Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/44cbb0-1aee-4490-ac52-c941e6a9139f/1/1-cJWdFvSc8kYauKWNoohF9PSytk.mft
File: 1-cJWdFvSc8kYauKWNoohF9PSytk.mft (raw, json)
Hash identifier: gxq5iTiwk+6PjF4I+uXL3ccI9qJbWLDzOaPAesh1e5k=
Subject key identifier: 71:A6:F3:D6:17:CA:17:4A:26:4A:E8:09:A4:2C:07:09:24:AA:46:B3
Authority key identifier: F9:C2:56:74:5B:D2:73:C9:18:6A:E2:96:36:8A:21:17:D3:D2:CA:D9
Certificate issuer: /CN=f9c256745bd273c9186ae296368a2117d3d2cad9
Certificate serial: 019A356B3C9E7D80DC5A620465F3A817D71A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-cJWdFvSc8kYauKWNoohF9PSytk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/44cbb0-1aee-4490-ac52-c941e6a9139f/1/1-cJWdFvSc8kYauKWNoohF9PSytk.mft
Manifest number: 0CD3
Signing time: Thu 30 Oct 2025 14:00:11 +0000
Manifest this update: Thu 30 Oct 2025 14:00:11 +0000
Manifest next update: Fri 31 Oct 2025 14:00:11 +0000
Files and hashes: 1: 1-cJWdFvSc8kYauKWNoohF9PSytk.crl (hash: n/kjafYV5WH1Z9/a+Z5PamQIe39DHXcDC/2a3Ivr8HQ=)
2: N0McjdXZl5TUnCSac35uIbLCfTQ.roa (hash: 3oYd1qltvihRo6bFoxlQSV7suemsf1IDfXlwXxFseIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/44cbb0-1aee-4490-ac52-c941e6a9139f/1/1-cJWdFvSc8kYauKWNoohF9PSytk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/44cbb0-1aee-4490-ac52-c941e6a9139f/1/1-cJWdFvSc8kYauKWNoohF9PSytk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-cJWdFvSc8kYauKWNoohF9PSytk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 31 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:35:6b:3c:9e:7d:80:dc:5a:62:04:65:f3:a8:17:d7:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9c256745bd273c9186ae296368a2117d3d2cad9
Validity
Not Before: Oct 30 14:00:11 2025 GMT
Not After : Oct 31 14:00:11 2025 GMT
Subject: CN=71a6f3d617ca174a264ae809a42c070924aa46b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f4:3d:c3:15:5e:61:7a:8e:87:b0:64:e8:01:
9c:26:42:dd:1c:92:cb:2e:2e:36:5b:d8:aa:05:c0:
bf:0d:e5:04:28:79:01:fe:80:ec:52:91:b3:5f:45:
3a:1c:a4:bc:4a:9f:5c:81:22:fa:35:cf:1b:a3:e4:
9d:b4:2f:37:4a:fd:fe:07:7c:a5:ec:d9:b4:d3:c7:
e2:f5:0f:64:e3:e0:43:53:a5:fe:d5:73:eb:cc:09:
01:94:2a:a7:da:87:5e:10:29:c6:d5:21:c0:a8:e2:
ac:fa:12:a4:a4:3c:af:bd:3a:a7:09:79:88:d4:31:
53:04:0c:e9:3a:45:bb:e4:c7:de:66:ea:81:6d:05:
6c:ef:da:9d:e1:37:c2:38:cc:51:62:22:f4:3d:c1:
f5:f9:1a:38:25:17:cf:4e:5e:aa:a9:33:c0:49:77:
82:d1:ff:4a:c2:48:ea:e7:bd:71:c7:be:60:1b:26:
b1:61:2d:d9:be:ae:35:bc:36:33:36:22:21:c9:08:
c8:41:ee:f3:a4:73:13:d9:d3:ad:c4:33:46:ce:80:
65:94:2e:ca:e6:ea:e7:e6:7f:da:80:89:4c:73:2a:
01:04:b8:0f:df:4b:7b:0f:61:a3:a2:25:16:44:ee:
e7:d4:d1:1e:97:33:9e:25:4e:99:aa:5e:d4:92:69:
36:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:A6:F3:D6:17:CA:17:4A:26:4A:E8:09:A4:2C:07:09:24:AA:46:B3
X509v3 Authority Key Identifier:
