Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/b06337-6517-400b-8cb5-7afa0bcd7976/1/1aIZbvEZIhFV4Wg_iWfSVGJdrnE.mft
File: 1aIZbvEZIhFV4Wg_iWfSVGJdrnE.mft (raw, json)
Hash identifier: 93UCvcWzGOypiLhas5pb5gJnTfqoaKoxzclCqNZMRRk=
Subject key identifier: 55:48:1F:40:C0:5D:8E:E6:36:AC:DE:0F:6B:F4:5C:5B:6C:66:52:4C
Authority key identifier: D5:A2:19:6E:F1:19:22:11:55:E1:68:3F:89:67:D2:54:62:5D:AE:71
Certificate issuer: /CN=d5a2196ef119221155e1683f8967d254625dae71
Certificate serial: 019A71EE9FC55F258D75D5F7989232C6B1CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1aIZbvEZIhFV4Wg_iWfSVGJdrnE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/b06337-6517-400b-8cb5-7afa0bcd7976/1/1aIZbvEZIhFV4Wg_iWfSVGJdrnE.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 08:00:55 +0000
Manifest this update: Tue 11 Nov 2025 08:00:55 +0000
Manifest next update: Wed 12 Nov 2025 08:00:55 +0000
Files and hashes: 1: 1aIZbvEZIhFV4Wg_iWfSVGJdrnE.crl (hash: RY1+m4gM7OoF/NVvWbCHwTUHvbMTAShZ0Fr+cxsJXDA=)
2: Rvoozr9-AEirIvl3H78yEjywI3M.roa (hash: C8PH+7JgTNI/2g3gAC+RhVDcD73858pmRmw+QrCbn9g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/b06337-6517-400b-8cb5-7afa0bcd7976/1/1aIZbvEZIhFV4Wg_iWfSVGJdrnE.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/b06337-6517-400b-8cb5-7afa0bcd7976/1/1aIZbvEZIhFV4Wg_iWfSVGJdrnE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1aIZbvEZIhFV4Wg_iWfSVGJdrnE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:9f:c5:5f:25:8d:75:d5:f7:98:92:32:c6:b1:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5a2196ef119221155e1683f8967d254625dae71
Validity
Not Before: Nov 11 08:00:55 2025 GMT
Not After : Nov 12 08:00:55 2025 GMT
Subject: CN=55481f40c05d8ee636acde0f6bf45c5b6c66524c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:c1:d7:73:7e:53:60:9d:20:50:5c:28:35:f6:
08:71:17:93:e5:97:7e:56:9e:0b:32:54:27:99:54:
52:c0:c5:f4:a4:2e:a4:a7:b2:45:b5:e1:f8:ac:32:
7a:e7:8f:ee:c9:38:98:82:b6:42:a0:4e:1a:d3:65:
9d:91:98:36:0a:43:ed:70:9c:c4:8f:03:c7:84:be:
c2:12:4a:e4:b0:de:c6:72:0e:12:54:1b:ee:e3:8e:
4c:16:72:eb:2c:85:28:c8:d9:c4:a4:de:43:1d:4b:
96:f5:a4:12:47:4d:8c:d2:99:26:56:25:3b:f7:65:
57:63:9b:95:54:50:e9:91:b4:e2:5a:7c:8a:48:41:
cf:6d:4c:06:5b:eb:ae:e0:f0:5f:39:7d:d6:a5:71:
86:a0:e1:12:8a:2f:e0:67:25:7c:06:22:4d:a5:e8:
36:7a:f6:65:44:ee:4f:4a:81:e0:72:2e:59:94:8f:
fe:9a:3d:7c:29:b1:4f:83:2c:e4:30:e3:da:2a:bd:
69:35:28:a2:f7:dc:4f:bd:ac:a7:af:01:e9:61:37:
98:61:25:88:e5:79:41:58:de:c5:9d:3e:7d:90:e0:
11:44:d8:4a:ac:36:0e:d1:b0:fe:eb:fe:13:71:ef:
5a:08:cf:2d:6d:36:27:fc:d4:8e:6d:84:10:fe:4e:
0d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:48:1F:40:C0:5D:8E:E6:36:AC:DE:0F:6B:F4:5C:5B:6C:66:52:4C
X509v3 Authority Key Identifier:
