Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/73d9a5-1c4f-44e0-a958-167191a117ee/1/v1M926H4p23i70lx_NUvlEHOCYk.mft
File: v1M926H4p23i70lx_NUvlEHOCYk.mft (raw, json)
Hash identifier: parNwGHRy3slxzdRxBeicZlqUrGYNARsks+8D08WhSc=
Subject key identifier: 2B:91:B0:9A:DC:30:C3:94:B8:F3:F1:43:A4:A6:AB:CB:CC:8C:EC:D8
Authority key identifier: BF:53:3D:DB:A1:F8:A7:6D:E2:EF:49:71:FC:D5:2F:94:41:CE:09:89
Certificate issuer: /CN=bf533ddba1f8a76de2ef4971fcd52f9441ce0989
Certificate serial: 019A4EF44B9A36367A04C0979E39B8DD2DAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v1M926H4p23i70lx_NUvlEHOCYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/73d9a5-1c4f-44e0-a958-167191a117ee/1/v1M926H4p23i70lx_NUvlEHOCYk.mft
Manifest number: 1148
Signing time: Tue 04 Nov 2025 13:00:24 +0000
Manifest this update: Tue 04 Nov 2025 13:00:24 +0000
Manifest next update: Wed 05 Nov 2025 13:00:24 +0000
Files and hashes: 1: v1M926H4p23i70lx_NUvlEHOCYk.crl (hash: FOYt2TQEwGRkm0p7/rcaOlNYs4X4Bb6xaGZa1EtesfQ=)
2: wIL-REFz4DYY-rRWvHtgF8VAa9w.roa (hash: 0FFPo6/uMpZSHo3dFvbnUBqikS2pyiKoisgVQpgN98I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/73d9a5-1c4f-44e0-a958-167191a117ee/1/v1M926H4p23i70lx_NUvlEHOCYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/73d9a5-1c4f-44e0-a958-167191a117ee/1/v1M926H4p23i70lx_NUvlEHOCYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/v1M926H4p23i70lx_NUvlEHOCYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:4b:9a:36:36:7a:04:c0:97:9e:39:b8:dd:2d:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf533ddba1f8a76de2ef4971fcd52f9441ce0989
Validity
Not Before: Nov 4 13:00:24 2025 GMT
Not After : Nov 5 13:00:24 2025 GMT
Subject: CN=2b91b09adc30c394b8f3f143a4a6abcbcc8cecd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:be:94:9c:59:44:41:4a:5c:5d:a9:a0:1d:bd:
f3:89:44:ec:50:6d:ad:e6:5d:8e:cf:bd:fa:15:e4:
7f:b9:15:10:cc:e5:3e:be:a7:27:ac:c0:d9:ae:7e:
f3:0c:71:e4:28:5d:02:cd:eb:1c:43:67:50:06:bf:
03:c1:10:5e:da:09:8e:52:a3:df:5e:77:90:57:d5:
b5:47:13:47:4c:b4:41:c5:60:12:4c:99:cf:c1:b9:
81:b8:b0:34:69:d5:9b:7c:b3:1d:63:5b:c1:e5:de:
c5:0b:b8:08:62:60:e8:84:11:e0:13:ad:ff:57:98:
b6:39:52:4e:e9:d1:d8:4d:d3:e7:7a:ee:cc:dc:ef:
70:bc:1e:d3:9f:fe:41:8a:02:00:16:7b:09:f0:e7:
66:5f:84:49:00:e8:bc:ab:a9:51:9f:45:05:e3:d0:
5f:97:4b:0a:7d:9e:a2:96:69:a2:c2:c9:9c:08:60:
9f:6f:19:4a:7a:8e:9e:38:45:27:7b:64:3c:d4:97:
dc:92:6d:c4:1e:99:cd:11:aa:d2:f4:29:0c:e5:08:
72:83:28:8c:21:18:1d:72:a1:47:aa:a7:1b:92:ce:
1e:91:74:7d:5a:33:e3:a2:0d:b0:65:5c:1c:1c:a3:
3f:5e:56:c4:bc:c7:7f:df:7c:db:02:be:fb:74:e2:
c2:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:91:B0:9A:DC:30:C3:94:B8:F3:F1:43:A4:A6:AB:CB:CC:8C:EC:D8
X509v3 Authority Key Identifier:
keyid:BF:53:3D:DB:A1:F8:A7:6D:E2:EF:49:71:FC:D5:2F:94:41:CE:09:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v1M926H4p23i70lx_NUvlEHOCYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/73d9a5-1c4f-44e0-a958-167191a117ee/1/v1M926H4p23i70lx_NUvlEHOCYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/73d9a5-1c4f-44e0-a958-167191a117ee/1/v1M926H4p23i70lx_NUvlEHOCYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:8c:86:50:e6:86:c8:7f:a6:b7:8f:1f:f7:fc:be:03:9a:ab:
61:d5:f0:bd:96:dc:3e:30:74:78:7a:b8:d3:08:fb:3e:b0:98:
d7:fc:01:2a:56:45:ce:24:4a:c8:e0:cd:15:c9:f7:b7:c2:db:
b3:e5:c5:3e:f7:15:49:ae:fb:45:21:12:d3:18:aa:1e:a7:74:
b4:c5:bb:d4:67:14:18:3d:02:4f:c6:0f:43:34:6c:91:ef:81:
e6:e2:f6:ab:e0:7b:e7:20:c7:fe:c1:62:d4:81:38:62:c4:05:
43:d0:8d:38:3c:a3:26:e2:59:8d:75:a1:ca:a9:63:35:a6:f3:
18:17:c1:30:18:f7:3c:ad:ab:3d:63:ed:71:76:bd:f6:0c:d3:
73:ae:d6:dc:40:32:be:eb:93:27:df:e9:9d:f8:b5:94:85:a3:
8d:1e:71:c9:6c:93:5f:e1:88:a9:b0:06:9b:8a:72:2f:62:a8:
c0:74:3c:4f:d0:53:de:b2:18:42:a6:8c:a2:c5:b5:75:8d:9a:
fb:41:c6:f9:50:8c:9d:4b:71:d6:7b:17:cb:1d:83:ca:db:1d:
95:f0:01:d3:5c:85:8f:db:f6:6f:c9:e8:6b:8b:e8:0b:b7:9c:
1f:85:4f:66:4b:7e:40:48:22:38:05:c7:72:c2:a2:b2:7d:6f:
d0:9d:77:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9EuaNjZ6BMCXnjm43S2qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmNTMzZGRiYTFmOGE3NmRlMmVmNDk3MWZjZDUyZjk0NDFj
ZTA5ODkwHhcNMjUxMTA0MTMwMDI0WhcNMjUxMTA1MTMwMDI0WjAzMTEwLwYDVQQD
EygyYjkxYjA5YWRjMzBjMzk0YjhmM2YxNDNhNGE2YWJjYmNjOGNlY2Q4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3L6UnFlEQUpcXamgHb3ziUTsUG2t
5l2Oz736FeR/uRUQzOU+vqcnrMDZrn7zDHHkKF0CzescQ2dQBr8DwRBe2gmOUqPf
XneQV9W1RxNHTLRBxWASTJnPwbmBuLA0adWbfLMdY1vB5d7FC7gIYmDohBHgE63/
V5i2OVJO6dHYTdPneu7M3O9wvB7Tn/5BigIAFnsJ8OdmX4RJAOi8q6lRn0UF49Bf
l0sKfZ6ilmmiwsmcCGCfbxlKeo6eOEUne2Q81Jfckm3EHpnNEarS9CkM5QhygyiM
IRgdcqFHqqcbks4ekXR9WjPjog2wZVwcHKM/XlbEvMd/33zbAr77dOLCSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCuRsJrcMMOUuPPxQ6Smq8vMjOzYMB8GA1UdIwQY
MBaAFL9TPduh+Kdt4u9JcfzVL5RBzgmJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjFNOTI2SDRwMjNpNzBseF9OVXZsRUhPQ1lrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy83M2Q5YTUtMWM0Zi00NGUwLWE5NTgt
MTY3MTkxYTExN2VlLzEvdjFNOTI2SDRwMjNpNzBseF9OVXZsRUhPQ1lrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy83M2Q5YTUtMWM0Zi00NGUwLWE5NTgtMTY3MTkxYTExN2Vl
LzEvdjFNOTI2SDRwMjNpNzBseF9OVXZsRUhPQ1lrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmYyGUOaG
yH+mt48f9/y+A5qrYdXwvZbcPjB0eHq40wj7PrCY1/wBKlZFziRKyODNFcn3t8Lb
s+XFPvcVSa77RSES0xiqHqd0tMW71GcUGD0CT8YPQzRske+B5uL2q+B75yDH/sFi
1IE4YsQFQ9CNODyjJuJZjXWhyqljNabzGBfBMBj3PK2rPWPtcXa99gzTc67W3EAy
vuuTJ9/pnfi1lIWjjR5xyWyTX+GIqbAGm4pyL2KowHQ8T9BT3rIYQqaMosW1dY2a
+0HG+VCMnUtx1nsXyx2DytsdlfAB01yFj9v2b8noa4voC7ecH4VPZkt+QEgiOAXH
csKisn1v0J13bw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:54:04 2025 by rpki-client