFHb4eYT0=
Subject key identifier: 37:1B:DD:2D:1B:D1:28:03:DF:37:78:A7:E4:76:3D:A7:7E:FB:B0:7D
Authority key identifier: FE:6D:4A:36:34:0C:3D:AD:87:A0:39:21:D0:F8:8F:F6:51:62:89:7A
Certificate issuer: /CN=fe6d4a36340c3dad87a03921d0f88ff65162897a
Certificate serial: 019A221BE1CF1A0214424E4955F080D9EC73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_m1KNjQMPa2HoDkh0PiP9lFiiXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b70490-fcae-48ec-9249-beba754add57/1/_m1KNjQMPa2HoDkh0PiP9lFiiXo.mft
Manifest number: 0BBC
Signing time: Sun 26 Oct 2025 20:00:43 +0000
Manifest this update: Sun 26 Oct 2025 20:00:43 +0000
Manifest next update: Mon 27 Oct 2025 20:00:43 +0000
Files and hashes: 1: _m1KNjQMPa2HoDkh0PiP9lFiiXo.crl (hash: Vw+QIpoUDs/vlwHHvbxBwum/a5oawJ+pa5su9oq4csE=)
2: fNjIviZE-rak2nx-LNx6AaZmje8.roa (hash: OJD0Sen5B4Pm8+7K0PKLwNWQlIZiuvKDQ8wOO8ai7W8=)
3: vtbeMLgEiJIMz5_yaCwan-k-_x8.roa (hash: aUmr6KPHOpH3nBu3CynTnd8kH0I7Kbxq4Ukon/iSThY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/b70490-fcae-48ec-9249-beba754add57/1/_m1KNjQMPa2HoDkh0PiP9lFiiXo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/b70490-fcae-48ec-9249-beba754add57/1/_m1KNjQMPa2HoDkh0PiP9lFiiXo.mft
rsync://rpki.ripe.net/repository/DEFAULT/_m1KNjQMPa2HoDkh0PiP9lFiiXo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 20:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:1b:e1:cf:1a:02:14:42:4e:49:55:f0:80:d9:ec:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe6d4a36340c3dad87a03921d0f88ff65162897a
Validity
Not Before: Oct 26 20:00:43 2025 GMT
Not After : Oct 27 20:00:43 2025 GMT
Subject: CN=371bdd2d1bd12803df3778a7e4763da77efbb07d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:f1:74:37:5a:9a:76:b3:73:d7:f3:0a:e6:4b:
79:63:2f:7d:2b:99:39:b3:8b:5e:4d:51:e5:5d:53:
ae:4e:2e:c8:f9:2e:17:06:6e:c4:32:14:db:ff:bd:
6d:22:03:e2:7d:72:1f:e6:36:17:b9:df:f1:83:3b:
ef:25:51:af:52:5b:15:f0:4f:2b:fd:81:c5:2a:20:
8f:ea:27:65:f0:d0:03:b4:f5:3e:db:7d:d4:de:25:
01:10:72:8a:88:2a:34:b5:92:f9:01:74:a6:fb:99:
50:5a:1d:7e:95:1f:7a:ef:13:de:26:03:74:27:63:
45:28:a8:f8:2d:f3:48:75:b8:dd:13:d3:4e:47:0f:
0e:b5:3f:12:9d:77:99:c0:3e:c4:80:c9:22:73:2d:
73:64:c9:f7:da:f5:af:b5:b2:3f:0e:c5:20:36:ee:
25:6e:c0:b8:db:a3:0c:d0:db:0c:5d:af:25:59:4f:
8c:d5:20:f7:a6:0e:5c:e4:e6:f4:58:96:42:0e:11:
ee:b5:09:dd:6d:33:6b:bc:78:37:a1:7c:e8:f4:26:
d6:7f:ef:7f:fb:41:27:ac:a6:3d:24:29:9d:e0:d3:
96:e4:68:75:fb:f8:ee:49:56:de:59:db:95:4b:e7:
a6:17:64:29:67:6d:44:ee:a2:60:da:1f:65:3d:be:
09:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:1B:DD:2D:1B:D1:28:03:DF:37:78:A7:E4:76:3D:A7:7E:FB:B0:7D
X509v3 Authority Key Identifier:
