Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/5d9f57-0f10-4e14-b4af-25a15a524f87/1/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.mft
File: 1-K6Ygb8RIJiiv9SaC8_9zM57wgg.mft (raw, json)
Hash identifier: r/LIKsgRQq4k0fMB9eYLSnT+jFTdjejW+ule+W153Mo=
Subject key identifier: E0:0A:C1:43:77:6F:9E:77:6F:86:5E:BA:69:21:00:2D:01:6E:A0:3C
Authority key identifier: F8:AE:98:81:BF:11:20:98:A2:BF:D4:9A:0B:CF:FD:CC:CE:7B:C2:08
Certificate issuer: /CN=f8ae9881bf112098a2bfd49a0bcffdccce7bc208
Certificate serial: 019A13F270FB048813FA65595894B40C2526
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/5d9f57-0f10-4e14-b4af-25a15a524f87/1/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.mft
Manifest number: 0C0F
Signing time: Fri 24 Oct 2025 02:00:47 +0000
Manifest this update: Fri 24 Oct 2025 02:00:47 +0000
Manifest next update: Sat 25 Oct 2025 02:00:47 +0000
Files and hashes: 1: 1-K6Ygb8RIJiiv9SaC8_9zM57wgg.crl (hash: 7fcgqR6Uc4edOnat49PwNIPYQFrPtKeQEs46YF72cT8=)
2: EMHZK5FmGs3e4ft5zOEqyrPAX3k.roa (hash: SAEFhbIVJ1yY+JX9erZchhAcSGngszOxyT0JSaQzoqQ=)
3: TBVCeR3JZxitx2qIRvwUVmMfz3k.roa (hash: a3GoE65n8nFjDCqtKBSr3lSZewdyS6h51Ixfs3mMRKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/5d9f57-0f10-4e14-b4af-25a15a524f87/1/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/5d9f57-0f10-4e14-b4af-25a15a524f87/1/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:13:f2:70:fb:04:88:13:fa:65:59:58:94:b4:0c:25:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8ae9881bf112098a2bfd49a0bcffdccce7bc208
Validity
Not Before: Oct 24 02:00:47 2025 GMT
Not After : Oct 25 02:00:47 2025 GMT
Subject: CN=e00ac143776f9e776f865eba6921002d016ea03c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:aa:7c:d0:8f:1d:58:19:83:ef:f2:8b:f4:44:
89:86:14:cb:60:64:9c:f7:0f:2c:17:ff:2f:12:95:
24:16:fe:4e:61:82:6e:81:1d:aa:03:98:00:5a:67:
86:59:5d:e5:99:13:4b:1c:0f:c7:b0:c0:1f:bf:e9:
a5:3e:12:27:28:59:8b:37:e4:51:5f:16:fa:6c:a8:
f7:64:3d:d0:cc:30:17:95:5f:05:60:21:b7:da:74:
4b:d4:c8:4d:41:0f:19:d1:8f:93:62:ec:0a:71:2f:
c0:be:0f:b5:f7:ac:f9:0b:c3:93:25:76:ce:6c:a6:
fc:bc:7e:e6:11:ae:a0:c4:75:5d:26:1c:09:38:72:
b6:f0:96:90:dd:45:8d:e8:9f:07:ec:14:a6:b5:aa:
7e:75:79:3f:26:25:f4:15:11:91:6c:83:9b:df:96:
b8:4a:ab:97:f9:70:88:69:02:97:59:ad:3e:9a:5b:
12:be:ba:84:fd:b0:77:c4:df:d3:5e:e2:a8:92:f6:
18:e7:14:1b:a9:2e:88:02:40:97:ca:39:4f:4a:d5:
a6:37:6c:6e:47:5e:ea:a8:b0:18:c6:c4:e9:57:99:
23:23:90:e5:c3:70:b4:a1:ff:7b:96:7c:27:8d:e9:
0e:5c:73:e7:dc:ea:4c:e3:80:d6:ae:f3:fe:38:ca:
36:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:0A:C1:43:77:6F:9E:77:6F:86:5E:BA:69:21:00:2D:01:6E:A0:3C
X509v3 Authority Key Identifier:
keyid:F8:AE:98:81:BF:11:20:98:A2:BF:D4:9A:0B:CF:FD:CC:CE:7B:C2:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5d9f57-0f10-4e14-b4af-25a15a524f87/1/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5d9f57-0f10-4e14-b4af-25a15a524f87/1/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:1b:bd:49:e2:9f:27:9c:0c:8c:2a:0d:18:83:0c:b4:3c:f8:
c0:39:ff:ea:36:f6:f9:68:89:15:48:20:b9:9f:48:df:b5:85:
5c:5a:4b:60:51:28:81:b3:c5:2c:a7:8c:04:aa:69:44:5f:ce:
f8:9c:5a:7c:42:41:51:c1:09:86:65:bd:a1:58:35:20:e2:ab:
1c:26:64:4e:f9:0c:a5:5b:f6:26:40:1f:79:04:c6:0c:d8:8a:
77:51:b9:3f:1e:e7:08:0f:81:65:1d:b6:4f:05:f2:e3:6e:0f:
df:ca:6c:4e:61:eb:0c:4c:25:e8:fb:21:13:86:8c:ed:85:04:
59:82:88:b2:f6:0f:b9:dc:c5:0c:60:9a:44:f8:6d:84:94:b2:
ac:91:65:f9:f9:0a:bd:f4:9f:f7:d2:0a:66:4b:4d:49:ee:24:
a4:6a:f8:79:73:be:41:6f:fc:f0:70:38:8f:ac:4e:6c:9f:13:
13:9e:c9:6f:83:26:f7:c6:88:33:f2:9d:af:37:0d:a1:96:c2:
69:06:b0:dc:49:d4:6a:61:ca:e0:fa:e0:cd:1d:be:e0:91:df:
85:f9:36:22:8d:8b:45:72:d0:ac:7e:53:48:2a:45:18:2c:1e:
aa:20:5e:b6:aa:c1:7a:06:4a:21:71:94:17:c6:15:f3:98:d6:
de:54:54:3a
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZoT8nD7BIgT+mVZWJS0DCUmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4YWU5ODgxYmYxMTIwOThhMmJmZDQ5YTBiY2ZmZGNjY2U3
YmMyMDgwHhcNMjUxMDI0MDIwMDQ3WhcNMjUxMDI1MDIwMDQ3WjAzMTEwLwYDVQQD
EyhlMDBhYzE0Mzc3NmY5ZTc3NmY4NjVlYmE2OTIxMDAyZDAxNmVhMDNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKp80I8dWBmD7/KL9ESJhhTLYGSc
9w8sF/8vEpUkFv5OYYJugR2qA5gAWmeGWV3lmRNLHA/HsMAfv+mlPhInKFmLN+RR
Xxb6bKj3ZD3QzDAXlV8FYCG32nRL1MhNQQ8Z0Y+TYuwKcS/Avg+196z5C8OTJXbO
bKb8vH7mEa6gxHVdJhwJOHK28JaQ3UWN6J8H7BSmtap+dXk/JiX0FRGRbIOb35a4
SquX+XCIaQKXWa0+mlsSvrqE/bB3xN/TXuKokvYY5xQbqS6IAkCXyjlPStWmN2xu
R17qqLAYxsTpV5kjI5Dlw3C0of97lnwnjekOXHPn3OpM44DWrvP+OMo2XQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFOAKwUN3b553b4ZeumkhAC0BbqA8MB8GA1UdIwQY
MBaAFPiumIG/ESCYor/UmgvP/czOe8IIMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1LNllnYjhSSUppaXY5U2FDOF85ek01N3dnZy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTQvNWQ5ZjU3LTBmMTAtNGUxNC1iNGFm
LTI1YTE1YTUyNGY4Ny8xLzEtSzZZZ2I4UklKaWl2OVNhQzhfOXpNNTd3Z2cubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzE0LzVkOWY1Ny0wZjEwLTRlMTQtYjRhZi0yNWExNWE1MjRm
ODcvMS8xLUs2WWdiOFJJSmlpdjlTYUM4Xzl6TTU3d2dnLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoxu9
SeKfJ5wMjCoNGIMMtDz4wDn/6jb2+WiJFUgguZ9I37WFXFpLYFEogbPFLKeMBKpp
RF/O+JxafEJBUcEJhmW9oVg1IOKrHCZkTvkMpVv2JkAfeQTGDNiKd1G5Px7nCA+B
ZR22TwXy424P38psTmHrDEwl6PshE4aM7YUEWYKIsvYPudzFDGCaRPhthJSyrJFl
+fkKvfSf99IKZktNSe4kpGr4eXO+QW/88HA4j6xObJ8TE57Jb4Mm98aIM/KdrzcN
oZbCaQaw3EnUamHK4PrgzR2+4JHfhfk2Io2LRXLQrH5TSCpFGCweqiBetqrBegZK
IXGUF8YV85jW3lRUOg==
-----END CERTIFICATE-----
Generated at Fri Oct 24 06:34:33 2025 by rpki-client