keyid:F9:C2:56:74:5B:D2:73:C9:18:6A:E2:96:36:8A:21:17:D3:D2:CA:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-cJWdFvSc8kYauKWNoohF9PSytk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/44cbb0-1aee-4490-ac52-c941e6a9139f/1/1-cJWdFvSc8kYauKWNoohF9PSytk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/44cbb0-1aee-4490-ac52-c941e6a9139f/1/1-cJWdFvSc8kYauKWNoohF9PSytk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:0e:1c:44:8f:66:1d:e2:f0:6e:bf:01:71:28:61:0a:70:c5:
dd:a8:82:8c:dc:22:d4:6b:6b:62:e3:7f:66:50:6a:b4:29:f2:
b0:6a:de:72:bb:81:a1:97:ca:41:5c:c7:d3:28:7b:2a:3b:ab:
d7:e6:c1:60:2c:e5:e9:48:40:c4:0b:8d:82:d9:a0:69:98:1f:
1e:26:01:25:15:6a:21:5b:43:75:11:04:71:2e:97:fb:fa:24:
40:53:6e:71:78:87:b7:9e:e3:d4:d3:8e:e8:dd:1f:0f:5d:c7:
0e:87:d3:15:8c:fe:ae:98:3f:50:ba:0c:0d:31:bb:55:4d:29:
e5:f3:2d:8c:f6:31:18:48:85:1f:14:6e:0c:29:78:3f:a2:f8:
cc:32:2b:a8:ea:ce:b1:94:8a:08:73:be:32:61:70:c2:29:3d:
ea:52:b8:44:5c:47:6a:fe:84:9b:f0:e8:c6:9c:2b:ff:7d:d3:
a3:09:21:24:18:8f:94:2f:47:16:9d:14:34:b6:94:c1:13:7b:
e3:20:fb:0b:d5:78:e3:cd:d7:23:c7:fe:c2:3e:53:84:a3:a1:
c3:03:9d:1e:52:e7:7a:cf:20:fc:d0:69:bb:38:d9:53:14:2c:
35:59:80:a0:fb:f4:00:9f:c6:d3:f1:ad:f0:5c:d3:9b:15:a8:
da:e9:d1:02
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZo1azyefYDcWmIEZfOoF9caMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5YzI1Njc0NWJkMjczYzkxODZhZTI5NjM2OGEyMTE3ZDNk
MmNhZDkwHhcNMjUxMDMwMTQwMDExWhcNMjUxMDMxMTQwMDExWjAzMTEwLwYDVQQD
Eyg3MWE2ZjNkNjE3Y2ExNzRhMjY0YWU4MDlhNDJjMDcwOTI0YWE0NmIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnvQ9wxVeYXqOh7Bk6AGcJkLdHJLL
Li42W9iqBcC/DeUEKHkB/oDsUpGzX0U6HKS8Sp9cgSL6Nc8bo+SdtC83Sv3+B3yl
7Nm008fi9Q9k4+BDU6X+1XPrzAkBlCqn2odeECnG1SHAqOKs+hKkpDyvvTqnCXmI
1DFTBAzpOkW75MfeZuqBbQVs79qd4TfCOMxRYiL0PcH1+Ro4JRfPTl6qqTPASXeC
0f9Kwkjq571xx75gGyaxYS3Zvq41vDYzNiIhyQjIQe7zpHMT2dOtxDNGzoBllC7K
5urn5n/agIlMcyoBBLgP30t7D2GjoiUWRO7n1NEelzOeJU6Zql7Ukmk2vwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFHGm89YXyhdKJkroCaQsBwkkqkazMB8GA1UdIwQY
MBaAFPnCVnRb0nPJGGriljaKIRfT0srZMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1jSldkRnZTYzhrWWF1S1dOb29oRjlQU3l0ay5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWQvNDRjYmIwLTFhZWUtNDQ5MC1hYzUy
LWM5NDFlNmE5MTM5Zi8xLzEtY0pXZEZ2U2M4a1lhdUtXTm9vaEY5UFN5dGsubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzFkLzQ0Y2JiMC0xYWVlLTQ0OTAtYWM1Mi1jOTQxZTZhOTEz
OWYvMS8xLWNKV2RGdlNjOGtZYXVLV05vb2hGOVBTeXRrLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQw4c
RI9mHeLwbr8BcShhCnDF3aiCjNwi1GtrYuN/ZlBqtCnysGrecruBoZfKQVzH0yh7
Kjur1+bBYCzl6UhAxAuNgtmgaZgfHiYBJRVqIVtDdREEcS6X+/okQFNucXiHt57j
1NOO6N0fD13HDofTFYz+rpg/ULoMDTG7VU0p5fMtjPYxGEiFHxRuDCl4P6L4zDIr
qOrOsZSKCHO+MmFwwik96lK4RFxHav6Em/Doxpwr/33TowkhJBiPlC9HFp0UNLaU
wRN74yD7C9V4483XI8f+wj5ThKOhwwOdHlLnes8g/NBpuzjZUxQsNVmAoPv0AJ/G
0/Gt8FzTmxWo2unRAg==
-----END CERTIFICATE-----
Generated at Thu Oct 30 14:59:10 2025 by rpki-client