keyid:D5:A2:19:6E:F1:19:22:11:55:E1:68:3F:89:67:D2:54:62:5D:AE:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1aIZbvEZIhFV4Wg_iWfSVGJdrnE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b06337-6517-400b-8cb5-7afa0bcd7976/1/1aIZbvEZIhFV4Wg_iWfSVGJdrnE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b06337-6517-400b-8cb5-7afa0bcd7976/1/1aIZbvEZIhFV4Wg_iWfSVGJdrnE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:1c:33:c3:60:80:7e:42:e4:2c:49:33:56:42:64:00:82:2d:
e4:42:b3:09:25:93:34:81:c3:79:87:a1:e4:8a:49:1a:e7:9d:
df:56:bd:b4:b9:86:7d:53:f2:f3:4b:4c:14:75:16:46:21:35:
12:52:a2:3e:db:59:0d:e7:d7:79:77:78:fa:c8:6e:17:c6:67:
6e:d7:78:bd:88:12:ac:81:2e:be:c9:fa:71:dd:5d:66:12:e2:
e1:2d:0c:7d:d8:b0:15:bc:b0:bf:1d:8a:25:7f:68:f5:89:bd:
d3:c5:8c:f4:31:dc:97:fc:77:c1:1f:0e:1f:c6:e0:40:47:02:
12:95:9c:77:a6:16:09:11:97:a2:01:6e:8c:21:7f:f5:27:23:
06:71:d6:96:d3:eb:42:a9:02:f7:7f:96:7b:4a:20:9f:3e:fc:
82:1a:4b:41:f8:24:fa:fb:3a:cb:61:91:a8:ff:79:68:26:39:
dc:e9:0a:04:63:e0:e3:2d:52:3c:85:24:c5:a4:e7:08:fc:16:
30:12:be:fa:82:27:98:0d:c3:3d:4d:50:86:f7:95:bf:d5:16:
18:b8:8c:70:9e:bc:66:85:e5:c8:6f:d7:54:0b:1d:10:4a:94:
77:cd:20:d1:b6:64:17:15:f9:4e:67:16:2f:73:bc:7e:2c:c5:
6f:b3:0e:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpx7p/FXyWNddX3mJIyxrHOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1YTIxOTZlZjExOTIyMTE1NWUxNjgzZjg5NjdkMjU0NjI1
ZGFlNzEwHhcNMjUxMTExMDgwMDU1WhcNMjUxMTEyMDgwMDU1WjAzMTEwLwYDVQQD
Eyg1NTQ4MWY0MGMwNWQ4ZWU2MzZhY2RlMGY2YmY0NWM1YjZjNjY1MjRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7MHXc35TYJ0gUFwoNfYIcReT5Zd+
Vp4LMlQnmVRSwMX0pC6kp7JFteH4rDJ654/uyTiYgrZCoE4a02WdkZg2CkPtcJzE
jwPHhL7CEkrksN7Gcg4SVBvu445MFnLrLIUoyNnEpN5DHUuW9aQSR02M0pkmViU7
92VXY5uVVFDpkbTiWnyKSEHPbUwGW+uu4PBfOX3WpXGGoOESii/gZyV8BiJNpeg2
evZlRO5PSoHgci5ZlI/+mj18KbFPgyzkMOPaKr1pNSii99xPvaynrwHpYTeYYSWI
5XlBWN7FnT59kOARRNhKrDYO0bD+6/4Tce9aCM8tbTYn/NSObYQQ/k4N8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFVIH0DAXY7mNqzeD2v0XFtsZlJMMB8GA1UdIwQY
MBaAFNWiGW7xGSIRVeFoP4ln0lRiXa5xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWFJWmJ2RVpJaEZWNFdnX2lXZlNWR0pkcm5FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9iMDYzMzctNjUxNy00MDBiLThjYjUt
N2FmYTBiY2Q3OTc2LzEvMWFJWmJ2RVpJaEZWNFdnX2lXZlNWR0pkcm5FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS9iMDYzMzctNjUxNy00MDBiLThjYjUtN2FmYTBiY2Q3OTc2
LzEvMWFJWmJ2RVpJaEZWNFdnX2lXZlNWR0pkcm5FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAxwzw2CA
fkLkLEkzVkJkAIIt5EKzCSWTNIHDeYeh5IpJGued31a9tLmGfVPy80tMFHUWRiE1
ElKiPttZDefXeXd4+shuF8Znbtd4vYgSrIEuvsn6cd1dZhLi4S0MfdiwFbywvx2K
JX9o9Ym908WM9DHcl/x3wR8OH8bgQEcCEpWcd6YWCRGXogFujCF/9ScjBnHWltPr
QqkC93+We0ognz78ghpLQfgk+vs6y2GRqP95aCY53OkKBGPg4y1SPIUkxaTnCPwW
MBK++oInmA3DPU1QhveVv9UWGLiMcJ68ZoXlyG/XVAsdEEqUd80g0bZkFxX5TmcW
L3O8fizFb7MOgg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:07:08 2025 by rpki-client