Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/e31347-d79b-4144-8749-c333794a7b97/1/1-jNWbIxbg7Lz4WmLlxEllOghCBg.mft
File: 1-jNWbIxbg7Lz4WmLlxEllOghCBg.mft (raw, json)
Hash identifier: g6jkrXpft1SSS9VDhumnjHwi+47F8/mkI8VrmX/jWv4=
Subject key identifier: F8:71:54:65:D3:63:10:69:CB:E4:49:F1:2E:FF:B6:3B:18:F8:3C:34
Authority key identifier: FA:33:56:6C:8C:5B:83:B2:F3:E1:69:8B:97:11:25:94:E8:21:08:18
Certificate issuer: /CN=fa33566c8c5b83b2f3e1698b97112594e8210818
Certificate serial: 019A51BE3711C25F5D30779AD8D4F0EB2D35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-jNWbIxbg7Lz4WmLlxEllOghCBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/e31347-d79b-4144-8749-c333794a7b97/1/1-jNWbIxbg7Lz4WmLlxEllOghCBg.mft
Manifest number: 170C
Signing time: Wed 05 Nov 2025 02:00:11 +0000
Manifest this update: Wed 05 Nov 2025 02:00:11 +0000
Manifest next update: Thu 06 Nov 2025 02:00:11 +0000
Files and hashes: 1: 1-jNWbIxbg7Lz4WmLlxEllOghCBg.crl (hash: SBVqRXGnRLaSXHAoX24UGKBVvSHb4lNduMh17s3QIIw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/e31347-d79b-4144-8749-c333794a7b97/1/1-jNWbIxbg7Lz4WmLlxEllOghCBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/e31347-d79b-4144-8749-c333794a7b97/1/1-jNWbIxbg7Lz4WmLlxEllOghCBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-jNWbIxbg7Lz4WmLlxEllOghCBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:be:37:11:c2:5f:5d:30:77:9a:d8:d4:f0:eb:2d:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa33566c8c5b83b2f3e1698b97112594e8210818
Validity
Not Before: Nov 5 02:00:11 2025 GMT
Not After : Nov 6 02:00:11 2025 GMT
Subject: CN=f8715465d3631069cbe449f12effb63b18f83c34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e5:be:cd:46:f7:b0:57:01:8a:5f:bb:83:78:
e3:d6:38:2a:0e:68:d4:37:17:38:24:db:bc:01:03:
13:5a:97:e7:9e:dd:52:15:a0:0b:b0:c6:6a:5d:fc:
15:63:bf:0c:83:fb:cd:c7:1e:85:ef:28:13:a6:ca:
9f:b6:77:27:2b:ff:2e:f5:5d:ea:93:ae:80:5c:b7:
bf:07:84:e8:99:fc:8b:d9:13:8f:57:f9:fc:e1:9c:
bc:60:39:6e:2f:fd:7c:01:cd:89:74:c4:d9:f4:89:
9c:3e:cf:57:ec:24:b4:cf:f4:50:20:19:43:72:22:
08:02:01:2e:4f:10:0d:57:92:95:4d:f2:77:88:cf:
e5:88:80:ba:6e:2f:9f:10:21:8e:a4:68:8f:6e:5e:
7e:91:c3:04:6f:58:3d:98:3b:4d:e1:48:8c:a8:2c:
7c:a2:25:f0:ac:16:db:ac:49:b0:4b:95:c0:e5:0d:
49:a7:4f:ec:7c:8a:87:dc:29:a7:7b:94:a7:d8:0c:
9e:7d:98:d8:1a:05:75:99:3d:88:da:14:a6:a1:15:
75:e4:7c:e9:8c:ae:5f:97:41:cb:f1:2c:8d:71:0f:
b5:00:24:71:03:d5:44:ac:be:b1:8e:65:fe:ea:2a:
25:e8:0c:d8:81:c2:1f:ee:ae:22:f5:01:c9:c0:65:
1a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:71:54:65:D3:63:10:69:CB:E4:49:F1:2E:FF:B6:3B:18:F8:3C:34
X509v3 Authority Key Identifier:
keyid:FA:33:56:6C:8C:5B:83:B2:F3:E1:69:8B:97:11:25:94:E8:21:08:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-jNWbIxbg7Lz4WmLlxEllOghCBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e31347-d79b-4144-8749-c333794a7b97/1/1-jNWbIxbg7Lz4WmLlxEllOghCBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e31347-d79b-4144-8749-c333794a7b97/1/1-jNWbIxbg7Lz4WmLlxEllOghCBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:32:32:90:b8:af:bd:e4:0b:fa:71:e1:7d:6c:bb:ca:5d:a0:
30:20:aa:99:f7:09:8b:04:ff:ca:b0:0b:d0:54:4a:47:08:65:
6e:34:e2:95:16:d4:45:42:49:28:84:1f:a4:bb:81:d6:6d:11:
eb:8c:7d:f2:3e:fb:ac:19:5b:21:35:06:ed:15:69:97:15:9e:
df:ba:02:42:ca:19:bd:d8:0f:ce:f8:7b:83:93:fb:09:2c:b5:
41:af:28:8f:a7:c4:12:56:39:2a:28:a1:f3:9f:da:1b:13:ee:
b4:cd:ce:81:06:ac:df:5c:2c:ca:3b:e7:93:1b:58:f6:29:d9:
c6:42:a6:cf:d9:c6:20:2c:88:02:db:f1:04:b5:c8:c1:82:8b:
66:24:5a:d5:ec:b1:3b:44:ab:a0:ba:8d:d0:d0:6b:48:f5:62:
17:53:12:3a:5d:1e:85:42:d2:c0:55:b8:66:a2:3d:5b:68:b5:
4a:6c:2c:e5:cc:6e:c1:af:2e:36:d0:8a:00:e3:7d:86:0d:b5:
83:ef:70:8a:c5:99:1e:be:75:12:ec:20:10:3a:22:ba:be:71:
c5:28:a6:f6:2c:88:99:9f:c5:b2:77:54:89:b1:ad:e9:1d:d3:
9c:17:d1:64:ac:fe:c5:50:c1:d0:16:de:1b:12:5b:a6:73:37:
be:39:a8:e0
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZpRvjcRwl9dMHea2NTw6y01MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhMzM1NjZjOGM1YjgzYjJmM2UxNjk4Yjk3MTEyNTk0ZTgy
MTA4MTgwHhcNMjUxMTA1MDIwMDExWhcNMjUxMTA2MDIwMDExWjAzMTEwLwYDVQQD
EyhmODcxNTQ2NWQzNjMxMDY5Y2JlNDQ5ZjEyZWZmYjYzYjE4ZjgzYzM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAreW+zUb3sFcBil+7g3jj1jgqDmjU
Nxc4JNu8AQMTWpfnnt1SFaALsMZqXfwVY78Mg/vNxx6F7ygTpsqftncnK/8u9V3q
k66AXLe/B4TomfyL2ROPV/n84Zy8YDluL/18Ac2JdMTZ9ImcPs9X7CS0z/RQIBlD
ciIIAgEuTxANV5KVTfJ3iM/liIC6bi+fECGOpGiPbl5+kcMEb1g9mDtN4UiMqCx8
oiXwrBbbrEmwS5XA5Q1Jp0/sfIqH3Cmne5Sn2AyefZjYGgV1mT2I2hSmoRV15Hzp
jK5fl0HL8SyNcQ+1ACRxA9VErL6xjmX+6iol6AzYgcIf7q4i9QHJwGUa2wIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFPhxVGXTYxBpy+RJ8S7/tjsY+Dw0MB8GA1UdIwQY
MBaAFPozVmyMW4Oy8+Fpi5cRJZToIQgYMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1qTldiSXhiZzdMejRXbUxseEVsbE9naENCZy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWMvZTMxMzQ3LWQ3OWItNDE0NC04NzQ5
LWMzMzM3OTRhN2I5Ny8xLzEtak5XYkl4Ymc3THo0V21MbHhFbGxPZ2hDQmcubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzFjL2UzMTM0Ny1kNzliLTQxNDQtODc0OS1jMzMzNzk0YTdi
OTcvMS8xLWpOV2JJeGJnN0x6NFdtTGx4RWxsT2doQ0JnLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjDIy
kLivveQL+nHhfWy7yl2gMCCqmfcJiwT/yrAL0FRKRwhlbjTilRbURUJJKIQfpLuB
1m0R64x98j77rBlbITUG7RVplxWe37oCQsoZvdgPzvh7g5P7CSy1Qa8oj6fEElY5
Kiih85/aGxPutM3OgQas31wsyjvnkxtY9inZxkKmz9nGICyIAtvxBLXIwYKLZiRa
1eyxO0SroLqN0NBrSPViF1MSOl0ehULSwFW4ZqI9W2i1Smws5cxuwa8uNtCKAON9
hg21g+9wisWZHr51EuwgEDoiur5xxSim9iyImZ/FsndUibGt6R3TnBfRZKz+xVDB
0BbeGxJbpnM3vjmo4A==
-----END CERTIFICATE-----
Generated at Wed Nov 5 08:18:41 2025 by rpki-client