Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.mft
File: 1-3grePIKbktwZDBSvRpArxWlYzg.mft (raw, json)
Hash identifier: cOJEEErdY+ZEG8rOBWIV7VVpAnRClrLTuED/LyueTsE=
Subject key identifier: A9:93:C6:DA:0C:CF:5D:6D:3E:5B:03:DD:23:D4:07:F0:CF:E9:63:1D
Authority key identifier: FB:78:2B:78:F2:0A:6E:4B:70:64:30:52:BD:1A:40:AF:15:A5:63:38
Certificate issuer: /CN=fb782b78f20a6e4b70643052bd1a40af15a56338
Certificate serial: 019A15A9D17B5B0F50C74CC2AD419AB82912
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-3grePIKbktwZDBSvRpArxWlYzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.mft
Manifest number: 1596
Signing time: Fri 24 Oct 2025 10:00:41 +0000
Manifest this update: Fri 24 Oct 2025 10:00:41 +0000
Manifest next update: Sat 25 Oct 2025 10:00:41 +0000
Files and hashes: 1: 1-3grePIKbktwZDBSvRpArxWlYzg.crl (hash: 7hlS9AmRXFzkYJyeDpK8GpqIFJ0OjnHven/6oVTaRAI=)
2: B1dTi0f_of0kmb1xPgeCM0wY_So.roa (hash: AUmVPkVAQPCmSbSqHlAfz6SLH5DutLJ3OBZdx5Ql8g8=)
3: g4GI57zRcwc78atAcKzvcX8O_Jg.roa (hash: I42VDUXmjO3wztnHcn35mdQWvB1AtZN/AkJrcxSWDOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-3grePIKbktwZDBSvRpArxWlYzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Oct 2025 10:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:15:a9:d1:7b:5b:0f:50:c7:4c:c2:ad:41:9a:b8:29:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb782b78f20a6e4b70643052bd1a40af15a56338
Validity
Not Before: Oct 24 10:00:41 2025 GMT
Not After : Oct 25 10:00:41 2025 GMT
Subject: CN=a993c6da0ccf5d6d3e5b03dd23d407f0cfe9631d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:6c:57:5c:d6:c2:9d:e9:70:dd:bf:71:4f:88:
0b:73:1d:77:ad:fb:50:4d:65:8c:1f:9c:3e:19:87:
e2:d8:ef:33:fa:e2:b8:a2:d7:a1:c2:1b:47:6a:6c:
91:7b:2c:c5:b5:9a:77:b2:8a:f5:1c:14:e4:51:c4:
bd:df:0b:41:a1:91:48:82:ba:2f:66:b1:5d:03:c0:
d9:ca:b4:d4:87:f0:bf:74:6b:7b:cf:45:48:a9:f0:
cf:bc:7d:cd:25:53:de:2c:e5:93:a9:c4:d9:0d:f7:
f5:bd:f1:e4:27:3c:6c:52:77:36:0d:8f:4a:4a:6d:
4d:c8:75:51:d2:1f:df:44:e8:43:d7:97:6e:3b:07:
c8:ea:5f:98:04:4a:b8:f1:4d:92:fa:b4:20:8d:3c:
24:58:c4:ca:ba:56:a2:17:6d:b4:85:5c:8c:79:8a:
23:25:81:57:1a:cd:77:81:73:64:08:9d:47:91:4c:
54:63:ff:65:89:3e:50:86:02:cd:75:c9:0c:ff:c3:
0a:52:d6:46:85:88:45:68:7d:bf:9e:eb:2a:4c:75:
02:55:ff:3e:7d:fc:a4:68:eb:2b:c2:63:29:0f:8d:
9d:b4:40:52:5c:de:48:ee:01:b8:4f:4e:49:82:53:
67:1f:a5:3d:33:fb:97:4f:77:75:c7:75:d8:0a:7c:
03:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:93:C6:DA:0C:CF:5D:6D:3E:5B:03:DD:23:D4:07:F0:CF:E9:63:1D
X509v3 Authority Key Identifier:
keyid:FB:78:2B:78:F2:0A:6E:4B:70:64:30:52:BD:1A:40:AF:15:A5:63:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3grePIKbktwZDBSvRpArxWlYzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:f3:88:83:b6:a3:e9:85:b3:45:e6:7b:d8:ba:d0:d2:38:62:
8d:d4:ce:94:38:13:b2:38:d6:c0:b8:5e:41:53:8f:5f:16:44:
fc:31:18:c4:67:75:e3:e6:a2:e4:4d:e4:dd:d9:1b:5f:c0:57:
2a:d0:76:95:79:36:62:ac:60:c1:bd:e3:24:6c:5b:14:7f:06:
78:7f:ba:b9:65:ee:17:ef:35:57:ea:28:85:2e:da:1b:06:4e:
e5:52:18:33:c6:bd:0f:34:39:2d:87:9c:01:a6:13:27:51:58:
8b:7c:ee:7d:54:c2:a0:2b:27:ff:22:5c:df:db:38:56:82:28:
4e:f7:81:15:32:25:67:b6:37:f3:77:a4:24:5b:12:c5:b9:42:
15:27:ad:8b:55:56:71:ce:b6:d2:a4:60:35:ad:ed:9a:65:be:
cb:f2:c1:5e:fb:70:a0:c0:41:2f:bb:48:1e:18:6a:87:d4:03:
ff:7c:46:c4:d6:82:f6:8a:26:dd:72:32:8e:2e:ef:62:ee:a4:
0d:e2:f4:3d:d2:56:13:b1:19:27:23:ef:01:2d:7a:d1:c2:50:
99:32:42:cb:1d:eb:ab:9a:30:87:5c:de:57:c2:bb:63:40:20:
88:66:04:c4:bc:4d:f7:8c:fc:e7:4c:41:49:8f:00:ed:b3:9d:
77:9e:57:d5
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZoVqdF7Ww9Qx0zCrUGauCkSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiNzgyYjc4ZjIwYTZlNGI3MDY0MzA1MmJkMWE0MGFmMTVh
NTYzMzgwHhcNMjUxMDI0MTAwMDQxWhcNMjUxMDI1MTAwMDQxWjAzMTEwLwYDVQQD
EyhhOTkzYzZkYTBjY2Y1ZDZkM2U1YjAzZGQyM2Q0MDdmMGNmZTk2MzFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWxXXNbCnelw3b9xT4gLcx13rftQ
TWWMH5w+GYfi2O8z+uK4otehwhtHamyReyzFtZp3sor1HBTkUcS93wtBoZFIgrov
ZrFdA8DZyrTUh/C/dGt7z0VIqfDPvH3NJVPeLOWTqcTZDff1vfHkJzxsUnc2DY9K
Sm1NyHVR0h/fROhD15duOwfI6l+YBEq48U2S+rQgjTwkWMTKulaiF220hVyMeYoj
JYFXGs13gXNkCJ1HkUxUY/9liT5QhgLNdckM/8MKUtZGhYhFaH2/nusqTHUCVf8+
ffykaOsrwmMpD42dtEBSXN5I7gG4T05JglNnH6U9M/uXT3d1x3XYCnwDbQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFKmTxtoMz11tPlsD3SPUB/DP6WMdMB8GA1UdIwQY
MBaAFPt4K3jyCm5LcGQwUr0aQK8VpWM4MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS0zZ3JlUElLYmt0d1pEQlN2UnBBcnhXbFl6Zy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTMvOWRjOTMzLTVjMGQtNDQ2MS1hNDVk
LThmN2Q1NjkxYzFiZS8xLzEtM2dyZVBJS2JrdHdaREJTdlJwQXJ4V2xZemcubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2UzLzlkYzkzMy01YzBkLTQ0NjEtYTQ1ZC04ZjdkNTY5MWMx
YmUvMS8xLTNncmVQSUtia3R3WkRCU3ZScEFyeFdsWXpnLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhPOI
g7aj6YWzReZ72LrQ0jhijdTOlDgTsjjWwLheQVOPXxZE/DEYxGd14+ai5E3k3dkb
X8BXKtB2lXk2Yqxgwb3jJGxbFH8GeH+6uWXuF+81V+oohS7aGwZO5VIYM8a9DzQ5
LYecAaYTJ1FYi3zufVTCoCsn/yJc39s4VoIoTveBFTIlZ7Y383ekJFsSxblCFSet
i1VWcc620qRgNa3tmmW+y/LBXvtwoMBBL7tIHhhqh9QD/3xGxNaC9oom3XIyji7v
Yu6kDeL0PdJWE7EZJyPvAS160cJQmTJCyx3rq5owh1zeV8K7Y0AgiGYExLxN94z8
50xBSY8A7bOdd55X1Q==
-----END CERTIFICATE-----
Generated at Fri Oct 24 19:18:33 2025 by rpki-client