keyid:FE:6D:4A:36:34:0C:3D:AD:87:A0:39:21:D0:F8:8F:F6:51:62:89:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_m1KNjQMPa2HoDkh0PiP9lFiiXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b70490-fcae-48ec-9249-beba754add57/1/_m1KNjQMPa2HoDkh0PiP9lFiiXo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b70490-fcae-48ec-9249-beba754add57/1/_m1KNjQMPa2HoDkh0PiP9lFiiXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:8b:5d:bb:62:ad:ab:60:db:3e:cc:6f:90:ad:0a:9e:db:01:
c3:57:cf:9c:d8:79:20:fc:1d:d3:1e:d5:9b:ec:08:c5:e0:1d:
ca:f8:15:68:55:f1:fa:23:fe:f1:a6:ae:ef:b7:ea:94:b7:d5:
94:e3:6f:95:d0:de:99:95:e7:ec:a9:6e:5c:fc:b7:87:4d:51:
d3:de:97:14:d4:64:3c:17:f4:63:4e:d5:eb:54:48:2e:c9:75:
e6:cc:34:dd:c2:cc:68:00:18:de:b2:66:84:f7:b6:e2:05:e6:
da:71:b2:8c:8c:ac:3d:ea:98:de:a8:1c:91:27:4b:d7:2e:21:
a9:65:75:a9:76:31:a3:e2:0b:fe:7d:e7:40:55:6b:62:4e:92:
82:cc:a2:ee:59:cc:b6:6c:4f:1a:af:61:b7:ca:b0:22:50:64:
9b:71:54:74:ce:69:81:77:ef:bb:74:c2:c7:3e:f3:d9:2c:47:
cc:a7:55:fa:30:06:51:1a:d3:18:0a:10:37:59:a0:1a:4e:42:
10:85:6e:ca:ba:c1:67:cf:e0:37:ca:ce:5a:39:cc:02:75:3a:
f5:e0:ed:4a:61:73:92:1c:28:1e:8f:f9:4e:e8:a8:b8:f3:58:
50:c1:b0:6e:6a:8e:74:17:a8:55:da:c1:f0:56:9f:c7:13:ff:
0e:ba:a1:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoiG+HPGgIUQk5JVfCA2exzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlNmQ0YTM2MzQwYzNkYWQ4N2EwMzkyMWQwZjg4ZmY2NTE2
Mjg5N2EwHhcNMjUxMDI2MjAwMDQzWhcNMjUxMDI3MjAwMDQzWjAzMTEwLwYDVQQD
EygzNzFiZGQyZDFiZDEyODAzZGYzNzc4YTdlNDc2M2RhNzdlZmJiMDdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/F0N1qadrNz1/MK5kt5Yy99K5k5
s4teTVHlXVOuTi7I+S4XBm7EMhTb/71tIgPifXIf5jYXud/xgzvvJVGvUlsV8E8r
/YHFKiCP6idl8NADtPU+233U3iUBEHKKiCo0tZL5AXSm+5lQWh1+lR967xPeJgN0
J2NFKKj4LfNIdbjdE9NORw8OtT8SnXeZwD7EgMkicy1zZMn32vWvtbI/DsUgNu4l
bsC426MM0NsMXa8lWU+M1SD3pg5c5Ob0WJZCDhHutQndbTNrvHg3oXzo9CbWf+9/
+0EnrKY9JCmd4NOW5Gh1+/juSVbeWduVS+emF2QpZ21E7qJg2h9lPb4JKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDcb3S0b0SgD3zd4p+R2Pad++7B9MB8GA1UdIwQY
MBaAFP5tSjY0DD2th6A5IdD4j/ZRYol6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX20xS05qUU1QYTJIb0RraDBQaVA5bEZpaVhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9iNzA0OTAtZmNhZS00OGVjLTkyNDkt
YmViYTc1NGFkZDU3LzEvX20xS05qUU1QYTJIb0RraDBQaVA5bEZpaVhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy9iNzA0OTAtZmNhZS00OGVjLTkyNDktYmViYTc1NGFkZDU3
LzEvX20xS05qUU1QYTJIb0RraDBQaVA5bEZpaVhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ4tdu2Kt
q2DbPsxvkK0KntsBw1fPnNh5IPwd0x7Vm+wIxeAdyvgVaFXx+iP+8aau77fqlLfV
lONvldDemZXn7KluXPy3h01R096XFNRkPBf0Y07V61RILsl15sw03cLMaAAY3rJm
hPe24gXm2nGyjIysPeqY3qgckSdL1y4hqWV1qXYxo+IL/n3nQFVrYk6Sgsyi7lnM
tmxPGq9ht8qwIlBkm3FUdM5pgXfvu3TCxz7z2SxHzKdV+jAGURrTGAoQN1mgGk5C
EIVuyrrBZ8/gN8rOWjnMAnU69eDtSmFzkhwoHo/5TuiouPNYUMGwbmqOdBeoVdrB
8FafxxP/DrqhBA==
-----END CERTIFICATE-----
Generated at Mon Oct 27 05:50:20 2025 by rpki-client