
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/469a73-2cf3-4687-acc6-102c4ba8cc4b/1/1IdkFNyZXRTt46AaMjtiuQb4PFc.mft
File: 1IdkFNyZXRTt46AaMjtiuQb4PFc.mft (raw, json)
Hash identifier: LIG3SUBaYM+7rNr55ocR5AzSPoYCso/Do4MP1sguLtU=
Subject key identifier: 14:E5:E4:E0:C1:A8:F9:93:31:9F:1D:90:15:94:1B:62:10:A9:F4:B4
Authority key identifier: D4:87:64:14:DC:99:5D:14:ED:E3:A0:1A:32:3B:62:B9:06:F8:3C:57
Certificate issuer: /CN=d4876414dc995d14ede3a01a323b62b906f83c57
Certificate serial: 01992255A384434B44AD288743C961B076E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1IdkFNyZXRTt46AaMjtiuQb4PFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/469a73-2cf3-4687-acc6-102c4ba8cc4b/1/1IdkFNyZXRTt46AaMjtiuQb4PFc.mft
Manifest number: 05F8
Signing time: Sun 07 Sep 2025 04:01:01 +0000
Manifest this update: Sun 07 Sep 2025 04:01:01 +0000
Manifest next update: Mon 08 Sep 2025 04:01:01 +0000
Files and hashes: 1: 1IdkFNyZXRTt46AaMjtiuQb4PFc.crl (hash: mxwMGXReiacYnMTHB8KVC1o65mdHiszl/KYFPBOMLG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/469a73-2cf3-4687-acc6-102c4ba8cc4b/1/1IdkFNyZXRTt46AaMjtiuQb4PFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/469a73-2cf3-4687-acc6-102c4ba8cc4b/1/1IdkFNyZXRTt46AaMjtiuQb4PFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1IdkFNyZXRTt46AaMjtiuQb4PFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:a3:84:43:4b:44:ad:28:87:43:c9:61:b0:76:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4876414dc995d14ede3a01a323b62b906f83c57
Validity
Not Before: Sep 7 04:01:01 2025 GMT
Not After : Sep 8 04:01:01 2025 GMT
Subject: CN=14e5e4e0c1a8f993319f1d9015941b6210a9f4b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:95:f7:13:63:f6:57:39:17:24:e8:e5:30:09:
b5:86:06:04:c8:a2:05:d1:9e:4a:5e:67:ec:e3:aa:
1c:c2:9d:9d:26:64:09:71:f9:0a:35:53:be:00:2c:
71:97:64:f1:81:07:44:b3:ee:27:d3:72:60:81:5b:
2c:ef:05:c0:87:e6:d1:80:ec:d6:08:d3:8e:cf:97:
b7:a7:16:0a:a9:c4:c5:54:79:51:d4:76:e7:c3:66:
8c:da:9c:db:0d:b9:15:45:78:1b:6f:ec:8c:48:d0:
65:d5:23:98:d2:d1:a2:e5:e9:78:8a:a1:55:77:0a:
64:eb:0b:c2:3b:e4:79:3e:69:43:bd:ed:f0:04:85:
47:ee:70:72:14:87:32:36:aa:9b:79:7e:c3:e3:31:
5f:b4:7f:57:8b:83:35:a0:7f:59:2c:5a:72:16:e5:
20:c1:8f:72:3a:7b:fd:d9:8e:e7:a8:24:a9:f5:d7:
e8:be:c3:05:1c:f7:74:cc:b7:f1:b1:64:38:33:35:
7c:ff:72:96:31:e2:01:80:8d:06:c8:2b:91:95:32:
4e:9b:8e:a6:3c:ba:29:14:ba:71:41:87:57:06:ce:
22:82:83:cf:c4:32:84:e8:9b:24:d6:b9:31:60:2e:
f5:13:02:dc:aa:04:9d:69:0c:97:91:5a:bd:58:11:
ba:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:E5:E4:E0:C1:A8:F9:93:31:9F:1D:90:15:94:1B:62:10:A9:F4:B4
X509v3 Authority Key Identifier:
keyid:D4:87:64:14:DC:99:5D:14:ED:E3:A0:1A:32:3B:62:B9:06:F8:3C:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1IdkFNyZXRTt46AaMjtiuQb4PFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/469a73-2cf3-4687-acc6-102c4ba8cc4b/1/1IdkFNyZXRTt46AaMjtiuQb4PFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/469a73-2cf3-4687-acc6-102c4ba8cc4b/1/1IdkFNyZXRTt46AaMjtiuQb4PFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:2e:41:15:e9:23:94:74:44:77:1f:8c:61:05:ba:c1:ca:be:
93:a9:7e:2b:7a:b7:5d:49:d8:0f:db:47:be:2d:2d:89:84:67:
0a:b1:f5:d2:91:8c:02:3b:ce:5a:b8:8f:0f:e6:a1:f1:26:f9:
64:30:6a:fd:71:f7:6d:5b:90:03:88:67:7f:f6:da:63:c8:b0:
48:05:c4:37:34:b5:c4:82:ee:e2:1a:14:6c:0a:f3:ab:e1:ed:
0a:07:8b:af:83:ae:63:f4:a3:af:bd:36:85:4f:04:e8:9a:03:
4e:ed:6f:88:5f:51:ae:ef:db:5c:e8:82:28:1a:1d:7b:1c:9d:
12:a9:33:08:5f:7e:5d:b5:27:11:d0:9a:91:cb:2e:33:a4:4c:
25:cf:95:83:91:08:19:69:2d:03:52:f7:8f:ce:a0:da:54:88:
a7:b0:30:74:9c:23:6a:24:c7:ec:72:8e:4d:4b:1c:83:a6:f9:
6d:08:62:6a:39:75:35:6f:03:de:8c:c7:db:be:55:03:ae:68:
f1:0f:93:cd:cd:dd:58:f7:77:48:bd:36:a0:bd:17:98:ad:ca:
96:56:2b:75:18:65:08:49:a1:a8:5c:ba:7e:42:91:18:b4:8b:
a3:6c:d8:88:02:99:a1:db:a0:7c:cb:da:4c:18:34:3b:4a:07:
0b:06:68:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiVaOEQ0tErSiHQ8lhsHbkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0ODc2NDE0ZGM5OTVkMTRlZGUzYTAxYTMyM2I2MmI5MDZm
ODNjNTcwHhcNMjUwOTA3MDQwMTAxWhcNMjUwOTA4MDQwMTAxWjAzMTEwLwYDVQQD
EygxNGU1ZTRlMGMxYThmOTkzMzE5ZjFkOTAxNTk0MWI2MjEwYTlmNGI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5pX3E2P2VzkXJOjlMAm1hgYEyKIF
0Z5KXmfs46ocwp2dJmQJcfkKNVO+ACxxl2TxgQdEs+4n03JggVss7wXAh+bRgOzW
CNOOz5e3pxYKqcTFVHlR1Hbnw2aM2pzbDbkVRXgbb+yMSNBl1SOY0tGi5el4iqFV
dwpk6wvCO+R5PmlDve3wBIVH7nByFIcyNqqbeX7D4zFftH9Xi4M1oH9ZLFpyFuUg
wY9yOnv92Y7nqCSp9dfovsMFHPd0zLfxsWQ4MzV8/3KWMeIBgI0GyCuRlTJOm46m
PLopFLpxQYdXBs4igoPPxDKE6Jsk1rkxYC71EwLcqgSdaQyXkVq9WBG6aQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBTl5ODBqPmTMZ8dkBWUG2IQqfS0MB8GA1UdIwQY
MBaAFNSHZBTcmV0U7eOgGjI7YrkG+DxXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUlka0ZOeVpYUlR0NDZBYU1qdGl1UWI0UEZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy80NjlhNzMtMmNmMy00Njg3LWFjYzYt
MTAyYzRiYThjYzRiLzEvMUlka0ZOeVpYUlR0NDZBYU1qdGl1UWI0UEZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy80NjlhNzMtMmNmMy00Njg3LWFjYzYtMTAyYzRiYThjYzRi
LzEvMUlka0ZOeVpYUlR0NDZBYU1qdGl1UWI0UEZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAci5BFekj
lHREdx+MYQW6wcq+k6l+K3q3XUnYD9tHvi0tiYRnCrH10pGMAjvOWriPD+ah8Sb5
ZDBq/XH3bVuQA4hnf/baY8iwSAXENzS1xILu4hoUbArzq+HtCgeLr4OuY/Sjr702
hU8E6JoDTu1viF9Rru/bXOiCKBodexydEqkzCF9+XbUnEdCakcsuM6RMJc+Vg5EI
GWktA1L3j86g2lSIp7AwdJwjaiTH7HKOTUscg6b5bQhiajl1NW8D3ozH275VA65o
8Q+Tzc3dWPd3SL02oL0XmK3KllYrdRhlCEmhqFy6fkKRGLSLo2zYiAKZodugfMva
TBg0O0oHCwZoug==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:42:50 2025 by rpki-client