Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/d7a3ba-07e5-41d6-8c39-56a55c42de88/1/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.mft
File: 1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.mft (raw, json)
Hash identifier: bHnKRUOYR/FFbPLdQCg8hD7StOt3G16bcq3EHD6rNV0=
Subject key identifier: 86:DB:DF:06:93:A6:54:27:D7:3D:BC:1D:0A:6A:BA:A5:81:BA:17:D6
Authority key identifier: FA:BB:49:E6:88:33:5A:B1:59:3F:9D:10:E0:06:EF:5E:9B:C8:BD:56
Certificate issuer: /CN=fabb49e688335ab1593f9d10e006ef5e9bc8bd56
Certificate serial: 019A14605934A3E46966781BA84E3C71619A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/d7a3ba-07e5-41d6-8c39-56a55c42de88/1/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.mft
Manifest number: 16EF
Signing time: Fri 24 Oct 2025 04:00:49 +0000
Manifest this update: Fri 24 Oct 2025 04:00:49 +0000
Manifest next update: Sat 25 Oct 2025 04:00:49 +0000
Files and hashes: 1: 1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.crl (hash: XSu8kuQvLb2gAqIDBD1PqzY+MxVIOkmvNUncD1BtEfs=)
2: x8LYnH5C-2yoYzHnpykE4OWasxo.roa (hash: NSrIlOVo8G3//8ZqRuyTqHM3vssNSeuuZzf6AApNyCM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/d7a3ba-07e5-41d6-8c39-56a55c42de88/1/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/d7a3ba-07e5-41d6-8c39-56a55c42de88/1/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:14:60:59:34:a3:e4:69:66:78:1b:a8:4e:3c:71:61:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fabb49e688335ab1593f9d10e006ef5e9bc8bd56
Validity
Not Before: Oct 24 04:00:49 2025 GMT
Not After : Oct 25 04:00:49 2025 GMT
Subject: CN=86dbdf0693a65427d73dbc1d0a6abaa581ba17d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:77:d1:84:d3:4e:62:34:45:23:d2:cf:3a:44:
7f:74:e9:31:a6:17:dd:fb:74:fb:4f:94:ef:91:25:
3b:9d:d6:6a:ab:a9:ae:aa:72:39:ad:71:70:cf:1b:
75:8c:97:9e:06:5a:7b:02:79:e5:ba:55:38:8d:e6:
e7:7d:f8:9b:1c:7d:80:4c:be:43:66:13:dd:5d:82:
c3:bc:04:fd:fe:9a:df:63:90:e5:7c:86:2e:bd:03:
ed:60:6b:a6:67:e7:93:49:3e:9c:06:f0:41:8e:cf:
de:42:0e:44:07:18:25:07:38:e3:2e:74:0f:ff:87:
53:40:42:f0:64:41:9d:a4:b6:48:93:50:51:ff:44:
7d:3e:c8:b3:39:74:1a:cf:d5:f9:4f:6a:fc:f8:07:
13:b1:a2:09:f5:60:e2:fc:2b:2e:ae:2a:47:8b:ea:
10:8b:41:d8:e9:ec:06:a7:79:60:b0:ec:31:3b:cf:
a1:c0:67:d6:13:f2:79:c1:f5:bf:30:3b:ad:b7:b1:
80:01:45:71:49:d7:01:bd:fa:54:b5:99:89:ad:40:
dc:a3:0e:24:e7:33:e6:dd:a4:06:05:11:fe:3c:12:
99:8e:bd:10:12:8e:27:98:e3:05:64:9a:8d:05:ba:
4a:0e:5e:79:f2:55:22:f1:55:a9:cd:d0:9f:ac:db:
66:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:DB:DF:06:93:A6:54:27:D7:3D:BC:1D:0A:6A:BA:A5:81:BA:17:D6
X509v3 Authority Key Identifier:
keyid:FA:BB:49:E6:88:33:5A:B1:59:3F:9D:10:E0:06:EF:5E:9B:C8:BD:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d7a3ba-07e5-41d6-8c39-56a55c42de88/1/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d7a3ba-07e5-41d6-8c39-56a55c42de88/1/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:2c:dc:5c:e8:28:5a:41:51:81:b3:c7:20:85:c4:f1:c0:87:
ec:81:15:06:68:89:85:5a:c3:a3:3e:45:11:46:7f:87:38:3b:
e5:2b:89:3b:b2:ab:21:b7:ed:f1:95:1d:fd:21:27:2c:c8:36:
29:3b:5b:d9:91:62:e2:68:aa:71:99:e6:55:d0:b6:d9:c9:60:
9b:b8:b1:46:82:f7:e8:f2:7f:b9:e3:0c:3f:a5:04:66:3a:b2:
f4:c7:c0:7d:fa:9b:d8:a4:c7:c4:e4:b7:49:4f:52:3f:03:43:
85:4b:69:9f:41:59:13:8d:a1:74:0f:61:a9:e2:b8:94:54:b6:
95:1e:4a:30:87:d0:98:c5:f9:67:ea:5c:67:89:b0:3a:7c:a9:
d1:89:0c:76:23:a4:55:b2:ec:5c:15:f1:54:74:f6:29:11:4d:
47:72:83:c9:2d:78:66:79:bb:64:5f:b1:7f:c7:e8:a4:5e:b2:
6c:67:e4:ba:82:d8:cd:64:b2:a7:3e:3f:8d:54:31:6c:6b:25:
eb:7d:65:88:c6:7e:b1:47:6e:78:0f:23:7b:ca:e7:fe:53:70:
b3:ca:0e:60:58:d2:0d:eb:24:37:10:07:8c:02:69:a9:63:99:
50:e4:e2:24:9d:7a:c4:61:69:ba:ce:c2:07:58:c4:f0:d8:56:
50:c2:78:ac
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZoUYFk0o+RpZngbqE48cWGaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhYmI0OWU2ODgzMzVhYjE1OTNmOWQxMGUwMDZlZjVlOWJj
OGJkNTYwHhcNMjUxMDI0MDQwMDQ5WhcNMjUxMDI1MDQwMDQ5WjAzMTEwLwYDVQQD
Eyg4NmRiZGYwNjkzYTY1NDI3ZDczZGJjMWQwYTZhYmFhNTgxYmExN2Q2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1HfRhNNOYjRFI9LPOkR/dOkxphfd
+3T7T5TvkSU7ndZqq6muqnI5rXFwzxt1jJeeBlp7AnnlulU4jebnffibHH2ATL5D
ZhPdXYLDvAT9/prfY5DlfIYuvQPtYGumZ+eTST6cBvBBjs/eQg5EBxglBzjjLnQP
/4dTQELwZEGdpLZIk1BR/0R9PsizOXQaz9X5T2r8+AcTsaIJ9WDi/CsuripHi+oQ
i0HY6ewGp3lgsOwxO8+hwGfWE/J5wfW/MDutt7GAAUVxSdcBvfpUtZmJrUDcow4k
5zPm3aQGBRH+PBKZjr0QEo4nmOMFZJqNBbpKDl558lUi8VWpzdCfrNtm4QIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFIbb3waTplQn1z28HQpquqWBuhfWMB8GA1UdIwQY
MBaAFPq7SeaIM1qxWT+dEOAG716byL1WMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1ydEo1b2d6V3JGWlA1MFE0QWJ2WHB2SXZWWS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGYvZDdhM2JhLTA3ZTUtNDFkNi04YzM5
LTU2YTU1YzQyZGU4OC8xLzEtcnRKNW9neldyRlpQNTBRNEFidlhwdkl2VlkubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzBmL2Q3YTNiYS0wN2U1LTQxZDYtOGMzOS01NmE1NWM0MmRl
ODgvMS8xLXJ0SjVvZ3pXckZaUDUwUTRBYnZYcHZJdlZZLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdCzc
XOgoWkFRgbPHIIXE8cCH7IEVBmiJhVrDoz5FEUZ/hzg75SuJO7KrIbft8ZUd/SEn
LMg2KTtb2ZFi4miqcZnmVdC22clgm7ixRoL36PJ/ueMMP6UEZjqy9MfAffqb2KTH
xOS3SU9SPwNDhUtpn0FZE42hdA9hqeK4lFS2lR5KMIfQmMX5Z+pcZ4mwOnyp0YkM
diOkVbLsXBXxVHT2KRFNR3KDyS14Znm7ZF+xf8fopF6ybGfkuoLYzWSypz4/jVQx
bGsl631liMZ+sUdueA8je8rn/lNws8oOYFjSDeskNxAHjAJpqWOZUOTiJJ16xGFp
us7CB1jE8NhWUMJ4rA==
-----END CERTIFICATE-----
Generated at Fri Oct 24 05:59:38 2025 by rpki-client