
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/23dfb2-749d-471d-b114-83c7db7596fe/1/1V5WEXiBQrMVQorlH2fLus-At-g.mft
File: 1V5WEXiBQrMVQorlH2fLus-At-g.mft (raw, json)
Hash identifier: dSu9kO1UH9CE1q69NPv1F+T+4rgfgrKOfK7sXGwI9L4=
Subject key identifier: 75:28:50:D2:62:E1:F5:9D:74:07:BF:0C:25:78:2F:C4:D7:29:D8:6D
Authority key identifier: D5:5E:56:11:78:81:42:B3:15:42:8A:E5:1F:67:CB:BA:CF:80:B7:E8
Certificate issuer: /CN=d55e5611788142b315428ae51f67cbbacf80b7e8
Certificate serial: 019A225248EE845B864DDACDCDFD9E2DA4A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1V5WEXiBQrMVQorlH2fLus-At-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/23dfb2-749d-471d-b114-83c7db7596fe/1/1V5WEXiBQrMVQorlH2fLus-At-g.mft
Manifest number: 0449
Signing time: Sun 26 Oct 2025 21:00:09 +0000
Manifest this update: Sun 26 Oct 2025 21:00:09 +0000
Manifest next update: Mon 27 Oct 2025 21:00:09 +0000
Files and hashes: 1: 1V5WEXiBQrMVQorlH2fLus-At-g.crl (hash: CwAV4Q6RRobjZ9JkaEyCqtY6Z6DEubj+rQucIzjnOao=)
2: y49JuAVDoy-LfsHdEc6QYgh16LA.roa (hash: lgV8xv23uaL4oGyw+8u8NKX5nD6V6ZzdAGMuEZqxGwY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/23dfb2-749d-471d-b114-83c7db7596fe/1/1V5WEXiBQrMVQorlH2fLus-At-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/23dfb2-749d-471d-b114-83c7db7596fe/1/1V5WEXiBQrMVQorlH2fLus-At-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/1V5WEXiBQrMVQorlH2fLus-At-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 21:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:52:48:ee:84:5b:86:4d:da:cd:cd:fd:9e:2d:a4:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d55e5611788142b315428ae51f67cbbacf80b7e8
Validity
Not Before: Oct 26 21:00:09 2025 GMT
Not After : Oct 27 21:00:09 2025 GMT
Subject: CN=752850d262e1f59d7407bf0c25782fc4d729d86d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:86:89:ec:d4:16:8f:be:9f:00:84:c7:06:12:
f7:cc:7f:ed:cb:95:c4:b4:17:83:8b:5e:1e:81:12:
55:96:d4:be:12:24:b7:ca:54:70:a0:c1:ad:6d:92:
34:4a:09:28:d4:a6:47:c8:bf:15:06:0a:76:4a:14:
3e:e9:86:4a:d9:b5:eb:eb:5a:c1:53:96:24:6a:6f:
57:a0:60:74:29:58:34:e5:94:8a:bb:a6:a7:c3:78:
85:ce:98:40:01:2e:3d:c4:c6:14:f9:96:2d:1e:ad:
2a:29:7f:e7:51:6c:97:33:df:3e:73:a6:2d:9c:93:
e6:b1:1f:12:6a:81:f2:64:68:85:72:2d:ef:da:3d:
9e:34:de:03:bd:22:b4:81:4c:ec:04:e8:28:7f:9f:
a9:4c:ba:04:c1:04:47:d2:4a:bf:c2:84:a5:81:c8:
12:4e:25:8b:d5:16:95:bb:cd:87:ae:c3:65:53:4b:
02:8c:6e:5b:c8:f0:8b:82:d8:83:4e:ff:21:7b:12:
09:71:00:ce:3d:60:f6:f6:b7:66:8c:cf:81:14:11:
8e:d9:e6:b9:98:d9:25:31:85:9b:65:f9:86:1a:3f:
75:65:2f:79:d1:6d:e7:5b:e2:75:0f:90:84:bc:65:
0b:23:78:6d:01:31:5b:00:84:3f:df:93:29:c4:f3:
e3:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:28:50:D2:62:E1:F5:9D:74:07:BF:0C:25:78:2F:C4:D7:29:D8:6D
X509v3 Authority Key Identifier:
keyid:D5:5E:56:11:78:81:42:B3:15:42:8A:E5:1F:67:CB:BA:CF:80:B7:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1V5WEXiBQrMVQorlH2fLus-At-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/23dfb2-749d-471d-b114-83c7db7596fe/1/1V5WEXiBQrMVQorlH2fLus-At-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/23dfb2-749d-471d-b114-83c7db7596fe/1/1V5WEXiBQrMVQorlH2fLus-At-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:d2:16:1c:9d:38:e3:74:cb:55:95:d5:35:0e:8f:d4:36:1c:
c5:e4:52:77:60:7a:84:47:d7:f6:0d:8f:44:9c:76:80:4a:62:
54:65:ed:40:93:4f:f1:16:c0:52:9d:4c:64:0c:f1:2e:32:a2:
b5:95:de:b7:ca:d4:c8:e0:59:34:1d:4c:0f:10:a8:1e:4f:61:
76:a5:76:35:63:07:c3:4e:e3:ec:c2:b9:de:69:ad:72:b5:31:
7d:c5:76:d9:b1:c3:a8:df:67:08:b0:3a:33:fc:c2:6d:5b:f4:
a7:a4:d2:a1:97:9c:3c:0d:f4:ac:e4:a2:b3:74:95:15:59:75:
45:34:60:a5:da:10:60:e8:37:64:94:7a:44:29:3b:02:97:bc:
59:39:df:a3:2b:bb:94:56:a5:0a:b4:8c:e6:11:a0:b1:96:3f:
9d:e2:85:d6:cc:e8:03:b1:0d:c6:ce:b6:61:77:52:d3:3b:96:
2e:9a:1a:07:80:2b:c9:5c:a4:e6:3b:06:1b:f4:c6:ae:0b:88:
1b:c4:63:94:6e:04:56:c2:74:1a:ae:94:1b:16:ab:42:2a:6a:
15:7d:7b:d3:63:2b:ba:9a:74:eb:a8:49:34:65:12:fc:b1:6a:
f9:13:a4:a8:da:b8:52:cb:6b:d0:7b:cd:d9:c0:f2:50:b2:3c:
49:af:62:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoiUkjuhFuGTdrNzf2eLaShMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1NWU1NjExNzg4MTQyYjMxNTQyOGFlNTFmNjdjYmJhY2Y4
MGI3ZTgwHhcNMjUxMDI2MjEwMDA5WhcNMjUxMDI3MjEwMDA5WjAzMTEwLwYDVQQD
Eyg3NTI4NTBkMjYyZTFmNTlkNzQwN2JmMGMyNTc4MmZjNGQ3MjlkODZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2oaJ7NQWj76fAITHBhL3zH/ty5XE
tBeDi14egRJVltS+EiS3ylRwoMGtbZI0Sgko1KZHyL8VBgp2ShQ+6YZK2bXr61rB
U5Ykam9XoGB0KVg05ZSKu6anw3iFzphAAS49xMYU+ZYtHq0qKX/nUWyXM98+c6Yt
nJPmsR8SaoHyZGiFci3v2j2eNN4DvSK0gUzsBOgof5+pTLoEwQRH0kq/woSlgcgS
TiWL1RaVu82HrsNlU0sCjG5byPCLgtiDTv8hexIJcQDOPWD29rdmjM+BFBGO2ea5
mNklMYWbZfmGGj91ZS950W3nW+J1D5CEvGULI3htATFbAIQ/35MpxPPjtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHUoUNJi4fWddAe/DCV4L8TXKdhtMB8GA1UdIwQY
MBaAFNVeVhF4gUKzFUKK5R9ny7rPgLfoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVY1V0VYaUJRck1WUW9ybEgyZkx1cy1BdC1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8yM2RmYjItNzQ5ZC00NzFkLWIxMTQt
ODNjN2RiNzU5NmZlLzEvMVY1V0VYaUJRck1WUW9ybEgyZkx1cy1BdC1nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS8yM2RmYjItNzQ5ZC00NzFkLWIxMTQtODNjN2RiNzU5NmZl
LzEvMVY1V0VYaUJRck1WUW9ybEgyZkx1cy1BdC1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf9IWHJ04
43TLVZXVNQ6P1DYcxeRSd2B6hEfX9g2PRJx2gEpiVGXtQJNP8RbAUp1MZAzxLjKi
tZXet8rUyOBZNB1MDxCoHk9hdqV2NWMHw07j7MK53mmtcrUxfcV22bHDqN9nCLA6
M/zCbVv0p6TSoZecPA30rOSis3SVFVl1RTRgpdoQYOg3ZJR6RCk7Ape8WTnfoyu7
lFalCrSM5hGgsZY/neKF1szoA7ENxs62YXdS0zuWLpoaB4AryVyk5jsGG/TGrguI
G8RjlG4EVsJ0Gq6UGxarQipqFX1702Mrupp066hJNGUS/LFq+ROkqNq4Ustr0HvN
2cDyULI8Sa9iMA==
-----END CERTIFICATE-----
Generated at Mon Oct 27 05:59:19 2025 by rpki-client