Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f3ca23-86ec-40d0-a520-69a364e5629e/1/1-ETh6vqtPLCR8g7lvxwEgkh8MG4.mft
File: 1-ETh6vqtPLCR8g7lvxwEgkh8MG4.mft (raw, json)
Hash identifier: iiaIsSDHCRwF/Bb4gAaEZoLadSPg0L+8En+Mudz1W6U=
Subject key identifier: 1B:F4:12:01:05:BB:15:4D:E9:8C:CA:E1:2E:C5:03:07:1C:2F:75:00
Authority key identifier: F8:44:E1:EA:FA:AD:3C:B0:91:F2:0E:E5:BF:1C:04:82:48:7C:30:6E
Certificate issuer: /CN=f844e1eafaad3cb091f20ee5bf1c0482487c306e
Certificate serial: 019A21400DB0094EAF8B4F9DA4BB24D0E3EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-ETh6vqtPLCR8g7lvxwEgkh8MG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f3ca23-86ec-40d0-a520-69a364e5629e/1/1-ETh6vqtPLCR8g7lvxwEgkh8MG4.mft
Manifest number: 0F8D
Signing time: Sun 26 Oct 2025 16:00:37 +0000
Manifest this update: Sun 26 Oct 2025 16:00:37 +0000
Manifest next update: Mon 27 Oct 2025 16:00:37 +0000
Files and hashes: 1: 1-ETh6vqtPLCR8g7lvxwEgkh8MG4.crl (hash: 6mS02nG6tRwsZmWvTwd/Pvj/zx7tYbjdYgWcn0pbg14=)
2: 3H8Iz5hHhMEKn8xskQH_PIfxJ2M.roa (hash: kRuaNE5DN0ER4h4yEzfsi+B5+sjpCYHLxCQH23V/CIQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f3ca23-86ec-40d0-a520-69a364e5629e/1/1-ETh6vqtPLCR8g7lvxwEgkh8MG4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/f3ca23-86ec-40d0-a520-69a364e5629e/1/1-ETh6vqtPLCR8g7lvxwEgkh8MG4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-ETh6vqtPLCR8g7lvxwEgkh8MG4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:40:0d:b0:09:4e:af:8b:4f:9d:a4:bb:24:d0:e3:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f844e1eafaad3cb091f20ee5bf1c0482487c306e
Validity
Not Before: Oct 26 16:00:37 2025 GMT
Not After : Oct 27 16:00:37 2025 GMT
Subject: CN=1bf4120105bb154de98ccae12ec503071c2f7500
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:59:9b:e3:ce:ee:ca:be:bb:05:84:6c:87:82:
fa:71:ad:d1:13:c5:ec:48:a5:ff:03:75:8a:6f:8d:
e6:03:1a:0d:3e:0f:e2:ad:8f:c1:34:45:ae:01:56:
29:03:4d:0a:9e:8e:a7:ec:90:3d:61:22:6c:0e:84:
f5:95:da:4b:1c:3b:12:b0:d4:ae:ba:8e:e8:29:a0:
30:84:42:12:46:43:2a:f0:64:f7:ba:b9:4c:0b:63:
78:12:1a:1b:73:e8:bc:c4:03:8a:33:3e:71:92:f3:
02:59:94:e9:51:26:63:11:37:c6:e3:7f:74:45:09:
1d:c6:5d:0e:88:15:02:71:04:17:8e:f0:ff:f9:18:
1c:8e:85:b0:85:90:33:67:a6:b0:78:71:60:3a:66:
86:44:fe:15:6d:58:ca:7d:13:6c:b7:43:e4:91:59:
58:48:09:6a:95:9c:14:7a:74:22:fd:57:36:f1:d1:
ff:5a:e8:45:66:19:2c:1e:d0:53:7d:ae:2b:13:8c:
27:fc:b1:3d:97:be:f4:f8:51:10:ab:b2:89:ad:58:
35:ac:3f:56:a4:99:e3:d0:96:f2:26:b9:ec:8a:4e:
75:8b:86:6c:4e:5c:a2:7c:97:7d:69:9f:9a:0a:f0:
58:54:46:bf:0a:d8:a1:16:d0:32:fc:be:53:69:5f:
00:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:F4:12:01:05:BB:15:4D:E9:8C:CA:E1:2E:C5:03:07:1C:2F:75:00
X509v3 Authority Key Identifier:
keyid:F8:44:E1:EA:FA:AD:3C:B0:91:F2:0E:E5:BF:1C:04:82:48:7C:30:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ETh6vqtPLCR8g7lvxwEgkh8MG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f3ca23-86ec-40d0-a520-69a364e5629e/1/1-ETh6vqtPLCR8g7lvxwEgkh8MG4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f3ca23-86ec-40d0-a520-69a364e5629e/1/1-ETh6vqtPLCR8g7lvxwEgkh8MG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:ab:63:70:78:f4:2e:49:08:76:d8:50:08:89:1a:a1:f7:c5:
5f:ff:6f:67:41:d4:c7:37:01:40:6d:d0:cb:8f:d8:f5:22:20:
14:52:ce:bb:54:a9:02:5b:ab:14:b9:4b:75:fd:07:da:1b:23:
a8:61:8f:6e:67:1a:73:9b:eb:93:56:02:08:0d:e9:ec:b5:a9:
ac:4d:3e:88:4e:2f:3e:12:46:ed:55:be:0c:fa:df:11:26:93:
87:0e:6a:af:2d:4e:6d:12:59:64:70:e0:93:63:e0:01:d7:ce:
c1:2a:bc:94:14:99:4f:f1:88:30:9e:9c:f1:7a:e7:f9:df:89:
99:62:7e:cf:0f:96:85:97:da:87:97:85:5e:6e:50:31:8e:6f:
8a:c6:26:1f:f1:e7:d5:96:84:dc:1e:88:c3:7f:c9:6e:9b:d1:
d7:01:55:40:05:2c:a9:fc:34:a9:f2:d3:27:4a:c8:4f:80:f7:
53:eb:2e:fc:e4:4d:10:24:cd:68:c5:2e:3f:6b:2a:6d:16:5b:
55:ab:85:f9:63:58:1e:3a:8b:34:f4:e2:d7:d9:57:1a:bd:c9:
8b:de:17:e9:f4:41:57:8c:7d:22:92:b6:b2:b7:08:0c:52:a3:
65:3e:8c:6f:a0:c0:e9:5b:f7:2e:b7:7c:59:c0:66:0c:be:7a:
d4:af:19:9f
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZohQA2wCU6vi0+dpLsk0OPqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4NDRlMWVhZmFhZDNjYjA5MWYyMGVlNWJmMWMwNDgyNDg3
YzMwNmUwHhcNMjUxMDI2MTYwMDM3WhcNMjUxMDI3MTYwMDM3WjAzMTEwLwYDVQQD
EygxYmY0MTIwMTA1YmIxNTRkZTk4Y2NhZTEyZWM1MDMwNzFjMmY3NTAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxlmb487uyr67BYRsh4L6ca3RE8Xs
SKX/A3WKb43mAxoNPg/irY/BNEWuAVYpA00Kno6n7JA9YSJsDoT1ldpLHDsSsNSu
uo7oKaAwhEISRkMq8GT3urlMC2N4Ehobc+i8xAOKMz5xkvMCWZTpUSZjETfG4390
RQkdxl0OiBUCcQQXjvD/+RgcjoWwhZAzZ6aweHFgOmaGRP4VbVjKfRNst0PkkVlY
SAlqlZwUenQi/Vc28dH/WuhFZhksHtBTfa4rE4wn/LE9l770+FEQq7KJrVg1rD9W
pJnj0JbyJrnsik51i4ZsTlyifJd9aZ+aCvBYVEa/CtihFtAy/L5TaV8AhQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFBv0EgEFuxVN6YzK4S7FAwccL3UAMB8GA1UdIwQY
MBaAFPhE4er6rTywkfIO5b8cBIJIfDBuMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1FVGg2dnF0UExDUjhnN2x2eHdFZ2toOE1HNC5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWUvZjNjYTIzLTg2ZWMtNDBkMC1hNTIw
LTY5YTM2NGU1NjI5ZS8xLzEtRVRoNnZxdFBMQ1I4Zzdsdnh3RWdraDhNRzQubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzFlL2YzY2EyMy04NmVjLTQwZDAtYTUyMC02OWEzNjRlNTYy
OWUvMS8xLUVUaDZ2cXRQTENSOGc3bHZ4d0Vna2g4TUc0LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACatj
cHj0LkkIdthQCIkaoffFX/9vZ0HUxzcBQG3Qy4/Y9SIgFFLOu1SpAlurFLlLdf0H
2hsjqGGPbmcac5vrk1YCCA3p7LWprE0+iE4vPhJG7VW+DPrfESaThw5qry1ObRJZ
ZHDgk2PgAdfOwSq8lBSZT/GIMJ6c8Xrn+d+JmWJ+zw+WhZfah5eFXm5QMY5visYm
H/Hn1ZaE3B6Iw3/JbpvR1wFVQAUsqfw0qfLTJ0rIT4D3U+su/ORNECTNaMUuP2sq
bRZbVauF+WNYHjqLNPTi19lXGr3Ji94X6fRBV4x9IpK2srcIDFKjZT6Mb6DA6Vv3
Lrd8WcBmDL561K8Znw==
-----END CERTIFICATE-----
Generated at Sun Oct 26 20:04:02 2025 by rpki-client